KR20020010435A - User verification method and system by using voice for use in electronic commerce - Google Patents

Abstract

The present invention relates to a user authentication system using voice in an electronic commerce and a method thereof. The disclosed user authentication system is a system for authenticating a client's use of a service in an electronic commerce using a communication network. Voice inputted by the service database in which the user identification information and the voice of the corresponding client corresponding to the user identification information are stored as authentication information for authentication of the service user, and the service user who inputs the user identification information through the communication network. Including the authentication server for authenticating that the corresponding service user is a normal user according to the comparison result with the authentication information corresponding to the information, the convenience and ease of use that reduces the number of operations of the keypad or the computer keyboard are leaked even if the user information is leaked. It provides a high level of security where no service is available.

Description

USER VERIFICATION METHOD AND SYSTEM BY USING VOICE FOR USE IN ELECTRONIC COMMERCE}

The present invention relates to a user authentication system using voice in electronic commerce and a method thereof, and more particularly, to obtain a voice of a client as authentication information for authentication of a service user in electronic commerce performed through a communication network such as the Internet. The present invention relates to a user authentication system using voice in electronic commerce and a method for authenticating that a corresponding service user is a normal user based on a result of comparing voice input with authentication information when a user requires authentication from a service user.

In recent years, electronic commerce, such as stock trading, banking, and purchase of goods in shopping malls, has been actively conducted through a communication network such as the Internet, and in response, technology for authenticating users in the communication network has been continuously developed. Research and development.

Looking at the user authentication techniques according to the prior art, as the most commonly used technology the first embodiment; There is a method of providing a user ID information and a fixed password to a client in advance and then inputting the same when accessing a service.

Second embodiment; In order to increase security, there is a method of providing an authentication password generator or an authentication password generation program and then inputting an authentication password generated immediately along with user identification information and a fixed password in the user authentication procedure.

Third embodiment; As a technology using a mobile terminal, first, user identification information and a fixed password are input, and a one-time authentication password is transmitted to a mobile terminal registered in advance corresponding to the user identification information. There is a method of checking whether the one-time authentication password is matched by inputting and transmitting to the terminal.

However, these user authentication schemes can be seen that the user must directly enter the user identification information and the fixed password in several steps. This not only makes all users of e-commerce feel very cumbersome, but also serves as a factor to prevent the use of e-commerce for beginners who are not familiar with computer keyboards or keypads.

In particular, the user authentication method of the third embodiment mainly used in an electronic commerce using a mobile communication terminal must input a one-time authentication password transmitted to the mobile communication terminal, and the above-mentioned inconvenience is further amplified by the characteristics of an input process using a keypad. There was no choice but to be.

In addition, as a separate problem, the first embodiment has a problem that user identification information and a fixed password are very likely to leak to the surrounding people, and thus there is a problem of low security. In the second embodiment, an authentication password generator or an authentication password generation program is always used. There is a problem that must be prepared.

The first object of the present invention proposed to solve the above problems of the prior art, the voice of the client is stored in the database as authentication information for authentication of the service user, the authentication server stored in the voice and database input from the service user The present invention provides a user authentication system using voice for authenticating that a corresponding service user is a normal user according to a comparison result with authentication information.

A second object of the present invention is to obtain a voice of a client as authentication information for authentication of a service user, and if authentication is required from the service user, the service user according to a comparison result between the voice input from the service user and the acquired authentication information. It is to provide a user authentication method using a voice to authenticate that the user is a normal user.

The third object of the present invention is to obtain a question and answer in text or voice from the client as authentication information for authentication of the service user, and if authentication is required from the service user, the service user's answer and the obtained authentication information following transmission of the question. According to the result of the comparison with the answer to provide a authentication method using a voice to authenticate that the service user is a normal user.

In an aspect of the present invention for realizing the above objects, a user authentication system using voice in electronic commerce is a system for authenticating a service use of a client in electronic commerce using a communication network: an individual assigned to each of the clients. A user database (DB) in which user identification information of the user and voice of the corresponding client corresponding to the user identification information are stored as authentication information for authentication of a service user; And an authentication server for authenticating that the corresponding service user is a normal user according to a comparison result between the voice input by the service user who inputs the user identification information through the communication network and the authentication information corresponding to the input user identification information. do.

