KR20180126690A - Method for processing user authentication based on phone number and apparatus for the same - Google Patents

Abstract

A user authentication processing method and apparatus based on a telephone number are disclosed. A method for processing a user authentication based on a telephone number, the method comprising: a step of the authentication server confirming the communication company identification information and the user telephone number assigned to the terminal apparatus; and the authentication server, in the communication company system corresponding to the communication company identification information, The method comprising the steps of: setting a self-number authentication mode by the communication company system; and transmitting the self-number authentication call using the user's phone number assigned to the terminal device Transmitting a self-number authentication call to the authentication server when the communication company system receives the self-number authentication call in the self-number authentication mode; and transmitting, by the authentication server, And processing the user authentication using the authentication information.

Description

TECHNICAL FIELD [0001] The present invention relates to a method and an apparatus for processing a user authentication based on a telephone number,

This disclosure relates to a method and apparatus for verifying a user's identity and authority, and more particularly to a method and apparatus for processing a user's authorization.

Personal identification numbers (eg, social security numbers) and names and user phone numbers (eg, mobile phone numbers) that help identify individuals are often used online to provide anonymity. For example, in order to register a member as a member on a web site, or to confirm the information (eg, ID, password, etc.) of a registered member, a name and a personal identification number (for example, a resident registration number)

In this way, personal information such as personal identification number (e.g., resident registration number) and name is freely used in an online environment, thereby causing leakage of personal information due to hacking or the like. Due to leakage of personal information, secondary damage occurred.

As the use of personal information is damaged, the collection of personal identification numbers (eg, social security number) is restricted online, and access to and management of personal information is handled only by reputable professional organizations. In other words, personal information can be restricted only by specialized agencies (eg, Korea Credit Information, Korea Credit Rating Information, etc.) that can manage the personal information.

Such professional agencies are performing user authentication processing to provide real name verification and identity verification services. In this user authentication process, a mobile phone authentication processing method is used in which a user's identity is confirmed by sending an SMS in cooperation with a mobile communication company using a resident registration number of a user and a mobile communication phone number.

However, in the case of the mobile phone authentication processing method, the user authentication process is performed by confirming the approval number recorded in the SMS transmitted from the mobile communication company and inputting it to the web page or the like. There is a problem that is imposed on the enemy. In addition, with such a cost burden, there is an inconvenience in that, in order to perform the authentication process, the user must input the user information in the web page and input the approval number once sent to the mobile communication terminal.

On the other hand, in order to solve the inconvenience of inputting the approval number sent to the mobile communication terminal into the web page, when the mobile communication terminal executes the web page for user authentication, the mobile communication terminal automatically And then automatically writing the information on a web page for user authentication.

However, in such a manner, in order for the mobile communication terminal to automatically obtain the approval number recorded in the SMS, an application for managing the SMS or an application for managing the web page is required to be accessed. When the access management such as the application for managing the SMS or the application for managing the web page is not permitted as a security problem, the operation of automatically inputting the approval number stored in the SMS can not be performed. There is still the inconvenience that the approval number sent to the user must be checked one by one and then input again to the web page.

Therefore, there is a need to provide a user authentication processing service that can realize more convenient and safety than a method of using an approval number recorded in an SMS.

SUMMARY OF THE INVENTION The technical object of the present disclosure is to provide a method and apparatus that can securely process user authentication while minimizing user input.

It is another object of the present disclosure to provide a method and apparatus for handling user authentication using a pre-established closed network for mobile communication services.

The technical objects to be achieved by the present disclosure are not limited to the above-mentioned technical subjects, and other technical subjects which are not mentioned are to be clearly understood from the following description to those skilled in the art It will be possible.

According to an aspect of the present disclosure, a method of processing a user authentication process based on a telephone number can be provided. The method includes the steps of the authentication server confirming the communication company identification information and the user telephone number assigned to the terminal apparatus; and the authentication server further includes a communication company system corresponding to the communication company identification information, The method comprising the steps of: establishing a self-number authentication mode by the communication company system; requesting a self-number authentication call using the user telephone number assigned to the terminal device; Transmitting, by the communication company system, the self-number authentication call to the authentication server upon receipt of the self-number authentication call in the self-number authentication mode; and transmitting, by the authentication server, And the like.

According to another aspect of the present disclosure, a method of processing a user authentication based on a telephone number can be provided. The method includes the steps of: checking the communication company identification information, the user telephone number, the terminal apparatus identification information, and the user personal information allocated to the terminal apparatus; Transmitting a self-number authentication setup message including the telephone number to the system; receiving the self-number authentication call from the communication company system set in the self-number authentication mode; And processing the user authentication.

According to another aspect of the present disclosure, a user authentication processing system can be provided. The system operates a terminal device, a MIMO authentication mode for processing a call using a user phone number assigned to the terminal device, and an UMS (Unified Messaging System) mode. In the MIMO authentication mode, A communication company system for transmitting a self-number authentication call using a user's telephone number, a communication company system for confirming the communication company identification information and the user's telephone number allocated to the terminal apparatus and setting the self-number authentication mode to the communication company system corresponding to the communication company identification information And an authentication server for transmitting the request message, receiving the self-number authentication call from the communication company system set in the self-number authentication mode, and processing the user authentication based on the self-number authentication call.

The features briefly summarized above for this disclosure are only exemplary aspects of the detailed description of the disclosure which follow, and are not intended to limit the scope of the disclosure.

According to the present disclosure, a method and apparatus can be provided that can securely process user authentication while minimizing user input.

Further, according to the present disclosure, a method and apparatus for handling user authentication using a closed network established for mobile communication services can be provided.

The effects obtainable from the present disclosure are not limited to the effects mentioned above, and other effects not mentioned can be clearly understood by those skilled in the art from the description below will be.

