Authentication method using cellular phone in internet

[0001] 1. Field of the Invention

[0002] The present invention relates to an authentication method using a cellular phone in internet, and in particular to an authentication method using a cellular phone in internet in which when connecting to internet or performing electronic commerce an authentication process is performed through an internet site server in parallel with the cellular phone in the authentication requisite for the connection or the payment of cost. According to the present invention, since the authentication process is performed by using the plural communication lines, such as an internet line and a cellular phone line, the security of the communication lines can be obtained.

[0003] 2. Description of the Background Art

[0004] Recently, computers have spread far and wide, internet techniques makes rapid progress and population using the internet increases by geometrical progression. Accordingly, the internet has been used as a channel for transmitting information on goods, services being provided, and advertisements etc. from a simple exchange function of information. Activities for purchase can be performed with the object of the whole world without restrictions of time and space through internet. As a result, an infrastructure, that is, electronic commerce, has been formed by advantages that distribution processes are shortened and manpower for sale is reduced.

[0005] As above, when connecting to an internet site or performing electronic commerce, in transactions requiring for security, safety of an authentication method is essential. In a conventional art, when a user connects to the internet, an authentication process is performed by providing a public key or an individual key for authenticating or by using a secret number optionally determined by the user and a security card.

[0006] However, in the conventional art, there are several disadvantages that the authentication process must be performed only by using the internet line connected to the user, and basically the authentication process through general communication lines are exposed to the danger of hacking because it is impossible to install high-degree security devices to the whole lines, which will be connected by common run of people.

[0007] Accordingly, it is an object of the present invention to solve the above problems by providing an authentication method using a cellular phone in internet, in which when connecting to internet or performing an authentication process for electronic payment in electronic commerce, a separate cellular phone line in parallel with a line connected to internet is used and if the authentication data of an internet site server are identical to that of a cellular phone service company, the authentication process is completed, thereby capable of eliminating the danger of hacking basically.

[0008] In order to achieve the above-described object of one aspect of the present invention, an authentication method using a cellular phone in internet, comprises the steps of: recording information for the authentication and a cellular phone number when connecting to internet or performing authentication for an electronic payment in an electronic commerce server, requesting by the internet site server which has received the inputted information for authentication and the cellular phone number, for approval of the authentication from an authentication server of a cellular phone service company having the user's recorded information of the authentication, transmitting the request for approval of the authentication from the authentication server of the cellular phone service company that received the request for approval of the authentication to the user's cellular phone, discriminating whether the user uses the registered cellular phone or not, when the user, after receiving the request for approval of the authentication inputs a secret number for approval of the authentication, through communication between the cellular phone and the authentication server of the cellular phone service company, comparing whether the registered authentication information and the authentication information required when authenticating are identical with each other or not, approving the authentication, and transmitting the approved result to the internet site server, and informing the user of the approved result through the internet site server which received the approved result.

[0009] According to the embodiment of the present invention as mentioned above, when connecting to internet or performing electronic payment after electronic commerce, if the internet electronic commerce server requests the approval of the authentication to the authentication server of the cellular phone service company, the authentication server communicates to the user's cellular phone with items, which are required for approval of the authentication, through a short message service and for registering a location. Thereafter the authentication server compares data, based upon authentication information inputted through the internet line and the cellular phone, a secret number, a number particular to the cellular phone, transmit-receive of encryption between the cellular phone and the authentication server of the cellular phone service company, and thereafter approves the authentication, thereby basically preventing danger of hacking through a single line and securing safety in internet site connection or of electronic payment in electronic commerce.

[0010] In another aspect of the present invention, an authentication method using a cellular phone in internet comprises the steps of: recording information for authentication and a cellular phone number when connecting to internet or performing authentication for an electronic payment, requesting by the internet site server which has received the inputted information for authentication and the cellular phone number, for approval of the authentication from an authentication server of a cellular phone service company having the user's recorded information of the authentication, discriminating whether the user uses a registered cellular phone or not when the user calls through the cellular phone in order to perform an authentication process, comparing whether the registered information of the authentication and the inputted information of the authentication requested when authenticating, are identical or not, approving the authentication, and transmitting the result of approval of the authentication to the internet site server, and informing the user of the approved result through the internet site server which received the approved result.