In another aspect of the present invention, a method for authenticating a user using voice in an electronic commerce is provided. A method for authenticating a client's use of a service in an electronic commerce using a communication network, comprising: receiving voice from a client to which individual user identification information is assigned. Obtaining as authentication information for authentication; And authenticating that the corresponding user is a normal user according to a comparison result between the voice input by the service user who inputs the user identification information through the communication network and the authentication information corresponding to the user identification information.

In still another aspect of the present invention, a method for authenticating a user using voice in an electronic commerce is provided. A method for authenticating a client's use of a service in an electronic commerce using a communication network includes: authentication of a service user from clients to which individual user identification information is assigned. Obtaining a question for text or voice; Obtaining a voice answer corresponding to the question from the clients; Transmitting the question in text or voice to a service user who has input the user identification information through the communication network; And authenticating that the corresponding user is a normal user according to a comparison result between the voice transmitted from the service user according to the question and the obtained answer voice.

1 is a block diagram of a user authentication system using voice according to the present invention;

2 is a flowchart for explaining a voice registration procedure in a user authentication method using voice according to the first embodiment of the present invention;

3 is a flowchart for explaining a user authentication procedure of the authentication server in the user authentication method using voice according to the first embodiment of the present invention;

4 is a flowchart illustrating a user authentication procedure of a service server in a user authentication method using voice according to the first embodiment of the present invention.

5 is a flowchart illustrating a voice question and answer registration procedure in a user authentication method using voice according to a second embodiment of the present invention;

6 is a flowchart illustrating a user authentication procedure of an authentication server in a user authentication method using voice according to a second embodiment of the present invention;

7 is a flowchart illustrating a user authentication procedure of a service server in a user authentication method using voice according to a second embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

101: mobile communication terminal 102: mobile communication network

103: exchange server 104: the Internet

105: authentication server 106: user database (DB)

107/1 to 107 / n: service server 108/1 to 108 / n: commerce DB

There may be a plurality of embodiments of the present invention. Hereinafter, preferred embodiments will be described in detail with reference to the accompanying drawings. Through this embodiment, it is possible to better understand the objects, features and advantages of the present invention.

1 is a block diagram of a user authentication system using voice in an electronic commerce according to the present invention, which is an embodiment in which a wireless Internet environment using a mobile communication network is incorporated.

The present invention shown here is installed in the mobile communication terminal 101, mobile communication network 102, mobile communication telephone service and wireless Internet service provided by the client, the exchange server 103, the Internet 104, the service provider side Authentication server 105 for authenticating service users using voice, user DB 106 for indexing and storing unique information including mobile communication subscriber numbers of service users, and service server for providing e-commerce services 107 / 1 to 107 / n), and a commerce DB 108/1 to 108 / n for indexing and storing the unique information and the commerce information of the service users.

The mobile communication terminal 101 is a means for the service user to access the Internet 104 through the mobile communication network 102 and the switching server 103. Examples thereof include a cellular phone, a PCS phone, a PDA, and the like. PC or the like is used.

The exchange server 103 is connected to the authentication server 105 through a serial bus, such as a data serial transmission line, and is a service connected to the mobile communication terminal 101 and the wired Internet, including a network interworking device (eg, IWF). It supports data transmission and reception with the servers 107/1 to 107 / n.

The authentication server 105 authenticates the use of the service of the user according to a result of comparing the voice of the service user input through the communication network with the authentication information corresponding to the user identification information.

The user DB 106 stores individual user identification information assigned to the clients and the voice of the corresponding client corresponding to the user identification information as authentication information for authentication of the service user.

The service servers 107/1 to 107 / n are connected to the exchange server 103 via the Internet 104, and selectively provide electronic commerce services to the corresponding users in accordance with user authentication by the authentication server 105.

The commerce DBs 108/1 to 108 / n store individual user identification information assigned to the clients and the commerce information of the client, respectively.

