KR20030034680A - Secure data transfer service system and method between a data transfer server and a user terminal - Google Patents

Abstract

PURPOSE: A system and a method for transmitting and receiving data safely between a data transmitting server and a user terminal are provided to produce authentication information by using an inherent code of a user's terminal and a random number, as an optional value, and transmit/receive a portion of the authentication information between a data transmission server and the user's terminal mutually, thereby capable of transmitting/receiving data in safe mutually. CONSTITUTION: A mobile communication terminal(100) transmits a previously designated portion among authentication information produced newly for the transmission of data and an optional value applied when producing the authentication information to a base station(120) through a communication network. The base station(120) receives authentication request data and then transmits it to an exchange(130) through a base station controller(125). The exchange(130) detects information on the mobile communication terminal(100) now registered to a VLR(Visitor Location Register)(140) and subscriber's information relating to the mobile communication terminal(100) registered to an HLR(Home Location Register)(140). The exchange(130) transmits the detected information on the mobile communication terminal(100), subscriber's information and authentication request data to an authentication center(145).

Description

SECURE DATA TRANSFER SERVICE SYSTEM AND METHOD BETWEEN A DATA TRANSFER SERVER AND A USER TERMINAL}

The present invention relates to a system and method for secure data transmission and reception between a data transmission server and a user terminal, and more particularly to a system and method for secure data transmission and reception between a data transmission server and a user terminal, which enables mutual authentication between a terminal and a transmission server in a relatively simple manner. .

With the expansion of people's behavior radius and the development of technology, the frequency of people's use of mobile communication service is increasing rapidly. In order to transmit and receive data between the mobile communication system and the terminal, the authentication process for the user is generally preceded.

That is, a mobile communication system generally includes a home location register (HLR) that stores and manages general information about a mobile communication terminal, and a visitor location register which stores and manages general information about a mobile communication terminal moving a service area. VLR: Visitor Location Register, mobile communication terminal and home location register (HLR) to match the switching network (MSC: Mobile Switching Center) and mobile communication terminal to configure the voice and non-voice call path and maintenance functions, etc. It consists of an Authentication Center that performs authentication.

However, the current mobile communication service has problems in the process of valid user authentication or validity of the transmission server.

As a method for transmitting arbitrary data from a mobile communication service system to a terminal, various methods such as an SMS (Short Message Service) service or a data push service have been applied.

Among these methods, in the method of transmitting data to a terminal using a data service using an IP protocol, mutual authentication of a terminal and a transmission server is required as the existing voice network and data network are separated.

When a user's mobile communication terminal is connected to a base station and a traffic channel in an existing voice network, voice data uses an ESN (Electronic Serial Number) recognized by the terminal and the network, and a long code mask and a long code mask are used. Long code scrambling allows secure transmission even under open wireless environments.

ESN (Electronic Serial Number) refers to a unique code number for each terminal that a manufacturer of a mobile communication terminal notifies the mobile communication service provider when the terminal production is completed. Scramble is a person other than a specific person in the electronic communication or broadcasting field. To disturb the signal or telephone so that it can not be decoded or viewed even if received.

In other words, anyone can receive images and data from a communication satellite basically with only a receiver. However, if you provide a service for a fee or a company transmits important data within the company, it cannot be received by anyone who has a device that can encrypt and decrypt the transmitted signal so that it cannot be received by anyone other than a predetermined person or company. Since it is necessary to encrypt and disturb it, it is called scramble.

However, when using wireless data services, long code scrambling on these traffic channels secures only Point to Point Protocol (PPP) sessions of Inter-Working Function (IWF) or Packet Data Service Node (PDSN) devices. Thereafter, there is a problem that it is difficult to block the request of the malicious server or the malicious terminal for the open environment on the IP network.

Rather than constantly assigning a restricted IP to each Mobile Identification Number (MIN) or Electronic Serial Number (ESN), the IP is assigned randomly from the shared IP pool whenever a request for an IP address is received. This is because there is no longer a correlation between the ESR or the Electronic Serial Number (ESN).

Accordingly, an object of the present invention is to ensure that the mobile communication system and the mobile communication terminal mutually authenticate a result value converted by using an ESN (Electronic Serial Number) value stored in the mobile communication terminal and a random value which is a random value. The present invention provides a secure data transmission / reception system and method between a data transmission server and a user terminal that enable data transmission.

