WO2021071259A1

WO2021071259A1 - Personal information security device for mobile terminal

Info

Publication number: WO2021071259A1
Application number: PCT/KR2020/013687
Authority: WO
Inventors: 방용정
Original assignee: 주식회사 로그 알앤디
Priority date: 2019-10-07
Filing date: 2020-10-07
Publication date: 2021-04-15
Also published as: KR102196365B1; KR20190122180A

Abstract

For authentication and approval in an online service for a mobile terminal, a security device for a mobile terminal comprises a first security device and a second security device having unique information about the mobile terminal, wherein: the first security device comprises a communication unit for receiving information about the online service from the mobile terminal, and a display unit for displaying the received information about the online service so that the information can be recognized by the second security device; the second security device comprises a recognition unit for recognizing the information displayed through the display unit of the first security device, and an authentication and approval information generation unit for generating information necessary for authentication and approval of the online service for the mobile terminal by using at least two from among the information about the online service acquired by the recognition unit, the unique information about the mobile terminal, the current time, and a random number algorithm; and the information, which is to be inputted to the online service and is created by the authentication and approval information generation unit, is connected to online service unique information so as to identify the unique information about the mobile terminal.

Description

Personal information security device for mobile terminals

The present invention relates to a personal information security device for a mobile terminal.

A smart phone is a combination of the advantages of a mobile phone and a PDA, and integrates data communication functions such as schedule management, fax, transmission and reception, and Internet access in the mobile phone function. Smartphones require an operating system (OS), which is a platform to run. Depending on the operating system installed in the smartphone, the user can install, add or delete various applications that can be executed in the operating system.

In this regard, Korean Patent Publication No. 2013-00213324, which is a prior art, discloses an application installation system, apparatus, method, and computer-readable recording medium in a mobile terminal using a user terminal.

Smartphone users can receive a variety of online services using a number of applications or mobile browsers. Users can obtain necessary information by logging into the online service. However, in order to use the online service, users have to create an ID and password for each online service and directly enter the registered ID and password in English, but there is a problem that there is a risk that the password may be forgotten or user information may be exposed. . In addition, enormous social costs are incurred for protecting personal information.

To use the online service, ID and password must be created, memorized, and entered each time they are used, and when ID and password are entered, leakage of ID and password and large amount of personal information from service providers occur frequently. In order to solve the hassle of remembering and entering ID and password when using online services, unique information about the online service executed in the mobile terminal displayed through the first security device is photographed and read using the recognition unit of the second security device. , To provide a security device for a mobile terminal comprising a first security device and a second security device that can be combined and separated to recognize unique information of an online service by scanning.

Online service for mobile terminals by using at least two of the first security device that receives unique information about the online service, the unique information of the online service read from the first security device, the unique information of the mobile terminal, the current time, and a random number algorithm It is proposed to provide a security device for a mobile terminal that implements perfect online authentication by blocking basic means for personal information leakage and hacking as a second security device that generates information necessary for authentication and approval.

By designing a security device for mobile terminals so that the authentication approval process of the online service for the mobile terminal is implemented without external communication, input/output devices for external data, and online input of personal information in the generation of one-time authentication approval code for online services. , To provide a security device for mobile terminals that enables authentication and authorization of a perfect online service.

However, the technical problem to be achieved by the present embodiment is not limited to the technical problems as described above, and other technical problems may exist.

As a means for achieving the above-described technical problem, an embodiment of the present invention provides a first security device and a second security device including unique information of the mobile terminal in authenticating and approving an online service for a mobile terminal. Including, wherein the first security device is a receiving unit for receiving unique information on the online service from the mobile terminal, and a display unit for displaying the information on the received online service to be recognized and read by the second security device Including, wherein the second security device is a recognition, reading unit for recognizing the unique information displayed through the display unit of the first security device, and the unique information about the online service obtained from the recognition and reading unit, the mobile terminal Including an authentication and approval information generation unit for generating information necessary for authentication and approval of the online service for the mobile terminal by using at least two of the unique information, the current time, and the random number algorithm, and authentication to be input to the online service The information generated by the approval information generation unit may be connected to the online service unique information to provide a security device for a mobile terminal that is generated so that the unique information of the mobile terminal can be known.