1 is a diagram showing a configuration of a telephone number based user authentication processing system according to an embodiment of the present disclosure.
2 is a signal flow diagram illustrating an operational sequence of a telephone number based user authentication processing system according to an embodiment of the present disclosure;
3 is a flowchart showing a procedure of a user authentication processing method according to an embodiment of the present disclosure.
4A is an example of a user authentication information input page used in a user authentication processing method according to an embodiment of the present disclosure.
FIG. 4B is an exemplary view of a self-number authentication call page used in a user authentication processing method according to an embodiment of the present disclosure.
5A is a diagram illustrating an example of a user authentication request message used in a user authentication processing method according to an embodiment of the present disclosure.
FIG. 5B is an example of a magnetic number authentication message used in a user authentication processing method according to an embodiment of the present disclosure; FIG.
6 is a diagram illustrating a configuration of a user authentication processing system based on a telephone number according to another embodiment of the present invention.
7 is a signal flow diagram illustrating an operation sequence of a telephone number based user authentication processing system according to another embodiment of the present disclosure;
8 is a block diagram illustrating a computing system that implements a user authentication processing method in accordance with various embodiments of the present disclosure.

Hereinafter, embodiments of the present disclosure will be described in detail with reference to the accompanying drawings, which will be easily understood by those skilled in the art. However, the present disclosure may be embodied in many different forms and is not limited to the embodiments described herein.

In the following description of the embodiments of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present disclosure rather unclear. Parts not related to the description of the present disclosure in the drawings are omitted, and like parts are denoted by similar reference numerals.

In the present disclosure, when an element is referred to as being "connected", "coupled", or "connected" to another element, it is understood that not only a direct connection relationship but also an indirect connection relationship May also be included. Also, when an element is referred to as " comprising "or" having "another element, it is meant to include not only excluding another element but also another element .

In the present disclosure, the terms first, second, etc. are used only for the purpose of distinguishing one element from another, and do not limit the order or importance of elements, etc. unless specifically stated otherwise. Thus, within the scope of this disclosure, a first component in one embodiment may be referred to as a second component in another embodiment, and similarly a second component in one embodiment may be referred to as a first component .

In the present disclosure, the components that are distinguished from each other are intended to clearly illustrate each feature and do not necessarily mean that components are separate. That is, a plurality of components may be integrated into one hardware or software unit, or a single component may be distributed into a plurality of hardware or software units. Thus, unless otherwise noted, such integrated or distributed embodiments are also included within the scope of this disclosure.

In the present disclosure, the components described in the various embodiments are not necessarily essential components, and some may be optional components. Thus, embodiments consisting of a subset of the components described in one embodiment are also included within the scope of the present disclosure. Also, embodiments that include other elements in addition to the elements described in the various embodiments are also included in the scope of the present disclosure.

Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings.

1 is a diagram showing a configuration of a telephone number based user authentication processing system according to an embodiment of the present disclosure.

Referring to FIG. 1, a telephone number based user authentication processing system according to an embodiment of the present disclosure may include a terminal device 10, a communication company system 20, and an authentication server 30.

The terminal device 10 may include a mobile terminal such as a PDA, a smart phone, or the like as an apparatus capable of accessing the communication company system 20. [

The terminal device 10 can store a unique identification number (e.g., serial number) of a device, a telephone number, etc. and transmits a unique identification number (e.g., a serial number) and a telephone number to the communication company system 20 Can be registered.

The terminal device 10 may include an input device such as a keypad or the like, and may receive a telephone number through the input device and generate a call corresponding to the telephone number.

Also, the terminal device 10 can be connected to the authentication server 30 through a wired / wireless communication network, and provides an environment for inputting requested information from the authentication server 30.

For example, the terminal device 10 may include a web browser, and may be provided with information requested by the authentication server 30 (e.g., communication company identification information for identifying a communication company registered with the terminal device, Personal information (e.g., sex, date of birth, etc.)) can be displayed. Then, the terminal device 10 transmits the information requested by the authentication server 30 (e.g., the communication company identification information for identifying the registered communication company, the telephone number of the user, the personal information of the user (e.g., sex, And transmits it to the authentication server 30.

In the embodiment of the present disclosure, the terminal device 10 has a web browser and the authentication server 30 inputs and transmits the information requested by the web page, but the present disclosure is not limited thereto. It suffices that the information requested by the authentication server 30 is displayed on the terminal device 10 and the corresponding information is received from the user and is transmitted to the authentication server 30. [ For example, the terminal device 10 may include a user authentication application. The user authentication application may include information requested by the authentication server 30 (e.g., communication partner identification information for identifying the registered communication company, Number, and user's personal information (e.g., sex, date of birth, etc.)). Accordingly, the terminal device 10 may transmit the information input through the input window to the authentication server 30. [

Meanwhile, the communication company system 20 can provide a mobile communication service to the terminal device 10. [ For example, the communication company system 20 includes a mobile switching center (MSC) 21, a base station controller (BSC) 22, a base station (BS) 23, A home location register (HLR) 25, and the like.

The mobile communication exchange 21 includes an interface for providing an interface between the Internet network and the PSTN network and the mobile communication network, an exchange process for incoming / outgoing traffic of the terminal device 10, a handover process by moving the terminal device 10, Lt; / RTI >

In particular, the mobile communication exchange 21 may process or route information or data provided by an external device, e.g., an authentication server 30, connected through an Internet network.

The home location register (HLR) 25 is connected to the terminal device 10 (or the subscriber) to provide a call connection or other mobile communication service to the terminal device 10 (Name, sex, date of birth, etc.), subscriber authority, supplementary service information, billing information, etc., of the terminal device 10 And manage.

In particular, the home location register (HLR) 25 may establish an unified messaging system (UMS) mode and a self-number authentication mode.

Specifically, the home location register (HLR) 25 can basically be operated in the UMS mode. In the UMS mode, the home location register (HLR) 25 may connect the call to the unified messaging system if the call requested from the terminal device 10 is a call of a phone number assigned to the terminal device 10. [

The home location register (HLR) 25, when receiving a message requesting the setting of the self-number authentication mode from the mobile communication exchange 21 (hereinafter referred to as a 'self-number authentication message'), HLR) 25 to the self-number authentication mode.

