KR20020020141A - Method for recovering an user secret number in a mobile communication system - Google Patents

Abstract

The present invention relates to a password recovery method using an encryption code of a mobile communication terminal.

That is, the present invention, in the password recovery method using the encryption code of the mobile communication terminal to recover the password by inputting the encryption code generated through the user authentication process between the client and the authentication center, if a predetermined encryption code is input to the terminal A first step of determining whether an input encryption code is input correctly; A second step of determining whether a current time is in a margin state when an encryption code inputted to a terminal is correctly input; A third step of displaying a password error message on the mobile communication terminal when the current time is in the margin as a result of the determination in the second step; As a result of the determination of the second step, if the current time is not in the margin state, the fourth step of confirming the user's password by displaying the password on the mobile communication terminal. Therefore, the present invention solves the inconvenience of having to visit the existing A / S center directly from the user's side and has the effect of convenience in use, and in terms of the size of the terminal user in the operator side, sales due to considerable labor cost, cost reduction, etc. This has the effect of increasing.

Description

How to recover password using encryption code of mobile terminal {METHOD FOR RECOVERING AN USER SECRET NUMBER IN A MOBILE COMMUNICATION SYSTEM}

The present invention relates to a password recovery method of a mobile communication terminal, and more particularly, to a password recovery method of a mobile communication terminal using an encryption code.

Recently, due to the development of electronic communication technology and lowering of semiconductor prices, the penetration rate of mobile communication terminals such as PCS and cellular phones is increasing.

The mobile communication terminal is provided with a lock function for protecting user's personal information, for example, address book information, message reception information, and the like, thereby preventing the leakage of personal information of its own from a third party. In other words, the lock function encodes a password that only the user can know and checks the data if the user's password input is matched. The password for the lock function usually consists of four digits. You may forget your password. In this case, the user had to pick up the terminal and visit the after-sales center.

That is, in the related art, when the user forgets the password of the terminal, the user has to visit the A / S center and confirm it directly, which raises the problem of inconvenience in use. In addition, the problem has been raised that even in terms of the size of the terminal user due to the operator, significant labor costs, expenses, etc. can occur.

Accordingly, the present invention has been made to solve the above-described problem, and performs a user authentication process between the terminal and the authentication center, and generates a password code according to the user authentication password of the mobile communication terminal to enable the user to verify the password by themselves The purpose is to provide a recovery method.

In order to achieve the above object, the present invention provides a password recovery method using a password code of a mobile communication terminal for recovering a password by inputting a password code generated through a user authentication process between a client and an authentication center. A first step of determining whether an input encryption code is correctly input if a code is input; A second step of determining whether a current time is in a margin state when an encryption code inputted to a terminal is correctly input; A third step of displaying a password error message on the mobile communication terminal when the current time is in the margin as a result of the determination in the second step; As a result of the determination of the second step, if the current time is not in the margin state, the fourth step of confirming the user's password by displaying the password on the mobile communication terminal, characterized in that the password recovery using the password code of the mobile communication terminal Provide a method.

1 is a schematic system diagram for implementing a method according to the present invention;

2 is a detailed flowchart of an encryption code generation process according to a preferred embodiment of the present invention;

3 is a detailed flowchart of a password recovery process according to a preferred embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

100: client

102: Certification Center

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

1 is a schematic system diagram for implementing a method according to the present invention, which includes a client 100 and an authentication center 102.

As shown, the client 100 may be a user registered with a mobile communication service provider or a terminal for connection with the authentication center 102. That is, the client 100 may be a wireless mobile terminal (eg, a cellular phone, a personal mobile communication (PCS), a PDA, an IMT-2000, etc.) accessible to a switch through a service user or a mobile communication control means such as a base station. Refers to.

In the present embodiment, only one such client 100 is shown for convenience of description, but may be provided in plural as necessary. Such facts will be easily understood by those skilled in the art.

The authentication center 102 must have a database of subscriber personal information, and performs a function of notifying the client 100 of the result through a person or ARS on the phone with the client 100.

Hereinafter, with reference to the above-described configuration, with reference to the flowchart of Figures 2 and 3 attached to the encryption code generation process and password recovery process of the mobile communication terminal according to a preferred embodiment of the present invention will be described in detail.

Prior to the description, in the encryption code generation method according to the present invention, since the authentication center 102 does not know the information about the password stored in the terminal of the client 100, the transmitting end encrypts and transmits specific data and the receiving end. It is not possible to apply a general encryption algorithm that recovers original data by decrypting the encrypted information. In addition, due to the memory constraints of the client-side terminal 100 and the characteristics of a real-time system, complex computational processes such as general encryption algorithms should be avoided. do.

Therefore, this process refers to "time data", which is information commonly known to the client 100, that is, the mobile phone user and the authentication center 102, in consideration of the periodic update of the encryption code (10 minutes). Set to specific data and decide to source for encryption. That is, if the time data from the authentication center 102 is encrypted, and the encrypted code is the same as the time information of the client-side terminal 100, the password information stored in the client-side terminal 100 is stored in the client-side terminal ( Display means on 100), for example, to output to the LCD screen.

First, in step S200 of FIG. 2, the authentication center 102 determines whether a password verification request is requested from the client 100 due to the loss of the password of the mobile communication terminal user, and when the password verification request is requested, the authentication center 102. ) Proceeds to step S202 to perform a user authentication process and proceeds to step S204.

In step S204, the authentication center 102 determines whether the user confirmation is verified according to the result of performing the user authentication process in step S202, and if the user confirmation is not verified, proceeds to step S206 to the lost terminal. Do not assume and provide the encryption code. However, if it is determined in step S204 that the user confirmation is verified, the process proceeds to step S208 to generate an encryption code. The encryption code is composed of eight digits, which are described in detail as follows.

