KR101666591B1 - One time password certifacation system and method - Google Patents

Abstract

The present invention relates to a smart off-chip authentication system and method, and more particularly, to a smart ontip authentication system and method, which includes a user terminal connected to a service server and performing an electronic banking service and performing user authentication according to OTP input, an OTP card A smart terminal for receiving the generated key from the OTP card unit and generating an OTP; a service server for providing a service according to an authentication result of the OTP provided from the user terminal; and an authentication server for authenticating the OTP provided from the service server An OTP authentication server, and a smart object authentication system.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a smart on-

The present invention relates to a smart object authentication system and method, and provides an object authentication system and method that improves convenience, security, and economy by using a smart terminal.

Electronic financial transaction hacking accidents are frequently caused by the activation of electronic financial transactions. Various authentication technologies have been developed to prevent this. One example is OTP (One Time Password) technology, a keyboard security technology for encrypting keyboard input information, a Web encryption technology for encrypting data between a customer terminal and a financial company server, and a technology for performing connection using only terminals allowed to access in advance , Technologies for authenticating users through SNS or ARS have been developed.

Recently, in order to prevent such hacking and user authentication, an authentication method by inputting a password to an OTP terminal in a conventional card type password input device is changing.

The OTP system generates a new password every time a user wants to be authenticated and uses it as a one time use over time, so that the possibility of exposing the password in the authentication process is small and even if the password is exposed, There is an advantage that it can be protected from hacking because it is short.

However, although the existing OTP terminal is made small, it is inconvenient to carry because of its thickness, and since it uses the built-in battery, there is a disadvantage that it needs to be replaced after a certain period. In addition, there is a problem in that both the internal authentication key and the authentication system are lost when the terminal is lost while it is carried.

(Patent Document 1) Korean Patent No. 10-1051420 (Patent Document 2) Korean Patent No. 10-1012479 (Patent Document 3) Korean Patent Publication No. 10-2005-0053967 (Patent Document 4) Korean Patent Publication No. 10-2005-0071768

The present invention has been conceived to solve the above-mentioned problems, and it is an object of the present invention to improve security by separately storing an OTP generation algorithm and a key, and to improve convenience and economy by using a smart terminal and a card- And to provide a smart off-chip authentication system and method capable of preventing unauthorized access.

A user terminal connected to the service server according to the present invention for performing electronic banking related services and performing user authentication according to OTP input, an OTP card unit storing a generation key for OTP generation, And an OTP authentication server for authenticating an OTP provided from the service server according to an authentication result of the OTP received from the user terminal, And provides a SmartOpti authentication system.

In addition, a user terminal authenticating the user according to the smart OTP and external OTP input according to the present invention, an OTP card unit storing a generation key for OTP generation, and an OTP generation unit receiving the generated key from the OTP card unit A smart terminal, an OTP terminal for generating an external OTP, a service server for providing a service according to an authentication result for a smart OTP and an external OTP provided from the user terminal, an OTP authentication for authenticating a smart OTP provided from the service server, And an external OTP authentication server for authenticating an external OTP provided from the server and the service server.

The OTP card unit includes a card-shaped body, an NFC tag for performing communication, and a key storage unit storing OTP generation key information linked with the smart terminal number provided from the service server. The key information stored in the key storage unit Is characterized in that smart terminal number information and OTP generation key information are encrypted.

The smart terminal includes an NFC communication unit for performing communication with the OTP card unit, an OTP generation key verification unit for decrypting and validating the key information provided from the OTP card unit, An OTP generation unit for generating an OTP number using key information and smart terminal information, a screen display unit for displaying the generated OTP number on the screen, an information management unit for storing time information and smart terminal information, And a control unit (370) for controlling operations of the respective units of the smart terminal.

The OTP generation key verification unit includes a decryption unit for decrypting the key information provided from the OTP card unit, an information separation unit for extracting smart terminal unique information and OTP generation key information from the decrypted key information, And an authentication driver for driving the user authentication unit for operation.

The service server includes a terminal communication unit for performing communication with the user terminal and the smart terminal, a server user authentication unit for performing user authentication using the OTP number, and a service providing service requested by the user according to the user authentication result And an OTP authentication communication unit for verifying whether or not the OTP number is authenticated.