It is another object of the present invention to securely transmit and receive data between a data transmission server and a user terminal, which can minimize the additional data transmission amount for authentication by processing authentication information as an additional field in a packet required for data transmission, and perform an authentication procedure simply. It is to provide a system and method.

It is still another object of the present invention to provide a data transmission server configured to perform authentication process between the mobile communication system and the mobile communication terminal in which the authentication information is encrypted and transmitted to actively prevent cheating by a malicious third party; It is to provide a system and method for secure data transmission and reception between user terminals.

It is still another object of the present invention to maintain a stable mobile communication system by establishing a normal mobile communication service usage environment so that a well-intentioned user does not bear a service fee used by a malicious third party, and suppresses the use of a mobile communication service for an illegal purpose. The present invention provides a secure data transmission and reception system and method between a data transmission server and a user terminal.

1 is a view schematically showing the overall configuration of a secure data transmission and reception system between a data transmission server and a user terminal according to an embodiment of the present invention.

2 is a view showing a schematic configuration of an authentication center according to a preferred embodiment of the present invention.

3 is a flowchart illustrating a method for secure data transmission and reception when data is transmitted from a mobile communication system according to a preferred embodiment of the present invention.

4A illustrates an authentication information generation algorithm in accordance with a preferred embodiment of the present invention.

4B is a diagram illustrating a result of generating authentication information according to a preferred embodiment of the present invention.

5 is a flowchart illustrating a method for secure data transmission and reception when data is transmitted from a mobile communication system according to a preferred embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

100: mobile communication terminal

110: mobile communication system

120: base station (BTS)

125: base station controller (BSC)

130: exchanger (MSC)

135: Home Location Register (HLR)

140: Visitor Location Register (VLR)

145: Authentication Center

150: transceiver

155 control unit

160: random value generator

165: converter

170: comparison unit

In order to achieve the above object, according to an aspect of the present invention, in a method for securely transmitting data from any user terminal to a data transmission server, receiving a request for transmission of arbitrary data from the user, and the user Generating a random value by itself according to a predetermined method in the terminal, generating authentication information using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal, and generates Extracting a terminal authentication key included in a predetermined area from the authenticated authentication information; and transmitting the data, the random value, and the terminal authentication key to the data transmission server. Is provided and secured using the user terminal The system, apparatus, and recording medium capable of executing the data transmission method is provided.

The unique information of the user terminal may include an electronic serial number (ESN), a mobile identification number (MIN), a personal number stored in a number assignment module (NAM), a password registered by the user, and the like.

The transmitting of the data, the random value, and the terminal authentication key to the data transmission server may be performed by converting the data, the random value, and the terminal authentication key into a predetermined format.

Further, according to a preferred embodiment of the present invention, in the data transmission server for receiving and processing arbitrary data from the user terminal, the step of receiving data, random value and terminal authentication key from the user terminal, the previously stored Detecting the unique information of the user terminal, generating authentication information using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal, and pre-specified in the generated authentication information. Extracting a server authentication key included in an area; and performing an operation according to a purpose of the data when the terminal authentication key and the server authentication key match. Is provided, and performs the data processing method in the data transmission server A system, apparatus, and recording medium are provided that make it possible.

In addition, according to another preferred embodiment of the present invention, when transmitting any data from the data transmission server to the at least one user terminal, in a method for securely transmitting data, receiving any data to be transmitted to the user terminal Generating a random value by itself according to a predetermined method; generating authentication information by using a predetermined authentication information generation algorithm that inputs the random value and unique information of the user terminal; Extracting a first server authentication key included in a first area from at least one predetermined area from the generated authentication information, and transmitting data waiting information, the random value, and the first server authentication key to the user terminal; And at least one region predetermined from the user terminal. Receiving a second terminal authentication key included in a second area and a request for transmission of the data; extracting a second server authentication key included in a second area from at least one predetermined area among the generated authentication information; And checking whether the second terminal authentication key and the second server authentication key match, and when the second terminal authentication key and the second server authentication key match, Provided is a method of secure data transmission in a data transmission server, the method comprising: transmitting to the user terminal via a data transmission server. .

