KR100864182B1 - Method and system for online authentication using pseudorandom table - Google Patents

Abstract

The present invention relates to an online authentication method and system using a random number, and when a user wants to use the corresponding content, a plurality of randomly selected in a mobile terminal (mobile phone, PDA, etc.) of the user who wants to use the content using SMS, etc. By sending a random number table containing a random number of, and by entering the random number with the unique identifier and password of the member, even if the unique identifier and password is hacked, other people who do not know the random number can not access the content, To prevent the leakage of information on the use of the system and to provide a more secure authentication method.

In particular, in order to minimize the cost burden of frequent use of SMS, the present invention is to regenerate different random numbers for each set period and provide them to the user terminal.

Accordingly, the present invention has the effect of improving the reliability of the online authentication method and system by providing a more secure authentication method and minimizing the cost for authentication in using specific content on the Internet.

Random check, content, internet, authentication server, user terminal

Description

Method and system for online authentication using random number table {Method and system for online authentication using pseudorandom table}

1 is a flowchart illustrating an example of an online authentication method using a random number table according to the present invention.

2 is a flowchart illustrating an example of a method of transmitting the authentication information by generating the random number table of FIG. 1.

3A to 3C are tables showing an example of storing authentication information according to the present invention in a relational database.

4 is a configuration diagram showing an example of an online authentication system using a random number table according to the present invention.

5 is a diagram illustrating an example of the authentication server of FIG. 4.

<Explanation of symbols for main parts of the drawings>

100: user terminal 200: content providing server

300: authentication server 310: random information generation unit

320: random number information transmission unit 330: storage unit

340: certification request unit 350: certification decision unit

360: authentication result transmission unit 400: communication server

The present invention relates to an online authentication method and system using a random number. More particularly, in using various contents on the Internet, a randomly selected random number is transmitted to a mobile terminal of a user (member) and the random number is used. By being authenticated, even if a user's unique identifier and password are hacked, it is possible to prevent others from accessing the contents, thereby preventing information leakage about the use of the contents.

Particularly, the present invention provides a secure authentication method by providing a different random number check table to a user terminal for each set period in order to minimize the cost incurred during authentication, and uses an online random number check table to reduce the cost burden for authentication. An authentication method and system are provided.

Therefore, as well as secure authentication is made, by minimizing the cost for authentication, there is an effect of improving the reliability of the online authentication method and system.

Recently, with the development of electronic communication technology, the spread of the Internet has increased, the use of various contents using the Internet, such as the provision of various information, the purchase of products, and the online games, has increased. Increasing convenience and expanding its influence in various areas of life.

On the other hand, the Internet has been associated with the provision of information and the use of various contents, such as the leakage of personal information, the security problem on the Internet has emerged.

In general, authentication for a user who wants to use content on the Internet is performed using the user's unique identifier and password, such as authentication and payment for the user (user), through the process to use the desired content.

In other words, the user registers on a website (content on the Internet that provides shopping malls, information sharing, education, games, etc.) that provides the contents that he / she wants to use, and then, when the website is accessed, After inputting your own unique identifier and password, you will be able to use the content.

However, the authentication method by the unique identifier and password of the member is easy to leak the information by hacking, etc., and illegal things are caused by such hacking information, a stronger security method is required.

According to the present invention, a random number of randomly selected random numbers of a mobile terminal (mobile phone, PDA, etc.) of a user who wants to use the content by using an SMS, etc., when the user wants to use the corresponding content. By sending a random number including, and entering the random number in addition to the member's unique identifier and password, even if the unique identifier and password is hacked, other people do not know the random number to access the content, the use of the content The purpose is to provide an online authentication method and system using random numbers that can prevent information leakage and provide a more secure authentication method.

On the other hand, when sending SMS every time by the wireless communication system, every time you log in or every payment, the SMS sending cost is increased may increase the burden on the user or content provider or SMS provider.

The present invention provides an online authentication method and system using a random check that can provide a secure authentication method and reduce the cost burden for authentication by providing a different random check to the user terminal for each set period in order to minimize such a cost burden The purpose is to provide.

In order to achieve the above object, the online authentication method using a random number check according to the present invention, a) generates a random number table at each interval of the authentication server is set, and stores the authentication information including the generated random number table, and the authentication information Transmitting to a first user terminal; b) when the second user terminal requests the content providing server to use the content, the content providing server transmitting a random number input web page for requesting a random number input to the second user terminal; c) generating authentication request information including a random number input to a random number input window for inputting a random number requested from the random number input web page transmitted by the second user terminal and transmitting the generated authentication request information to the authentication server; d) analyzing the authentication request information transmitted by the authentication server, and comparing the random number included in the authentication request information with a corresponding random number of the generated random number table to determine whether to be authenticated; e) transmitting the determination result of the authentication to the content providing server; And f) the content providing server transmitting the authentication result corresponding to the determination result to the second user terminal.