Further, when receiving the magnetic number authentication message, the home location register (HLR) 25 sets a self-number authentication mode for a predetermined time (for example, three minutes) When it expires, it may switch to UMS mode.

Further, the predetermined time may be set by a predetermined rule in the home location register (HLR) 25. As another example, the self-number authentication message transmitted by the authentication server 30 may include an identifier requesting self-number authentication and an operating time of the self-number authentication mode. Accordingly, the home location register (HLR) 25 confirms the operating time of the self-number authentication mode among the information included in the self-number authentication message, and reflects the operating time of the self-number authentication mode, And may switch to the UMS mode when the operating time in the self-number authentication mode expires.

The home location register (HLR) 25 may be operated in the self-number authentication mode. A home location register (HLR) 25 stores a call of a telephone number (hereinafter, referred to as a " home number registration call ") assigned to the terminal device 10 by a call requested from the terminal device 10, The authentication server 30 may transmit the self-number authentication call to the authentication server 30.

Meanwhile, the authentication server 30 can be connected to at least one service providing server 35, and upon receiving a request for user authentication from the at least one service providing server 35, the authentication server 30 can process the user authentication.

For example, the at least one service providing server 35 is a server device that provides a web site so that connected users can use various services and contents. The service providing server 35 allows the authentication server 30 to perform an authentication process for a user at the time of providing a service to users or in a membership process for providing services of users. That is, in processing the service provision, the membership registration, the member confirmation (e.g., the ID confirmation, the password confirmation, and the like), the real name authentication or the confirmation of the identity of the user is required. Accordingly, when the authentication processing for the user is required, the service providing server 35 transmits a message requesting the user authentication to the authentication server 30 to perform authentication processing for the corresponding user. At this time, the service providing server 35 checks the connection information of the terminal device 10 being used by the user so that the authentication server 30 can access the terminal device 10 being used by the user, To the authentication server (30).

The authentication server 30 uses the connection information of the terminal device 10 to acquire user authentication information (e.g., communication company identification information for identifying the communication company registered with the terminal device, user's telephone number, (E.g., a web page, an input window of a user authentication application, etc.) in which personal information (e.g., sex, date of birth, etc.)

Upon receiving the authentication request from the user through the environment in which the user authentication information can be received, the authentication server 30 transmits the authentication information to the communication company identification information, the user telephone number, and the user telephone number And may store user authentication information including personal information (e.g., sex, date of birth, etc.) of the corresponding user.

The authentication server 30 may transmit a self-number authentication message including an identifier requesting the self-number authentication to the communication company system 20. [ The authentication server 30 may provide an environment in which a call for user authentication can be performed with a telephone number assigned to the terminal device 10. [ For example, the authentication server 30 may provide a message requesting an attempt to make a telephone number call allocated to the terminal device 10, or may be provided with a web button including a call button connected to the telephone number assigned to the terminal device 10 Pages can be provided.

The authentication server 30 can receive the call signal of the terminal device 10 from the home location register (HLR) 25 of the communication company system 20. The authentication server 30 can receive the call signal of the terminal device 10, Can be used to process user authentication.

For example, when the MOB_NBR-C received from the home location register (HLR) 25 is a call generated from the terminal device 10 requesting user authentication, the authentication server 30 determines that the M- And can determine that the user authentication is successful.

In addition, the authentication server 30 may connect the self-number authentication call received from the home location register (HLR) 25 and request a predetermined pattern input for user authentication. Then, it is possible to determine whether the user authentication is successful by checking whether the pattern input by the user matches the predetermined pattern for the user authentication.

After the authentication server 30 processes the user authentication, the authentication server 30 may provide the service providing server 35 with authentication result information including an identifier indicating success or failure of user authentication. In particular, when the user authentication is successful, the authentication server 30 transmits at least one of the information on the user (e.g., communication partner identification information for identifying a communication company, a telephone number of a user, personal information (e.g., sex, ) To the service providing server 35. [0050] The information on the user may be provided to the service providing server 35 together with the authentication result information.

2 is a signal flow diagram illustrating an operational sequence of a telephone number based user authentication processing system according to an embodiment of the present disclosure;

2, the service providing server 35 provides an environment (for example, a web site) in which connected users can use various services and contents, and the terminal device 10 provides a service providing server 35 To provide an environment in which a web page having various services and contents can be provided to a user. In this environment, the user can select an entity (e.g., menu) that requires user authentication in a web page displayed on the terminal device 10. [ For example, the object requiring the user authentication may include a membership subscription menu, a member information confirmation (e.g., ID confirmation, password confirmation, etc.) menu, and the like.

As described above, when the user selects or inputs the object requiring the user authentication through the terminal device 10, the terminal device 10 determines that the object requiring the user authentication is selected or input to the service providing server 35 (S201).

In step S202, the service providing server 35 confirms that the object requiring the user authentication is selected or input, and transmits the user authentication request message to the authentication server 30. [

In order for the authentication server 30 to access the terminal device 10, the service providing server 35 checks the connection information of the terminal device 10 and provides the connection information to the authentication server 30 . Preferably, the connection information of the terminal device 10 may be included in the user authentication request message.

In step S203, the authentication server 30 uses the connection information of the terminal device 10 to acquire user authentication information (e.g., communication partner identification information for identifying the communication device registered with the terminal device, (For example, a user authentication information input web page, a user authentication information input window provided in the user authentication application, and the like) capable of receiving a user's personal information (e.g., a telephone number, a user's personal information to provide.

Through such an environment, the terminal device 10 can acquire user authentication information (e.g., communication company identification information for identifying a communication company to which the terminal device is registered, a user's telephone number, user's personal information (e.g., sex, ), And transmits the received user authentication information to the authentication server 30 (S204).