The service server further includes a key information input unit for encrypting and inputting key information to the OTP card unit, an encryption information providing unit for providing key encryption and decryption information, and an algorithm providing unit for providing an OTP generation algorithm to the smart terminal .

A part of the generated key information for generating the OTP is stored in the OTP card unit, and the remaining information is stored in the OTP authentication server.

The method includes issuing an OTP card interlocked with the smart terminal according to the present invention and storing an internal communication function and OTP generation key information, requesting a service by accessing a service server, Generating OTP numbers by using OTP generation key information, time information, and smart terminal information; generating OTP numbers by using OTP generation key information, time information, and smart terminal information; Inputting the created OTP number to the service server and requesting authentication approval; and the service server verifying the OTP number by transmitting the OTP number and the stored smart terminal information to the OTP authentication server, And providing the service according to the verification result of the number.

And authenticating the user by inputting the user's unique number before the step of generating the OTP number.

The step of extracting key information for OTP generation includes receiving key information encrypted by the smart terminal and extracting key information for OTP generation and smart terminal unique information according to an input decryption code.

In addition, the method may further include connecting the service terminal to the service server using the terminal according to the present invention, and transmitting the OTP number to the second smart terminal in cooperation with the first smart terminal, Receiving the key information by contacting the stored OTP card, decrypting the key information by inputting information for protection to the second smart terminal, extracting the first smart terminal unique information and OTP generation key information, Generating an OTP number in the second smart terminal using the OTP generation key information, time information, and first smart terminal information according to user authentication; inputting the generated OTP number to the service server to authenticate Requesting approval of the OTP number by the OTP authentication server; verifying the OTP number through the OTP authentication server; And providing the service according to the verification result.

The method may further include the steps of: a user accessing a service server using a terminal according to the present invention; receiving the first OTP generation key information stored in the OTP card by contacting the OTP card with the smart terminal; The method comprising the steps of: providing unique information of the smart terminal and receiving second OTP generation key information corresponding to the unique information; merging the first OTP generation key information and the second OTP generation key information to generate OTP Generating OTP numbers by using the OTP generation key information, time information, and smart terminal information according to user authentication; inputting the generated OTP numbers to a service server and performing authentication approval Wherein the service server verifies the OTP number through the OTP authentication server, and the step of verifying the OTP number based on the verification result of the OTP number through the OTP authentication server. In that it comprises the step of providing provides the smart O typhimurium authentication method according to claim.

In this way, the present invention improves the security by separately storing the OTP generation algorithm and the key, and improves the convenience and economy by using the smart terminal and the card type key.

1 is a block diagram of a smart object authentication system in accordance with an embodiment of the present invention;
2 is a block diagram of an OTP card according to an embodiment;
3 is a block diagram of a smart terminal according to one embodiment.
4 is a block diagram of an OTP generation key verifying unit according to an embodiment;
5 is a block diagram of a service server according to an embodiment;
6 is a block diagram of an OTP authentication server according to an embodiment;
7 is a block diagram of a smart object authentication system in accordance with a variation of an embodiment.
8 is a flowchart illustrating a smart object authentication method according to an embodiment of the present invention.
FIG. 9 is a flowchart for explaining a smart object authentication method according to a modification of the embodiment; FIG.
10 is a flowchart illustrating a smart object authentication method according to another modification of the embodiment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. It will be apparent to those skilled in the art that the present invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, It is provided to let you know. Wherein like reference numerals refer to like elements throughout.

It is to be clarified that the division of components in this specification is merely a division by main function which each component is responsible for. That is, two or more constituent parts to be described below may be combined into one constituent part, or one constituent part may be divided into two or more functions according to functions that are more subdivided. In addition, each of the constituent units described below may additionally perform some or all of the functions of other constituent units in addition to the main functions of the constituent units themselves, and that some of the main functions, And may be carried out in a dedicated manner. Accordingly, the presence or absence of each component described in this specification should be interpreted as a function. For this reason, it is clear that the constitution of the components of the smart object authentication system and method of the present invention can be varied within the scope of achieving the object of the present invention.

