KR20060014841A - Personal identification information provision method using mobile communication terminal - Google Patents

Abstract

The present invention relates to a method for providing personal identification information, and provides personal identification information available for a limited time to a mobile communication terminal of a user whose identity is verified, and received from the user side when authentication for a user is requested from a specific service providing terminal. The present invention provides a method of providing personal identification information using a mobile communication terminal for notifying a specific service provision approval / rejection by authenticating a user through personal identification information. According to the present invention, a personal identification card issued from an authorized institution such as a resident registration card is issued to the personal identification information of the present invention by issuing the personal identification information temporarily generated based on the personal information to the mobile communication terminal of the user whose identity is confirmed. It has the effect of making a temporary replacement.

Mobile communication terminal, social security card, fingerprint, personal identification information, expiration date

Description

User ID Providing Method Using Mobile Terminal}             

1 is a configuration diagram of an embodiment of a communication network to which the present invention is applied.

2A and 2B are flowcharts illustrating one embodiment of a method for providing personal identification information using a mobile communication terminal according to the present invention;

3A and 3B illustrate an embodiment of personal identification information in a mobile communication terminal to which the present invention is applied.

* Explanation of symbols on the main parts of the drawing

10: mobile communication terminal

11: authentication server

12: Personal Information DB

13: civil certificate issuer

The present invention relates to a method of providing personal identification information, and more particularly, provides personal identification information available temporarily to a mobile communication terminal of a user whose identity has been verified, and when authentication for the user is requested from a specific service providing terminal, The present invention relates to a method of providing personal identification information using a mobile communication terminal for notifying a user of providing / rejecting a specific service by authenticating a user through personal identification information input from a user side.

Recently, thanks to the development of digital terminal technology, users can be issued various civil documents (e.g. resident registration copies, family register copies, etc.) through the civil certificate issue machines installed in subway stations without going to public offices.

The following describes the user's issuance of civil documents through the civil certificate issuer.

First, a user selects a civil document to be issued by clicking an icon displayed on the display of the civil certificate issuer.

Then, the civil certificate issuer requests the user to input the resident registration card through the announcement or guide letter, and the user inserts his resident registration card into the card slot.

Then, the civil certificate issuer acquires the user's fingerprint number written on the front of the ID card and the user's fingerprint written on the back of the ID card through a scanning method.

The civil certificate issuer then asks the user for fingerprint contact via the announcement or announcement, and the user then contacts his thumb with the fingerprint reader.

Then, the civil certificate issuer acquires the fingerprint of the user's thumb through a scan method.

Then, if the issuer of the civil certificate is verified to be a legitimate user by comparing the fingerprints on the resident registration card with the fingerprints obtained from the fingerprint reader, a civil document corresponding to the resident registration number and name obtained through the resident registration card is issued.

The prior art as described above requires a user to input personal identification information such as a resident registration card and a fingerprint in order to provide a specific service such as a civil petition to a legitimate user, thereby identifying an individual through the inputted information.

However, in the prior art as described above, since only the resident registration card issued by the public office is used as personal identification information, there is a problem that the user authentication process cannot be performed even when the resident registration card is not inserted from the user or the fingerprint recognition on the resident registration card fails.

Therefore, the prior art as described above is applicable to a user who does not lose or possess a personal identification card (eg, a passport, a driver's license, etc.) issued at a government office such as a resident registration card, or a user whose part of the fingerprint is damaged due to carelessness. There is a problem that can not provide a specific service.

The present invention has been proposed to solve the above problems, and provides the personal identification information available for a limited time to the mobile communication terminal of the user whose identity is confirmed, and when the authentication of the user is requested from a specific service providing terminal, the user side An object of the present invention is to provide a method of providing personal identification information using a mobile communication terminal for notifying a user of approval / deny of providing a specific service by authenticating a user through the personal identification information received from the user.

According to an aspect of the present invention, there is provided a method for receiving personal identification information from a mobile communication terminal, the method comprising: receiving user's body information from the mobile communication terminal; Querying the received user body information with a previously registered personal information DB to authenticate the user body information; Upon successful authentication of the user's physical information, the digital signature is generated by encrypting the digital signature or scanning or capturing the personal information by using the valid period information of the personal identification information and the personal information and / or the valid period information as parameters. Generating temporarily available personally identifiable information including identification data; Transmitting the generated personal identification information to the mobile communication terminal; And receiving the personal identification information input from the mobile communication terminal and the personal information input from the user side when receiving a request for authentication of the user, and inquiring about the personal identification DB and the personal information DB that is previously registered. It provides a personal identification information providing method using a mobile communication terminal comprising the step of authenticating the personal identification information and outputting the authentication result by verifying the individual identification information electronic signature on the personal information.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, detailed descriptions of well-known functions or configurations will be omitted if it is determined that the detailed description of the present invention may unnecessarily obscure the subject matter of the present invention. Terms to be described later are terms defined in consideration of functions in the present invention, and may be changed according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the specification.