The above-described problem solving means are merely exemplary and should not be construed as limiting the present invention. In addition to the above-described exemplary embodiments, there may be additional embodiments described in the drawings and detailed description of the invention.

According to any one of the above-described problem solving means of the present invention, as a security device for a mobile terminal composed of a first security device and a second security device that can be combined and separated, obtains an unlimited number of login rights for a plurality of online services, thereby logging in It is possible to provide a security device for a mobile terminal that allows fast login to an online service while reducing the input time of information.

Information on the online service to be logged in is received and displayed using the communication unit provided in the first security device of the mobile terminal security device, and the displayed online service is displayed through the recognition unit provided in the second security device of the mobile terminal security device. By recognizing the information on the online service, using the information on the online service, the unique information of the mobile terminal, the current time, and the random number algorithm, the encrypted information to request authentication to the online service is generated, so that the user can log in to the online service without revealing the user information. It is possible to provide a security device for a mobile terminal.

It is possible to provide a security device for mobile terminals that prevents the authentication approval (login, sign-up, authorization) of online services for mobile terminals at the source, thereby protecting personal information and overcoming related damage and social problems caused by leakage. .

This eliminates the need for online service users to create IDs, passwords, or sign up for online service use, and there is no risk of leakage as one-time information goes through the authentication approval process, and there is no external communication or input/output device, so various It is possible to provide a security device for a mobile terminal that can be free from hacking in the form of a password, and that an effort for storing corresponding information inconvenient to create a password and ID is unnecessary.

1A and 1B are diagrams showing an example of an external appearance of a security device for a mobile terminal according to an embodiment of the present invention.

2 is a configuration diagram of a first security device according to an embodiment of the present invention.

3 is a configuration diagram of a second security device according to an embodiment of the present invention.

4 is a flowchart illustrating a process of registering a mobile terminal by a security device for a mobile terminal according to an embodiment of the present invention.

5 is a flowchart of a method of performing a login authentication procedure for an online service in a security device for a mobile terminal according to an embodiment of the present invention.

6A to 6D are exemplary diagrams for explaining a process of performing a login authentication procedure in a security device according to an embodiment of the present invention.

7A to 7C are diagrams illustrating a security device for a mobile terminal according to an embodiment of the present invention.

8 is a view showing in detail the security device of the security module of FIGS. 7A to 7C.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those of ordinary skill in the art can easily implement the present invention. However, the present invention may be implemented in various different forms and is not limited to the embodiments described herein. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and similar reference numerals are attached to similar parts throughout the specification.

Throughout the specification, when a part is said to be "connected" with another part, this includes not only "directly connected" but also "electrically connected" with another element interposed therebetween. . In addition, when a part "includes" a certain component, it means that other components may be further included, and one or more other features, not excluding other components, unless specifically stated to the contrary. It is to be understood that it does not preclude the presence or addition of any number, step, action, component, part, or combination thereof.

In the present specification, the term "unit" includes a unit realized by hardware, a unit realized by software, and a unit realized using both. Further, one unit may be realized by using two or more hardware, or two or more units may be realized by one piece of hardware.

In this specification, some of the operations or functions described as being performed by the terminal or device may be performed instead in a server connected to the terminal or device. Likewise, some of the operations or functions described as being performed by the server may also be performed by a terminal or device connected to the server.

Hereinafter, exemplary embodiments of the present invention will be described with reference to the accompanying drawings.

1A and 1B are diagrams illustrating an example of a security device for a mobile terminal according to an embodiment of the present invention.