1 is a block diagram of a smart object authentication system in accordance with an embodiment of the present invention. FIG. 2 is a block diagram of an OTP card unit according to an embodiment, FIG. 3 is a block diagram of a smart terminal according to an embodiment, FIG. 4 is a block diagram of an OTP generation key verification unit according to an embodiment, FIG. 6 is a block diagram of an OTP authentication server according to an exemplary embodiment of the present invention. Referring to FIG.

1 to 6, a smart object authentication system according to an embodiment of the present invention includes a user terminal 100 connected to a service server 400 to perform an electronic banking service, and performs user authentication according to OTP input, An OTP card unit 200 storing a generation key for generating an OTP, a smart terminal 300 receiving an generated key from the OTP card unit 200 to generate an OTP, A service server 400 for providing a service according to an authentication result for the OTP, and an OTP authentication server 500 for authenticating an OTP provided from the service server 400.

The user terminal 100 uses a device capable of accessing the service server 400 and performing user authentication using a wired / wireless network (including a public telephone network and a mobile communication telephone network). Preferably, a PC, a notebook, a smart phone, a tablet, a landline telephone, or the like can be used as a user terminal.

The OTP card unit 200 includes a card body 210 having a thickness of 0.1 to 1.5 mm, an NFC tag 220 for communicating with the OTP card unit 200, an OTP And a key storage unit 230 in which a generation key is stored.

The body 210 is formed in the shape of a rectangular plate. If the thickness of the body 210 is less than 0.1 mm, the body 210 is easily broken, and if it is thicker than 1.5 mm, the body 210 is not portable. Since the body 210 is manufactured in the shape of a square card, a business card, and a thickness, the user can easily carry the body 210 to his or her wallet or business card holder.

The present invention is not limited to this, and the body 210 may be formed in the form of a film having an adhesive function on one side. Thereby, there is an advantage that the OTP card unit 200 can be attached to various spaces desired by the user.

The NFC tag 220 performs communication through contact with the smart terminal 100.

In the key storage unit 230, an OTP generation key linked with the smart terminal number is stored.

The OTP card unit 200 provides OTP generation key information linked with the corresponding smart terminal number to the smart terminal 300 through communication between the NFC tag 220 and the smart terminal 300. At this time, if the number of the smart terminal 300 is not correct, the smart terminal 300 may not perform another operation. On the other hand, an IC chip may be formed on the OTP card part.

In this embodiment, the key information stored in the key storage unit 230 includes smart terminal number information and OTP generation key information. It is effective that they are encrypted through a separate encryption technique.

Since the OTP generation key information is stored in a separate card, the OTP generation program and the key can be separated. In addition, since the key for generating the OTP is linked with the smart terminal number and is encrypted with the encryption technology, the security can be greatly improved.

The smart terminal 300 includes an NFC communication unit 310 for communicating with the OTP card unit 200, an OTP generation key verification unit 320 for verifying the validity of the generated key provided from the OTP card unit 200, An OTP generation unit 330 for generating an OTP number using time information, OTP generation key information and smart terminal information through an algorithm of the OTP generation unit 330, a screen display unit 340 for displaying the generated OTP number on the screen, An information management unit 350 for storing smart terminal information and the like, a user authentication unit 360 for performing user authentication, and a controller 370 for controlling operations of the respective units of the smart terminal 300.

The NFC communication unit 310 receives the key information stored in the OTP card unit 200 through the proximity communication with the NFC tag 220. When the NFC communication is performed, The control unit 360 can be automatically driven.

The OTP generation key verification unit 320 includes a decryption unit 321 for decrypting the key information provided from the OTP card unit 200 and information for extracting smart terminal unique information and OTP generation key information from the decrypted key information A separation unit 322 and an authentication drive unit 323 for driving the user authentication unit 360 to operate the OTP generation unit 330. [

It is effective that the decryption unit 321 has a decryption algorithm corresponding to the encryption algorithm of the key information stored in the OTP card unit 200 and decrypts the key information through the decryption algorithm. If the algorithm of the decryption unit 321 is not correct, the OTP generation key verification unit 320 does not perform any operation. That is, the operation is ended.

The information demultiplexing unit 322 extracts smart terminal unique information and OTP generation key information through bit-by-bit classification of the decoded information. Then, the information separating unit 322 checks whether the extracted smart terminal unique information matches the unique information of the current smart terminal. If they do not coincide with each other, they are displayed on the screen display unit 340, and all operations are terminated.