In addition, the on-line authentication system using the random number table according to the present invention for achieving the above object, receives and stores the authentication information including the random number table transmitted from the communication server, the random number input web page corresponding to the request for use of the content is A user terminal that searches for the stored random number table and generates and transmits authentication request information including a corresponding random number inputted to the random number input window of the random number input web page; Upon receiving the content use request from the user terminal, the random number input web page corresponding to the content use request is transmitted to the user terminal and based on the random number input in the random number input window of the random number input web page. A content providing server which receives an authentication result and determines whether to provide content to the user terminal in response to the received authentication result; And generating authentication information including a random number table at set intervals and transmitting the authentication information to the user terminal through the communication server, receiving and analyzing the authentication request information transmitted from the user terminal, and including the corresponding information included in the authentication request information. After comparing the random number and the random number of the random number table included in the generated authentication information, characterized in that it comprises an authentication server for transmitting the authentication result according to the comparison result to the content providing server.

Examples of an online authentication method and system using a random number table according to the present invention can be variously applied. Hereinafter, the most preferred embodiment will be described with reference to the accompanying drawings.

First, looking at an example of an online authentication system using a random number table according to the present invention, as shown in Figure 4, the user terminal 100, the content providing server 200, the authentication server 300, the communication server 400 Include.

The user terminal 100 receives and stores authentication information including the random number table generated by the authentication server 300 as a short message service (SMS) and calls the stored random number table to authenticate the contents when using the content. A first user terminal 100a such as a mobile phone for receiving and storing an SMS, a personal digital assistant (PDA), and a second user terminal 100b such as a personal computer (PC) for accessing the Internet and using specific contents. It consists of.

Here, the first user terminal and the second user terminal can be applied in the same configuration according to the needs of those skilled in the art. In other words, in the case of a PDA, as well as receiving an SMS from the communication server 400 and using specific content, in this case, the first user terminal 100a and the second user terminal 100b communicate with each other via wired / wireless communication such as one PDA. It will refer to a possible personal terminal. The same may be applied to a mobile phone. Therefore, in the following description of the present invention, the user terminal 100 will be described by dividing the first user terminal 100a and the second user terminal 100b, but it may be applied to the same one user terminal 100. Should be.

In addition to the SMS, the authentication information may be transmitted by various data transmission methods such as a text message of a multimedia messaging system (MMS), image information having an extension such as GIF / JPG / SIS / TIF, and a VM application.

The content providing server 200 is connected to the second user terminal 100b of the user terminal 100 via the Internet, and is a web server for providing a specific content, the random number input produced for authentication according to the present invention When the web page (not shown) is stored and an authentication request is received from the second user terminal 100b, the random number input webpage is transmitted to the second user terminal 100b.

Here, the random number input web page is configured with a random number input window for receiving a random number. Authentication request information including the random number and the user information (member unique identifier and password, unique number of the user terminal, etc.) entered into the random number input window is transmitted to the authentication server 300 through the content providing server 200, The authentication result of the authentication server 300 is received to determine whether the corresponding content is provided.

Meanwhile, the random number table may be displayed as a matrix having a specific size, and the authentication server 300 requests a random number input to input a random number of a specific position within a specific random number column of the random number table. For example, a random number at a particular location may be a random number represented by a certain number of columns at a particular location, or a random number represented by a specific number of rows at a particular location, or a combination of these random numbers.

In the transmission of the random number for authentication as described above, in order to improve security, preferably, the random number input to the random number input window to be transmitted directly to the authentication server 300, the content providing server 200 Receive only the authentication result of the authentication server (300).

In this case, user information transmitted from the user terminal 100 to the content providing server 200 is transmitted to the authentication server 300, the authentication server 300 receives the user information and a random number received a random number table corresponding to the user information Search for and check if the random number matches.

The authentication server 300 generates a random number table composed of random numbers extracted at predetermined intervals (for example, one month or one week), and generates the random number table, user (content using member) information, and random number table. It generates authentication information, including the validity period of the, and the generated authentication information is transmitted to the user terminal 100 through the communication server 400.

Here, the communication server 400 is a component included in a wireless communication system (not shown), and transmits data to the user terminal 100 through a control station and a base station of the wireless communication system.