Although FIG. 1 illustrates an example in which a user DB and a commerce DB are separately constructed, a dedicated data communication line may be provided between the authentication server and the service server, and the DBs may be shared by constructing one DB by merging both.

A method for authenticating a service user through a user authentication system using voice according to the present invention configured as described above may be implemented in a plurality of embodiments, but in the following, the first embodiment of FIGS. The second embodiment of FIGS. 5 to 7 employing a conversational method with FIG.

First Embodiment

Client accesses the authentication server 105 through the mobile communication network 102 or accesses the service servers 107/1 to 107 / n via the Internet 104, and then registers the following users to be authorized to use the service. Perform the procedure. In this example, the authentication server 105 and the service server 107/1 to 107 / n respectively operate different Internet websites, and a client connects to the authentication server 105 first. You can also operate.

When the client accesses the wireless Internet provided by the exchange server 103 using the mobile communication terminal 101 and selects a corresponding site, the web information provided by the authentication server 105 is interworked with the network of the exchange server 103. The device is transmitted to the mobile communication terminal 101 of the client via the mobile communication network 102. This means that the client accesses the website of the authentication server 105 (S201).

When the client requests user registration from the initial menu provided through the website, the user registration menu is provided through the same path as above, and when the client enters unique information including a mobile subscriber number (resident registration number, etc.), user identification information is displayed. Is given. The user identification information is determined by the client in the category of avoiding duplication with other users (S202 to S205).

When the client requests registration of the voice for user authentication of the e-commerce, the voice registration menu is provided by the authentication server 105, and the voice input by the client is registered as authentication information for authentication of the service user. Preferably, in order to ensure the accuracy of the voice registration, the same voice is re-entered to be registered as authentication information only when it matches, and a plurality of voices may be registered in consideration of security (S206 to S209).

When the user registration procedure as described above is completed, the authentication server 105 indexes and processes the unique information and authentication information including the mobile communication subscriber number and stores it in the user DB 106, and the corresponding mobile communication terminal through the exchange server 103. The registration status message is transmitted to 101 to notify the registration status of the authentication information (S210).

The user information stored in the user DB 106 is transferred to the service server 107/1 to 107 / n through the Internet 104 or a dedicated line, and stored in the commerce DB 108/1 to 108 / n. In the case of accessing the service servers 107/1 to 107 / n, the same function is exerted through the opposite path.

On the other hand, a method for receiving a user e-commerce service after completing the voice registration for user authentication as described above is to receive the e-commerce service from the service site linked to the authentication site after obtaining the user authentication at the authentication site as shown in FIG. As shown in FIG. 4, there is a method of receiving both user authentication and e-commerce service at a service site.

First, the user authentication procedure shown in the flowchart of FIG. 3 is described. When the initial menu is provided after accessing the authentication site, the user inputs user identification information granted in step S205 and requests an authentication service using voice (S301 to S). S304).

When the voice authentication menu is provided by the authentication server 105, the voice input in step S208 is inputted. When a plurality of voices are registered in consideration of security in step S209, the voice authentication menu is displayed in order in the voice authentication menu to display the voice. An input is induced, and the user must input the corresponding voice among the plurality of registered voices (S305 to S306).

When the input of the user identification information and voice is completed as described above, the authentication server 105 retrieves the authentication information stored in the user DB 106 to retrieve authentication data corresponding to the user identification information input in step S303, and in step S306 The input voice and the registered voice included in the authentication data drawn out from the user DB 106 are compared with each other (S307).

As a result of the comparison, if it is determined that the input voice and the registered voice match, the current service user is authenticated as normal user (S308). If the two voices do not match, it is determined as an input error and the voice authentication menu of step S305 is provided again. If more than this predetermined number of times, the current service user is determined to be an ineligible user and the service is stopped (S310).

When the user authentication is completed as described above, the authentication server 105 transfers the authentication information for the current service user to the service server 107/1 to 107 / n linked to the affiliate site, and the service server 107/1 to 107 /. n) provides an e-commerce service by granting all rights when the current service user who has already completed user authentication is connected to the operating site (S309).