Here, it is effective to use the terminal model information, the telephone number information, the kernel version information, and the build number information as the smart terminal unique information. Accordingly, the smart terminal 300 used by the user can be identified.

The authentication drive unit 323 drives the user authentication unit 360 for operating the OTP generation unit 330 according to the result of the information separation unit 322. Of course, it is also possible to perform other necessary authentication operations.

At this time, it is effective that the user authentication unit 360 performs user authentication by inputting user identification information. When the user authentication is completed, the OTP generation unit 330 having the OTP generation algorithm module is driven.

Of course, the authentication driver 323 may compare smart device unique information to determine whether the user authentication unit 360 is driven.

The OTP generation unit 330 generates an OTP number using the OTP generation key information, smart terminal information, and time information decoded and extracted through information separation.

The OTP generation algorithm of the OTP generation unit 330 may be implemented with various types of secret key encryption schemes including a hashing algorithm. At this time, the encryption method may include DES, T-DES, ARIA, and the like. It is effective to use smart terminal number as smart terminal information.

The generated OTP number is displayed on the screen display unit 340. The OTP generation unit 330 generates a new OTP number every predetermined time period according to the change of the time information.

The information management unit 350 stores the provided standard time information and smart terminal number information. Of course, the information in the smart terminal and the information provided from the outside are stored.

The OTP number displayed through the smart terminal 300 is provided to the service server 400 through the user terminal 100.

The service server 400 includes a terminal communication unit 410 for performing communication with the user terminal 100 and the smart terminal 300, a server user authentication unit 420 for performing user authentication using the OTP number, A service providing module 430 for providing various types of services requested by the user according to the result, and an OTP authentication communication unit 440 for checking whether the OTP number is authenticated.

The key information input unit 450 encrypts and inputs the key information (OTP generation key information and smart terminal unique information) to the OTP card unit 200, and the encryption information providing unit 460 And an algorithm providing unit 470 for providing an OTP generation algorithm to the smart terminal 300.

It is effective that the terminal communication unit 410 uses various communication methods depending on a communication method of the user terminal 100 and the smart terminal 300 and uses a wired / wireless communication network.

The server user authentication unit 420 requests the user terminal 100 to input an OTP and transmits the inputted OTP number to the OTP authentication server 500 through the OTP authentication communication unit 440. [ Then, the OTP authentication server 500 confirms that the authentication is normally performed, and performs user authentication.

Of course, the server user authentication unit 420 may use various authentication methods such as input of personal PIN number in addition to the OTP number.

The service providing module 430 provides the service requested by the user when the user authentication is completed. At this time, the service may be a financial service.

The OTP authentication communication unit 440 transfers the OTP number provided to the server user authentication unit 420 to the OTP authentication server 500 to authenticate whether the OTP number is appropriate. The information of the key information input unit and the algorithm providing unit is shared with the OTP authentication server 500.

The OTP authentication communication unit 440 may provide the OTP authentication server 500 with the key information and the smart terminal unique information corresponding thereto to generate a separate OTP number at the server.

The OTP authentication server 500 includes a server communication unit 510 for performing communication between the user terminal 100 and the smart terminal 300 and the service server 400, A verification OTP generation unit 520 for generating an OTP number for verification using the information, an authentication decision unit (not shown) for determining whether the OTP number for verification is matched with the OTP number provided from the service server 400, 530). It is effective that the OTP authentication server 500 further includes a separate storage unit (not shown).

The present invention is not limited to the above-described embodiments, and various authentication systems can be implemented.

As a modification of this embodiment, the smart terminal 300 may be used as the user terminal 100 described above. In this case, the user can access the service server 400 through the smart terminal 300 and automatically transmit the OTP number generated through the smart terminal 300 and the OTP card unit 200 to the service server 400.

Of course, the user terminal 100 may use a wired / wireless telephone. At this time, the service server 400 is provided with a connection unit (not shown) for connection with a wired / wireless telephone and can transmit the OTP number to the service server 400 through the button input method of wired / wireless telephone.

Also, in the above-described embodiment, the OTP generation key information stored in the OTP card unit 200 is encrypted together with the unique information of the smart terminal 300, but not limited to this, only the OTP generation key information can be stored. Accordingly, the configuration of the OTP generation key verifying unit 320 in the smart terminal 300 can be simplified.