1 is a configuration diagram of an embodiment of a communication network to which the present invention is applied.

As shown in FIG. 1, the communication network to which the personal identification information providing method of the present invention is applied includes a mobile communication terminal 10, an authentication server 11, a personal information DB 12, and a civil certificate issuer 13 on the user side. Include.

The mobile communication terminal 10 is equipped with an internet access function, a camera function, a fingerprint recognition function, an iris (or retina) recognition function, and a hardware module for this is preferably mounted.

The authentication server 11 is preferably operated by a company designated by an accredited institution (eg, government or local government), and the company operating the authentication server 11 may receive personal information (eg, social security number, name, etc.) from an authorized authority. , Address, resident registration copy, family register copy, fingerprint information, iris (or retina) information). However, when operating in a private enterprise, it is possible to build a system to which the present invention is applied by receiving such personal information directly when recruiting subscribers.

The personal information DB 12 includes personal information (e.g., resident registration number, name, address, etc.), physical information (e.g., fingerprint information, iris (or retina) information, etc.) and civil document information (e.g., resident registration, Copy of family register, etc.) and / or personal identification information issued to the user for a limited time.

Here, the personal identification information is used as user authentication information, and the user is used as user authentication information for receiving a civil document issuance service through the civil certificate issuer 13.

In addition, since personal identification information is enough to replace a certified personal identification card such as a resident registration card, passport, driver's license, etc. issued by a government office for a limited time (for example, 30 minutes or one week), the personal identification information is valid for a period of validity ( In other words, the available period for personal identification information) is preferably inserted.

In addition, the personal identification information may be text data of a character / number / special character combination generated randomly using the user's personal information (for example, social security number, address, name, etc.) and / or the expiration date information as parameters. It is preferable to include the multimedia data generated by scanning (or capturing) personal information as a kind of identification data. The above identification data is preferably encrypted and created and managed to prevent hacking and unauthorized use by third parties.

On the other hand, it is also possible to generate personally identifiable information according to the present invention using a digital signature encryption technique, in which case the identification data and / or validity information of the user are included as it is or encrypted. At the end, identification data is generated by attaching an electronic signature generated according to a specific encryption function using these information as parameters. In this case, the verification step is performed by checking whether the value of the electronic signature attached to the identification data is a normal value for the personal information and / or the expiration date information of the front end. In this way, it is possible not only to check whether the identification data is generated by an authorized authority, but also to cope with any change in the validity period that may occur.

The civil certificate issuer 13 provides various civil documents (e.g., resident registration copy, family register copy, etc.) to a user who has passed a predetermined authentication procedure, and the company operating the civil certificate issuer 13 is a certificate server (11). It is advisable to obtain civil document information through partnership with the management company.

2A and 2B are flowcharts of an embodiment of a personal identification method using a mobile communication terminal according to the present invention.

First, the mobile communication terminal 10 requests the authentication server 11 to issue personal identification information (200). At this time, if the user loses his or her own resident registration card or is not currently in possession of the personal identification information that can replace the resident registration card for a limited time, the user may use the mobile communication terminal 10 to use the civil certificate issuer 13. After accessing the web page provided by the authentication server 11 through the name and resident registration number, etc. to register as a member and requests personal identification information.

On the other hand, the user according to the personal identification information (or the specification of the mobile communication terminal 10 (eg, whether or not equipped with a short-range communication function)) required by the civil certificate issuer 13 provides the corresponding personal identification information to the authentication server ( 11 may be requested.

That is, in order for a user to receive a civil document from the civil certificate issuer 13, the user needs to enter personal identification information and go through the authentication process. When the civil certificate issuer 13 requests the user to directly enter a personal identification number (or move) In the case where the short-range communication function is not installed in the communication terminal 10), it is preferable to request the provision of personal identification information in the form of a text / number / special character combination.