The authentication server 30 receives user authentication information (e.g., communication company identification information for identifying a communication company registered with the terminal device, user's telephone number, personal information of the user (e.g., sex, date of birth, etc.) (For example, sex, date of birth, etc.) of the user, the received user authentication information (e.g., the communication company identification information for identifying the communication company to which the terminal device is registered, the telephone number of the user, and the user's personal information). Also, in this process, the authentication server 30 can confirm the terminal device identifier (e.g., serial number).

The authentication server 30 confirms the communication company identification information, the user's telephone number, the terminal apparatus identifier, and the user's personal information, and registers the telephone number of the user, the terminal apparatus identifier, The personal information, and the identifier requesting the self-number authentication (S205).

Meanwhile, the communication company system 20 can receive the self-number authentication message through the home location register (HLR) 25, and the home location register (HLR) 25 can confirm the information recorded in the self-number authentication message S206).

Accordingly, the home location register (HLR) 25 can set the operation mode to the self-number authentication mode (S207).

Further, when receiving the magnetic number authentication message, the home location register (HLR) 25 sets a self-number authentication mode for a predetermined time (for example, three minutes) When it expires, it may switch to UMS mode. To this end, the home location register (HLR) 25 sets the operating mode to the self-number authentication mode and starts the operation of counting the time. When the predetermined time has expired (YES in S213) And switches to the UMS mode (S214).

Meanwhile, after performing the operation of step S205 described above, the authentication server 30 may provide an environment in which a call for user authentication can be performed with a telephone number assigned to the terminal device 10 (S208) . For example, the authentication server 30 may provide a message to the terminal device 10 requesting to try a telephone number call assigned to the terminal device 10, or may connect to a telephone number assigned to the terminal device 10 And a web page including a call button to be provided.

Through such an environment, the terminal device 10 can generate a call for user authentication (hereinafter referred to as a 'self-number authentication call') (S209). For example, the terminal device 10 may generate a telephone call of a telephone number assigned to the terminal device 10. [

The MIMO call may be transmitted to the communication company system 20 and may be transmitted to the HLR 25 by the mobile switching center (MSC) 21 of the communication company system 20 (S210 ).

When the home location register (HLR) 25 is operating in the self-number authentication mode and the call requested from the terminal device 10 is a self-number authentication call, the home location register (HLR) To the authentication server 30 (S211).

If the home location register (HLR) 25 transfers the self-number authentication call to the authentication server 30 in step S211, the home location register (HLR) 25 performs step S214 even if the predetermined time has not expired And ends the magnetic number authentication mode to switch to the UMS mode.

On the other hand, in step S220, the authentication server 30 can proceed to process the user authentication using the self-number authentication call received from the home location register (HLR)

For example, when the self-number authentication call is a call generated from the terminal device 10 requesting user authentication, the authentication server 30 determines that the self-number authentication call is valid and determines that the user authentication is successful.

In addition, the authentication server 30 may connect the self-number authentication call received from the home location register (HLR) 25 and request a predetermined pattern input for user authentication. Then, it is possible to determine whether the user authentication is successful by checking whether the pattern input by the user matches the predetermined pattern for the user authentication. At this time, the predetermined pattern may be generated by the authentication server 30 and may be provided to the terminal device 10 in the above-described step S203. The predetermined pattern may include numbers, characters, and the like.

Meanwhile, the authentication server 30 may provide the service providing server 35 with authentication result information including an identifier indicating success or failure of user authentication (S221).

In addition, when the user authentication is successful, the authentication server 30 transmits at least one of the information about the user (e.g., the communication company identification information identifying the communication company, the user's telephone number, the user's personal information (e.g., sex, Information) to the service providing server 35. [ Information about the user may be transmitted together with the authentication result information in S221.

As described above, according to the user authentication processing system, the user authentication request is transmitted between the authentication server 30 and the communication company system 20 using the self-number authentication call, and the terminal device 10, the authentication server 30, A self-number authentication call can be generated through the communication company system 20. [

The connection between the authentication server 30 and the communication company system 20 or the connection between the terminal device 10, the authentication server 30 and the communication company system 20 can be transmitted through the closed network have. Therefore, it is possible to prevent intrusion, hacking, and the like in the process of processing the user authentication. Furthermore, the user authentication can be processed more securely through the processing of the structure and the signal of such a system.

3 is a flowchart showing a procedure of a user authentication processing method according to an embodiment of the present disclosure.

The user authentication processing method according to an embodiment of the present disclosure can be performed by the authentication server 30 described above.

The authentication server 30 can be connected to the service providing server 35. When the service providing server 35 requires user authentication for a user using the terminal device 10, An authentication request message can be transmitted. Accordingly, the authentication server 30 can receive the user authentication request message (S301). The user authentication request message 510 (see FIG. 5A) may include an identifier 511 requesting user authentication and access information 512 of a terminal device.

In step S302, the authentication server 30 can confirm the user authentication information for the user who requires the user authentication.

Specifically, the authentication server 30 uses the connection information 512 of the terminal device to acquire user authentication information (e.g., communication company identification information for identifying the communication company registered with the terminal device, (E.g., a web page, an input window of a user authentication application, etc.) 400 (see FIG. 4) that can receive input of user's personal information (e.g., sex, date of birth, etc.)

The user authentication information input page 400 is provided to the terminal device 10 so that the user can input user authentication information (e.g., Identification information, telephone number of the user, personal information of the user (e.g., sex, date of birth, etc.)). Accordingly, the authentication server 30 acquires user authentication information (e.g., communication company identification information for identifying the communication company registered with the terminal device, user's telephone number, personal information of the user (e.g., sex, ) ≪ / RTI > In this process, the authentication server 30 can confirm the identifier of the terminal device 10.

In step S303, the authentication server 30 can generate the own number authentication message 520 (see FIG. 5B) using the information included in the user authentication information, and transmit it to the corresponding communication system 20. Specifically, the authentication server 30 confirms the user's telephone number 521, the terminal device identifier 522, and the user's personal information (e.g., sex, date of birth, etc.) 523 among the information included in the user authentication information And may generate a self-number authentication message 520 including these 521, 522, and 523. The authentication server 30 can confirm the communication company identification information among the information included in the user authentication information and transmit the own number authentication message 520 to the communication system 20 of the corresponding communication company.