In addition, as a modification of this embodiment, it is also possible to enhance the security by performing the Smart OTP authentication and the external OTP authentication as described above, which will be described with reference to the drawings.

7 is a block diagram of a smart object authentication system according to a modification of the embodiment.

As shown in FIG. 7, the smart object authentication system according to the present modification includes a user terminal 100 requesting user authentication according to a smart OTP and an external OTP input, an OTP card unit 100 storing key information for smart OTP generation, A smart terminal 300 for generating a smart OTP number through an algorithm for smart OTP generation, an OTP authentication server 500 for performing authentication for a smart OTP number, an OTP terminal for generating an external OTP An external OTP server 700 for authenticating an external OTP number and a smart OTP number and an external OTP number from the user terminal 100 and receiving the smart OTP number and the external OTP number from the OTP authentication server 500 and the external OTP server 600, And a service server 400 for transmitting the verification result to the verification server 700 and verifying the verification result and providing the service according to the verification result.

As described above, the security can be greatly improved through a plurality of authentications using the Smart OTP and OTP terminal 600 using the smart terminal 300.

In addition, the technology of the present embodiment can implement voice support through the smart terminal 300. [ That is, the smart terminal 300 may be provided with a separate voice support unit to inform the user of the entire process related to the OTP generation of the smart terminal 300 by voice.

In the modification of this embodiment, only about half of the original key information (about 40% to 60%) is stored in the OTP generation key information stored in the OTP card unit 200, and the remaining information is stored in the OTP authentication server 500 It is effective to store them in the memory. That is, even if the OTP generation key information stored in the OTP card unit 200 is distributed to the outside due to the OTP generation key information being distributed and stored, it can be safely protected since it is not complete key information.

To this end, the smart terminal 300 further includes an authentication server communication unit (not shown) for receiving the remaining key information (OTP generation key information) corresponding to smart terminal unique information from the OTP authentication server 500, (Not shown) for communicating with the smart terminal 300, and a storage unit (not shown) for storing the remaining key information. Of course, the smart terminal 300 can receive the remaining key information from the OTP authentication server 500 through the service server 400.

If the OTP card unit 200 is contacted with another smart terminal 300, the OTP generation unit 330 and the user authentication unit 360 in the smart terminal 300 are driven, Half key information is provided. Also, the smart terminal 300 receives the remaining key information corresponding to the terminal information through the service server 400 or the OTP authentication server 500. At this time, if the two pieces of key information are not the original information, the OTP is not generated or the generated OTP can not be authenticated.

In the following, an authentication method using the SmartOptic authentication system having the above-described configuration will be described.

8 is a flowchart illustrating a smart object authentication method according to an embodiment of the present invention.

As shown in FIG. 8, the OTP card unit 200 linked with the smart terminal 300 is issued (S110).

To this end, the service server 400 generates and issues the OTP card unit 200 by matching the unique information of the smart terminal 300 with the OTP generation key information provided from the OTP authentication server 500. At this time, OTP generation key information can be stored through encryption. The unique information of the smart terminal 300 and the OTP generation key information are transmitted to the OTP authentication server 500. For this purpose, it is effective for the user to visit a store or a branch connected to the service server.

The service server 400 also provides an algorithm for OTP generation to the smart terminal 300 to install the OTP generation unit 330, the OTP generation key verification unit 320, and the user authentication unit 360. Algorithm information for OTP generation is also shared with the OTP authentication server 500. Of course, the algorithm and program information may be provided to the smart terminal 300 by the OTP authentication server 500 and shared by the service server 400.

The user confirmation of the smart terminal 300 may be additionally performed to issue the OTP card unit 200. [ For this, it is possible to perform user confirmation using SNS or ARS information.

Hereinafter, the case where the user desires to access the service server 400 to receive the service will be described.

The user accesses the service server 400 through the user terminal 100 and requests a service (S120). At this time, the service may include a financial service or the like.

Then, the service server 400 requests authentication information including an OTP number for user authentication (S130).

At this time, the authentication information may include password information set by the user.

In the following, authentication using the OTP number will be mainly described.

Then, the smart terminal 300 is contacted with the OTP card unit 200 to generate an OTP number (S140).

