KR101738408B1 - Method for certificating caller and apparatus thereof - Google Patents

Abstract

A sender authentication method for performing a sender authentication by a sender side communication company and transmitting the result as additional information together with a sender call so that a receiver terminal can easily grasp whether or not a call is from a sender authenticated by additional information, A suitable system is disclosed.
The sender authentication method
A first step of authenticating a caller connected to a caller terminal and providing first caller's call and first additional information indicating whether the caller is authenticated to a receiver's communication company connected to the receiver terminal;
A second step of the receiver side communication company checking the first additional information added to the caller call and providing the second additional information corresponding to the first additional information to the receiver terminal together with the caller call; And
A third step of causing the receiver terminal to display the second additional information provided from the receiver-side communication company so that the reception price confirms the type of the transmitter;
.

Description

[0001] The present invention relates to a method and apparatus for certifying a caller,

The present invention relates to a method for preventing financial phishing and a system suitable for the prevention of financial phishing, which is a public entity, and performs authentication of a sender by a sender side communication company and transmits the result as additional information in addition to a sender call, The present invention relates to a caller identification method and a system suitable for the caller identification method.

As a result of the development of information and communication technology, a large part of various financial transactions are dependent on online banking transactions made with a desktop PC or mobile. These online financial transactions are carried out without face to face, and recently, various kinds of financial fraud such as voice phishing or character phishing are being performed frequently.

Voice phishing is a financial fraud in which impersonating a prosecutor, a financial institution, a court, a financial institution, etc. is a financial fraud in which a financial transaction is induced or a personal financial information is subtracted. Character phishing, likewise, It is a fraudulent method of inducing financial transactions or extracting personal financial information through fraudulent writings.

Since the user can not verify that the other party's telephone number is actually the telephone number of the public agency for a short period of time during the call, even if the caller does not abandon voice phishing or actually calls the agency for inquiries, There is a problem that they will be disqualified that they are disrupted by the work.

Also, in the case of character phishing, the sender's number can be changed freely by the sender, so that there is a problem in that there is no way to confirm whether the sender is a public agency by confirming the telephone number.

In addition, even if it is judged that the other party is attempting to voice phish, most of them do not know how to report, how to collect the evidence, and how to report it, It is becoming one of the causes of eradication.

In order to solve the above problems, the present invention provides a caller authentication method for authenticating a caller on a caller side communication company, adding additional information indicating whether or not the caller is authenticated, For that purpose.

It is another object of the present invention to provide a system suitable for the above-described sender authentication method.

A caller identification method according to the present invention for achieving the above object

A caller authentication method for notifying a receiver whether a caller is an authorized caller,

A first step of authenticating a caller connected to a caller terminal and providing first caller's call and first additional information indicating whether the caller is authenticated to a receiver's communication company connected to the receiver terminal;

A second step of the receiver side communication company checking the first additional information added to the caller call and providing the second additional information corresponding to the first additional information to the receiver terminal together with the caller call; And

A third step of causing the receiver terminal to display the second additional information provided from the receiver-side communication company so that the reception price confirms the type of the transmitter;

And a control unit.

Here, the caller authentication in the first process is performed by checking whether or not the caller is connected to the caller-side communication company by a trunk line.

Alternatively, the caller authentication in the first process may be performed by a method in which the calling information is transmitted to the calling party's communication company by the calling information processing server interlocked with the calling party's private branch exchange and mutually confirmed.

Here, the first additional information is transmitted through an IP (Internet Protocol) network between the caller-side communication company and the receiver-side communication company.

Alternatively, the first additional information may be transmitted in a gateway interval between voice-based mobile communication networks.

As another method, the first additional information may be transmitted as a prefix to a Calling Identification Display (CID).

Here, the second additional information provided from the receiving side communication company to the receiver terminal is a push message.

According to another aspect of the present invention, there is provided a sender authentication system comprising:

A sender-side communication company that adds sender type information indicating a sender's affiliation to a receiver-side communication company when there is a sender call; And

And a receiver side communication company for converting the sender type information from the sender side communication company into a push message and providing the same to the receiver terminal,

And the receiver terminal displays a push message from the receiver side communication company.

Here, the caller-side communication company includes a caller authentication processing unit for confirming the caller type by confirming whether or not the caller's call is connected through the trunk line.

On the other hand, the caller-side communication company further includes a calling information receiver for receiving calling information transmitted by the calling information processing server interlocked with the calling party's private branch exchange,

Preferably, the caller authentication processing unit performs caller authentication by mutually confirming whether the trunk line is connected and the calling information.

Here, the sender type information is transmitted through an IP (Internet Protocol) network between a caller-side communication company and a receiver-side communication company.

On the other hand, the caller type information may be transmitted in a gateway interval between voice-based mobile communication networks.