On the other hand, if the civil certificate issuer 13 requests the transmission of personally identifiable information through a short-range communication method (eg, Bluetooth, infrared (IrDA), etc.) or the near field communication function is mounted on the mobile communication terminal 10. If present, it is desirable to request the provision of personal identification information in the form of text in the combination of letters / numbers / special characters or in the form of multimedia in which the ID card is scanned (or captured).

Then, the authentication server 11 requests the user's body information to the mobile communication terminal 10 (201). At this time, the authentication server 11 requests the user's body information (eg, fingerprint information, iris (or retina) information, etc.) to authenticate the user. In other words, the user can arbitrarily input the resident registration number and name of the other person to complete the membership registration, and then request the issuance of personal identification information.

Here, the authentication server 11 preferably instructs the user to photograph the fingerprint or the iris through the camera module mounted in the mobile communication terminal 10 and then transmit the photographed data.

In addition, when a fingerprint recognition module or an iris (or retina) recognition module is mounted in the mobile communication terminal 10, the user may input the body information through the corresponding module to be transmitted to the authentication server 11.

Then, the mobile communication terminal 10 obtains the user's body information (202), and transmits the obtained user's body information to the authentication server (11) (203). In this case, although not shown in FIG. 2A, when the mobile communication terminal 10 can obtain various types of body information, the authentication server 11 may specify and request specific body information, for example, an iris image. In the case of steps 202 and 203, the mobile communication terminal 10 should acquire and transmit the specific requested body information.

Then, the authentication server 11 authenticates the authenticity of the user by inquiring the user body information received from the mobile communication terminal 10 with respect to the registered personal information DB 12 (204). Regarding the authentication, the problem is whether to allow the storage device to be acquired in advance and stored in a memory or a storage device, and then loaded and used when necessary. If the system is configured not to allow this, the authentication server 11 extracts the generation time of the received body information when the body information is received from the mobile communication terminal 10, and the generation time of the body information passes more than a predetermined time. In one case, in step 204 authentication of the user's body information is treated as a failure.

If the user's body information authentication result 204, the body information of the received user does not match the body information registered in the personal information DB 12, the authentication server 11 is the user's body to the mobile terminal 10 Notify the fact that the information authentication failed (eg "" Failed to verify Hong Gil Dong ", etc.) and the reason (eg," fingerprint information was not read "," fingerprint information does not match ", etc.) and the like (205).

Then, the process proceeds to the "201" process, the authentication server 11 preferably requests the mobile communication terminal 10 to re-acquire the user's body information and retransmission.

On the other hand, if the user body information authentication result 204, the received body information of the user matches the body information registered in the personal information DB 12, the authentication server 11 generates the user's own personal identification information (206).

At this time, the authentication server 11 generates personal identification information in the form of a text / number / special character combination in a random number by using the user's personal information (eg, social security number, address, full name, etc.) as parameters. By setting the validity period for the identification information or by scanning (capturing) the user's personal information, especially the resident registration card to generate the personal identification information in the form of multimedia, the validity period for the personal identification information is set. The authentication server 11 stores this personal identification information in the personal information DB 12.

On the other hand, the authentication server 11 specifies the expiration date when providing the personal identification information to the user, it is preferable to discard the personal identification information in the personal information DB 12 after the expiration date.

Then, the authentication server 11 transmits the personal identification information to the mobile communication terminal 10 (207). At this time, the authentication server 11 inserts the personal identification information in the form of text into the short message through the short message service (SMS) to transmit to the mobile communication terminal 10 or the text in the multimedia message through the multimedia message service (MMS) Alternatively, the web (wafer) page indicating information in which personal identification information is inserted (attached) in a multimedia form and transmitted to the mobile communication terminal 10 or the personal identification information is stored through a callback message service (aka URL SMS). The short message in which is inserted may be transmitted to the mobile communication terminal 10 or the personal identification information may be directly transmitted to the mobile communication terminal 10 through a push method.

Thereafter, the user requests the issuance of the civil document to the civil certificate issuing machine 13 (208).

Then, the civil certificate issuer 13 requests the user to input the personal identification information and the personal information or requests the mobile communication terminal 10 to transmit the personal identification information and the user's personal information (209). At this time, the civil certificate issuer 13 cannot know which user the personal identification information is issued to, so it is desirable to request the user to input personal information (eg, name and social security number) indicating possession of the personal identification information. Do.

In addition, the civil certificate issuer 13 requests the user to input the resident registration card and fingerprint in the conventional manner when the user issuing the civil document, and as a result, the user inputs the personal identification information issued from an authorized institution when the user inputs the resident registration card. Send request).

