KR100372683B1 - User authentification system and the method using personal mobile device - Google Patents

Abstract

The present invention relates to a user authentication processing system using a personal portable terminal, and a user requesting authentication provides a personal authentication terminal through the authentication client as a primary authentication key to the user's personal mobile terminal number through a VAN or other telephone network. In addition, the present invention relates to a user authentication processing system and a method using a personal portable terminal for calling a user's mobile terminal before final approval, requesting a second authentication key, and performing a final approval through the first and second authentication keys.

In other words, the present invention requires a user authentication for payment of goods due to purchase of goods in general commerce, electronic commerce using the Internet, etc., when performing a bank transfer or withdrawing cash through an ATM (automatic financial transaction dispenser). Can be applied to the user authentication processing system required by the service. In the user authentication processing system according to the present invention, the communication network used for the primary authentication key delivery is configured separately from the communication network to which the second authentication key is delivered, and the communication network to which the second authentication key is delivered uses a mobile communication network with excellent security. By separating the authentication key, it is possible to obtain a high level of security and to take advantage of the mobility and convenience of a personal portable device.

Description

USER AUTHENTIFICATION SYSTEM AND THE METHOD USING PERSONAL MOBILE DEVICE}

The present invention relates to a user authentication processing system and a method using a personal mobile terminal, and more particularly, a user authentication required in commerce and electronic commerce, account transfer, cash withdrawal, etc. using a personal mobile terminal and a mobile terminal number. The present invention relates to a user authentication processing system using a personal portable terminal and a method thereof.

In general, as payments for credit cards have expanded and become more common, payment methods through credit cards have tended to overtake traditional payment methods for cash payments. Therefore, electronic commerce through the Internet is being activated.

In the case of general commerce through such a credit card, payment for goods purchase is performed by checking the information of the credit card through a card inquiry machine installed at the credit card merchant, and if the credit card is valid, the buyer performs user authentication such as signing on the payment receipt. By doing so, the deal was established. However, in the conventional general commerce, when a user loses a credit card, there is a problem that user damage due to an illegal user's signature forgery cannot be prevented.

In addition, in the electronic commerce through the Internet, the user's authentication of a credit card (or electronic money) is performed as an example of a payment method for payment of goods purchased by a buyer (user). Such a user authentication processing system is generally stored in advance in the system after receiving an ID (user ID or credit card number) and an authentication item (for example, an item required for authentication such as a password) for accessing a specific service system from a purchaser. The user's authentication of the transaction is performed after comparison with that user. In order to prevent hacking of card numbers, passwords or transmission data, which are personal credit information in the conventional electronic commerce, data transmitted between the user terminal and the service providing system is encrypted and transmitted through a predetermined encryption algorithm, and then decrypted.

Meanwhile, various security systems and user authentication processing systems have been developed to prevent leakage and damage of personal credit and important information from hackers with highly specialized hacking ability in the rapidly developing information industry. However, the cryptographic authentication processing system used in the conventional electronic commerce has fundamental technical limitations, and despite the development of security systems (firewalls, etc.), the hacking methods of advanced hackers are in a state of no help.

In particular, in the case of intercepting and decrypting hacked personal credit information, especially credit card numbers and passwords, the service providing system has no choice but to perform user authentication to an unjust user. Therefore, even in the case of a credit card transaction through electronic commerce, if a credit card number is leaked, there is a problem that there is a security risk as in a credit card transaction in general commerce.

In addition, it is a fact that there is a difficulty in activating electronic commerce through the Internet due to the inconvenience and inconvenience caused by the financial damage and installation of the security system due to the leakage of the credit card number.

Accordingly, the present invention has been made to solve such a conventional problem, and its object is to provide information on a direct payment account such as a credit card in conventional general and financial transactions such as electronic commerce, bank transfer and cash withdrawal. The system and method for user authentication processing using a personal mobile terminal, which can provide security and convenience that other authentication systems cannot provide by separating and inputting the personal mobile device number and the password of a credit card through different communication networks. It is to provide.

1 is a system block diagram showing the configuration of a user authentication processing system using a personal portable terminal according to the present invention.

2 is a schematic flowchart showing an embodiment of a user authentication method using a personal portable terminal according to an embodiment of the present invention.

3 is a detailed flowchart of an authentication preparation step and an authentication request step according to the present invention.

4 shows a detailed flowchart of the authentication confirmation request step according to the present invention.

5 is a detailed flowchart of the authentication confirmation response step in the user authentication method according to the present invention.