1A and 1B, a security authentication device 110 for a mobile terminal for security authentication of an online service may be coupled to each other, and a first security device 120 and a first security device manufactured to be independently separated. It may be configured to include two security devices (130). For example, when the mobile terminal 100 is a smartphone-type terminal, the security device 110 for a mobile terminal may be manufactured in the form of a smartphone case, and OTP ( One Time Password) function. The mobile terminal security device 110 is matched with at least one or more of the unique information of the mobile terminal 100, and the unique information cannot be modified or deleted once it is first entered into the mobile terminal security device 110. It can be manufactured to be non-reusable, either in form.

The first security device 120 constituting the security device 110 for a mobile terminal is provided by the mobile terminal 100 through a short-range communication (for example, NFC, Bluetooth, Wi-Fi, etc.) with the mobile terminal 100. It is possible to receive unique information on the online service, and the second security device 130 to recognize the unique information on the received online service through a display device (not shown) provided in the first security device 120. It can be displayed in a form that can be displayed.

The second security device 130 constituting the mobile terminal security device 110 may read unique information on the online service displayed on the display device of the first security device 120, for example, a camera, a scanner, A reading device such as an optical recognition device or the like may be provided. The read device can be used for a number of online service authentication approval procedures, and in online services, unique information on various types of online services such as URL, barcode, QR code, etc. is transmitted from the display device of the first security device 120. You can read. The second security device 130 may generate one-time approval and authentication information between the online service and the mobile terminal 100, and includes a display device (not shown) that outputs the generated one-time approval and authentication information to the user. Can be equipped. The generated authentication and approval information may be authentication and approval information created to infer unique information of a mobile terminal that approves the use of the service by comparing it with information held by the online service. For example, when a user inputs one-time approval and authentication information output on the display device 140 of the second security device 130 into an authentication information input window such as an online service login information input window, the online service is inputted. After comparing the one-time approval and authentication information with the online service's own information, it is possible to determine whether to use the service in the mobile terminal according to the comparison result.

The second security device 130 holding the unique information of the mobile terminal 100 and the online service providing server each use a current time and a random number algorithm to generate authentication and approval information in a form that can be recognized by each other. Pre-designed logic can be shared.

The second security device 130 includes the unique information of the specific mobile terminal 100 to be combined and used, and in a form in which external communication with the mobile terminal 100 is impossible and does not receive external input other than on/off. Can be manufactured. That is, the second security device 130 may be configured to disable any communication with the mobile terminal 100 and other external devices other than the process of receiving the unique information of the mobile terminal 100 and the on/off operation of the device. have. If the mobile terminal 100 is lost, damaged, device changed, number changed, etc., the security device 110 may be manufactured in a form that cannot be reused. Through this, a number of different authentications for one online service may be possible.

Hereinafter, an embodiment of the present invention will be described in detail with reference to FIGS. 1A and 1B.

1A and 1B are diagrams illustrating an example of a security device for a mobile terminal according to an embodiment of the present invention, and FIG. 1A is a diagram illustrating a state in which a security device according to an embodiment of the present invention is coupled to a mobile terminal. It is an exemplary drawing. Referring to FIG. 1A, a first security device 120 may be coupled to the rear surface of the mobile terminal 100, and a second security device 130 may be coupled to the rear surface of the first security device 120. In addition, the mobile terminal 100 may be vertically coupled, such as the first security device 120-1 on the top and the second security device 130-1 on the bottom.

The first security device 120 includes a display unit (not shown) capable of displaying information on the online service received from the mobile terminal 100 in a form that the second security device 130 can recognize, and , The second security device 130 may include a recognition and reading unit (not shown) such as a camera, a scanner, and an optical recognition device. The second security device 130 may recognize unique information of the mobile terminal 100 through a recognition and reading unit before being mounted on the mobile terminal 100. The unique information of the mobile terminal 100 may include, for example, a user identification number such as a mobile phone number, a terminal serial number, and a MAC address of the terminal.

After the first security device 120 and the second security device 130 are combined and mounted on the mobile terminal 100, the first security device 120 is connected to the mobile terminal 100 through a communication unit (not shown). Unique information about the executed online service may be received, and the received unique information of the online service may be displayed on a rear surface in contact with the second security device 130 through a display device. The recognition and reading unit of the second security device 130 may read unique information on the online service displayed through the display device of the first security device. For example, the recognition and reading unit of the second security device 130 may photograph or scan and read unique information on online services such as URL, barcode, and QR code to identify the online service. have.