In the user authentication method of FIG. 3 as described above, the authentication server 105 substitutes for user authentication at the request of the service servers 107/1 to 107 / n linked to the affiliate site. The advantage of this authentication method is that the client can be served at multiple sites without going through multiple authentication procedures.

In the user authentication procedure shown in the flowchart of Fig. 4, the user inputs user identification information and voice for user authentication after accessing the service site (S401 to S406). Since this process is similar to the example of FIG. 3, the detailed description will be omitted. Hereinafter, a case in which the user accesses a specific service server 107/1 among the plurality of service servers 107/1 to 107 / n will be described. do.

When the input of the user identification information and voice by the service user is completed, the service server 107/1 collects the user identification information and voice input so far and transfers them to the authentication server 105 to request user authentication (S407). . In this case, it is preferable to first check the commerce DB 108/1 to check whether the user identification information is in error, and then request the user authentication to the authentication server 105 only in the normal case.

The authentication server 105 retrieves user information stored in the user DB 106 to retrieve user data corresponding to the user identification information transmitted from the service server 107/1, and transmitted from the service server 107/1. The voice and the registered voice included in the user data drawn out from the user DB 106 are compared with each other.

When the authentication server 105 that has determined the matching of the input voice and the registered voice authenticates the current service user as a legitimate user and transmits the authentication result accordingly to the service server 107/1, the service server 107/1 is currently connected. The e-commerce service is provided by granting the user the right of use limited to this site (S408 to S409).

On the other hand, in step S408, if the input voice and the registered voice does not match, the authentication server 105 determines that the input error and transfers the authentication result accordingly to the service server 107/1, the service server 107/1 The voice authentication menu of step S405 is again provided to the user. However, if the mismatch determination of the two voices continues for a predetermined number or more, the service server 107/1 determines that the current service user is an ineligible user and stops providing the corresponding service (S410).

Second Embodiment

After the client accesses the authentication server 105 through the mobile communication network 102 or the service servers 107/1 to 107 / n through the Internet 104 as in the case of the first embodiment of the present invention described above. Perform the following user registration procedure to be authorized to use the service. As in the description of the first embodiment, the authentication server 105 and the service server 107/1 to 107 / n respectively operate different Internet websites, and a client first connects to the authentication server 105 as an example. For example, two servers may run a single website.

Since the processes S501 to S505 until the client is given the user identification information are the same as those in the first embodiment S201 to S205, the description thereof will be omitted.

When a client who has received user identification information requests information registration for user authentication of an e-commerce, an information registration menu is provided by the authentication server 105 (S506 to S507). First, the authentication server 105 displays an information registration menu. It requests and induces a text or voice input of the question to be used in the authentication process of the service user.

When the client inputs the question in text or voice, the authentication server 105 temporarily stores the input question text or question voice, and instructs the client to input an answer corresponding to the question already input through the information registration menu. Request and induce.

Subsequently, when the client inputs an answer that he or she thinks is easy to remember, the authentication server 105 registers the question and answer input by the client as authentication information for authentication of the service user. Preferably, in order to ensure the correctness of the question and answer input, the same voice is re-entered to be registered as authentication information only when they match, and a plurality of questions and answers may be registered in consideration of security (S508 to S509). .

Meanwhile, in the steps S507 to S509, a method of directly inputting a question and an answer by the service user has been described. However, a specific question group is provided through the information registration menu of the authentication server 105 as in the authentication method using the currently applied text. The service user may voicely answer the question and register it as authentication information.

When the user registration procedure as described above is completed, the authentication server 105 indexes and processes the unique information and authentication information including the mobile communication subscriber number and stores it in the user DB 106, and the corresponding mobile communication terminal through the exchange server 103. The registration status message is transmitted to 101 to notify the registration status of the authentication information (S510). In addition, as described above, both the question text (or question voice) and the answer voice may be stored in the user DB 106 by using a storage area having a different storage address, but according to the intention of the practitioner, each DB may be different from each other. It may be stored separately in the DB.

