KR100579165B1 - User and mobile phone authentication/control apparatus and method thereof - Google Patents

Abstract

The present invention is a device that is inserted into and connected to a mobile terminal such as a mobile phone, PDA, walkie-talkie, and the authority approver and the terminal authentication / control device and method of the mobile terminal is a device for providing a safe and convenient use and authentication for the user Through the method and method, the mobile phone registration code, the management code, and the phone number, which are important information of the mobile phone, communicate with the mobile terminal in the authentication / control device to recognize the information and store and use the information in the storage area of the authentication / control device. A control and information transfer device and method.

Handset, Port, Cable, Mobile, Password, Authentication, Payment

Description

Authenticator and method for authenticating mobile terminal and authorized terminal

1 is a perspective view of a mobile terminal authentication / control device according to the present invention

Figure 2 is a block diagram showing an authentication / control device of a mobile terminal according to the present invention.
Figure 3a is a flow chart showing a password registration process of an embodiment of the authentication / control device of a mobile terminal according to the present invention.

Figure 3b is a flow chart showing a password confirmation process of an embodiment of the authentication / control device of a mobile terminal according to the present invention.

4 is a flowchart illustrating a content selection mode in an embodiment of an authentication / control apparatus of a mobile terminal according to the present invention.

5 is a view showing a password input and payment process in the authentication / control device of a mobile terminal according to the present invention.

** Explanation of symbols for main parts of drawings **

100: authentication / control device 101: circuit board 102: connector pin

103: short-range communication unit 104: upper case 105: lower case

110: MPU unit (processing unit) 120: memory unit

200: portable terminal 300: connector cable

The present invention is a device that is inserted into and connected to a mobile terminal such as a mobile phone, PDA, walkie-talkie, and the authority approver and the terminal authentication / control device and method of the mobile terminal is a device for providing a safe and convenient use and authentication for the user Through the method and method, the mobile phone registration code, the management code, and the phone number, which are important information of the mobile phone, communicate with the mobile terminal in the authentication / control device to recognize the information and store and use the information in the storage area of the authentication / control device. A control and information transfer device and method.
Mobile phones, which started as voice communication devices, have developed into multi-function devices that perform various functions including multimedia functions. On the other hand, in the transaction, payment methods have been continuously developed in pursuit of security and convenience of payment, and cash and checks have been replaced with plastic credit cards, and further developed into security-enhanced IC cards. In addition, mobile wallets, which make payments using mobile communication, have appeared, and mobile communication has played a direct and indirect role as various forms of payment.

However, the conventional electronic wallet could not be used in the supplied phones, but instead was supplied in the form of a new type of dedicated terminal, so the market expansion was not easy, and problems caused by the loss appeared. In addition, because it relies only on readers for telecommunication networks, its use is limited and only for wired and wireless e-commerce.It is complicated to use and does not overcome the limitations such as excessive communication fees, errors, and security failures. I can't.

Recently, with the development of information and communication technology and the explosive spread of global communication infrastructure such as the Internet, communication has become a 'business battleground' without a border of 'simple sea of information', and thus, mobile phones, PDAs, walkie-talkies, internet and so on. The Electronic Payment System, which transmits credit cards and various payment information through the same open network, has attracted attention, but on the other hand, there is a problem that anxiety about exposure of credit information acts as a barrier.

In fact, the biggest problem in e-commerce is the efficient protection of credit information. To this end, various payment methods such as prepaid card type, credit card type, deposit transfer type, and electronic cash type are used, but various types of security devices are required to protect credit information. It is pointed out that the inconvenience of having to go through complicated usage procedures due to security devices is impossible because it is impossible to protect credit information.

For example, in the case of attempting an existing e-commerce transaction, when a user connects to a shopping mall and submits a purchase by entering a product name or a credit card number in an order form on a browser, the credit card number and the order form are encrypted with each key and sent to the shopping mall company. send. In order to send and receive accounts or credit card numbers, data must be encrypted. However, there is a problem of leaking personal information to an unrelated agency, so only shopping malls use encrypted orders and only credit card companies can decrypt encrypted credit card numbers.

However, this method of strengthening the security of personal information is not perfect, so it is necessary to prepare a separate security measure for the case of hacking or finding the credit card number in an unjust manner.