On the other hand, the sender type information may be transmitted as a prefix to a Calling Identification Display (CID).

According to the caller authentication method of the present invention, the receiver can check whether the call of the caller is from a major institution at a glance without further inquiry, thereby determining whether or not to receive the call, and determining whether to provide personal information during the call .

According to the caller authentication system of the present invention, the receiver can display the caller type information or the logo on the existing call reception interface screen with the smart phone, thereby confirming whether or not the caller is an authenticated proper call.

1 is a flowchart briefly illustrating a caller authentication method according to the present invention.
2 shows a data flow diagram for a caller authentication method according to the present invention.
3 shows a configuration of an embodiment of the sender authentication system according to the present invention.
4 shows a configuration of another embodiment of the sender authentication system according to the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a flowchart briefly illustrating a caller authentication method according to the present invention.

When a call is originated from a caller terminal (hereinafter referred to as a caller call) (S100), it is checked whether or not a caller authentication service (secure call) exists (S110). If the caller authentication service is performed, a process according to the caller authentication service is performed ) The receiver terminal displays whether it is the authenticated caller (s130) and finally receives the call (s140)

2 shows a data flow diagram for a caller authentication method according to the present invention.

Referring to FIG. 2, the caller-side communication service provider confirms that the caller is a sender of the caller authentication service (secure call service), and performs caller authentication.

Caller authentication can be performed by verifying whether the caller is a trunked caller.

On the other hand, the originator authentication can be performed by a method in which the originating information is transmitted to the server of the originator's communication company by the originating information processing server interlocked with the originator's private branch exchange and mutually confirmed.

Here, a trunk connection refers to a connection using a centralized line connecting a local exchange and a local exchange for relaying inter-station signals. Public institutions, financial institutions, and the like are connected to the caller's communication company by a trunk line. The originator authentication service is a contract between a sender and a sender side communication company, and means a service for notifying whether a sender is a public entity through a receiver terminal.

The caller side communication provider performs the caller authentication process.

Specifically, the caller-side communication service provider verifies whether the caller authentication service target is a call from an authenticated caller. For example, by verifying that the caller's call has been received via the trunk line, the caller's call can be verified as a call from an authorized organization such as a public institution or a financial institution.

On the other hand, the originator authentication may be performed by a method in which the calling information is sent to the server of the sender side communication company by the additional device (originating information processing server) interlocked with the caller side private branch exchange and mutually confirmed.

When the caller is authenticated, the caller-side communication carrier generates first additional information indicating an identity and an originator name indicating whether or not the caller's call is the subject of the caller authentication service, and transmits the generated first additional information to the caller To the recipient carrier.

Table 1 shows an example of caller name.

The codes "1xx" to "8xx" can be assigned for callers authenticated by the trunk connection. Code "9xx" can be assigned to an unrecognized top-level caller, that is, to a caller who does not authenticate the caller, and code "0xx" can be assigned to a caller call from abroad.

The sender name can be code and sender type information.

For example, "1xx" (code); "Seoul Metropolitan Police Agency", "9xx" (code); "Unauthenticated sender", "0xx"; And "caller from abroad ".

The first additional information may be transmitted through an IP (Internet Protocol) network between a caller's communication service provider and a receiver's service provider, or may be transmitted as a prefix to a gateway section or a Calling Identification Display (CID) between voice-based mobile communication networks.

The receiver side service provider verifies the caller authentication service processing (secure call processing).

Specifically, the receiver-side communication carrier confirms whether the first additional information is transmitted along with the sender call, and converts the first additional information into information used between the receiver's communication company and the receiver terminal, and provides the second additional information to the receiver terminal as the second additional information .

For example, the second additional information may be the sender type information included in the first additional information, and the receiver communication company may convert the second additional information into a push message and transmit the same.

The receiver terminal displays the second additional information, for example, the sender type information, together with the sender call (s140)

The recipient terminal can confirm the type of the sender through the second additional information.

Here, the recipient terminal may display an icon corresponding to the type of the sender. The recipient terminal stores an icon matching the sender type, extracts sender type information from the received second supplementary information, and displays an icon corresponding thereto.

3 shows a configuration of an embodiment of the sender authentication system according to the present invention.

3, the caller authentication system according to the present invention includes a caller-side communication company 200 that performs a caller authentication process on a caller call from the caller terminal 100, a caller- And a recipient-side communication company 300 that performs a corresponding sender authentication verification process and provides it to the recipient terminal 400.

The sender side communication company 200 includes a service subscription confirmation unit 210 and a sender authentication processing unit 220.

The service subscription confirmation unit 210 confirms whether the caller is a caller authentication service subscriber.

The sender authentication processing unit 220 performs authentication on the sender's call of the subscriber subscribed to the sender authentication service (secure call service), and transmits an identification (identification) indicating whether or not the sender's call is the sender's call subject to the sender authentication service, And provides the generated first additional information together with the caller call to the receiver-side communication company.