The user information stored in the user DB 106 is transferred to the service server 107/1 to 107 / n through the Internet 104 or a dedicated line, and stored in the commerce DB 108/1 to 108 / n. In the case of accessing the service servers 107/1 to 107 / n, the same function is exerted through the opposite path.

On the other hand, a method for receiving a user e-commerce service after completing the voice registration for user authentication as described above is obtained from the service site linked to the authentication site after acquiring user authentication at the authentication site as shown in FIG. There are a method of receiving an e-commerce service and a method of receiving both user authentication and an e-commerce service in a service site as shown in FIG. 7.

First, the user authentication procedure shown in the flowchart of FIG. 6 will be described. When the user is provided with an initial menu after accessing the authentication site, the user inputs user identification information granted in step S505 and requests an authentication service using voice (S601 to FIG. 6). S604).

The authentication server 105 requested for the authentication service provides a voice authentication menu to the service user. First, the authentication information stored in the user DB 106 is retrieved and the authentication data corresponding to the user identification information input in step S603 is retrieved. The authentication question included in the authentication data is transmitted to the service user. When a plurality of questions are registered in consideration of security in step S509, any one question is randomly selected and transmitted. When a question is input in text in step S508, the authentication server 105 transmits the question as text. When the question is input by voice, it is preferable that the authentication server 105 also transmits the question by voice (S605 to S606).

Subsequently, when the service user who checks the question transmitted from the authentication server 105 inputs the answer accordingly, the authentication server 105 compares the voice included in the authentication data withdrawn from the service user. do. Here, not only the voice matching between the inputted voice and the pre-registered answer voice is checked, but also the speaker is matched (S607 to S609).

As a result of the comparison, when it is determined that the voice of the input answer and the registration answer match the speaker, the current service user is authenticated as a normal user (S610). If any of the voices of the two answers and the speaker do not match, it is determined as an input error. When the voice authentication menu is provided again, if the discrepancy determination continues for a predetermined number or more, the current service user is judged as an ineligible user and the corresponding service is stopped (S612).

When the user authentication is completed as described above, the authentication server 105 transfers the authentication information for the current service user to the service server 107/1 to 107 / n linked to the affiliate site, and the service server 107/1 to 107 /. n) provides an e-commerce service by granting all rights when the current service user, who has already completed user authentication, accesses the operating site (S611).

In the user authentication method of FIG. 6 as described above, the authentication server 105 substitutes for user authentication at the request of the service servers 107/1 to 107 / n linked to the affiliate site. The advantage of this authentication method is that the client can be served at multiple sites without going through multiple authentication procedures.

In the user authentication procedure shown in the flowchart of Fig. 7, the user requests voice authentication after inputting user identification information after accessing the service site (S701 to S704). Since this process is the same as S401 to S404 in FIG. 4, a detailed description thereof will be omitted. Hereinafter, when a user connects to a specific service server 107/1 among the plurality of service servers 107/1 to 107 / n, For example.

First, the service server 107/1, which has been requested for voice authentication, provides a voice authentication menu to a service user and transmits user identification information to the authentication server 105 to request user authentication (S706). In this case, it is preferable to first check the commerce DB 108/1 to check whether the user identification information is in error, and then request the user authentication to the authentication server 105 only in the normal case.

Then, the authentication server 105 performs a user authentication procedure, except that the information is transmitted and received via the service server 107/1, the process is the same as in the case of steps S606 to S610 of FIG. The description will be omitted.

When the authentication server 105 that determines the voice of the input answer and the registration answer and the speaker matches the current service user as a legitimate user and transmits the authentication result according to the service server 107/1, the service server 107/1 ) Provides the e-commerce service by granting the current user access rights limited to this site (S707 to S708).

However, in step S707, if any one of the voice and the speaker of the input answer and the registration answer does not match, the authentication server 105 determines that it is an input error and transfers the authentication result accordingly to the service server 107/1. The server 107/1 again provides the voice authentication menu of step S705 to the user. However, if the discrepancy determination between the two answers continues more than a predetermined number of times, the service server 107/1 determines that the current service user is an ineligible user and stops providing the corresponding service (S709).