Here, the civil certificate issuer 13 may additionally request a fingerprint input from the user or issue a civil document to the user when the fingerprint cannot be read due to the fingerprint damage due to the user's carelessness. The user may be authenticated only by the received personal identification information.

Then, the user inputs personal identification information and personal information to the civil certificate issuer 13 or the mobile communication terminal 10 transmits the personal identification information and the user's personal information to the civil certificate issuer 13 (210). In this case, the user may directly input personal identification information and personal information in the form of a text / number / special character combination through the keypad of the civil certificate issuer 13 or by using a short range communication function of the mobile communication terminal 10. The personal identification information in the form of text / number / special character combination, the personal information of the user or the personal identification information of the multimedia form scanned (captured) of the resident registration card and the user's personal information are transmitted to the civil certificate issuer 13.

Then, the civil certificate issuer 13 transmits the personal identification information and the user's personal information input from the user side to the authentication server 11 to request authentication (211).

Then, the authentication server 11 authenticates the personal identification information received from the civil certificate issuing machine 13 through the personal identification information of the corresponding user registered in the personal information DB 12 or the personal identification information. Authentication is performed by verifying the electronic signature on the information and / or the expiration date information (212).

If the personal identification information authentication result 212, the personal identification information of the user registered in the personal information DB 12 and the personal identification information received from the civil certificate issuer 13 does not match, the authentication server ( 11) is the fact that the personal identification information failed to be authenticated by the civil certificate issuer 13 (eg, "Failed to authenticate Hong Gil-dong's personal identification information") and the reason for the failure (eg, "Hong Gil-dong's personal identification information is consistent. Not, etc. "(213).

Then, the civil certificate issuing machine 13 notifies the user of the personal identification information authentication failure and the reason through the announcement or announcements (214). Then, proceeding to the "209" process, the civil certificate issuing machine 13 is preferably requested to re-enter the personal identification information and personal information to the user side.

On the other hand, if the personal identification information authentication result 212, the validity period of the personal identification information of the user registered in the personal information DB (12) has passed (disposal of the personal identification information), the authentication server 11 is a civil certificate issuer (13) the expiration date of the validity of personally identifiable information (or the fact that personally identifiable information has been discarded) (eg, "Hong Gil Dong's use of personally identifiable information has passed", "Hong Gil-dong's personally identifiable information has been destroyed", etc.) and Notify the reason (eg, "Hong Gil-dong's personally identifiable information has expired since July 25th") (215).

Then, the civil certificate issuer 13 notifies the user of the expiration date of the personal identification information expiration date (or the fact that the personal identification information is discarded) and the reason through the announcement broadcast or guide phrase (216). Then, the civil certificate issuer 13 induces the user to apply for re-issuance of personal identification information, and then proceeds to step “209”, and requests the user to re-enter personal identification information and personal information.

On the other hand, the personal identification information authentication result 212, the personal identification information of the user registered in the personal information DB 12 remains valid and the personal identification information of the user registered in the personal information DB (12) If the personal identification information received from the civil certificate issuer (13) is identical with the authentication server (11) is a personal certificate information authentication success facts (eg, "Hong Gil Dong's personal identification information authentication" Successful ”, etc. (217).

Then, the civil certificate issuer 13 issues a corresponding civil document requested by the user after notifying the user of the successful authentication of personal identification information through a guide broadcast or a guide phrase (218). At this time, the civil certificate issuer 13 requests the civil document information requested from the user to the authentication server 11 using the publicly issued civil document issuing function and outputs the civil complaint document received accordingly.

3A and 3B are diagrams illustrating an embodiment of personal identification information in a mobile communication terminal to which the present invention is applied.

As shown in FIG. 3A, the personal identification information in the form of a text (short message) includes "7510-145-265" in text form generated by using the user's name ("Hong Gil-dong") and the user's social security number as parameters. The expiration date ("July 25, 2004 16:00") is inserted.

As shown in FIG. 3B, the personal identification information in the multimedia form is inserted with an image of which the ID card has been scanned (captured) and an expiration date ("July 25, 2004 16:00").

On the other hand, the present invention has been described in the case where the user requests the civil document issuance to the civil certificate issuer 13 as an example, but when the user is confirmed to be the user to provide a specific service to a specific terminal (for example, cash in the ATM) Withdrawal service, research center / company / public institution / financial institution, etc., requires the user to input personal information from a specific person (e.g. police) or a specific terminal (e.g. credit card vending machine) Even those skilled in the art will readily appreciate that the present invention is applicable.