The present invention inserts or connects all payment information such as credit card, debit card, prepaid card, department store card, bonus card, transportation card, gift certificate, coupon / ticket, ID card, pass and ID etc. Stored in a memory or chip to perform the operation only when the information of the mobile terminal and the user matches, and the user does not need to access or transfer the information by the authentication / control device and method according to the present invention anytime, anywhere It is a new technology that opens up a convenient, wallet-free world and protects customer's important information and property by making payment and personal identification functions safe and automatic.

delete

delete

Therefore, the authentication / control device according to the present invention can be carried out without a separate tool and mechanism such as a display unit and an input unit, so that the cost of providing the service is almost zero.

delete

delete

delete

delete

According to the present invention, before the user uses e-commerce and offline payment, the user is authenticated by using the authentication function on the device having the customer personal information and service progress function of the mobile terminal carried by the individual or the company member. A device and method can be provided that can be used in principle to prevent the theft and unauthorized use of information and communication devices and any systems and services that interoperate therewith.

Therefore, the technical problem to be achieved by the present invention is a module type mobile authority approver and approval terminal authentication / control device or authority approver and authorization terminal authentication which can be inserted into a connector such as a personal portable terminal or connected to a data port of the portable terminal to communicate with the portable terminal. As described above, when the approved mobile terminal and the authentication / control device according to the present invention are linked in any payment environment through a verification method, payment can be safely and conveniently performed as described above, and one-click transfer to a customer or a payment destination. It is easy to manage the main controller of the home automation, car management, and information transfer, and it is already spread by allowing one-click operation to be done automatically through the complicated device commands. Configured mobile and It aims to simplify its use with the performance enhancement of the terminal.
In addition, if the authentication / control apparatus and method of the present invention is applied to a portable terminal, it is obvious that the existing portable terminal market and application market are efficient and maximized. Simply applied, just like a TV remote control, you can simply press a button on your phone or access it, and you don't have to lower the window at toll gates, parking lots, drive-throughs, gas stations, etc. Payment can be made through the network. Providing convenience, speed, and safety, and inserting into personal portable terminal such as mobile, PDA, etc. or connecting to data terminal of mobile terminal to provide module type mobile authority approver and authorized terminal authentication / control device and method thereof It is.

According to an aspect of the present invention, there is provided a mobile authority approver and an approval terminal authentication / control device, including: a memory unit for registering a password through input of an initial product code and storing the encrypted password;
A processing unit which reads a user's telephone number and management number stored in the memory unit, and then determines whether there is information that matches the input signal based on the input number, and accesses to the mobile terminal and controls contents; ;
A keypad operation controller for executing contents in accordance with a key value input from a keypad of the portable terminal to control the contents from the processing unit;
A screen control unit displaying a message for waiting for operation of content when a user telephone number and a management number stored in the memory unit and a key value input from the keypad operation control unit match;
A reception data processing unit for storing data input from the mobile terminal by the key value input from the keypad operation control unit in the memory unit;
An internal communication control unit for performing internal communication such as data transmission or voice communication with the portable terminal;
A self-diagnostic processing unit which checks and connects the portable terminal and the authentication / control device at any time;
An audio control unit which disconnects the connection between the mobile terminal and the authentication / control device by the self-diagnostic processing unit or displays a sound such as a warning sound when the content is controlled by the processing unit;
A transmission control unit which is responsible for data transmission by a key value of a keypad through user authentication between the portable terminal and an authentication / control device;
A system monitoring unit for monitoring an overall system configuration between the portable terminal and the authentication / control device; Is done.

delete

delete

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram illustrating a portable terminal authority approver and an approval terminal authentication / control device according to a preferred embodiment of the present invention.

1 is a perspective view illustrating a mobile terminal authority approver and an approval terminal authentication / control device according to the present invention, and FIG. 2 is a block diagram illustrating an authentication / control device. As shown in FIG. 1 and FIG. 2, the present invention provides a mobile terminal 200 and an authority approver and an approval terminal authentication / control device 100 connected to a data port for data input / output of the mobile terminal, and the mobile terminal 200. Connector cable (300) connecting the data port of the authentication / control device (100), and the connector pin 102 for connecting to the data port to look at the authentication / control device 100 in more detail, Upper and lower cases 104 and 105 for protecting the authentication / control device 100, an MPU unit 110 configured to control the authentication / control device 100, and initially a key value of a keypad. Memory unit 120 consisting of a flash and EEPROM for storing the password set by the circuit board, a circuit board 101 for electrically connecting the MPU unit 110 and the memory unit 120, and the portable terminal 200 And communication between the authentication / control device 100 It is comprised by the short-range communication part 103 in charge.
In order to implement the mobile authority approver and the approved terminal authentication / control device 100 configured as described above, the mobile terminal 200 and the MPU unit 110 inside the authentication / control device 100 have the same protocol, Is characterized in that it can be implemented as a one-chip type ASIC.