1B is an exemplary diagram illustrating a rear surface of a second security device 130 according to an embodiment of the present invention. Referring to FIG. 1B, the second security device 130 may include a display 140 to output information necessary for authentication and approval of an online service for the mobile terminal 100. For example, when the second security device 130 captures or scans and acquires unique information on the online service displayed through the display device of the first security device 120 through the recognition and reading unit, the second security device 130, by using at least two of the unique information of the online service, the unique information of the mobile terminal 100, the current time, and a random number algorithm, to generate information necessary for authentication and approval of the mobile terminal 100 for the online service. I can. In this case, the generated encrypted information may be displayed through the display 140.

Thereafter, the user can quickly log in to the online service by inputting the encrypted information displayed through the display 140 of the second security device 130 into the login input window of the mobile terminal 100.

Through this process, the security device 110 for a mobile terminal acquires access rights to a plurality of online services, thereby providing an advantage of allowing easy and fast login to the online service. In addition, conventionally, users had to memorize and input their ID and password for each online service in order to log in to the online service, but the present invention can provide a security function that prevents user information from being exposed by entering only encrypted information. have.

2 is a configuration diagram of a first security device according to an embodiment of the present invention. Referring to FIG. 2, the first security device 120 may include a communication, a reception unit 210 and a display unit 220. Since the above-described components are not essential, a first security device having more components or fewer components may be implemented.

The communication/reception unit 210 may receive information on an online service executed in the mobile terminal 100 from the mobile terminal 100. For example, the communication/reception unit 210 may receive information on an online service executed in the mobile terminal 100 through short-range communication such as NFC, Bluetooth, or Wi-Fi.

The display unit 220 may display information on the online service received through the communication and reception unit 210 in a form that can be recognized by the second security device 130. For example, when the second security device 130 is mounted on the rear surface of the first security device 120, the display unit 220 provides online services through a display device located on the rear surface of the first security device 120. Information about can be displayed.

3 is a configuration diagram of a second security device according to an embodiment of the present invention. Referring to FIG. 3, the second security device 130 may include a recognition and reading unit 310 and an authentication and authorization information generation unit 320. Since the above-described components are not essential, a second security device having more components or fewer components may be implemented.

Here, in order for the mobile terminal security device to acquire unlimited use rights for a plurality of online services, the second security device 130 recognizes, reads, and scans information on the online service displayed through the first security device 120. Encryption to request authentication from the online service using some or all of the unique information of the device and the included terminal, current time, random number generation algorithm, recognition, reading and scanning, and the unique information of the online service acquired from the reading device. Generated information. At this time, the generated information includes information generated in a form capable of recognizing the unique information of the mobile terminal 100 together with the information of the online service itself, from the recognition, reading and scanning, and unique information about the online service obtained from the reading device. I can.

The recognition and reading unit 310 may perform a registration procedure for performing an authentication procedure for a corresponding mobile terminal and a corresponding security device before being mounted on the mobile terminal 100. For example, the recognition and reading unit 310 scans, reads, and photographs unique information of the mobile terminal 100 before the security device 110 for the mobile terminal is mounted on the mobile terminal 100, and ) Can be recognized. Before the security device 110 for the mobile terminal is mounted on the mobile terminal 100, the initial information reading, authentication, and approval procedures, and the scanning and reading of unique information will be described in detail with reference to FIG. 4.

The recognition and reading unit 310 may read unique information on the online service displayed through the first security device 120. For example, the recognition unit 310 may read unique information of the online service based on URL, barcode, QR code, etc. from information on the online service displayed on the display unit located at the rear of the first security device 120. .