The information sharing by the NFC proceeds and the key information stored in the OTP card unit 200 is provided to the smart terminal 300 and the user authentication unit 360 of the smart terminal 300 is automatically executed.

Then, when user authentication is completed, OTP generation key information is extracted from the key information provided by the OTP generation key verification unit 320 (S150).

Here, if the key information stored in the OTP card unit 200 is not encrypted, the key information extraction step for OTP generation may be omitted.

Then, the OTP number is generated using the OTP generation key information, the time information, and the smart terminal information (i.e., user information) and displayed (S160). At this time, the smart terminal information may be a smart terminal number, and may be separate information (for example, unique number) set by the user (i.e., input to the service server).

Then, the generated OTP number is input to the service server 400 to request authentication (S170). The service server 400 verifies the OTP number by transmitting the generated OTP number and the stored smart terminal information (i.e., user information) to the OTP authentication server 500. [

Then, the OTP authentication server 500 generates an OTP number for verification using the provided smart terminal information, the stored OTP generation key information, and the time information, and performs verification by comparing the transmitted OTP number with the verification OTP number (S180).

If the numbers are the same, the verification success is provided to the service server 400, and if the numbers are different, the verification failure is provided to the service server 400.

Then, when the verification is completed, the service server 400 provides the service requested by the user (S190).

In addition, the smart object authentication method according to the present invention is not limited to the above description, and various modifications are possible.

In this modified example, a user can generate an OTP number through a smart terminal of a non-smart terminal. This is possible because the key information for OTP generation and the smart terminal unique information corresponding to the key information of the OTP card are produced in an encrypted form.

FIG. 9 is a flowchart illustrating a smart object authentication method according to a modification of the embodiment.

9, the user accesses the service server using the terminal (S210).

Next, the second smart terminal is brought into contact with the OTP card unit 200 interlocked with the first smart terminal to generate the OTP number (S220).

The key information stored in the OTP card unit 200 is provided to the second smart terminal. Here, the key information is encrypted.

Then, the decryption key information inputted by the user is inputted to decrypt the key information provided through the OTP card unit. That is, the user inputs decryption key information to the second smart terminal. At this time, the decryption key information may be an input value such as a number or a separate character. Through this, encryption of the key information is decrypted (S230).

If the key information matches, the decoding of the key information proceeds. If the key information does not match, the process ends.

Next, the first smart terminal unique information and OTP generation key information are extracted according to the decoding of the key information (S240).

At the same time, when the authentication is successful, the OTP number is generated in the second smart terminal using the OTP generation key information, the time information, and the decrypted first smart terminal information at step S250.

That is, the OTP generation unit in the second smart terminal can generate the OTP number using the decrypted first smart terminal information instead of the information of the second smart terminal.

Then, the generated OTP number is input to the service server 400 (S260), and the service server 400 provides the generated OTP number to the OTP authentication server 500 to check the validity of the OTP number (S270).

When the validation is completed, the service server 400 provides the service requested by the user (S280).

In addition, this embodiment can provide a smart object authentication method using another embodiment.

This is because some of the OTP generation key information is stored in the OTP card unit 200 and the remaining OTP generation key information is stored in a separate storage space, for example, in the OTP authentication server 500, 300) to generate an OTP number.

10 is a flowchart for explaining a smart object authentication method according to another modification of the embodiment.

10, the user accesses the service server using the terminal (S310).

Next, in order to generate the OTP number, the smart terminal 300 is contacted with the OTP card unit 200 to receive the first OTP generation key information stored in the OTP card unit 200 (S320).

Next, the unique information of the smart terminal 300 is provided to the OTP authentication server 500 and the second OTP generation key information corresponding to the unique information is provided (S330).

In order to do this, the user may provide the unique information of the smart terminal 300 to the OTP authentication server 500 and store the key information for OTP generation associated with the smart terminal 300 in advance. The OTP generation key information may be separately stored in the first and second OTP generation key information. For this operation, the service server 400 may serve as an intermediate medium.

Then, the OTP generation key information is generated by merging the first OTP generation key information and the second OTP generation key information (S340).

Simultaneously, user authentication is performed. If authentication is successful, an OTP number is generated using OTP generation key information, time information, and smart terminal information (S350).

