Back to results
US 9,426,655 B2Granted
Legal authentication message confirmation system and method
AssigneeSecuve Co., Ltd.
InventorKi-Yoong Hong
Life of this patent
Estimating the term…
Abstract
Provided is a system for preventing personal information leakage and, more particularly, related to a legal authentication message confirmation system and method which enables a user to identify whether an authentication message transmitted to the user's mobile communication terminal during user authentication originates from a trusted source, thereby preventing damage caused by pharming, smishing, and the like, such as personal information leakage and small sum payment fraud.
Claims11
A system for checking a legitimate authentication message, comprising:
- a source checking server for, when an authentication message legitimacy determination request signal including origination identification information is received, determining whether a source that sent an authentication message causing the authentication message legitimacy determination request signal is a legitimate source, based on the origination identification information included in the received signal, and providing notification of results of the determination;
- and
- a mobile communication terminal for, when a message is received, analyzing the message, determining whether the message is an authentication message, detecting origination identification information when the message is the authentication message, transmitting the authentication message legitimacy determination request signal including the origination identification information to the source checking server, and processing the authentication message based on result information when the result information is received from the source checking server in response to the authentication message legitimacy determination request signal,
- wherein the system further comprises:
- a message sending server for, when an event to send an authentication message to the mobile communication terminal occurs, generating and storing a unique verification value for an authentication message to be sent, and sending an authentication message including origination identification information and the verification value to the mobile communication terminal;
- and
- a service server unit including a service server for, when a source inquiry request signal is received, comparing a verification value included in the received source inquiry request signal with stored verification values, determining whether the verification value is a verification value generated by the service server, and transmitting source authentication results including result information of the determination to the source checking server,
- wherein the source checking server comprises a business information database (DB) for storing pieces of origination identification information and information of service server units corresponding to the respective pieces of origination identification information, and
- wherein the mobile communication terminal is configured to, when a message is received and the message is an authentication message, check whether a verification value is included in the authentication message, and when the verification value is included, send an authentication message legitimacy determination request signal further including the verification value to the source checking server, receive result information responding to the request signal from the source checking server, and process the authentication message based on the result information, and
- wherein the source checking server is configured to, when the authentication message legitimacy determination request signal is received, search the business information DB for information about a service server unit corresponding to the origination identification information, transmit a source inquiry request signal including the verification value to the service server unit having the origination identification information, receive source authentication results from the service server unit in response to the request signal, and transmit corresponding result information to the mobile communication terminal.
7 more elements
A method for checking a legitimate authentication message, comprising:
- an authentication message sending operation of allowing a message sending server to generate and store an unique verification value for an authentication message to be sent to a user of a mobile communication terminal when an event to send an authentication message to the mobile communication terminal occurs, and to send an authentication message including origination identification information and the verification value to the mobile communication terminal;
- a source checking request operation of allowing the mobile communication terminal to hook and store the authentication message when the authentication message is received, detect the origination identification information and the verification value from the hooked authentication message, and transmit an authentication message legitimacy determination request signal including the detected origination identification information and verification value to a source checking server;
- a source inquiry request operation of, when the authentication message legitimacy determination request signal is received, allowing the source checking server to generate a source inquiry request signal including the origination identification information and the verification value included in the received authentication message legitimacy determination request signal, and transmit the source inquiry request signal to a service server unit;
- a source inquiry result information notification operation of allowing the service server unit to compare verification values generated and stored by the message sending server with the verification value included in the source inquiry request signal, determine whether the authentication message is an authentication message sent by the service server unit, and notify the source checking server of result information of the determination;
- a source checking operation of allowing the source checking server to provide the result information received from the service server unit to the mobile communication terminal;
- and
- a message processing operation of allowing the mobile communication terminal to receive the result information and process the authentication message depending on the result information.
4 more elements
Dependencies are inferred from the claim text.