In addition, the authentication server 300 receives and analyzes authentication request information (including random numbers, user information, etc.) transmitted from the second user terminal 100b, and generates the corresponding random number and the corresponding information included in the authentication request information. After comparing the random numbers of the random number table included in the authentication information, if the two random numbers match, the content providing server 200 is notified that the authentication.

The authentication server 300, as shown in Figure 5, random number and authentication information generation unit 310, authentication information transmission unit 320, storage unit 330, authentication request unit 340, authentication determination unit 350 ), The authentication result transmission unit 360 is configured.

The random number check and the authentication information generation unit 310 generates a single check every set period, and the validity period (for example, from January 1, 2007 to December 31, 2007, etc.) together with the generated random number. Generate authentication information including user information. The generated authentication information is transmitted to the authentication information transmitter 320 and the storage 330.

The authentication information transmitter 320 transmits the authentication information generated by the random number table and the authentication information generator 310 to the communication server 400. The authentication information transmitter 320 may be modified in various configurations according to the communication method with the communication server 400. It is possible.

The communication server 400 transmits the authentication information transmitted from the authentication information transmitter 320 to the first user terminal 100a by SMS using a wireless communication method.

The storage unit 320 stores the authentication information generated by the random number table and the authentication information generator 310 and can be stored in various ways.

3A to 3C illustrate an example in which the storage method of the storage unit 320 is a relational database.

When the member's name is 'Hong Gil-dong', as shown in FIG. 3A, the user's unique identifier, the validity identifier and the random number identifier are matched and stored.

And, as a member 'Hong Gil-dong' using the authentication method according to the present invention (valid period) is shown in Figure 3b, in the case of the 'A' content login authentication period is '2007.01.01 ~ 2007.12.13' The payment verification period is matched and stored as '2007.03.01 ~ 2007.03.31'.

And, the random number table to be used during the authentication period is shown in Figure 3c.

The authentication request unit 340 receives the authentication request information from the content providing server 200, according to the requirements of those skilled in the art for security reasons, the random number of the authentication request information to be transmitted directly from the second user terminal (100b) Can be.

The authentication determination unit 350 analyzes the authentication request information received by the authentication request unit 340 to determine whether to authenticate the corresponding user (for example, Hong Gil-dong), and user information included in the authentication request information. The user unique identifier stored in the storage unit 330 is searched for the user unique identifier of (eg, HKD), and the stored random number identifier (eg, 11) is searched by matching the retrieved user unique identifier.

Meanwhile, random numbers included in the authentication request information are input to a random number input window of a random number input web page, and a plurality of random numbers are randomly selected for a specific random number of a random number table. For example, when the member is 'Hong Gil-dong', the random number table shown in FIG. 3C is selected as 2, 3, 6 rows and 1, 2, 4 rows and 2 columns.

Accordingly, the authentication decision unit 350 may include random numbers (for example, rows 2, 3, 6 in the first column and columns 1,2, 4 in the second column, '5', '8', ' 1 ',' 9 ',' 3 ', and' 1 ') and the random number table shown in FIG.

The authentication result transmission unit 360 transmits the determination result for the authentication request of the authentication determination unit 350 to the content providing server 200.

Thereafter, the content providing server 200 provides the corresponding content to the second user terminal 100b according to the transmitted authentication result (for example, authentication).

Hereinafter, the authentication method by the online authentication system using the random number table according to the present invention configured as described above will be described in detail with reference to FIG.

When a user accesses a website provided by the content providing server 200 by using the second user terminal 100b and registers as a member, the content providing server 200 stores the user information input by the user at the time of registration. 300).

The authentication server 300 generates a random number table matching the transmitted user information and transmits the random number table to the first user terminal 100a through the communication server 400.

The authentication server 300 stores the user information and the validity period of the random number table and the random number table in a relational database and generates a new random number table at the end of the validity period to include the user information and the new validity period. The information is generated and transmitted to the first user terminal 100a through the communication server 400 (S100).

Thereafter, the authentication server 300 updates the relational database, and the first user terminal 100a stores the received authentication information in a storage device (not shown) configured therein.

In this case, the validity period may be set to have a fixed period such as one week or one month, and may be set to a changeable period according to the needs of those skilled in the art.

Looking at this in more detail, as shown in Figure 2, the authentication server 300 determines the validity of the random number table by the expiration date of the validity table of the random number stored in the relational database (S101), if it is determined that the validity period has passed (S102) ), The corresponding random number table is deleted (S103).

After generating a new random number table (S104), setting a new validity period for using the random number table (S105), and matching the new validity period with user information such as a unique identifier of the user who will use the random number table (S105). S106) Create new authentication information, and store it in a relational database (S107).