The transmitting of the data transmission waiting information, the random value, and the terminal authentication key to the user terminal may include converting the data transmission waiting information, the random value, and the terminal authentication key into a predetermined format and transmitting the same. can do.

Further, according to another preferred embodiment of the present invention, in a method for safely receiving arbitrary data from a data transmission server in a user terminal, the data transmission standby information, a random value and the first server authentication key from the data transmission server Receiving authentication information, generating authentication information by using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; and generating at least one region previously selected from the generated authentication information. Extracting a first terminal authentication key included in an area 1, checking whether the first terminal authentication key and the first server authentication key match each other, the first terminal authentication key and the first server; In the case where the authentication key matches, a second of the at least one predetermined area among the generated authentication information Extracting a second terminal authentication key included in a station; transmitting a transmission request for data corresponding to the second terminal authentication key and the data transmission waiting information to the data transmission server through a communication network; There is provided a method of secure data reception in a user terminal comprising the step of receiving the data from a data transmission server via a communication network, and a system, apparatus and recording medium for enabling the safe data reception method in the user terminal are provided. Is provided.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The user terminal according to the present invention can be applied without limitation as long as it is a device capable of transmitting and receiving data through a communication network such as a PDA (Personal Digital Assistant) as well as a mobile communication terminal. Although it may be a system other than the mobile communication system, the following description will focus on the case of the mobile communication terminal and the mobile communication system for convenience.

1 is a view showing the overall configuration of a secure data transmission and reception system between a data transmission server and a user terminal according to a preferred embodiment of the present invention, Figure 2 shows a schematic configuration of an authentication center according to a preferred embodiment of the present invention Drawing.

Referring to FIG. 1, a data transmission / reception system may include a mobile communication terminal 100 and a mobile communication system 110, and the mobile communication system 110 may include a base transceiver station (BTS) 120 and a base station controller. (BSC: Base Station Controller) 125, Switcher (MSC: Mobile Switching Center) (130), Home Location Register (HLR) (135), Visitor Location Register (VLR) (140) , An authentication center 145, and the like.

Referring to Figure 1 will be briefly described a secure data transmission and reception system between a data transmission server and a user terminal according to the present invention.

The mobile communication terminal 100 transmits a predetermined portion of the newly generated authentication information for data transmission and a random value (that is, a random value) applied when generating the authentication information to the base station (BTS) 120 through a communication network. Then, the authentication request data (ie, random value, part of the authentication information) received by the base station (BTS) 120 is transmitted to the exchange (MSC) 130 through the base station controller (BSC) (125).

The exchange (MSC) 130 is currently registered in the visitor location register (VLR) 140 and information about the mobile communication terminal 100 and the mobile communication registered in the home location register (HLR) 135. Detects subscriber information and the like for the terminal. Then, the detected information on the mobile communication terminal 100 (for example, ESN, MIN, etc.), subscriber information, and authentication request data are transmitted to the authentication center 145.

Referring to FIG. 2, the authentication center 145 may include a transceiver 150, a controller 155, a random value generator 160, a converter 165, a comparator 170, and the like.

The constituent means inside the authentication center 145 may be configured as independent devices, but more preferably, may be operated in a program form. In addition, the authentication center 145 may be implemented in the same form in the mobile communication terminal 100.

Hereinafter, describing the function of each configuration means, when the transceiver 150 receives the information on the mobile communication terminal 100, the subscriber information, and the authentication request data from the switch 130, the converter 165 controls the controller. Under the control of 155, the authentication information is generated by substituting the information and the random value for the mobile communication terminal into a predetermined authentication information generation function.

Subsequently, the comparison unit 170 compares the authentication information generated by the conversion unit 165 with the authentication information received from the exchange (MSC) 130 under the control of the control unit 155 and checks whether the same is the same. It is checked whether the communication terminal 100 is a normal terminal or a malicious terminal.

After the comparison by the comparison unit 170 is completed, the transmission and reception unit 150 transmits the processing result data to the mobile communication terminal through the switch (MSC) 130 under the control of the control unit 155 to complete the authentication operation. Do it.

Conversely, in the case where arbitrary data from the mobile communication system 110 is to be transmitted to the mobile communication terminal 100, the random value generating unit 160 is the control unit 155 as in the case where the mobile communication terminal 100 was previously performed. By generating the random value under the control of the control unit 165, the conversion unit 165 generates the authentication information.