In addition, the self-number authentication message 520 may further include information on the time when the self-number authentication mode is operated, i.e., the self-identification time information 524.

In step S304, the authentication server 30 may provide an environment capable of generating a self-number authentication call. Specifically, the authentication server 30 transmits a page (hereinafter referred to as a 'self-number authentication call page') 450 (see FIG. 4B) including a call button connected to a telephone number assigned to the terminal device 10 .

The self-number authentication call page 450 may include a self-number authentication call button 451. The telephone number assigned to the terminal device 10 may be displayed on the self-number authentication call button 451, or a call button for self-number authentication may be displayed.

The MOBILE NUMBER AUTHENTICATION CALL button 451 may be interlocked with the telephone number assigned to the terminal device 10 and may be assigned to the terminal device 10 when the MOBILE NOTIFY CALL button 451 is selected by the user A telephone call of a telephone number (e.g., a self-identification number call) may be initiated.

In addition, the self-number authentication call page 450 may have a remaining time indicator 453 that indicates the remaining time set for the self-number authentication. The remaining time set for the self-number authentication can be set and displayed in association with the self-number authentication time information 524. [

The authentication server 30 can count the time after transmitting the self-number authentication message 520 in step S303, and can confirm the remaining time by reflecting the counted time and the self-identification time information 524 . Then, the authentication server 30 can display the confirmed remaining time through the remaining time display unit 453.

The authentication server 30 can confirm whether or not the self-number authentication time has expired based on the confirmed remaining time, and when the self-number authentication time has expired (step S305-YES) A message indicating failure of the self-number authentication may be displayed through the authentication failure display unit 454 (S309).

Meanwhile, when a self-number authentication call is generated by the terminal device 10, the self-number authentication call is transmitted to the authentication server 30 through the communication system 20. Accordingly, the authentication server 30 confirms whether a self-number authentication call is generated within the self-number authentication time (step S303 -No) (S306).

In step S307, the authentication server 30 processes the user authentication using the self-number authentication call.

The user authentication is performed such that the generated magnetic number authentication call corresponds to the user authentication information (e.g., the communication company identification information for identifying the communication company registered with the terminal device, the telephone number of the user, personal information of the user (e.g., sex, It is possible to confirm whether or not it is possible to process it. For example, when the telephone number of the generated self-number authentication call matches the telephone number of the user included in the user authentication information, it can be determined that the user authentication is successful.

As another example of processing the user authentication, the authentication server 30 may generate and store a self-number authentication pattern (e.g., authentication number) Pattern 455 may be provided. The authentication server 30 proceeds with the call by connecting the self-number authentication call with the terminal device 10 and transmits a voice requesting the input of the self-number authentication pattern 455 while making a communication with the terminal device 10 Can be output. For example, in the communication with the terminal device 10, the authentication server 30 outputs a voice "Please input a magnetic number authentication pattern for user authentication" in the communication with the terminal device 10, When the number key is input by the user, the input number can be recognized based on the tone information of the input number key. Then, the authentication server 30 compares the input number with the self-number authentication pattern (e.g., authentication number), and may determine that the user authentication is successful if they match.

In step S308, the authentication server 30 can provide authentication result information, that is, information indicating success or failure of user authentication to the service providing server 35. [ The authentication result information may be provided through an authentication result page (not shown).

In addition, the authentication server 30 may store and manage subscriber information for a user using the user authentication service. For example, the authentication server 30 may be a web server that can receive user's personal information such as a user's phone number, name, date of birth, personal identification number (e.g., resident registration number) Personal information of the user can be provided through a page or the like. Such user personal information can be stored and managed in the database as subscriber information. In addition, the authentication server 30 may select whether or not to provide the user's personal information when registering the user, and may store whether or not to provide the user's personal information. The authentication server 30 may provide the user's personal information to the service providing server 35 based on whether the user's personal information is provided or not. For example, the authentication server 30 transmits the authentication result message including the user's personal information together with the authentication result information to the service providing server 30 only when the user authentication is successful in the process of transmitting the authentication result information (S308) (35).

The steps S301 to S309 may be repeatedly performed until the user authentication processing method ends (S310).

In the telephone number-based user authentication processing system and method according to the embodiment of the present invention described above, a telephone number based user authentication process is performed considering a communication company system having a mobile communication exchange and a home location register (HLR) However, the present disclosure is not limited thereto. The communication company system can be variously changed according to the communication environment, and it is sufficient that the self-number authentication mode is set and the operation of transferring the self-number authentication call to the authentication server is sufficient. For example, the communication company system may include a system supporting an LTE communication scheme. In this case, an exchange that confirms the information requesting the setting of the own number authentication mode, or handles operations such as transferring a self-number authentication call, is called a call state control function (hereinafter referred to as 'CSCF'). ). ≪ / RTI > Further, the home location register (HLR) that sets the self-number authentication mode or transmits the received self-number authentication call to the authentication server may be replaced with a telephony application server (TAS) have.

Hereinafter, a telephone number-based user authentication processing system and method considering a system supporting the LTE communication method will be described.

6 is a diagram illustrating a configuration of a user authentication processing system based on a telephone number according to another embodiment of the present invention.

In another embodiment of the present invention, the same reference numerals are assigned to the same components as those of the above-described embodiment of the present invention, and an explanation thereof will be made with reference to one embodiment of the present invention described above.

The user authentication processing system based on the telephone number according to another embodiment of the present invention includes the normal communication system 20 and the LTE communication systems 60 and 65 together with the terminal device 10 and the authentication server 30 .

The LTE communication systems 60 and 65 may support voice call processing using an LTE communication method (e.g., VoLTE (Voice over LTE) call).