First, the encryption code generation process may be roughly divided into a time information storage process, a code value generation process according to time information storage, an encryption code generation process, and an encryption code conversion process.

Here, the time information storing process is a process of storing all time data consisting of year / month / day / hour / minute to prevent duplication of the encryption code to be finally generated (date_save [0/2/4/6] = Last digit of year / month / date / time, date_save [1/3/5/7] = first digit of month / day / hour / minute), and the code value generation process This is the process of creating a value. This code value may be represented as follows.

code_left = 100 * (10 * (time_save [1] +1) + time_save [0]) + 10 * (time_save [3] +1) + time_save [2]

code_right = 100 * (10 * (time_save [5] +1) + time_save [4]) + 10 * (time_save [7] +1) + time_save [6]

Since these values are stored without overlap at all for each time data that is changed in 10 minute periods, such pairs of code_left and code_right values exist only for a specific time of 10 minute periods within a 10-year range. Then, focusing on the range of the last digit value of year / month / day / time is 0 to 9, placing the values at the place of day, and preventing the value of code_left and code_right from being 0, month / day / Insert +1 for the first digit of the hour / minute.

Meanwhile, the encryption code generation process is a process of multiplying and generating an offset value and a prime number value to the code value generated as described above. That is, in order to remove the regularity of the time data, a code code is generated by summing code_left * OFFSET_SIZ and code_right * PRIME_NUM. In other words, since code_left is a part that is hardly updated with time change, it is multiplied by an offset value to represent only the location information of a code. Since code_right is a part that is frequently updated, the repeatability and rule of a number is updated every time. To get rid of the last name, multiply by a decimal value. At this time, the prime value is 24137, which is the 2688th prime by referring to the prime number table, which means that the product with 3663, the largest code_right value that can be obtained from time data, does not exceed 8 digits. The largest possible value was selected from the range of values in which no flow would occur. The offset value is a value that can change significantly even with a small change in the code_left value, and the final final code code value is more than eight digits, that is, the largest possible value among the ranges in which no overflow will occur. Selected.

Finally, the encryption code conversion process is a process of converting the position of the generated encryption code, and since the value of the encryption code increases in time, the position of each encryption code is completely eliminated. It is the process of changing the number as a whole.

At this time, the code generation program of the authentication center 102 reads the time data stored in the CMOS memory of the computer, and the time information for the decryption program implemented in the client-side terminal 100 is provided from the base station. In order to obtain, it is necessary to exactly synchronize the computer time of the authentication center 102 and the time of the client-side terminal 100.

On the other hand, when the encryption code generation as described above is completed, the authentication center 102 proceeds to step S210 to notify the client 100 the generated encryption code. This notification process is a process of informing a client or a client by telephone through ARS, and this fact will be easily understood by those skilled in the art.

On the other hand, in step S300 of FIG. 3, the client-side terminal 100 determines whether the predetermined code data is input by the user, and if the predetermined code data is input by the user, the process proceeds to step S302 and the current client. It is determined whether the encryption code inputted to the terminal 100 is correctly input.

As a result of the determination in step S302, if the encryption code is not input correctly, the client-side terminal 100 proceeds to step S304 and displays a password error message on the display means not shown, but if the encryption code is input correctly The client-side terminal 100 proceeds to step S306 to determine whether the current time is a margin state, that is, when the encryption code is updated.

As a result of the determination in step S306, if the current time is at the margin, the client-side terminal 100 proceeds to step S304 and displays a password error message on the display means not shown.

However, as a result of the determination in step S306, if the current time is not in the margin state, the client side terminal 100 proceeds to step S308 and displays the password of the client side terminal 100 on the display means.

On the other hand, if the user does not check the password information within the time limit (S310), the process proceeds to step S300 and must enter the informed password code again, if the user checks the lost password, the process is terminated.

As described above, the present invention implements a user authentication process between the terminal and the authentication center, and generates a different encryption code for user authentication to notify the user of the password.

Therefore, the present invention solves the inconvenience of having to visit the existing A / S center directly from the user's side and has the effect of convenience in use, and in terms of the size of the terminal user in the operator side, sales due to considerable labor cost, cost reduction, etc. This has the effect of increasing.

Claims (4)

In the password recovery method using the encryption code of the mobile communication terminal for recovering a password by inputting the encryption code generated through the user authentication process between the client and the authentication center, A first step of determining whether an input encryption code is correctly input when a predetermined encryption code is input to the terminal; Determining whether a current time is in a margin state when an encryption code inputted to the terminal is correctly input; A third step of displaying a password error message on the mobile communication terminal when the current time is in the margin as a result of the determination in the second step; As a result of the determination of the second step, if the current time is not in the margin state, the fourth step of confirming the user's password by displaying the password on the mobile communication terminal, characterized in that using the encryption code of the mobile communication terminal How to recover your password. The method of claim 1, The encryption code generation, Requesting, by the client, a password confirmation from an authentication center; Performing an authentication process in the authentication center; Performing a user verification process according to the authentication process; And as a result of the user verification process, generating a predetermined encryption code and notifying the client if the client is confirmed as the client. The method of claim 1, The margin state is a password recovery method using an encryption code of a mobile communication terminal, characterized in that the time point when the encryption code is updated. The method of claim 1, The encryption code generation, Storing time data composed of year / month / day / hour / minute and generating a code value accordingly; Generating an encryption code by multiplying the generated code value by an offset value and a prime value; Converting the number of digits of the generated encryption code password recovery method using the encryption code of the mobile terminal.