As described above, according to the present invention, any mobile communication terminal or transmission server requesting data transmission (which may be some configuration means included in the mobile communication terminal or a configuration means included in a separate ISP) is a normal mobile communication terminal or Whether or not it is a transmission server can be easily determined.

In the present invention, a case where it is recognized as a malicious (ie, non-normal) type of server or terminal is described as an example.

A malicious server is a server that attempts to send an advertisement-promotional message to a mobile terminal, such as reliable information (for example, information provided by a network operator, a message transmitted from another user, etc.), network access information of the terminal ( For example, a server attempting to spread a kind of virus to a terminal which may confuse Preferred Roaming List, wireless Internet service server address, etc.).

In addition, a malicious terminal is a mobile communication terminal that intends to transfer a fee to another subscriber after using various paid information, and obtains a storage location of a message to be transmitted to another subscriber, and retrieves a message of the corresponding location. Etc.

A secure data transmission and reception method between the mobile communication system 110 and the mobile communication terminal 100 will be described in detail with reference to FIGS. 3 to 5.

3 is a flowchart illustrating a secure data transmission / reception method when data is transmitted from a mobile communication system according to a preferred embodiment of the present invention, and FIG. 4A illustrates an authentication information generation algorithm according to a preferred embodiment of the present invention. 4B is a diagram illustrating a result of generating authentication information according to a preferred embodiment of the present invention.

Referring to FIG. 3, the mobile communication terminal 100 transmits data (for example, a message, a picture, etc.) to the mobile communication system 110 or to another mobile communication terminal 100 or a server through the mobile communication system 110. ), The random value R is generated according to a predetermined method (for example, a random number generation method, etc.) in step 310.

In step 315, the authentication information S is generated using a predetermined authentication information generation function.

Hereinafter, the authentication information generating algorithm and the authentication information generating result will be briefly described with reference to FIGS. 4A and 4B.

Referring to the domestic PCS three joint authentication algorithm requirements, an authentication algorithm called PcsAuth as shown in Figure 4a has been proposed. Of course, as an authentication information generation algorithm according to the present invention, an algorithm written separately may be used, but for convenience, the algorithm for authentication called PcsAuth shown in FIG. 4A will be described as an example.

Referring to FIG. 4A, there are five 32-bit input values and four output values, but input ES0 for i0, random values for i3, 0 for i1, i2, and i4, o0 for S1, and o1 for S2. O2 and o3 can be discarded.

When the ESN value of the mobile communication terminal 100 is 0x00000000, S1 and S2 values according to random values can be obtained as shown in FIG. 4B.

In addition, the mobile communication terminal 100 and the mobile communication system 110 have a common function of outputting a 64-bit value by inputting a random value R and an ESN value unique to the mobile communication terminal to generate authentication information. You can apply the method to make it work.

In this case, the authentication information (S) generated through this function is divided into two and the terminal authentication is performed by setting the front 32 bits as the authentication information front end (S1) as the server authentication value and the rear 32 bits as the authentication information rear end (S2). Can be used as a value.

This case is taken as an example and will be described later.

Referring back to FIG. 3, in step 320, the mobile communication terminal 100 uses the terminal authentication information generated through step 315 (that is, authentication information generated through the mobile communication terminal 100) to the rear end of the terminal authentication information. (S2), the process proceeds to step 325 and the extracted terminal authentication information rear end (S2), the random value (R) generated through step 310 and the data to be transmitted to the mobile communication system 110 through a communication network. send.

In step 330, the mobile communication system 110 receives the terminal authentication information back end S2, the random value R, and data that the user of the mobile communication terminal 100 wants to transmit through step 325.

In operation 335, the mobile communication system 110 uses the random value R received in operation 330 to obtain server authentication information S ′ (that is, authentication information generated through the mobile communication system 110). Create

In step 340, the mobile communication system 110 extracts the rear 32 bits of the server authentication information generated in step 335 into the rear end of the server authentication information (S2 '), and proceeds to step 345 to the terminal authentication received in step 330. It is checked whether the information rear end S2 and the server authentication information rear end S2 'extracted through the step 340 match. At this time, since each authentication information generation algorithm is the same, if the ESN value stored in the mobile communication terminal 100 and the ESN value stored in the mobile communication system 110 are the same, the same authentication information is generated.