The LTE communication systems 60 and 65 include a home subscriber server 61, a TAS 62 and a media resource function (hereinafter referred to as 'MRF'). ) 63, a CSCF (64), and an LTE communication network (65).

The TAS 62 operates as an application server that provides an MMTel (Multimedia Telephony) service on an IP Multimedia Subsystem (IMS) and processes various multimedia communication services in cooperation with the CSCF 64, the HSS 61, and the MRF 63 . For example, the TAS 62 may handle call forwarding or deflection, call transfer, call barring, call waiting, thee-party call, conference call, etc. can do.

The CSCF 64 handles functions related to call and session processing. Specifically, the CSCF 64 can perform functions such as an incoming call gateway, a call control function, an SPD (Serving Profile Database) function, and an address handling function for an incoming call have.

On the other hand, the TAS 62 can set the operation of the telephony mode and the self-number authentication mode.

Specifically, the TAS 62 can basically be operated in the telephony mode. In the telephony mode, the TAS 62 performs a call forwarding or deflection operation, a call transfer, a call inhibition, an on-call standby, a Thee-party, a group call, Lt; / RTI >

The TAS 62 may set the operation mode of the TAS 62 to the self-number authentication mode when receiving the self-number authentication message from the authentication server 30.

Further, when receiving the message, the TAS 62 sets the self-number authentication mode for a predetermined time (for example, three minutes), and when the predetermined time (for example, three minutes) Mode.

In addition, the predetermined time may be set by a predetermined rule in the TAS 62. [ As another example, the self-number authentication message transmitted by the authentication server 30 may include an identifier requesting self-number authentication and an operating time of the self-number authentication mode. Accordingly, the TAS 62 confirms the operation time of the self-number authentication mode from the information included in the self-number authentication message, sets the time for operating the self-number authentication mode by reflecting the operation time of the self-number authentication mode , And may switch to the telephony mode when the time operated in the self-number authentication mode expires.

In the self-number authentication mode, when the call requested from the terminal device 10 is a call of a telephone number assigned to the terminal device 10 (hereinafter, referred to as a 'self-number authentication call'), And can forward the number authentication call to the authentication server 30.

The authentication server 30 can receive the call signal of the terminal device 10 from the TAS 62 of the LTE communication systems 60 and 65 and the authentication server 30 can use the call signal of the terminal device 10 So that the user authentication can be processed. The specific operation in which the authentication server 30 processes the user authentication using the call number of the terminal device 10 is the same as that described in the telephone number based user authentication processing system according to the embodiment of the present disclosure described above.

The LTE communication network 65 may include an LTE base station supporting an LTE communication system and an LTE base station management apparatus and may further include a packet gateway (PGW), a serving gateway (SGW), a mobility management unit A Mobility Management Entity (MME), and the like.

7 is a signal flow diagram illustrating an operation sequence of a telephone number based user authentication processing system according to another embodiment of the present disclosure;

7, the service providing server 35 provides an environment (for example, a web site) in which connected users can use various services and contents, and the terminal device 10 provides a service providing server 35 To provide an environment in which a web page having various services and contents can be provided to a user. In this environment, the user can select an entity (e.g., menu) that requires user authentication in a web page displayed on the terminal device 10. [ For example, the object requiring the user authentication may include a membership subscription menu, a member information confirmation (e.g., ID confirmation, password confirmation, etc.) menu, and the like.

As described above, when the user selects or inputs the object requiring the user authentication through the terminal device 10, the terminal device 10 determines that the object requiring the user authentication is selected or input to the service providing server 35 And can transmit the indicating information (S701).

In step S702, the service providing server 35 confirms that the user requiring the user authentication is selected or inputted, and transmits the user authentication request message to the authentication server 30. [

In order for the authentication server 30 to access the terminal device 10, the service providing server 35 checks the connection information of the terminal device 10 and provides the connection information to the authentication server 30 . Preferably, the connection information of the terminal device 10 may be included in the user authentication request message.

In step S703, the authentication server 30 uses the connection information of the terminal device 10 to acquire user authentication information (e.g., communication partner identification information for identifying the communication device registered with the terminal device, (For example, a user authentication information input web page, a user authentication information input window provided in the user authentication application, and the like) capable of receiving a user's personal information (e.g., a telephone number, a user's personal information to provide.

Through such an environment, the terminal device 10 can acquire user authentication information (e.g., communication company identification information for identifying a communication company to which the terminal device is registered, a user's telephone number, user's personal information (e.g., sex, ), And transmits the received user authentication information to the authentication server 30 (S704).

The authentication server 30 receives user authentication information (e.g., communication company identification information for identifying a communication company registered with the terminal device, user's telephone number, personal information of the user (e.g., sex, date of birth, etc.) (For example, sex, date of birth, etc.) of the user, the received user authentication information (e.g., the communication company identification information for identifying the communication company to which the terminal device is registered, the telephone number of the user, and the user's personal information). Also, in this process, the authentication server 30 can confirm the terminal device identifier (e.g., serial number).

The authentication server 30 confirms the communication company identification information, the user's telephone number, the terminal apparatus identifier, and the user's personal information, and transmits the telephone number of the user, the terminal ID, and the user's personal information to the LTE communication system 60, A device identification, a user private information, and an identifier for requesting self-identification (S705).

Meanwhile, the communication company systems 60 and 65 can receive the self-number authentication message through the TAS 62, and the TAS 62 can confirm the information included in the self-authentication message (S706).

Then, the TAS 62 can set the operation mode to the self-number authentication mode (S707).

Further, when receiving the magnetic number authentication message, the TAS 62 sets a self-number authentication mode for a predetermined time (e.g., three minutes), and when the predetermined time (e.g., three minutes) . To this end, the TAS 62 sets the operation mode to the self-number authentication mode and starts counting time. When the predetermined time has expired (YES in S213), the TAS 62 ends the self-number authentication mode, (S214).