The authentication and approval information generation unit 320 uses two or more of the unique information of the online service acquired by the recognition unit 310, the unique information of the mobile terminal 100, the current time and the random number algorithm, and the mobile terminal 100 ), you can create information necessary for authentication and approval of online services. Here, the information generated by the authentication and authorization information generation unit 320 to be input to the online service may be generated so that the unique information of the mobile terminal 100 is known by being linked with the unique information of the online service.

Through this process, the mobile terminal 100 and the mobile authentication security procedure for the online service are performed based on the information required for authentication and approval of the online service generated by the mobile terminal security device 110, and the authentication procedure is completed. The mobile terminal 100 may acquire access rights to the online service.

4 illustrates a procedure for registering a mobile terminal in a security device for a mobile terminal according to an embodiment of the present invention. As shown in FIG. 4, the authentication approval procedure of the mobile terminal and the security device in the second security device 130 includes steps processed in a time series according to the embodiment shown in FIGS. 1A to 2. Accordingly, even if the contents are omitted hereinafter, it is also applied to the login authentication approval procedure in the second security device 130 according to the embodiment shown in FIGS. 1A to 2.

In step S410, the second security device 130 may read the unique information of the mobile terminal 100.

In step S420, the second security device 130 may complete registration for performing a mobile terminal and a mobile security device authentication approval procedure.

For example, the second security device 130 photographs the serial number of the mobile terminal 100 through the recognition and reading unit 310 provided before being mounted on the mobile terminal 100, or the mobile terminal 100 By reading the serial number of) and recognizing the unique information, it is possible to complete the registration for performing the login authentication procedure.

For another example, when the mobile terminal 100 outputs unique information on the screen to register the login authentication procedure, the second security device 130 uses the recognition and reading unit 310 to display the screen of the mobile terminal 100. By reading the unique information of the mobile terminal 100 output to and recognizing the unique information of the mobile terminal 100, the registration process for performing the authentication approval process may be completed.

In step S430, the second security device 130 includes a security device 110 for a mobile terminal (meaning a combination of the first security device 120 and the second security device 130) installed in the mobile terminal 100. Thereafter, it may additionally be operated so as not to recognize the unique information of the mobile terminal 100.

In the above description, steps S410 to S430 are further divided into additional steps, according to an embodiment of the present invention. Can be combined in fewer steps. In addition, some steps may be omitted as necessary, and the order between steps may be switched.

5 is a flowchart of a method of performing a login authentication procedure for an online service in a security device for a mobile terminal according to an embodiment of the present invention. A method of performing a login authentication procedure in the security device 100 illustrated in FIG. 5 includes steps processed in a time series according to the embodiment illustrated in FIGS. 1A to 4. Accordingly, even if the contents are omitted below, it is also applied to the method of performing the login authentication procedure in the security device 110 according to the embodiment illustrated in FIGS. 1A to 4.

In step S510, the first security device 120 of the mobile terminal security device 110 may receive information on an online service executed in the mobile terminal 100.

In step S520, the first security device 120 of the mobile terminal security device 110 may display information on the received online service so that the second security device can recognize it.

In step S530, the second security device 130 of the mobile terminal security device 110 may recognize information on the online service displayed through the first security device 120.

In step S540, the second security device 130 of the mobile terminal security device 110 uses two or more of the recognized online service information, the unique information of the mobile terminal 100, the current time, and the random number algorithm, Information required for authentication and approval of an online service for the terminal 100 may be generated.

In the above description, steps S510 to S540 may be further divided into additional steps or may be combined into fewer steps, according to an embodiment of the present invention. In addition, some steps may be omitted as necessary, and the order between steps may be switched.

6A to 6D are exemplary diagrams for explaining a process of performing an authentication approval procedure in a security device according to an embodiment of the present invention.

Referring to FIG. 6A, in the related art, when a user wants to log in to a specific portal site called http://abc.com, the user inputs his/her ID in the ID input window 600 of the specific portal site, and the password input window After entering the password set for the ID in 601, by touching the login button 602, it was possible to log in to the portal site.

However, in the present invention, the first security device 120 of the mobile terminal security device 110 receives unique information on the online service executed in the mobile terminal 100, so that the online service to log in is "http://abc. .com".