Then, the generated authentication information is transmitted to the first user terminal 100a through the communication server 400, and it is determined whether to repeat the process of steps S101 to S108 (for example, the user withdrawal, etc.) Does not repeat if the membership of the content providing server is lost) (S109).

Thereafter, when the user accesses the website provided by the content providing server 200 using the second user terminal 100b and logs in to use the corresponding content (S200), the content providing server 200 generates a random number. The web page for input is transmitted to the second user terminal 100b.

Here, the random number input web page includes a random number input window for inputting random numbers, and may be configured in various forms according to the needs of those skilled in the art.

In addition, the random number input window may be directly transmitted from the authentication server 300, in this case, the content providing server 200 provides a login screen and when the user enters a unique identifier and password, the content providing server 200 ) Transmits the inputted unique identifier and the Internet address used by the second user terminal 100b to the authentication server 300, and the authentication server 300 through the Internet address used by the second user terminal 100b. A separate random number input web page including a random number input window may be transmitted to the second user terminal 100b.

When the user outputs the random number input web page on the screen of the second user terminal 100b, the user searches for a random number table stored in the first user terminal 100a and appears at the required position through the random number input web page. A specific random number (for example, random numbers for 2, 3, 6 rows of 1 column and 1,2, 4 rows of 2 columns) is checked and input into the random number input window (S400).

The input random number is transmitted to the authentication server 300 together with the unique identifier of the user, and the authentication server 300 searches for a random number corresponding to the unique identifier of the transmitted user, and inputs the random number among the random numbers of the corresponding random number table. It is determined whether the authentication by comparing the random number corresponding to the position requested through the web page for the transmission and the random number transmitted (S500).

The authentication result according to the authentication of the authentication server 300 as described above is transmitted to the content providing server 200, the content providing server 200 is the content for the user in accordance with the authentication result of the authentication server (300) It determines whether to provide, and transmits the determination result to the second user terminal (100b) (S600).

If the first user terminal 100a and the second user terminal 100b are the same, it is natural that at least one of searching for, inputting, and transmitting a specific random number is required. In addition, even when the first user terminal 100a and the second user terminal 100b are different, the first user terminal 100a in which the random number table is stored is searched for a specific random number that requires an input even if the user does not perform a separate operation. Of course, the output can be enabled.

In the above description, the online authentication method and system using the random number according to the present invention have been described in terms of the time of login for the use of the content, but the use of the various financial services provided by the payment institution or the financial institution for the use of the content. It can also be applied to, and can be used for the authentication of various online services according to the needs of those skilled in the art.

Accordingly, the technical configuration of the online authentication method and system using a random number table according to the present invention can be understood by those skilled in the art that the present invention can be carried out in other specific forms without changing the technical spirit or essential features of the present invention. Could be.

Therefore, the above-described embodiments are to be understood in all respects as illustrative and not restrictive, and the scope of the present invention is indicated by the appended claims rather than the foregoing description, and the meanings of the claims. And all changes or modifications derived from the scope and equivalent concept thereof should be construed as being included in the scope of the present invention.

When the user wants to use the corresponding content, the present invention transmits a random number table including a plurality of random numbers randomly selected to a user terminal that wants to use the content by using SMS, and the unique identifier and password of the member. By inputting the random number together with the input, even if the unique identifier and the password are hacked, others who do not know the random number may not access the corresponding content, thereby preventing information leakage about the use of the corresponding content.

In particular, the random number input through the user terminal is transmitted directly to the authentication server, the content providing server is to receive only the result of the authentication, it is possible to minimize the possibility of the random number leakage.

In addition, the present invention provides a secure authentication method by providing a different random number check to the user terminal for each set period in order to minimize the cost incurred during authentication, using an online random number that can reduce the cost burden for authentication An authentication method and system are provided.

Therefore, as well as secure authentication is made, by minimizing the cost for authentication, there is an effect of improving the reliability of the online authentication method and system.

