Authentication method using cellular phone in internet

• US 7,447,784 B2
• Filed: 01/18/2001
• Issued: 11/04/2008
• Est. Priority Date: 01/18/2000
• Status: Expired due to Fees

• Current Assignee: Microinspection Incorporated
• Original Assignee: Microinspection Incorporated
• Inventors: Eun, Tak
• Primary Examiner(s): Follansbee; John
• Assistant Examiner(s): Tang; Karen C
• Application Number:
  US10/181,159
• Publication Number:
  US 20030005136A1
• Time in Patent Office: 2,847 Days
• Field of Search: 709/224, 709/229, 709/225, 709/220, 395/187, 395/188
• US Class Current: 709/229
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

The present invention discloses an authentication method using a cellular phone in internet. According to the present invention, when connecting to internet or performing electronic commerce, the authentication is performed through the cellular phone in parallel with a personal information stored when user'"'"'s joining the cellular phone service, a number particular to the cellular phone, a secret number in an authentication required for the connection or the settlement of accounts. Specifically, in authentication process for making up accounts, besides the line connected to internet, a separate cellular phone line is used and if the authentication data of the internet site server is identical to that of the cellular phone service company, the authentication process is completed, thereby eliminating the danger of hacking basically.

Claims

1. A method of authenticating either a connection to an internet site server or an electronic payment in an electronic commerce server, the method comprising:

at the internet site server or the electronic commerce server, recording identification information and a cellular phone number from a prospective user wishing to connect to the internet site server or to undertake the electronic payment;

establishing communication from the internet site server or the electronic commerce server to an authentication server of a cellular phone company and relaying the identification information and the cellular phone number to the authentication server to initiate authentication of the prospective user by the authentication server based on a comparison of the identification information and recorded user information previously stored at the authentication server and associated with the cellular phone number;

seeking confirmation that the prospective user is authorized either to connect to the internet site server or to undertake an electronic payment by having the authentication server transmit a request for approval to the cellular phone number supplied from the prospective user via the internet site server or the electronic commerce server, the transmission performed by a short message service that is independent from the earlier connection between the prospective user and the internet site server or electronic commerce server;

at the authentication server, discriminating whether the prospective user uses the cellular phone identified by the cellular phone number in the identification information and, in response to the request for approval, if the prospective user transmits back to the authentication server a secret code previously stored in the authentication server as recorded user information associated with the cellular phone number;

at the authentication server, only approving the authentication for connection or electronic payment when the transmitted secret code is identical to the previously stored secret code;

from the authentication server, transmitting to the internet site server or the electronic commerce server an approval confirming the authority to connect to the internet site server or to undertake an electronic payment; and

informing the user of the approved result through the internet site server or the electronic commerce server that received the confirmation of the authority to connect.

2. The authentication method according to claim 1, wherein the authentication process between the cellular phone and the cellular phone service company is performed through a short message service and a communication for registration of location.

3. The authentication method according to claim 1, wherein a line establishing a high-degree of an encryption device and a security device is used between the authentication server of the cellular phone service company and the internet site server.

4. The authentication method according to claim 1, wherein the cellular phone stores an encryption algorithm or a random table data when applying for a service to the cellular phone service company.

5. The authentication method according to claim 1, wherein the authentication information includes a user'"'"'s personal information, a number particular to the cellular phone, and a secret code for approval authentication.

6. The authentication method according to claim 1, wherein in discriminating whether the cellular phone is registered, the authentication server of the cellular phone service company transmits a cipher to the cellular phone by an encryption algorithm or a random number table recorded when registering and thereafter discriminates whether the cellular phone is registered properly through a response signal.