When the first security device 120 receives information on the online service through a communication and reception unit, the second security device 130 mounted on the rear side of the first security device 120 recognizes the information on the online service. It may be displayed through the display device on the rear side of the first security device 120 so as to be able to do so.

Referring to FIG. 6B, the second security device 130 may recognize information on the online service displayed through the display device on the rear of the first security device, information on the recognized online service, and the mobile terminal 100. Information required for authentication and approval of the mobile terminal 100 for an online service may be generated by using at least two of the unique information, the current time, and the random number algorithm. For example, the second security device 130 may display information necessary for authentication and approval of an online service generated through the display 140 (eg, “1 2 3 4 5”).

When the information input window 610 for authentication approval of the online service is displayed, the user enters the information required for authentication and approval of the online service displayed through the display 140 of the second security device 130. ) Can be entered.

Hereinafter, another embodiment of a security device for a mobile terminal according to the present invention will be described with reference to FIGS. 7A to 7C and 8.

7A to 7C are diagrams illustrating a security device for a mobile terminal according to an embodiment of the present invention, and FIG. 7A is a diagram illustrating a security device for a mobile terminal in the form of a smartphone case, and FIG. 7B is a mobile terminal of FIG. 7A. The security module is separated from the terminal security device, and FIG. 7C is an exploded view of the security module of FIG. 7A.

Referring to FIG. 7A, the security device 70 for a mobile terminal according to an embodiment of the present invention may be configured in the form of a smartphone case, and may be used in combination with the mobile terminal 100. Referring to FIG. 7B, the security device 70 for a mobile terminal may include a housing 701 and a security module 700 for coupling a smart phone case to the mobile terminal 100. Referring to FIG. 7C, the security module 700 may include a security module upper cover 710, a security device unit 720, and a security module lower cover 720.

7A to 7C and 8, the security device unit 720 of the security device 70 for a mobile terminal according to an embodiment of the present invention includes a first security device 721 and a second security device 722. ), and the first security device 721 may include a communication unit 7211 and a first display unit 7212, and the second security device 722 may include a recognition unit 7201 and authentication. It may be configured to include an information generation unit 7222, a second display unit 7223, and a power supply unit 7224. Since the above-described components are not essential, the security device unit 720 having more components or fewer components may be implemented.

When a user accesses a specific online service through the mobile terminal 100, the online service displays a user authentication information input window for the online service on the display device of the mobile terminal 100, and provides unique information on the online service. May be transmitted to the first security device 721 through the communication unit 7211.

After receiving the unique information on the online service, the first security device 721 may output it to the first display unit 7212. The unique information on the online service may be a URL of a website that provides the online service, and the URL is information or signal transformed into numeric information, barcode, QR code, optical flashing signal, optical modulation signal, etc. Can be expressed. The modified information or signal is not limited to the presented form or modulation method, and may be a result of any form, means, or modulation method capable of expressing the unique information on the online service.

The recognition unit 7231 of the second security device 722 may acquire unique information about the online service output on the first display unit 7212 and recognize the information. According to an embodiment, when the unique information on the online service output on the first display unit 7212 is a character, a barcode or a QR code representing a URL, the recognition unit 7201 may be a camera or an optical scanner. The recognition unit 7231 may recognize the unique information by photographing or scanning the unique information on the online service. According to another embodiment, when the first display unit 7212 is a light-emitting device such as an LED, the unique information on the online service may be an optical modulated signal modulated with a frequency and a wavelength, and in this case, the recognition unit ( 7221) may recognize the unique information by receiving and analyzing an optical modulated signal representing the unique information on the online service through the provided light-receiving sensor. According to another embodiment, the first display unit 7212 may be a sound signal generator that outputs sound rather than an image display device, and in this case, the recognition unit 7201 may be replaced with a device that acquires an sound signal.