Then, the generated OTP number is inputted to the service server, and the service server provides it to the OTP authentication server to check the validity of the OTP number (S360).

When the validation is completed, the service server provides a service requested by the user (S370).

It is effective that the information provided to the smart terminal in the OTP card unit or the OTP authentication server in the above embodiments and modifications is automatically deleted when OTP authentication is completed.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention.

100: User terminal 200: OTP card part
300: smart terminal 310: NFC communication part
320: OTP generation key verification unit 330: OTP generation unit
340: Screen display section 350: Information management section
360: user authentication unit 370:
400: service server 410:
420: server user authentication unit 430: service providing module
440: OTP authentication communication unit 500: OTP authentication server

Claims (13)

A user terminal connected to the service server for performing electronic banking related services and performing user authentication according to OTP input;
An OTP card unit storing a generation key for OTP generation;
A smart terminal for receiving the generated key from the OTP card unit and generating an OTP;
A service server for providing a service according to an authentication result of the OTP provided from the user terminal; And
And an OTP authentication server for authenticating an OTP provided from the service server,
Wherein a portion of the generated key information for generating the OTP is stored in the OTP card unit, and the remaining information is stored in the OTP authentication server.
A user terminal for performing user authentication according to smart OTP and external OTP input;
An OTP card unit storing a generation key for OTP generation;
A smart terminal for receiving the generated key from the OTP card unit and generating an OTP;
An OTP terminal for generating an external OTP;
A service server for providing a service according to an authentication result of the smart OTP and the external OTP received from the user terminal;
An OTP authentication server for authenticating a smart OTP provided from the service server; And
And an external OTP authentication server for authenticating an external OTP provided from the service server,
Wherein a portion of the generated key information for generating the OTP is stored in the OTP card unit, and the remaining information is stored in the OTP authentication server.
3. The method according to claim 1 or 2,
The OTP card unit includes a card-shaped body, an NFC tag for performing communication, and a key storage unit for storing OTP generation key information linked with the smart terminal number provided from the service server.
Wherein the key information stored in the key storage unit is encrypted with smart terminal number information and OTP generation key information. 3. The method of claim 2,
The smart terminal includes an NFC communication unit for performing communication with the OTP card unit, an OTP generation key verification unit for decrypting and validating the key information provided from the OTP card unit, An OTP generation unit for generating an OTP number using key information and smart terminal information, a screen display unit for displaying the generated OTP number on the screen, an information management unit for storing time information and smart terminal information, And a control unit (370) for controlling operations of the respective units of the smart terminal. 5. The method of claim 4,
The OTP generation key verification unit includes a decryption unit for decrypting the key information provided from the OTP card unit, an information separation unit for extracting smart terminal unique information and OTP generation key information from the decrypted key information, And an authentication driver for driving the user authentication unit for operation.
3. The method according to claim 1 or 2,
The service server includes a terminal communication unit for performing communication with the user terminal and the smart terminal, a server user authentication unit for performing user authentication using the OTP number, and a service providing service requested by the user according to the user authentication result And an OTP authentication communication unit for verifying whether or not the OTP number is authenticated. The method according to claim 6,
The service server further includes a key information input unit for encrypting and inputting key information to the OTP card unit, an encryption information providing unit for providing key encryption and decryption information, and an algorithm providing unit for providing an OTP generation algorithm to the smart terminal And the smart off-chip authentication system.
delete Issuing an OTP card interlocked with the smart terminal and storing an internal communication function and OTP generation key information;
Accessing a service server and requesting a service;
The service server requesting authentication information including an OTP number;
Extracting OTP generation key information by contacting the smart terminal with an OTP card;
Generating OTP numbers using OTP generation key information, time information, and smart terminal information;
Inputting the generated OTP number to the service server and requesting authentication approval;
The service server verifying the OTP number by transmitting the OTP number and the stored smart terminal information to the OTP authentication server; And
Providing a service according to the verification result of the OTP number through the OTP authentication server,
Wherein the step of extracting key information for OTP generation includes receiving key information encrypted by the smart terminal and extracting key information for OTP generation and smart terminal unique information according to an input decryption code, Ottype authentication method.
10. The method of claim 9,
Further comprising the step of performing user authentication by inputting a user's unique number before the step of generating the OTP number.
delete delete delete

Images