Meanwhile, after performing the operation of step S705 described above, the authentication server 30 may provide an environment in which a call for user authentication can be performed with a telephone number assigned to the terminal device 10 (S708) . For example, the authentication server 30 may provide a message to the terminal device 10 requesting to try a telephone number call assigned to the terminal device 10, or may connect to a telephone number assigned to the terminal device 10 And a web page including a call button to be provided.

Through such an environment, the terminal device 10 can generate a call for user authentication (hereinafter referred to as a 'self-number authentication call') (S709). For example, the terminal device 10 may generate a telephone call of a telephone number assigned to the terminal device 10. [ When the terminal device 10 is a terminal device supporting voice call processing using a LTE communication method (for example, VoLTE (Voice over LTE) call), the self-number authentication call is transmitted to the LTE communication systems 60 and 65, And may be transmitted to the HLR 25 by the CSCF 64 of the LTE communication system 60, 65 (S710).

When the TAS 62 is operating in the self-number authentication mode and the call requested from the terminal 10 is a self-number authentication call, the TAS 62 can forward the self-number authentication call to the authentication server 30 (S711).

Further, if the TAS 62 transmits a self-number authentication call to the authentication server 30 in step S711, the TAS 62 proceeds to step S714 to end the self-number authentication mode even if the predetermined time has not expired You can switch to telephony mode.

On the other hand, in step S720, the authentication server 30 can proceed to process the user authentication using the self-number authentication call received from the TAS 62. [

For example, when the self-number authentication call is a call generated from the terminal device 10 requesting user authentication, the authentication server 30 determines that the self-number authentication call is valid and determines that the user authentication is successful.

In addition, the authentication server 30 may connect the self-number authentication call received from the TAS 62 and request a predetermined pattern input for user authentication. Then, it is possible to determine whether the user authentication is successful by checking whether the pattern input by the user matches the predetermined pattern for the user authentication. At this time, the predetermined pattern may be generated by the authentication server 30 and may be provided to the terminal device 10 in the above-described step S703. The predetermined pattern may include numbers, characters, and the like.

On the other hand, the authentication server 30 may provide the service providing server 35 with authentication result information including an identifier indicating success or failure of user authentication (S721).

In addition, when the user authentication is successful, the authentication server 30 transmits at least one of the information about the user (e.g., the communication company identification information identifying the communication company, the user's telephone number, the user's personal information (e.g., sex, Information) to the service providing server 35. [ Information about the user may be transmitted together with the authentication result information in S721.

As described above, according to the user authentication processing system, a user authentication request is transmitted between the authentication server 30 and the LTE communication systems 60 and 65 using the self-number authentication call, and the terminal device 10, the authentication server 30 ), And a LTE communication system 60, 65, a self-number authentication call can be generated.

8 is a block diagram illustrating a computing system that implements a user authentication processing method in accordance with various embodiments of the present disclosure.

8, a computing system 1000 includes at least one processor 1100, a memory 1300, a user interface input device 1400, a user interface output device 1500, (1600), and a network interface (1700).

The processor 1100 may be a central processing unit (CPU) or a memory device 1300 and / or a semiconductor device that performs processing for instructions stored in the storage 1600. Memory 1300 and storage 1600 may include various types of volatile or non-volatile storage media. For example, the memory 1300 may include a ROM (Read Only Memory) and a RAM (Random Access Memory).

Thus, the steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by processor 1100, or in a combination of the two. The software module may reside in a storage medium (i.e., memory 1300 and / or storage 1600) such as a RAM memory, a flash memory, a ROM memory, an EPROM memory, an EEPROM memory, a register, a hard disk, a removable disk, You may. An exemplary storage medium is coupled to the processor 1100, which can read information from, and write information to, the storage medium. Alternatively, the storage medium may be integral to the processor 1100. [ The processor and the storage medium may reside within an application specific integrated circuit (ASIC). The ASIC may reside within the user terminal. Alternatively, the processor and the storage medium may reside as discrete components in a user terminal.

Although the exemplary methods of this disclosure are represented by a series of acts for clarity of explanation, they are not intended to limit the order in which the steps are performed, and if necessary, each step may be performed simultaneously or in a different order. In order to implement the method according to the present disclosure, the illustrative steps may additionally include other steps, include the remaining steps except for some steps, or may include additional steps other than some steps.

The various embodiments of the disclosure are not intended to be all-inclusive and are intended to illustrate representative aspects of the disclosure, and the features described in the various embodiments may be applied independently or in a combination of two or more.

In addition, various embodiments of the present disclosure may be implemented by hardware, firmware, software, or a combination thereof. In the case of hardware implementation, one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays A general processor, a controller, a microcontroller, a microprocessor, and the like.

The scope of the present disclosure is to be accorded the broadest interpretation as understanding of the principles of the invention, as well as software or machine-executable instructions (e.g., operating system, applications, firmware, Instructions, and the like are stored and are non-transitory computer-readable medium executable on the device or computer.

Claims (20)

