WO2012074275A3 - 인터넷 보안을 위한 본인인증 장치, 그 방법 및 이를 기록한 기록매체 - Google Patents

인터넷 보안을 위한 본인인증 장치, 그 방법 및 이를 기록한 기록매체 Download PDF

Info

Publication number
WO2012074275A3
WO2012074275A3 PCT/KR2011/009163 KR2011009163W WO2012074275A3 WO 2012074275 A3 WO2012074275 A3 WO 2012074275A3 KR 2011009163 W KR2011009163 W KR 2011009163W WO 2012074275 A3 WO2012074275 A3 WO 2012074275A3
Authority
WO
WIPO (PCT)
Prior art keywords
otp
authentication
user authentication
token
website
Prior art date
Application number
PCT/KR2011/009163
Other languages
English (en)
French (fr)
Other versions
WO2012074275A2 (ko
Inventor
홍승의
Original Assignee
Hong Seung Ui
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hong Seung Ui filed Critical Hong Seung Ui
Publication of WO2012074275A2 publication Critical patent/WO2012074275A2/ko
Publication of WO2012074275A3 publication Critical patent/WO2012074275A3/ko

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3228—One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Information Transfer Between Computers (AREA)
  • User Interface Of Digital Computer (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

키보드나 마우스를 통하여 본인인증 과정을 거치지 않는 대체 인증방법을 제시함으로써, 피싱의 위험을 근본적으로 회피할 수 있는 인터넷 보안을 위한 본인인증 기술을 제공한다. 통신수단을 통하여 인터넷에 연결되는 웹사이트, 유저단말, 스캔단말 및 컨트롤러로 이루어지는 시스템을 이용하여 본인인증을 행하는 방법으로서, 상기 컨트롤러의 수행단계가, 상기 웹사이트로부터의 2D코드 요청에 의하여 OTP를 생성하는 OTP생성단계, 상기 OTP와 컨트롤러의 URL을 포함하는 2D코드를 생성하는 2D코드생성단계, 상기 2D코드를 상기 웹사이트에 전송하는 2D코드전송단계, 상기 스캔단말로부터 OTP와 토큰을 수신하는 OTP/토큰수신단계, 상기 수신된 OTP와 상기 생성된 OTP를 비교하여 인증함과 함께, 상기 수신된 토큰을 상기 웹사이트의 토큰 데이터베이스에서 검색하여 비교하여 인증하는 인증단계, 인증결과를 상기 웹사이트에 전송하는 인증결과전송단계로 이루어짐을 특징으로 한다.
PCT/KR2011/009163 2010-11-30 2011-11-29 인터넷 보안을 위한 본인인증 장치, 그 방법 및 이를 기록한 기록매체 WO2012074275A2 (ko)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
KR1020100120271A KR101027228B1 (ko) 2010-11-30 2010-11-30 인터넷 보안을 위한 본인인증 장치, 그 방법 및 이를 기록한 기록매체
KR10-2010-0120271 2010-11-30

Publications (2)

Publication Number Publication Date
WO2012074275A2 WO2012074275A2 (ko) 2012-06-07
WO2012074275A3 true WO2012074275A3 (ko) 2012-07-26

Family

ID=44049661

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/KR2011/009163 WO2012074275A2 (ko) 2010-11-30 2011-11-29 인터넷 보안을 위한 본인인증 장치, 그 방법 및 이를 기록한 기록매체

Country Status (2)

Country Link
KR (1) KR101027228B1 (ko)
WO (1) WO2012074275A2 (ko)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013048519A1 (en) * 2011-09-30 2013-04-04 Intel Corporation Secure display for secure transactions
KR101383761B1 (ko) 2011-12-22 2014-04-18 주식회사 스마트시스템즈 사용자 인증 시스템 및 그 방법
KR101450013B1 (ko) * 2013-12-20 2014-10-13 주식회사 시큐브 빠른 응답 코드를 이용한 인증 시스템 및 방법
KR101674160B1 (ko) * 2014-01-29 2016-11-09 주식회사 센시콘 온라인 금융거래 과정에서 메모리 해킹을 방지하는 장치 및 방법
KR101754519B1 (ko) 2016-01-19 2017-07-07 순천향대학교 산학협력단 일회용 키를 이용하여 키보드를 통해 입력된 데이터를 보호하기 위한 키보드 보안 시스템 및 방법
KR101958458B1 (ko) * 2018-07-27 2019-07-02 주식회사 펀앤뉴 디스플레이 기반의 동적 2d 코드 인증 방법, 이에 적합한 동적 2d 코드 인증 시스템, 이에 적합한 사용자 단말기 및 인증 서버