If the terminal authentication information trailing end (S2) and the server authentication information trailing end (S2 ') do not match as a result of the check in step 345, the flow proceeds to step 350 and an error message (for example, "No normal connection has been made." Please try again. ", Etc.) is transmitted to the mobile communication terminal 100 through the communication network.

The mobile communication terminal 100 receives the error message in step 355, displays the error message on the display unit coupled with the mobile communication terminal 100, and then ends the step.

In addition, when the terminal authentication information rear end S2 and the server authentication information rear end S2 'match as the result of the check in step 345, the process proceeds to step 360 and a processing result message (for example, "receive the requested data"). And the like. ") Is transmitted to the mobile communication terminal 100 through a communication network.

The mobile communication terminal 100 receives the processing result message in step 365, displays the processing result message on the display unit combined with the mobile communication terminal 100, and ends the step.

In the above process, since data and messages transmitted and received between the transmission server and the mobile communication terminal are transmitted through a long code scrambled traffic channel, the value is not exposed to the outside. In addition, since the mobile communication terminal accesses the transmission server through the address designated by the network operator, no separate authentication process is required by the transmission server.

5 is a flowchart illustrating a secure data transmission / reception method when data is transmitted from a mobile communication system according to a preferred embodiment of the present invention.

Referring to FIG. 5, when there is data (eg, a message, a picture, etc.) to be transmitted to the mobile communication terminal 100, the mobile communication system 110 may select a predetermined method (eg, a random number) in step 510. Random values are generated according to the generation method).

In step 515, the authentication information S is generated using a predetermined authentication information generation function. Since the authentication information generation function used in step 515 has already been described above, a description thereof will be omitted.

In step 520, the mobile communication system 110 extracts the server authentication information front end S1 by using the server authentication information generated in step 515 (that is, the authentication information generated through the transmission server), and proceeds to step 525. The server authentication information front end unit (S1), the random value (R) generated in step 510 and the data transmission standby information indicating that there is data to be transmitted is transmitted to the mobile communication terminal 100 through the communication network. .

In step 530, the mobile communication terminal 100 receives the server authentication information front end S1, the random value R, and the data transmission waiting information transmitted in step 525.

In operation 535, the mobile communication terminal 100 uses the random value R received in operation 530 to transmit terminal authentication information S ′ (that is, authentication information generated through the mobile communication terminal 100). Create

In step 540, the mobile communication terminal 100 extracts the first 32 bits of the terminal authentication information generated in step 535 to the terminal authentication information front end S1 ', and proceeds to step 545 to receive the server authentication received in step 530. It is checked whether the information front end S1 and the terminal authentication information front end S1 'extracted through step 540 match.

If the result of the check in step 545 does not match the server authentication information front end (S1) and the terminal authentication information front end (S1 '), the process proceeds to step 550 and an error message (for example, "No normal connection has been made." Please try again ", etc.) to the mobile communication system 110 through the communication network.

The mobile communication system 110 receives the error message in step 555, displays the error message on the display unit associated with the transmission server (or the authentication server), and then ends the step. However, if the normal mobile communication terminal is not connected, steps 550 and 555 may be omitted if the subsequent operation is stopped immediately.

If the server authentication information front end S1 and the terminal authentication information front end S1 'match as the result of the check in step 545, the process proceeds to step 560 where the data transmission request and the terminal authentication information back end S2' are performed. Transmission to the mobile communication system 110 through a communication network.

The mobile communication system 110 receives the data transmission request and the terminal authentication information back end S2 'transmitted in step 565 in step 565, and proceeds to step 570 by using the server authentication information generated in step 515. The server authentication information rear end S2 is extracted.

In step 575, the terminal authentication information rear end S2 ′ received in step 555 and the server authentication information rear end S2 extracted in step 570 may be checked to match.

If the terminal authentication information rear end S2 ′ and the server authentication information rear end S2 do not match as a result of the inspection of step 575, the flow proceeds to step 580 to transmit an error message to the mobile communication terminal 100, and performs mobile communication. The terminal 100 receives the error message through step 585, displays the error message on the display unit coupled with the mobile communication terminal 100, and ends the step.