Claims (14)

a) generating a random number table at each set period of the authentication server, storing authentication information including the generated random number table, and transmitting the authentication information to the first user terminal; b) when the second user terminal requests the content providing server to use the content, the content providing server transmitting a random number input web page for requesting a random number input to the second user terminal; c) generating authentication request information including a random number input to a random number input window for inputting a random number requested from the random number input web page transmitted by the second user terminal and transmitting the generated authentication request information to the authentication server; d) analyzing the authentication request information transmitted by the authentication server, and comparing the random number included in the authentication request information with a corresponding random number of the generated random number table to determine whether to be authenticated; e) transmitting the determination result of the authentication to the content providing server; And and f) transmitting the authentication result corresponding to the determination result to the second user terminal by the content providing server. The method of claim 1, Step a) is a-1) determining the validity of the stored random number table; a-2) deleting the stored random number when the random number is invalid; a-3) generating a new random number table; a-4) generating authentication information including the generated new random number table; And a-5) an online authentication method using a random number table comprising the step of storing the generated authentication information and transmitting it to a first user terminal. The method according to claim 1 or 2, Step c) is c-1) receiving the random number requested from the random number input web page transmitted by the second user terminal, generating authentication request information, and transmitting the generated authentication request information to the content providing server; c-2) an online authentication method using a random number table comprising the step of transmitting the authentication request information transmitted by the content providing server to the authentication server. The method of claim 3, wherein When the first user terminal and the second user terminal are the same user terminal, when the random number input web page is transmitted to the user terminal, the user terminal retrieves the requested random number from the stored random number table and displays the random number input web page. Online authentication method using a random number, characterized in that input to the random import window. The method of claim 3, wherein When the first user terminal and the second user terminal are different from each other, when the random number input web page is transmitted to the second user terminal, the second user terminal inputs the random number based on the random number table stored in the first user terminal. The online authentication method using a random number table, characterized in that for transmitting the random number input in the random number input window of the web page to the content providing server. The method of claim 3, wherein The authentication information is an online authentication method using a random number, characterized in that at least one of a validity period and user information in addition to the random number. The method of claim 2, The validity judgment is an online authentication method using a random number, characterized in that the determination based on the validity period of the random number. The method of claim 1, The step b), the online authentication method using a random number table, characterized in that for requesting a random number input to input random numbers located in one or more specific matrices of the random number table. The method of claim 8, The random number table is represented by a matrix having a specific size, and the random numbers located in the specific matrix are at least one of random numbers represented by a specific number of columns located in a specific matrix, random numbers represented by a specific number of rows located in a specific matrix, or a combination of the random numbers. Online authentication method using a random number characterized in that. Receives and stores authentication information including a random number table transmitted from a communication server. When a random number input web page corresponding to a content use request is received, the stored random number table is searched and entered into the random number input window of the random number input web page. A user terminal for generating and transmitting authentication request information including a corresponding random number; Upon receiving the content use request from the user terminal, the random number input web page corresponding to the content use request is transmitted to the user terminal and based on the random number input in the random number input window of the random number input web page. A content providing server which receives an authentication result and determines whether to provide content to the user terminal in response to the received authentication result; And Generate authentication information including a random number table at set intervals and transmit the authentication information to the user terminal through the communication server, receive and analyze the authentication request information transmitted from the user terminal, and include the corresponding information included in the authentication request information. After comparing the random number and the random number of the random number table included in the generated authentication information, the online authentication system using a random number table including an authentication server for transmitting the authentication result according to the comparison result to the content providing server. The method of claim 10, The authentication server, A random number table and an authentication information generation unit for generating a random number table at each set period and generating authentication information including the generated random number table; An authentication information transmitter transmitting the authentication information generated by the random number table and the authentication information generator to the user terminal through a communication server; A storage unit for storing the generated authentication information in a relational database; An authentication request unit for receiving the authentication request information transmitted from the content providing server; Analyze authentication request information received by the authentication request unit, search for authentication information corresponding to the authentication request information among the authentication information stored in the storage unit, and include the corresponding random number included in the authentication request information and the authentication information. An authentication judging unit comparing the random numbers of the random number table to determine whether to be authenticated; And And an authentication result transmission unit for transmitting the determination result of the authentication determination unit to the content providing server. The method according to claim 10 or 11, wherein The user terminal, A first user terminal for receiving and storing authentication information including a random number table transmitted from the communication server, retrieving and storing the stored random number table on a screen when a random number table is requested; When the random number input web page corresponding to the use request of the content is received, the random number input web page is displayed on the screen, and authentication request information including the corresponding random number inputted in the random number input window of the random number input web page is displayed. Online authentication system using a random number, characterized in that it comprises a second user terminal for generating and transmitting to the authentication server. The method of claim 12, The authentication information includes at least one of an expiration date and user information in addition to the random number table, The authentication request information includes the user information together with the corresponding random number, The authentication server, Search for authentication information including user information that matches the user information included in the authentication request information, and determine whether to authenticate by comparing the random number of the random number table included in the searched authentication information with the random number included in the authentication request information. Online authentication system using a random number, characterized in that. The method of claim 13, The user information is an on-line authentication system using a random number, characterized in that it comprises at least one of a member's unique identifier, password and the user's unique number.

Images