[0011] According to another embodiment of the invention, as mentioned above, when connecting to internet or performing electronic payment after electronic commerce, when the user calls to the authentication server of the cellular phone service company, the authentication server compares data through authentication information inputted through the internet line and the cellular phone, a secret number, a number particular to the cellular phone, transmit-receive of an encryption between the cellular phone and the authentication server of the cellular phone service company, and thereafter approves the authentication, thereby basically preventing danger of hacking through a single line and securing safety of electronic payment in internet site connection or electronic commerce.

[0012] The present invention will be better understood with reference to the accompanying drawings, which are given only by way of illustration and thus are not limitative of the present invention, wherein:

[0013] FIG. 1 is a construction view illustrating an authentication method using a cellular phone when connecting to internet in accordance with the present invention;

[0014] FIG. 2 is a flow chart illustrating an authentication method using a cellular phone when connecting to internet in accordance with the present invention;

[0015] FIG. 3 is a construction view illustrating an authentication method of electronic commerce in internet using a cellular phone in accordance with the present invention;

[0016] FIG. 4 is a flow chart illustrating an authentication method of electronic commerce using a cellular phone in internet in accordance with the present invention;

[0017] FIG. 5 is a flow chart illustrating an authentication method of electronic commerce using a cellular phone in internet in accordance with another embodiment of the present invention.

[0018] An authentication method using a cellular phone in internet in accordance with a preferred embodiment of the present invention will now be described with reference to the accompanying drawings.

[0019] FIG. 1 is a construction view illustrating an authentication method using a cellular phone when connecting to internet in accordance with the present invention. As shown in FIG. 1, interrelationship of a user 30, an internet site server 20, an authentication server 10 of a cellular phone service company is illustrated.

[0020] To perform the authentication processes as above, as an essential prerequisite, a mutual contract between an internet electronic commerce service company and a cellular phone service company for an authentication service must be concluded and also a user stores an encryption algorithm and random number data to one's cellular phone when applying for the service to the cellular phone service company, so that safety of authentication can be guaranteed.

[0021] At this time, a line securing high-degree encryption and a security device is used between the authentication server 10 of the cellular phone service company and the internet site server 20 and so security of line is guaranteed.

[0022] In a state where the above preceding processes are completed, as shown in FIG. 1, the user 30 requests connection for connecting the internet site server 20 and then inputs information required for authentication and a cellular phone number.

[0023] And so, the internet site server 20 transmits the inputted authentication information to the authentication server 10 of the cellular phone company relating to the inputted information and requests approval of authentication.

[0024] Thereafter, the authentication server 10 of the cellular phone company, which received the authentication information, in the state where the approval of authentication is requested, when the user 30 calls through one's cellular phone in order to perform an authentication process, compares information inputted by the cellular phone with previous information required for authentication such as authentication information recorded when joining the cellular phone service, an inputted secret number, and a number particular to the cellular phone, and thereafter transmits the result of approval of authentication to the internet site server 20.

[0025] Thereafter, the internet site server 20 that received the data from the authentication server 10 permits the user 30 to connect to the internet site.

[0026] An embodiment of the present invention having the authentication processes as mentioned above will be described in detail with reference to FIG. 2.

[0027] FIG. 2 is a flow chart illustrating an authentication method using a cellular phone when connecting internet in accordance with the present invention.

[0028] First, a user requires the internet site server to be connected in step S210. Then, the internet site server requests the user to input user's personal information such as user's registration number, a driver's license number together with a cellular phone number. According to this, the user inputs one's personal information and a cellular phone number in step S220. At this time, the input information can be set as one's ID(Identification number) and a cellular phone number for a simple and rapid authentication.

[0029] Thereafter, the authentication information inputted by the user is transmitted to the authentication server of a cellular phone service company based upon the inputted cellular phone number and then an approval of the authentication is requested in step S230.

