Instant log-in method for authentificating a user and settling bills by using two different communication channels and a system thereof

• US 20060179304A1
• Filed: 03/31/2003
• Published: 08/10/2006
• Est. Priority Date: 03/30/2002
• Status: Active Grant

• Current Assignee: Momocash Incorporated
• Original Assignee: Momocash Incorporated
• Inventors: Han, Min-Gyu
• Granted Patent: US 8,024,567 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method for authenticating a user of certain service provided by a system through a first communication channel, in one aspect including receiving an access request from a first terminal of the user through the first communication channel; receiving an address or number of a second terminal of the user through the first communication channel; transferring data including an identification code, to the second terminal of the user through a second communication channel; receiving a user confirmation response, including the user identification code, from the second terminal of the user through the second communication channel; determining whether the identification code transferred to the second terminal is identical to the user identification code received from the second terminal; generating an authentication code if it is determined that both the user identification codes are identical to each other; transferring the user authentication code to the first terminal of the user through the first communication channel.

Claims

1. A method for authenticating a user who wants to use a certain service provided by a system through a first communication channel, comprising the steps of:

receiving an access request from a first terminal of the user through the first communication channel;

receiving an address or number of a second terminal of the user through the first communication channel;

transferring data for user identification, including a user identification code and address data for receiving the user identification code from the second terminal, to the second terminal through a second communication channel;

receiving the user identification code from the second terminal by using the address data;

determining whether the user identification code transferred to the second terminal is identical to the user identification code received from the second terminal;

generating a user authentication code if it is determined that both the user identification codes are identical to each other; and

transferring the user authentication code to the first terminal through the first communication channel.

2. The method as claimed in claim 1, wherein the address data include a callback number or callback uniform resource locator (URL) of a system for user identification.

3. The method as claimed in claim 2, wherein the data for user identification further include a prescribed identification symbol comprising a numeral, graphic image, or a special character such as an icon character, and the method further comprises the steps of:

transferring the identification symbol to the first terminal through the first communication channel and controlling the identification symbol to be displayed on the first terminal;

controlling the identification symbol to be displayed on the second terminal; and

allowing the user to determine whether the identification symbol displayed on the first terminal is identical to the identification symbol displayed on the second terminal and receiving a user confirmation response from the user accordingly.

4. The method as claimed in claim 1, wherein the second communication channel is a wireless network and the second terminal is a mobile communication terminal.

7. The method as claimed in claim 1, further comprising the step of storing the user identification code in a database means according to each user.

5-6. -6. (canceled)

8. A method for performing a settlement for a certain service provided by a system through a first communication channel, comprising the steps of:

receiving a number or address of a second terminal of the user from a first terminal of the user through the first communication channel;

transferring data for user identification, including a user identification code and address data for receiving the user identification code from the second terminal, to the second terminal through a second communication channel;

receiving a user confirmation response, including the user identification code, from the second terminal through the second communication channel by using the address data;

determining whether the user identification code transferred to the second terminal is identical to the user identification code included in the user confirmation response received from the second terminal; and

if it is determined that both the user identification codes are identical to each other, generating settlement information on the user and transferring the generated settlement information to a predetermined billing system.

9. The method as claimed in claim 8, wherein the address data include a callback number or a uniform resource locator (URL) of a system for settlement.

10. The method as claimed in claim 9, wherein the data for user identification further include a prescribed identification symbol comprising a numeral, graphic image, or a special character such as an icon character, and

the method further comprises the steps of:

transferring the identification symbol to the first terminal of the user through the first communication channel and controlling the identification symbol to be displayed on the first terminal;

controlling the identification symbol to be displayed on the second terminal; and

allowing the user to determine whether the identification symbol displayed on the first terminal is identical to the identification symbol displayed on the second terminal and receiving the user confirmation response from the user accordingly.

11. The method as claimed in claim 8, further comprising the step of controlling to cause the user to input a predetermined password into the second terminal.

12. A system for authenticating a user who wants to use a certain service through a first communication channel and, comprising:

an interface unit for performing communication with a first terminal of the user through the first communication channel;

a user identification code management unit for receiving an address or number of a second terminal of the user input by the user, and generating and managing a user identification code for the user;

a user identification code transferring/receiving unit for communicating with the second terminal of the user through a second communication channel; and

a user authentication code management unit for generating a user authentication code and transferring the user authentication code to the first terminal of the user through the first communication channel.

14. The system as claimed in claim 12, further comprising a user identification code database unit for classifying and storing the generated user identification code according to each user.

13. (canceled)