When information transmission between the first display unit 7212 and the recognition unit 7231 is an optical method such as image output and image capturing/scanning, as shown in FIG. 8, the first display unit 7212 and the recognition unit 7221 is disposed on the first security device 721 and the second security device 722 respectively so as to face each other, so that the image acquisition sensor of the recognition unit 7221 is used for the online service displayed on the first display unit 7212. It is possible to easily acquire an image for unique information. According to an embodiment, even if the first display unit 7212 and the recognition unit 7231 do not face each other, the recognition unit recognizes image information or optical information output to the first display unit 7212 through means such as a waveguide, a prism, or an optical cable. You can pass it to (7221).

The authentication information generation unit 7222 is a user corresponding to the online service based on the unique information about the online service provided from the recognition unit 7231, the unique information of the mobile terminal 100, the current time information, and a random number generation algorithm. You can create authentication information. Here, the user authentication information to be input in the user authentication information input window for the online service may be generated so that the management server of the online service can recognize the unique information of the mobile terminal 100 related to the unique information of the online service. have.

The second display unit 7223 may output the user authentication information generated by the authentication information generation unit 7222 in a text format and provide it to the user. The user may complete user authentication for the online service by inputting the user authentication information output from the second display unit 7223 into the user authentication information input window for the online service output to the mobile terminal 100. In this embodiment, an image output device is used as the second display unit 7223, but according to the embodiment, the second display unit 7223 may be replaced with an audio output device, and the user It is also possible to obtain authentication information.

The power supply 7224 may be provided with a power supply in the form of a battery to supply power to each component of the security device 720. According to an embodiment, the power supply unit 7224 may include a wireless power receiver to receive wireless power from the mobile terminal 100 and supply driving power to each component of the security device unit 720. According to an embodiment, the power supply unit 7224 may receive power from the mobile terminal 100 via wire and provide driving power to each component of the security device unit 720.

According to an embodiment, the first security device 721 and the second security device 722 constituting the security device unit 720 are configured to be completely separated electrically from each other, and user authentication information of the second security device 722 It may be implemented such that the first security device 721 or the mobile terminal 100 does not intervene in the creation process at all.

The method of performing the login authentication procedure in the security device described through FIGS. 1A to 6D may be implemented in the form of a computer program stored in a medium executed by a computer or a recording medium including instructions executable by a computer. . In addition, the method of performing the login authentication procedure in the security device described through FIGS. 1A to 6D may be implemented in the form of a computer program stored in a medium executed by a computer.

Computer-readable media can be any available media that can be accessed by a computer, and includes both volatile and nonvolatile media, removable and non-removable media. Further, the computer-readable medium may include a computer storage medium.

Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data.

The above description of the present invention is for illustrative purposes only, and those of ordinary skill in the art to which the present invention pertains will be able to understand that other specific forms can be easily modified without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are illustrative in all respects and are not limiting. For example, each component described as a single type may be implemented in a distributed manner, and similarly, components described as being distributed may also be implemented in a combined form.

The scope of the present invention is indicated by the claims to be described later rather than the detailed description, and all changes or modified forms derived from the meaning and scope of the claims and their equivalent concepts should be construed as being included in the scope of the present invention. do.

Claims

In the authentication and approval of an online service for a mobile terminal, in the security device for a mobile terminal comprising a first security device and a second security device including unique information of the mobile terminal,

The first security device

A communication unit for receiving information on an online service from the mobile terminal; And

A first display unit that displays the unique information on the received online service so that the second security device can recognize and read it

Including,

The second security device

A recognition and reading unit for recognizing and reading information displayed through the display unit of the first security device;

Information required for authentication and approval of the online service for the mobile terminal is obtained by using at least two of the unique information on the online service obtained from the recognition and reading unit, the unique information of the mobile terminal, the current time, and the random number algorithm. Authentication and authorization information generation unit to generate; And

A second display unit that displays the information generated by the authentication and approval information generation unit so that the user can check it

Including,

The information generated by the authentication and authorization information generation unit to be input to the online service by a user is generated so that the unique information of the mobile terminal can be known by linking with the online service unique information.