delete

The authority approver and the authorized terminal authentication / control device may transmit data between the mobile terminal and the input / output device through a wired or wireless interface by using a RS232 method and a USB (Universal Serial Bus) method according to the type of the portable terminal. And a memory unit for storing a function for controlling contents stored in an LCD, a keypad, internal information, and a shortcut key mounted on the portable terminal.

The authority approver and approval terminal authentication / control device 100 when inserting the authority approver and approval terminal authentication / control device 100 according to the present invention into the data port of the mobile terminal 200 to use content or make a payment. Register the password through the input of the initial product code whether the mobile terminal 200 connected through the data port is an authorized terminal, and the user phone number and management number stored in the memory unit for storing the encrypted password Read and then determine whether there is information that matches the input signal on the basis of the input number, and if the information matches, the user operates the mobile terminal 200 through the terminal internal communication control unit 114 It is possible to make calls, connect and pay for various contents, download, upload, and approve data.
At this time, the user's telephone stored in the memory unit using a keypad operation control unit for executing the content according to the key value input from the keypad of the portable terminal to control the content from the processing unit performing the connection and content control to the portable terminal. If the number and the management number and the key value input from the keypad operation control unit match, a message for waiting for operation of the content is displayed on the screen through the screen control unit, and the mobile authority approver and the approval terminal authentication / control device 100 are displayed on the screen. When inserted into a data port or connected to a power source, a command for controlling the mobile terminal 200 is automatically executed.

An initial screen is displayed on the LCD of the mobile terminal 200, and the user can confirm whether or not the authority approver and the approved terminal authentication / control device 100 are connected to the terminal 200 through communication with the inside of the terminal. In order to determine and determine that the user uses a normally approved terminal under legitimate conditions, the initial password may be input and stored by operating the keypad using the product code of the portable terminal.

As can be seen in Figure 3a, the initially set password can be applied to a fixed input method and a method of assigning to a simple formula described in the above embodiment, for example, the user's password is selected as 7777 If you save it initially, the display shows -3456 on the display so that the user only needs to remember the formula of 7777-3456 = 4321 based on his password 7777, and this method can be easily applied. The surname is characterized by maintaining the stability by changing the password from time to time to request input from the MPU.

Areas that can be controlled by the mobile terminal after user authentication is made by entering a password through the authentication / control device are as follows.

Control the main functions of the portable terminal, the mobile terminal data bank, the base station information can be controlled, keypad operation control unit 111, transmission control unit 117, sound control unit 116, system monitoring unit 118, self-diagnosis The portable terminal 200 can be controlled by inserting the data port of the authentication / control apparatus through the processor 115, the reception data processor 113, the internal communication controller 114, and the screen controller 112.

The memory unit 120 including the flash and the EEPROM can decode and store the registration number, the cell phone element number, the basic MPU operation information, and the like according to a set rule. If the password input by the keypad operation control unit 111 is the same as the password stored in the memory unit 120, the menu is normally displayed on the display unit by decrypting with the correct decryption key, while the password is authorized / authorized by the authority approver and the authorized terminal. If it is not the same as the password stored in the control device, re-entry and rejection are displayed on the display.
In particular, the flash and the EEPROM store a plurality of connection telephone numbers or address addresses (hereinafter referred to as "connection addresses"), respective authentication numbers and passwords, and the numbers are sequentially set according to the order of setting registration and operation. Used as When signals and data are input through key values and internal information of a keypad, the MPU 110 transmits a connection address, an authentication number, a password, etc. corresponding to the input values to the memory unit 120 in order according to the use order. It operates according to a stored set rule. If a corresponding condition is not registered, it is executed as it is.

In particular, as shown in FIGS. 3A and 3B, one path, authentication, and various numbers corresponding to the conditions are read according to the user's input data among the respective access paths, the plurality of authentication cards, and the user numbers stored in the memory unit. (read) to make it convenient for the user.

Insert it into the data port and check again if you want to use it.

