USER AUTHENTICATION SYSTEM AND METHOD USING PERSONAL IDENTIFICATION NUMBER

• US 20120159598A1
• Filed: 12/20/2011
• Published: 06/21/2012
• Est. Priority Date: 12/21/2010
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: CHO, YOUNG SEOB, JIN, SEUNG HUN, CHO, SANG RAE, KIM, SOO HYUNG, NOH, JONG-HYOUK, CHOI, DAE SEON, KIM, SEUNG-HYUN
• Application Number:
  US13/331,137
• Publication Number:
  US 20120159598A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication

Abstract

A user authentication system using a personal identification number, includes a user terminal device for requesting issuance of a personal identification number from an authentication server, storing and displaying a personal identification number, and registering reference information used to permit verification of validity of the personal identification number on the authentication server. Further, the user authentication system includes an inquiry device for requesting verification of validity of the personal identification number from the authentication server, and receiving and displaying results of the verification. Furthermore, the user authentication system includes an authentication server for storing issuance information while issuing the personal identification number, determining whether to permit the verification of the validity of the personal identification number, if the inquiry device requests the verification of the validity, and replying with results of the verification, if it is determined that the verification of the validity is to be permitted.

Claims

1. A user authentication system using a personal identification number, comprising:

a user terminal device for requesting issuance of a personal identification number from an authentication server, storing and displaying a personal identification number issued by the authentication server, and registering reference information used to permit verification of validity of the personal identification number on the authentication server;

an inquiry device for requesting verification of validity of the personal identification number from the authentication server and thereafter receiving and displaying results of the verification; and

an authentication server for storing issuance information while issuing the personal identification number in response to a request of the user terminal device, determining whether to permit the verification of the validity of the personal identification number, based on results of a comparison between the information received from the inquiry device and the reference information if the inquiry device requests the verification of the validity, and replying with results of the verification based on the results of a comparison between the personal identification number received from the inquiry device and the issuance information if it is determined that the verification of the validity is to be permitted.

2. The user authentication system of claim 1, wherein:

the authentication server is configured to, if the inquiry device requests the verification of the validity, transmit details of a verification request for the personal identification number to the user terminal device, and reply with results of the verification or reply with a denial message depending on selection information received from the user terminal device; and

the user terminal device displays the details of the verification request, and thereafter replies by sending the selection information, input in response to the details of the verification request, to the authentication server.

3. A user terminal device, comprising:

a personal identification number requesting unit for requesting issuance of a personal identification number from an authentication server and receiving the personal identification number issued by the authentication server;

a provider registration unit for registering, on the authentication server, reference information that is used when an inquiry device requests verification of validity of the personal identification number from the authentication server via a provider of products or services and the authentication server determines whether to permit the verification of the validity;

a personal identification number storage unit for storing the personal identification number received by the personal identification number requesting unit; and

a display unit for displaying the personal identification number received by the personal identification number requesting unit.

4. The user terminal device of claim 3, further comprising a real-time approval unit configured to, if the inquiry device requests the verification of the validity and then the authentication server transmits details of a verification request for the personal identification number, display the details of the verification request on the display unit and reply by sending input selection information to the authentication server, thus allowing the authentication server to reply with results of the verification or reply with a denial message depending on the selection information.

5. The user terminal device of claim 3, further comprising:

a user information setting unit for receiving an Identification (ID) and a password of a user which have been previously registered on the authentication server;

a user information storage unit for storing the ID and the password; and

a user authentication unit for performing a procedure for authenticating the user by transmitting the ID and the password to the authentication server.

6. An inquiry device, comprising:

a personal identification number verification unit for transmitting a personal identification number, which is issued by an authentication server and is displayed by the user terminal device, to the authentication server, requesting verification of validity of the personal identification number from the authentication server, and receiving results of the verification of the validity from the authentication server in reply to the request; and

a display unit for displaying the results of the verification received by the personal identification number verification unit.

7. The inquiry device of claim 6, wherein the inquiry device comprises:

a provider information setting unit for receiving an Identification (ID) and a password of a provider which have been previously registered on the authentication server;

a provider information storage unit for storing the ID and the password; and

a provider authentication unit for performing a procedure for authenticating the provider by transmitting the ID and the password to the authentication server.

8. The inquiry device of claim 7, wherein the personal identification number verification unit transmits the personal identification number to the authentication server if the authentication procedure has been completed by the provider authentication unit.

9. An authentication server, comprising:

a personal identification number service unit for issuing a personal identification number in response to a request of a user terminal device, for generating issuance information while transmitting the personal identification number to the user terminal device, and for replying with results of verification of validity of the personal identification number based on results of a comparison between the personal identification number and the issuance information when an inquiry device having received the personal identification number requests the verification of the validity of the personal identification number;

a personal identification number storage unit for storing the personal identification number and the issuance information;

a provider verification unit for, when the user terminal device has previously registered reference information used to determine whether to permit the verification of the validity, determining whether to permit the verification of the validity, based on results of a comparison between the information received from the inquiry device by a provider of products or services and the reference information, and transferring results of the determination to the personal identification number service unit.

10. The authentication server of claim 9, further comprising a real-time inquiry unit for, when the inquiry device requests the verification of the validity, transmitting details of a verification request for the personal identification number to the user terminal device, and transferring selection information received from the user terminal device to the personal identification number service unit, so that the personal identification number service unit replies with results of the verification or replies with a denial message depending on the selection information.

11. The authentication server of claim 9, further comprising:

a user/provider information storage unit for storing an Identification (ID) and a password of a user which have been previously registered by the user terminal device, and an ID and a password of a provider which have been previously registered by the inquiry device; and

a user/provider authentication unit for processing authentication of the user or the provider based on results of a comparison between an ID and a password received from the user terminal device or the inquiry device and the ID and the password previously stored in the user/provider information storage unit.

12. A user authentication method using a personal identification number, the method being performed by a user authentication system using a personal identification number, comprising:

issuing the personal identification number;

generating and storing issuance information based on issuance of the personal identification number;

receiving registration of reference information used when determining whether to permit verification of validity of the personal identification number;

when the verification of the validity of the personal identification number is requested, determining whether to permit the verification of the validity based on results of a comparison with the reference information; and

if it is determined that the verification of the validity is to be permitted, providing results of the verification based on results of a comparison between the personal identification number and the issuance information.

13. The user authentication method of claim 12, wherein:

the determining whether to permit the verification of the validity is configured to, if a request for the verification of the validity is received from an inquiry device, transmit results of the verification request for the personal identification number to a user terminal device; and

the providing the results of the verification is configured to reply by sending the results of the verification or a denial message to the inquiry device depending on selection information of the user terminal device.

14. The user authentication method of claim 13, further comprising:

storing an Identification (ID) and a password of a user which have been previously registered by the user terminal device and an ID and a password of a provider which have been previously registered by the inquiry device; and

processing authentication of the user terminal device or the inquiry device based on results of a comparison between an ID and a password received from the user terminal device or the inquiry device and the previously stored ID and password.