[0030] According to this, the authentication server of the cellular phone service company transmits contents of the approval of the authentication from the internet site server to the user's cellular phone through a SMS(short message service) in step S240.

[0031] Then, if the requirement of the approval of authentication is right, the user pushes a secret number for the approval of the authentication. The inputted secret number is transmitted when performing a communication between the cellular phone and the cellular phone service company in order to register a location in step 250, and thereafter the authentication server 10 discriminates whether the inputted information and previous information, such as personal information, a number particular to a cellular phone, and a secret number, for the approval of the authentication, recorded when the user's joining the cellular phone service, is identical to each other or not and thereafter, according to the discriminating result, the authentication is approved in step S260.

[0032] At this time, the authentication server of the cellular phone service company transmits a cipher to the cellular phone by an encryption algorithm or a random number table recorded in the cellular phone and thereafter discriminates whether the cellular phone is registered properly or not through a response signal. Thereafter, the approval of the authentication is determined finally.

[0033] Thereafter, the authentication server 10 transmits the requested result of the approval of the authentication to the internet site server in step S270.

[0034] Then, the internet site server, which has received the data from the authentication server, permits the user to connect to the internet site in step S280.

[0035] FIG. 3 is a construction view illustrating an authentication method of electronic commerce in internet using a cellular phone in accordance with the present invention. As shown in FIG. 3, interrelationship of a purchaser 35, an internet electronic commerce server 25, an authentication server 10 of a cellular phone service company is illustrated.

[0036] A purchaser 35 connects to the internet electronic commerce server 25 and then purchases goods and information etc. Thereafter, when performing an authentication process for making up accounts, the purchaser 35 inputs authentication information and a cellular phone number required for the authentication.

[0037] And so, the internet electronic commerce server 25 transmits the inputted authentication information to the authentication server 10 of the cellular phone company relating to the inputted information and requests the approval of the authentication.

[0038] Thereafter, the authentication server 10 of the cellular phone company, which has received the authentication information, in the state where the approval of the authentication is requested, when the user 30 calls through one's cellular phone in order to perform the authentication process, compares information inputted through the cellular phone with previous information required for the authentication such as authentication information recorded when the purchaser joined the cellular phone service, an inputted secret number, and a number particular to the cellular phone and, thereafter transmits the result of approval of authentication to the internet electronic commerce server 25.

[0039] Thereafter, the internet electronic commerce server 25, which hass received the data from the authentication server 10, informs the result of the approval of the authentication to the purchaser 35 through internet.

[0040] An embodiment of the present invention having the authentication processes as mentioned above will be described in detail with reference to FIG. 4.

[0041] FIG. 4 is a flow chart illustrating an authentication method of electronic commerce using a cellular phone in internet in accordance with the present invention.

[0042] As shown in FIG. 4, the purchaser connects a site for providing a service of electronic commerce through internet and then purchases goods in step S410. Then, the internet electronic commerce server requests input of purchaser's personal information such as a registration number, a driver's license number together with a cellular phone number joined by oneself in order to receive the authentication that the act of purchasing is performed by a real purchaser. According to this, the purchaser inputs one's personal information and a cellular phone number in step S420. Thereafter, the authentication information inputted by the purchaser is transmitted to the authentication server of the cellular phone service company based upon the inputted cellular phone number and then the approval of the authentication is requested in step S430.

[0043] According to this, the authentication server of the cellular phone service company transmits contents of the approval of authentication from the internet electronic commerce server to the purchaser's cellular phone through a SMS(short message service) in step S440.

[0044] Then, if the requirement of the approval of the authentication displayed at the cellular phone is right, the purchaser pushes a secret number for the approval of the authentication. Then, the inputted secret number is transmitted when performing communication between the cellular phone and the cellular phone service company in order to register a location in step 450, and thereafter the authentication server discriminates whether the inputted information and previous information, such as personal information, a number particular to a cellular phone, and a secret number for approval of authentication recorded when the purchaser's joining the cellular phone service, is identical to each other or not and thereafter, according to the discriminating result, the authentication is approved in step S460.