The password may be stored in the mobile authority approver and the approved terminal authentication / control device at the first operation, and may be used if the number entered in the future is compared with the stored password.

When the initial registration password of the personal portable terminal communicating with the mobile authority approver and the approved terminal authentication / control device is displayed according to the password input, the user may change the password at any time. The user can register the account number and card number expiration date in the authentication area and the password area, and provide them to the commerce system and the financial sector for payment and transfer. You can also enter your final password again. In other words, when a user purchases a product from a shopping mall site through a network, enter a product number and password displayed on an e-commerce system using a mobile terminal, and enter a SEND key to enter the access address, card, and authentication number. If the product is purchased at a general card merchant offline, the phone number and payment amount of the business is provided to the payment system and financial institution in the order and pattern requested by the authorized approver and the authorized terminal authentication / control device. To complete.
In the embodiment of the payment and transfer, if ## is input to the terminal interworking with the authority approver and the approval terminal authentication / control device, the authority approver and approval terminal authentication / control device uses the phone number of the business and the virtual account and the present. Link with an account or request entry of a merchant code. After the input of the phone number and the merchant code, each input process is completed by inputting an identification symbol such as # or * or set as input after a certain time. You can enter the amount of payment through the device as a number and then enter the identification symbol such as # or * at the end, or set it as input after a certain time.

After inputting the amount to be paid, the authority approver and the approval terminal authentication / control device make an input request to set an installment period, and in this case, if the user enters 3 #, it means a three-month installment. The order of the above process may be changed, or duplicate and check operations may be performed. After the final input is completed, the commerce system provided with information and authentication from the user transmits payment and transfer information related to the transaction history to the financial processing system through the network. Here, among the data transmitted to the financial processing system for payment, the mobile authority approver and the approval terminal authentication / control symbol may be included.

The mobile authority approver and the approval terminal authentication / control device receive the approval and transaction details transmitted from the approval and commerce system, and then determine the approval and disapproval, so that the transaction approval is notified from the authentication system or the approval is determined by itself. If so, the approval result is sent to the commerce system.

On the other hand, if a transaction approval rejection is notified from the transfer, payment system, or authentication system or the transaction approval is rejected by itself, a message indicating that the transaction approval has not been sent is input again to input the correct number and symbol.

The content control method performed in the mobile authority approver and the approval terminal authentication / control device is sequentially shown in FIG. 4.

If the password is confirmed after the button input signal is input through the keypad in the normal standby step, the mobile authority approver and the approval terminal authentication / control device display a use confirmation message through the display unit to inquire again whether or not to use it.

If the input password is the same as the stored password, the menu is normally displayed on the display by decrypting with the correct decryption key, whereas if the password is not the same as the password stored in the authority approver and the approval terminal authentication / control device, Reentry and rejection are displayed. Therefore, if a third party enters a random number as a malicious password, it is displayed as a decrypted and stored symbol. Therefore, even if the third party attempts an e-commerce transaction using the authority approver and the approval terminal authentication / control device, the approval is performed. Since it can not be received, the damage caused by theft can be easily prevented.

On the other hand, it can be used only when the password is stored every time the password is entered. In this case, the password can be set to double to improve security.

5 illustrates an example of a password input process and a payment process, and FIG. 5 illustrates a screen displayed on a display unit so that a user may know a number required for online payment.

delete

When using a mobile authority approver and an approval terminal authentication / control device according to the above-described embodiment, a mobile phone having an Internet function automatically accesses a specific site where an electronic money service is executed, and purchases, charges or checks the balance of electronic money. In addition, the balance can also be transferred using another person's mobile authority approver and approval terminal authentication / control device.

As described above, the present invention provides a mobile right to allow a third party to fundamentally solve information theft with a system and method for controlling and approving the use and access of a mobile terminal and a service and an accessory device linked thereto with important information stored therein. The mobile device can be connected to a data port interface and inserted into a personal portable device and automatically check whether the approver and the approval terminal authentication / control device is connected to a registered authority device and a legitimate user by interworking with a personal portable device. Provides authority approver and approval terminal authentication / control device.
According to the present invention, even if the device is obtained in an illegal manner by others, it is not easy to use any device, and the effect of fundamentally protecting the user's information can be obtained.

Illegal attempts can also be caught immediately and the transaction can be stopped, and the normal registration manager and room owner can be notified immediately via the network, thereby preventing further losses and crimes.