The caller authentication processing unit 220 can confirm whether the caller's call is a call from an authorized institution such as a public institution or a financial institution by checking whether the caller's call is received through the trunk line.

The first additional information may be transmitted through an IP (Internet Protocol) network between the caller-side communication company 200 and the receiver-side communication company 300 or may be transmitted as a prefix to the gateway interval or the CID value between the voice-based mobile communication networks.

The sender authentication unit 310 of the receiver side communication company 300 confirms whether or not the first additional information indicating the identity and the sender name is added to the sender call received from the sender side communication company 200, And provides the second additional information to the receiver terminal 400 together with the caller's call.

The second additional information provided from the receiver side communication company 300 to the receiver terminal 400 may include an information providing method commonly used between the receiver side communication company 300 and the receiver terminal 400 such as a push message ). ≪ / RTI >

Since the receiver side communication company 300 may be various and the recipient terminal 400 may be various, it is difficult to specify one by one, but a push message is preferred by most of the communication companies because most recipient terminals can process the same.

Alternatively, an application for the originator authentication service may be loaded on the recipient terminal.

The receiver terminal 400 displays the sender call and the second additional information provided from the receiver-side communication company 300 on the display unit 410.

For example, the name of the caller may be displayed on the display unit 410 as "Seoul Local Police Agency "," unauthenticated sender ", "sender from abroad ".

The receiver can confirm whether or not the call is the call originator authenticated by the second additional information displayed on the receiver terminal 400. [

4 shows a configuration of another embodiment of the sender authentication system according to the present invention.

Another aspect of the caller authentication system according to the present invention shown in FIG. 4 is that the calling information processing server 120 is provided on the caller side and the calling information receiving unit 230 is further provided on the calling side communication company 200 3 is distinguished from the embodiment of the sender authentication system according to the present invention shown in FIG.

The calling information processing server 120 acquires the calling information as an event and provides the calling information to the calling information receiving unit 230 of the calling party communication company 200. The calling information receiving unit 230 transmits the received calling information to the calling party And provides it to the authentication processing unit 220.

The sender authentication processing unit 220 compares the trunk line identification and the origination information with each other to authenticate the sender.

100 ... originator terminal 200 ... originator side communication carrier
300 ... receiver side communication company 400 ... receiver terminal

Claims (11)

A caller authentication method for notifying a receiver whether a caller is an authorized caller,
The caller's communication company connected to the caller terminal authenticates the caller by confirming whether or not the caller's call originated in the caller's private branch exchange connected to the caller's side communication company by trunk line, The first additional information indicating the first additional information to the receiver side communication company connected to the receiver terminal;
A second step of the receiver side communication company checking the first additional information added to the caller call and providing the second additional information corresponding to the first additional information to the receiver terminal together with the caller call; And
A third step of the recipient terminal displaying the second additional information provided from the recipient-side communication company so that the recipient confirms the type of the sender;
/ RTI >
The method according to claim 1, wherein the caller authentication in the first step is performed by a method in which the calling information is transmitted to the calling party's communication company by the calling information processing server interlocked with the calling party's private branch exchange, Caller authentication method.
The method of claim 1, wherein the first additional information is transmitted through an IP (Internet Protocol) network between the caller-side communication company and the receiver-side communication company.
The method of claim 1, wherein the first additional information is transmitted in a gateway interval between voice-based mobile communication networks.
The caller authentication method according to claim 1, wherein the first additional information is transmitted as a prefix to a Calling Identification Display (CID).
The caller authentication method according to claim 1, wherein the second additional information provided from the receiver-side communication company to the receiver terminal is a push message.
A sender-side communication company that adds sender type information indicating a sender's affiliation to a receiver-side communication company when there is a sender call; And
And a receiver side communication company for converting the sender type information from the sender side communication company into a push message and providing the same to the receiver terminal,
The receiver terminal displays a push message from the receiver side communication company,
Wherein the caller-side communication company includes a caller authentication processor for confirming a caller type by checking whether a caller call is generated in a caller-side PBX connected to a trunk line by the caller-side communication company A caller authentication system.
8. The information processing apparatus according to claim 7, wherein the caller-side communication company further comprises a calling information receiver for receiving calling information transmitted by a calling information processing server interlocked with a caller-
Wherein the caller authentication processing unit performs caller authentication by verifying whether or not the trunk line is connected and the calling information with each other.
[8] The system of claim 7, wherein the sender type information is transmitted through an IP (Internet Protocol) network between the sender side communication company and the receiver side communication company.
The system of claim 7, wherein the sender type information is transmitted in a gateway interval between voice-based mobile communication networks.
The caller authentication system of claim 7, wherein the sender type information is transmitted as a prefix to a Calling Identification Display (CID).

Images