In addition, when the terminal authentication information rear end S2 ′ and the server authentication information rear end S2 coincide with each other as a result of the checking of step 575, the process proceeds to step 590 to enter a standby state for transmission to the mobile communication terminal 100. The message is transmitted to the mobile communication terminal 100 through a communication network.

Then, in step 595, the mobile communication terminal 100 receives the data transmitted through step 590, and the processing result (for example, "data reception is completed", etc.) on the display unit coupled with the mobile communication terminal 100. Or displays the content of the message.

In the above process, since data and messages transmitted and received between the transmission server and the mobile communication terminal are transmitted through a long code scrambled traffic channel, the value is not exposed to the outside.

As an additional application form of a system and method for secure data transmission and reception between a data transmission server and a user terminal according to the present invention, the present invention can be applied to a purpose such as a customized data service.

For example, if a mobile communication service subscriber registers necessary information (for example, KT real-time stock price, etc.) using the mobile communication terminal 100 or the web server homepage combined with the mobile communication system 110, and the like. The information may be transmitted to the mobile communication terminal 100 of the mobile communication service subscriber at the requested time zone or in real time.

In this case, the present invention can be prevented from leaking to the third party, so that important information or personal use information requiring security can be transmitted and received without restriction.

The present invention is not limited to the above embodiments, and many variations are possible by those skilled in the art within the spirit of the present invention.

As described above, according to the present invention, a mobile communication system and a mobile communication terminal mutually authenticate a result value converted using an ESN (ElectronicSerial Number) value stored in the mobile communication terminal and a random value which is an arbitrary value. Data transfer is possible.

In addition, the present invention can process the authentication information in the additional field to the packet required for data transmission to minimize the amount of additional data transmission for authentication, and to simplify the authentication procedure.

In addition, the present invention can be configured to perform the authentication process between the authentication information is encrypted and transmitted, the mobile communication system and the mobile communication terminal to actively prevent cheating by a malicious third party.

In addition, the present invention can maintain a stable mobile communication system by establishing a normal mobile communication service usage environment so that a well-intentioned user does not bear a service fee used by a malicious third party, and suppresses the use of a mobile communication service for an illegal use. .

Claims (15)