As described above, in the case of using the mobile authority approver and authorized terminal authentication / control device and the method thereof, a cumbersome and complicated connection process according to each service type of the user, and an overlapping operation such as an individual code and an authentication code input process The device does not need to automatically process, but also has the advantage that you can safely use or use a variety of services and information by using a mobile phone or mobile authority approver and approval terminal authentication / control device.

In addition, as described by those skilled in the art in the above-described part, the device has a feature of connecting a user to a mobile phone, and as a result, it is possible to improve the performance of the calculation function and various configurations in comparison with a general smart card. . In addition, since it is possible to use the power of the mobile phone together, it can be used as a much more powerful tool than the general smart card method, and any method supporting near field communication is easy to accommodate, so it uses infrared battery and Bluetooth as the battery power of the mobile phone. It can accept any device such as radio frequency. In addition, since the battery size is limited in consideration of the size and design of the mobile phone, the apparatus and method of the present invention are an embodiment of an optimized system. In addition, the interlocking operation of the user to open or open a folder or flip is designed to allow the mobile authority approver and the authorized terminal authentication / control device to sleep mode and power off at any time. It also features a switch in case it doesn't support some features.

When the devices used therein do not use the manner described and implemented in the present invention, the situation in which the device for determining the information and assets of the individual is forged or tampered with cannot be prevented.

In addition, the mobile authority approver and the approved terminal authentication / control device and method according to the present invention has the advantage that the user can select / use more conveniently by using the LCD and keypad of the terminal.

Unlike other solutions that require the installation of a new payment terminal, the present invention can directly service an existing payment terminal (card reader, etc.), thereby reducing the enormous cost of rebuilding the infrastructure.

Existing payment terminal and payment system can be used as it is, infrastructure can be constructed at low cost, thereby creating a wide range of usage environment in a short time.

The wireless short range means excluding the long distance may accommodate infrared rays, radio frequency (RF), Bluetooth, wireless LAN, or the like. Each communication means has its advantages and disadvantages.

In e-commerce and mobile Internet e-commerce, card numbers are memorized and payment is completed by simple button operation on the mobile phone without the inconvenience of typing on the keyboard. Payment information is also encrypted so that others cannot steal payment information. .

Claims (6)

A memory unit 120 for registering a password through input of an initial product code and storing the encrypted password; After reading the user's telephone number and management number stored in the memory unit 120, the controller determines whether there is information that matches the input signal based on the input number, and accesses to the mobile terminal 200 and controls contents. A processing unit 110 for performing; A keypad operation controller 111 for executing contents according to a key value input from the keypad of the portable terminal 200 to control the contents from the processing unit 110; A screen control unit 112 displaying a message for waiting for operation of content when a user telephone number and a management number stored in the memory unit 120 and a key value input from the keypad operation control unit 111 match; A reception data processing unit 113 for storing data input from the mobile terminal 200 in the memory unit 120 by the key value input from the keypad operation control unit 111; An internal communication controller 114 for performing internal communication such as data transmission or voice communication with the portable terminal 200; A self-diagnosis processing unit 115 which checks and displays the connection between the mobile terminal 200 and the authentication / control device 100 at any time; A sound control unit 116 which disconnects the connection between the mobile terminal 200 and the authentication / control apparatus 100 by the self-diagnostic processing unit 115 or displays a sound such as a warning sound when the content is controlled by the processing unit 110; A transmission control unit 117 in charge of data transmission by a key value of a keypad through user authentication between the mobile terminal 200 and the authentication / control device 100; A system monitoring unit 118 for monitoring an overall system configuration between the mobile terminal 200 and the authentication / control device 100; Mobile terminal authority approver and approval terminal authentication / control device. The method of claim 1, The authentication / control device 100 includes a connector pin 102 for connecting to a data port of the mobile terminal 200; Upper and lower cases 104 and 105 for protecting the authentication / control device 100; An MPU unit 110 configured to control the authentication / control device 100; A memory unit 120 configured by flash and EEPROM for storing a password initially set by a key value of a keypad; A circuit board 101 for electrically connecting the MPU unit 110 and the memory unit 120; A short range communication unit 103 in charge of communication between the mobile terminal 200 and the authentication / control device 100; Mobile terminal authority approver and approval terminal authentication / control device, characterized in that consisting of. delete delete delete delete

Images