[0045] At this time, the authentication server of the cellular phone service company transmits a cipher to the cellular phone by an encryption algorithm or a random number table recorded in the cellular phone and discriminates whether the cellular phone is registered properly through a response signal. Thereafter, the approval of the authentication is determined finally.

[0046] Thereafter, the authentication server 10 transmits the requested result of the approval of the authentication to the internet electronic commerce server in step S470.

[0047] Then, the internet electronic commerce server informs the result of the approval of the authentication to the purchaser through internet in step S480.

[0048] FIG. 5 is a flow chart illustrating an authentication method of electronic commerce using a cellular phone in internet in accordance with another embodiment of the present invention.

[0049] First, a purchaser connects a site for providing a service of electronic commerce through internet and then purchases goods in step S510. Then, the internet electronic commerce server requests input of purchaser's personal information such as a registration number, a driver's license number together with a cellular phone number joined by oneself in order to receive an authentication that the purchasing is performed by a real purchaser. According to this, the purchaser inputs one's personal information and a cellular phone number in step S520. Thereafter, the authentication information inputted by the purchaser is transmitted to the authentication server of the cellular phone service company based upon the inputted cellular phone number and the approval of the authentication is requested in step S530.

[0050] According to this, the authentication server of the cellular phone service company stores, for a certain length of time, contents of the approval of the authentication from the internet electronic commerce server and when the user 30 calls through the cellular phone in order to perform the authentication process, discriminates whether the information inputted by the cellular phone and previous information, such as personal information, a number particular to the cellular phone, and a secret number for the approval of the authentication recorded when the purchaser's joining the cellular phone service, is identical to each other or not, and thereafter according to the discriminating result the authentication is approved in step S540.

[0051] At this time, the authentication server of the cellular phone service company transmits a cipher to the cellular phone by an encryption algorithm or a random number table recorded in the cellular phone and discriminates whether the cellular phone is registered properly or not through a response signal. Thereafter, the approval of authentication is determined finally.

[0052] Thereafter, the authentication server 10 transmits the requested result of the approval of the authentication to the internet electronic commerce server in step S550.

[0053] Then, the internet electronic commerce server informs the result of the approval of the authentication to the purchaser through internet in step S560.

[0054] As above, when calling to the authentication server of the cellular phone service company, the user can connect to the authentication server by using a special phone number for authentication.

[0055] As mentioned above, according to the present invention, there is an advantage that when connecting to internet or performing electronic commerce, the authentication is performed by using the cellular phone which is separately constructed against an internet line and therefore, a double security device through the internet electronic commerce server and the authentication server of the cellular phone service company is secured, thereby preventing hacking basically.

[0056] There is another advantage that the secret number of the cellular phone which is used for identifying the cellular phone in the cellular phone service company is used to connect to a special site or to authenticate the electronic payment, thereby capable of using a separate encryption method, which is different from that of the plural lines.

[0057] There is also an advantage that a transmission of information required for the authentication is performed between the cellular phone and the authentication server of the cellular phone service company through communications of a short message service and registration of location, thereby performing the authentication process without a direct calling to the cellular phone service company.

[0058] Meanwhile, the cellular phone service user applies for the registration of the authentication service to the cellular phone service company, thereby securing safety of the electronic payment when connecting to the internet site or performing electronic commerce and also at the position of the manager of the internet site, safety of the authentication process can be provided to the registered users through a single contract of the authentication service with the cellular phone service company without adapting the separate authentication device.

[0059] There is also an advantage that since the cellular phone service company can provide a new service it is easy to attract members and commercial profit can be obtained from the contracted internet site and members.

[0060] As the present invention may be embodied in several forms without departing from the spirit or essential characteristics thereof, it should also be understood that the above-described embodiment is not limited by any of the details of the foregoing description, unless otherwise specified, but rather should be construed broadly within its spirit and scope as defined in the appended claims, and therefore all changes and modifications that fall within the meets and bounds of the claims, or equivalences of such meets and bounds are therefore intended to be embraced by the appended claims.