In the method for securely transmitting data from any user terminal to the data transmission server, Receiving an arbitrary data transmission request from the user; Generating a random value by itself according to a predetermined method in the user terminal; Generating authentication information by using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Extracting a terminal authentication key included in a predetermined area from the generated authentication information; Transmitting the data, the random value, and the terminal authentication key to the data transmission server. Safe data transmission method using a user terminal comprising a. The method of claim 1, The unique information of the user terminal may be at least one of an electronic serial number (ESN), a mobile identification number (MIN), a personal number stored in a number assignment module (NAM), and a password registered by the user. Safe data transmission method using a user terminal characterized in that. The method of claim 1, The step of transmitting the data, the random value and the terminal authentication key to the data transmission server, Converting the data, the random value, and the terminal authentication key into a predetermined format and transmitting the same; Safe data transmission method using a user terminal characterized in that. A program of instructions that can be executed by a digital processing apparatus is tangibly embodied and can be read by the digital processing apparatus in order to perform the secure data transmission method using the user terminal according to any one of claims 1 to 3. Recording media. In the data transmission server for receiving and processing arbitrary data from the user terminal, Receiving data, a random value, and a terminal authentication key from the user terminal; Detecting inherent information of the user terminal stored in advance; Generating authentication information by using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Extracting a server authentication key included in a predetermined area from the generated authentication information; If the terminal authentication key and the server authentication key match, performing an operation according to a purpose of the data Data processing method in a data transmission server comprising a. A recording medium on which a program of instructions that can be executed by a digital processing apparatus is tangibly embodied and can be read by the digital processing apparatus to perform the data processing method in the data transmission server according to claim 5. In the method for transmitting data securely when transmitting any data from the data transmission server to the at least one user terminal, Registering any data to be transmitted to the user terminal; Generating a random value by itself according to a predetermined method; Generating authentication information by using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Extracting, from the generated authentication information, a first server authentication key included in a first area from at least one predetermined area; Transmitting data transmission waiting information, the random value, and the first server authentication key to the user terminal; Receiving a request for transmission of the data and a second terminal authentication key included in a second area of at least one area predetermined from the user terminal; Extracting a second server authentication key included in a second area from among at least one predetermined area among the generated authentication information; Checking whether the second terminal authentication key and the second server authentication key match; If the second terminal authentication key and the second server authentication key match, transmitting the data to the user terminal through a communication network. Secure data transmission method in a data transmission server comprising a. The method of claim 7, wherein The step of transmitting the data transmission waiting information, the random value and the terminal authentication key to the user terminal, Converting the data transmission waiting information, the random value, and the terminal authentication key into a predetermined format and transmitting the same; Secure data transmission method in the data transmission server, characterized in that. A program of instructions, which can be executed by a digital processing apparatus, is tangibly implemented in order to carry out the method of secure data transmission in the data transmission server according to any one of claims 7 to 8, and is to be read by the digital processing apparatus. Recordable media. A method for safely receiving arbitrary data from a data transmission server at a user terminal, Receiving data transmission waiting information, a random value, and a first server authentication key from the data transmission server; Generating authentication information by using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Extracting, from the generated authentication information, a first terminal authentication key included in a first area from at least one predetermined area; Checking whether the first terminal authentication key and the first server authentication key match; Extracting a second terminal authentication key included in a second area from at least one predetermined area among the generated authentication information when the first terminal authentication key and the first server authentication key match; Transmitting a transmission request for data corresponding to the second terminal authentication key and the data transmission waiting information to the data transmission server through a communication network; Receiving the data from the data transmission server through a communication network Safe data reception method in a user terminal comprising a. A recording medium on which a program of instructions that can be executed by a digital processing apparatus is tangibly embodied and can be read by the digital processing apparatus in order to perform the method of secure data reception in a user terminal according to claim 10. In the system for securely transmitting data from any user terminal to the data transmission server, Means for receiving a request for transmission of arbitrary data from the user; Means for generating a random value by itself in a predetermined manner at the user terminal; Means for generating authentication information using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Means for extracting a terminal authentication key included in a predetermined area from the generated authentication information; Means for transmitting the data, the random value and the terminal authentication key to the data transmission server Secure data transmission system using a user terminal comprising a. In the data transmission server for receiving and processing arbitrary data from the user terminal, Means for receiving data, a random value and a terminal authentication key from the user terminal; Means for detecting unique information of the user terminal stored in advance; Means for generating authentication information using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Means for extracting a server authentication key included in a predetermined area from the generated authentication information; Means for performing an operation according to the purpose of the data when the terminal authentication key and the server authentication key match Data processing system in a data transmission server comprising a. In the system for transmitting data securely when transmitting any data from the data transmission server to the at least one user terminal, Means for registering any data to be sent to the user terminal; Means for generating a random value by itself according to a predetermined manner; Means for generating authentication information using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Means for extracting a first server authentication key included in a first area from at least one area previously specified in the generated authentication information; Means for transmitting data transmission waiting information, the random value, and the first server authentication key to the user terminal; Means for receiving, from the user terminal, a second terminal authentication key included in a second area among the at least one predetermined area and a transmission request for the data; Means for extracting a second server authentication key included in a second area from at least one predetermined area among the generated authentication information; Means for checking whether the second terminal authentication key and the second server authentication key match; Means for transmitting the data to the user terminal via a communication network when the second terminal authentication key and the second server authentication key match. Secure data transmission system in a data transmission server comprising a. A system for securely receiving arbitrary data from a data transmission server at a user terminal, Means for receiving data transmission waiting information, a random value, and a first server authentication key from the data transmission server; Means for generating authentication information using a predetermined authentication information generation algorithm that inputs the random value and the unique information of the user terminal; Means for extracting a first terminal authentication key included in a first area from at least one predetermined area from the generated authentication information; Means for checking whether the first terminal authentication key and the first server authentication key match; Means for extracting a second terminal authentication key included in a second area from at least one predetermined area among the generated authentication information when the first terminal authentication key and the first server authentication key match; Means for transmitting a transmission request for data corresponding to the second terminal authentication key and the data transmission waiting information to the data transmission server through a communication network; Means for receiving the data from the data transmission server via a communication network Safe data reception system in a user terminal comprising a.