In addition, the present invention has been described as a case where the personal identification information temporarily replaces the user's ID card as an example, but the personal identification information of the present invention, such as a passport, driver's license, employee card, credit card, etc. It will be readily understood by one skilled in the art that a dragon card can be temporarily replaced.

In addition, in the present invention, the authentication server 11 has been described as an example of delivering the authentication result and the reason to the civil certificate issuer 13, but the authentication result and the text of the reason itself, or a few bytes corresponding thereto. Those skilled in the art will readily understand that the identification code can be transmitted.

In addition, in the present invention, the case where the authentication server 11 requests the transmission of the user's body information has been described as an example, for example, the user first obtains predetermined body information using the mobile communication terminal 10 and the authentication server ( It will be readily understood by those skilled in the art that the operation scenario may be configured to simultaneously request personal identification information while transmitting to 11).

While the content of the present invention has been described by way of examples, the embodiments of the present invention are merely illustrative of the present invention and should not be construed as limiting the scope of the present invention. Those skilled in the art to which the present invention pertains may modify or alter the present invention in various forms within the principles and scope described in the claims herein.

The present invention as described above, by issuing personal identification information generated on the basis of the personal information to the mobile communication terminal of the user whose identity is confirmed, the user can use the personal identification card that was issued from an authorized institution such as a resident registration card There is an effect that a specific service can be used by replacing it temporarily.

Claims (7)

Receiving the body information of the user from the mobile communication terminal when a request for issuing personal identification information is received from the mobile communication terminal of the user; Querying the received user body information with a previously registered personal information DB to authenticate the user body information; Upon successful authentication of the user's physical information, the digital signature is generated by encrypting the digital signature or scanning or capturing the personal information by using the valid period information of the personal identification information and the personal information and / or the valid period information as parameters. Generating temporarily available personally identifiable information including identification data; Transmitting the generated personal identification information to the mobile communication terminal of the user; And Upon receiving a request for authentication of the user, the personal identification information input from the mobile communication terminal and the personal information input from the user side are received, and the personal identification information and the personal information are inquired about a registered personal information DB or the personal Authenticating the personal identification information by digitally verifying the identification information with respect to the personal information and / or the expiration date information and outputting an authentication result Personal identification information providing method using a mobile communication terminal comprising a. The method of claim 1, The body information is a personal identification information providing method using a mobile communication terminal, characterized in that it comprises the user's fingerprint data and / or the user's iris or retina data taken through the camera function in the mobile communication terminal. The method of claim 2, Upon receiving a request for issuance of personal identification information from a mobile communication terminal of a user, a specific type of body information is designated and requested for the user, and correspondingly, the user's body information is received from the mobile communication terminal. Personal identification information providing method using a mobile communication terminal, characterized in that to verify whether the received body information is the specified body information by querying to. The method of claim 2, When the body information is received from the mobile communication terminal, the time point for generating the received body information is extracted, and when the generation time exceeds a predetermined time, the authentication of the user body information is treated as a mobile communication terminal. How to provide personally identifiable information. The method according to any one of claims 1 to 4, When the valid period of the personal identification information remains and the personal identification information of the registered user and the input personal identification information is matched, the mobile terminal characterized in that it outputs a success as the personal identification information authentication result. How to provide personally identifiable information. The method according to any one of claims 1 to 4, The mobile communication terminal outputs a failure as a result of the personal identification information authentication when the validity period of the personal identification information has passed or when the registered personal identification information of the corresponding user and the input personal identification information do not match. Personal identification information providing method using. Receiving the body information of the user from the mobile communication terminal when a request for issuing personal identification information is received from the mobile communication terminal of the user; Querying the received user body information with a previously registered personal information DB to authenticate the user body information; Upon successful authentication of the user's physical information, the digital signature is generated by encrypting the digital signature or scanning or capturing the personal information by using the valid period information of the personal identification information and the personal information and / or the valid period information as parameters. Generating temporarily available personally identifiable information including identification data; Transmitting the generated personal identification information to the mobile communication terminal of the user; And Upon receiving a request for authentication of the user, the personal identification information input from the mobile communication terminal and the personal information input from the user side are received, and the personal identification information and the personal information are inquired about a registered personal information DB or the personal Authenticating the personal identification information by digitally verifying the identification information with respect to the personal information and / or the expiration date information and outputting an authentication result A computer-readable recording medium having recorded thereon a program for realizing this.

Images