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008146363A (ja) * 2006-12-11 2008-06-26 Nifty Corp コンピュータネットワークにおける認証方法
KR20090120149A (ko) * 2008-05-19 2009-11-24 김홍태 이동통신단말기를 이용한 가입자정보 인증시스템
KR20100104593A (ko) * 2009-03-18 2010-09-29 주식회사 엔씨소프트 이동통신단말기를 이용한 사용자 인증 시스템 및 사용자 인증방법

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2010118990A (ja) 2008-11-14 2010-05-27 Laurel Intelligent Systems Co Ltd 情報処理装置、機密情報の伝達方法、コンピュータプログラム

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008146363A (ja) * 2006-12-11 2008-06-26 Nifty Corp コンピュータネットワークにおける認証方法
KR20090120149A (ko) * 2008-05-19 2009-11-24 김홍태 이동통신단말기를 이용한 가입자정보 인증시스템
KR20100104593A (ko) * 2009-03-18 2010-09-29 주식회사 엔씨소프트 이동통신단말기를 이용한 사용자 인증 시스템 및 사용자 인증방법

Also Published As

Publication number Publication date
KR101027228B1 (ko) 2011-04-07
WO2012074275A2 (ko) 2012-06-07

Similar Documents

Publication Publication Date Title
WO2012074275A3 (ko) 인터넷 보안을 위한 본인인증 장치, 그 방법 및 이를 기록한 기록매체
WO2012068078A3 (en) System and method for transaction authentication using a mobile communication device
GB2464552B (en) Authentication system and method for authenticating a user terminal with an access node providing restricted access to a communication network
WO2009038657A3 (en) Method and apparatus for preventing phishing attacks
GB2523710A (en) Multi-factor authentication and comprehensive login system for client-server networks
WO2013028901A3 (en) Authentication process for value transfer machine
WO2010060704A3 (en) Method and system for token-based authentication
WO2011140235A3 (en) Apparatus and method for establishing a peer-to-peer communication session with a host device
MY189956A (en) Website login method and apparatus
WO2010078492A3 (en) Authentication method selection using a home enhanced node b profile
WO2009045317A3 (en) Method for authenticating mobile units attached to a femtocell in communication with a secure core network such as an ims
CA2818955A1 (en) Method for authorizing access to protected content
RU2014139575A (ru) Способ и устройство входа в систему, терминал и сетевой сервер
WO2010063091A3 (en) System and methods for online authentication
WO2009026049A3 (en) Method and apparatus for authenticating a network device
WO2013002538A3 (en) Method and apparatus for preventing distributed denial of service attack
WO2011109772A3 (en) Method and apparatus for providing security to devices
WO2012171568A8 (de) Verfahren und vorrichtung zur authentifizierung von benutzern eines hybridendgerätes
WO2008026060A3 (en) Method, system and device for synchronizing between server and mobile device
WO2008042871A3 (en) Methods and apparatus for securely signing on to a website via a security website
WO2011140242A3 (en) Apparatus and method for establishing a peer-to-peer communication session with a client device
WO2007149483A3 (en) Computer system authentication using security indicator
MX2019015077A (es) Metodo de inicio de sesion confiable, dispositivo relacionado y medio de almacenamiento legible por computadora.
WO2013030836A8 (en) Method and system for authorizing an action at a site
WO2012011745A3 (en) Apparatus and method for transmitting and receiving remote user interface data in a remote user interface system

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11844920

Country of ref document: EP

Kind code of ref document: A2

DPE1 Request for preliminary examination filed after expiration of 19th month from priority date (pct application filed from 20040101)
NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 11844920

Country of ref document: EP

Kind code of ref document: A2