As described above, the present invention obtains the voice of a client as authentication information for authentication of a service user in an electronic commerce performed through a communication network such as the Internet, and then, when authentication is required from the service user, the voice input is induced by inputting a voice input. By verifying that the service user is a normal user according to the result of comparison with the authentication information, the convenience of use is reduced, which reduces the number of manipulations of the keypad or computer keyboard, and the high security that cannot use the service except the user even if the information is leaked. Have sex.

Claims (14)

A system for authenticating a client's use of services in an e-commerce using a communication network: A user database in which individual user identification information assigned to each of the clients and a voice of a corresponding client corresponding to the user identification information are stored as authentication information for authentication of a service user; And And an authentication server for authenticating that the corresponding service user is a normal user according to a comparison result between the voice input by the service user who inputs the user identification information through the communication network and the authentication information corresponding to the input user identification information. User authentication system using voice in electronic commerce. The method of claim 1, A mobile communication terminal owned by the clients, and a switching server connected to the mobile communication terminal through a mobile communication network to provide a telephone service and a wireless Internet service; The exchange server is connected to the authentication server via a serial bus, the user authentication system using voice in electronic commerce, characterized in that for supporting data transmission and reception between the mobile communication terminal and the wired Internet including a network interworking device. The method of claim 1, And a service server connected to the exchange server through the Internet and selectively providing an e-commerce service to the corresponding user according to user authentication by the authentication server. The method of claim 3, wherein The authentication server and the service server is a user authentication system using voice in electronic commerce, characterized in that for operating one Internet website. The method of claim 3, wherein The authentication server and the service server each operates a different Internet website, the authentication server is a user authentication system using voice in electronic commerce, characterized in that for performing the user authentication at the request of the service server. The method of claim 5, And said different internet websites are linked to each other and share a result of user authentication by said authentication server. A method for authenticating a client's use of services in an e-commerce using a communication network: Obtaining voice as authentication information for authentication of a service user from clients to whom the individual user identification information has been assigned; And In the electronic commerce transaction comprising the step of authenticating that the user is a normal user according to a comparison result between the voice input by the service user who has input the user identification information through the communication network and the authentication information corresponding to the user identification information. User authentication method using voice. The method of claim 7, wherein The acquiring authentication information may include acquiring unique information including a mobile communication subscriber number from a client and granting user identification information; Receiving the voice of the client and registering it as authentication information for user authentication corresponding to the user identification information; And notifying the registration status of the authentication information to the mobile communication terminal corresponding to the mobile communication subscriber number. The method of claim 7, wherein The voice of the client is obtained in plural in the authentication information obtaining step, and in the information comparing step, a specific voice of the plurality of voices is designated to induce the input of the specific voice to the service user. User authentication method using voice. A method for authenticating a client's use of services in an e-commerce using a communication network: Obtaining, by text or voice, a question for authentication of the service user from clients to whom the individual user identification information has been assigned; Obtaining a voice answer corresponding to the question from the clients; Transmitting the question in text or voice to a service user who has input the user identification information through the communication network; And And authenticating that the corresponding user is a normal user according to a comparison result between the voice transmitted from the service user according to the question and the obtained answer voice. The method of claim 10, The question acquiring step may include obtaining unique information including a mobile communication subscriber number from a client and assigning user identification information; And receiving the question text or the question voice of the client as registration information as authentication information for user authentication corresponding to the user identification information. The method of claim 10, The acquiring step may include receiving an answer voice of the client and registering it as authentication information for user authentication corresponding to the user identification information; And notifying the registration status of the authentication information to the mobile communication terminal corresponding to the mobile communication subscriber number. The method of claim 10, In the question obtaining step, a plurality of questions are obtained, and a specific question of a plurality of questions is designated and transmitted to the service user in the question delivery step. The method according to claim 7 or 10, The user identification information is provided in each of a plurality of websites for an e-commerce service, and user authentication for the service websites is performed on a specific website.