In a user authentication processing method,
The authentication server confirms the communication company identification information and the user telephone number assigned to the terminal apparatus,
Transmitting, by the authentication server, a self-number authentication message including the telephone number to a communication company system corresponding to the communication company identification information;
The communication company system setting a self-number authentication mode,
Requesting a self-number authentication call using the user's telephone number assigned to the terminal,
Transmitting, by the communication company system, the self-number authentication call to the authentication server upon receipt of the self-number authentication call in the self-number authentication mode;
And the authentication server processes the user authentication using the self-number authentication call. The method according to claim 1,
Wherein, in the communication company system, the step of setting the self-
And a media processing apparatus provided in the communication company system for processing the media confirm receipt of the magnetic number authentication message and set the self number authentication mode. 3. The method of claim 2,
Wherein the media processing apparatus sets the self-number authentication mode for a predetermined period of time. The method according to claim 1,
Wherein the step of requesting authentication to the authentication server comprises:
A call processing device for processing a call included in the communication company system, the method comprising the steps of: confirming the self-number authentication call and delivering it to a media processing device provided in the communication company system and processing the media;
A step in which the media processing apparatus confirms receipt of the self-number authentication call in the self-number authentication mode;
And the media processing apparatus transmitting the self-number authentication call to the authentication server. The method according to claim 1,
Wherein the step of setting the self-number authentication mode comprises:
Determining whether the user telephone number, the terminal device identification number, and the user personal information received from the authentication server match the user telephone number, the terminal device identification number, and the user personal information stored in advance in the communication company system and,
When the user telephone number, the terminal apparatus identification number, and the user personal information received from the authentication server match the user telephone number, the terminal apparatus identification number, and the user personal information stored in advance in the communication company system, Setting an authentication mode;
If the user telephone number, the terminal apparatus identification number, and the user personal information received from the authentication server do not match the user telephone number, the terminal apparatus identification number, and the user personal information stored in advance in the communication company system, And transmitting the information indicating the failure to the authentication server. The method according to claim 1,
Wherein the authentication server confirms the communication company identification information and the user telephone number assigned to the terminal apparatus,
Providing an input window to the authentication server for inputting at least one of the communication company identification information, the user telephone number, the terminal identification number of the user, and the user personal information;
Receiving at least one of the communication company identification information, the user telephone number, the terminal identification number of the user, and the user personal information through the input window;
The terminal device transmits, via the input window, at least one of the communication company identification information, the user telephone number, the terminal identification number of the user, and the user personal information to the authentication server The method of claim 1, further comprising: The method according to claim 1,
Wherein the step of the authentication server processing the user authentication comprises:
Receiving, by the authentication server, the self-number authentication call from the communication company system;
Confirming whether or not the telephone number of the self-number authentication call matches the user telephone number received from the terminal device;
Determining whether authentication success or failure of authentication is based on whether or not a telephone number of the self-number authentication call matches the user telephone number received from the terminal;
Wherein the authentication server provides information indicating the authentication success or authentication failure to the service providing server or the terminal device. 8. The method of claim 7,
Wherein the step of the authentication server processing the user authentication comprises:
A step in which the authentication server generates and provides a self-number authentication pattern to the terminal device;
Receiving the self-number authentication call from the communication company system;
A step of connecting a call of the self-number authentication call and requesting input of a self-number authentication pattern through the call;
Confirming a self-number authentication pattern input through the call;
Confirming whether the generated magnetic number authentication pattern matches the input magnetic number authentication pattern;
Determining success or failure of authentication based on whether the generated magnetic number authentication pattern matches the input magnetic number authentication pattern;
Wherein the authentication server provides information indicating the authentication success or authentication failure to the service providing server or the terminal device. The method according to claim 2 or 4,
Wherein the call processing device comprises at least one of an exchange and a call state control function. The method according to claim 2 or 4,
Wherein the media processing apparatus comprises at least one of a home location register (HLR) and a telephony application server. A method for an authentication server to process user authentication,
A step of confirming the communication company identification information, the user telephone number, the terminal device identification information, and the user personal information allocated to the terminal apparatus;
Transmitting a self-number authentication setting message including the telephone number to a communication company system corresponding to the communication company identification information;
Receiving a self-number authentication call from the communication company system set in a self-number authentication mode;
And processing the user authentication based on the self-number authentication call. 12. The method of claim 11,
Wherein the step of identifying the communication company identification information and the user telephone number assigned to the terminal apparatus comprises:
Providing an input window for inputting at least one of the communication company identification information, the user telephone number, the terminal identification number of the user, and the user personal information;
Receiving, from the terminal apparatus, at least one of the communication company identification information, the user telephone number, the terminal apparatus identification number of the user, and the user personal information through the input window, Based on the authentication information. 12. The method of claim 11,
Wherein the step of processing the user authentication comprises:
Confirming whether or not the telephone number of the self-number authentication call matches the user telephone number received from the terminal device;
Determining whether authentication success or failure of authentication is based on whether or not a telephone number of the self-number authentication call matches the user telephone number received from the terminal;
Wherein the authentication server provides information indicating the authentication success or authentication failure to the service providing server or the terminal device. 12. The method of claim 11,
Wherein the step of processing the user authentication comprises:
Generating the self-number authentication pattern and providing the self number authentication pattern to the terminal device;
A step of connecting a call of the self-number authentication call received from the communication company system and requesting input of a self-number authentication pattern through the call;
Confirming a self-number authentication pattern input through the call;
Confirming whether the generated magnetic number authentication pattern matches the input magnetic number authentication pattern;
Determining success or failure of authentication based on whether the generated magnetic number authentication pattern matches the input magnetic number authentication pattern;
And providing information indicating the authentication success or authentication failure to the service providing server or the terminal device. In a user authentication processing system,
A terminal device,
A communication company system operating a self-number authentication mode for processing a call using a user's phone number assigned to the terminal, and transmitting a self-number authentication call using a user's phone number assigned to the terminal in the self-number authentication mode; ,
And transmits a message for requesting setting of the own number authentication mode to the communication company system corresponding to the communication company identification information, And an authentication server that receives the self-number authentication call from the system and processes the user authentication based on the self-number authentication call. 16. The method of claim 15,
Wherein the communication company system comprises a call processing device and a media processing device,
Wherein the media processing apparatus confirms a message requesting the setting of the self-number authentication mode, and sets the self-number authentication mode. 17. The method of claim 16,
Wherein the media processing apparatus sets the self-number authentication mode for a predetermined period of time. 17. The method of claim 16,
Wherein the call processing device identifies a call using the user telephone number assigned to the terminal device and transfers the call to the media processing device provided in the communication company system,
Wherein the media processing apparatus delivers the MUM authentication call to the authentication server upon receipt of the MME authentication call in the MME authentication mode. 17. The method of claim 16,
Wherein the call processing apparatus includes at least one of an exchange and a call state control function. 17. The method of claim 16,
Wherein the media processing apparatus comprises at least one of a home location register (HLR) and a telephony application server.

Images