6 is a detailed flowchart of an authentication determination step and a confirmation delivery step in the user authentication method according to the present invention.

Explanation of symbols on the main parts of the drawings

10 ... Authentication Client 20 ... User

30 ... Authentication Server 31 ... Authentication Database.

In order to achieve the above object, a user authentication processing system using a personal portable terminal according to the present invention is a user authentication processing system having a client / server structure for processing authentication of a user who is an authentication subject for a predetermined authentication history.

An authentication client for generating the authentication details and receiving a personal mobile terminal number as a primary authentication key from a user through a first network, and requesting authentication of the user;

Receiving the user authentication request from the authentication client and receiving the first authentication key and forwarding the authentication details to the personal portable terminal, the second authentication key to the user through a second network that is distinct from the first network It is characterized by having an authentication server for requesting and receiving it and processing the user's authentication using the transmitted primary and secondary authentication keys.

In addition, in the user authentication processing method using a personal portable terminal according to the present invention, in the user authentication system of the client / server structure for authentication, the user authentication processing method of providing authentication details from the authentication client to the authentication server to process user authentication. To

A first step of the authentication client generating an authentication history for the user and receiving from the user a mobile terminal number of the user with a primary authentication key required for authentication of the user over a first network;

The authentication client transmits the first authentication key including the authentication details and the mobile terminal number to the authentication server to request authentication of the user;

The authentication server checks the authentication details of the user using the received first authentication key and then carries a message requesting input of a second authentication key for authentication approval through the second network which is distinguished from the first network. A third step of transmitting to the terminal number;

The authentication server determines the authentication result by comparing the first and second authentication keys with the authentication details stored in its database when the second authentication key for the authentication approval is input from the mobile terminal of the user through the second network. With the fourth step,

And a fifth step of completing the authentication process by transmitting the determination result of the fourth step to the portable terminal of the user.

Hereinafter, the configuration and operation of the user authentication processing system and method using the personal portable terminal according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a system block diagram showing the configuration of a user authentication processing system using a personal portable terminal according to the present invention. As shown in FIG. 1, a user authentication processing system using a personal portable terminal according to the present invention has a credit card merchant and / or electronic device provided with an authentication information input unit such as an existing credit card inquiry machine to greatly request user authentication. An authentication client 10 which represents an Internet server system for operating a homepage for an internet store for performing a commerce, and receives a primary authentication key from the user through a first network;

A user (mobile terminal) 20 for performing a financial transaction such as a commerce, an account transfer, etc. through the authentication client 10 and providing first and second authentication keys for performing payment and payment accordingly; ,

Accepts an authentication request from the authentication client 10 and requests the user 20 a second authentication key through a second network distinct from the first network, and a second authentication key from the user 20. Received can be divided into the authentication server 30 to perform the user authentication for the transaction.

In the above-described configuration, the authentication client 10 generally corresponds to a server system that operates a homepage provided for performing e-commerce on a store or the Internet where payment and payment are possible through a payment alternative means such as a credit card.

The authentication client 10 is provided with an authentication information input unit (not shown) for receiving a telephone number of the personal mobile terminal of the user 20 and transmitting it to the authentication client, wherein the authentication information input unit (not shown) is credited. Indicates a program or a corresponding device that can retrieve the availability of a credit card from a server running a card lookup or homepage. Further, the authentication information input unit corresponds to an automatic financial transaction terminal (ATM) in the case of a financial transaction such as cash withdrawal.

In addition, when the authentication details transmitted to the authentication server 30 through the authentication client 10 is a commerce / e-commerce, a payment account that is payable through a mobile terminal of the user 20 and a mobile terminal of the customer is established. It contains the information necessary for certification of the institution code, payment history, payment price, and store identification code of the institution (credit card, bank, etc.).

Meanwhile, in the case of the account transfer, the authentication client 10 and the user 20 are the same, and the authentication details in this case include a payee account number, a transfer amount, and an organization code of the authentication server. Meanwhile, the payee account number may be replaced with the payee's mobile terminal number. In this case, the payee account should be provided with the credit institution code of the payee account.

The user 20 includes a personal portable terminal and a customer using the portable terminal. In this case, the personal portable terminal includes, for example, a mobile communication terminal that is secured, such as a mobile phone, a PCS, a PDA, and the like, which are currently used a lot. At this time, the customer (buyer, user) can perform user authentication (enter the credit card and password of the bank account) for the payment means (credit card, bank account, etc.) through the portable terminal. In this case, a plurality of payment accounts payable through the mobile terminal may be provided. In this case, a transaction through a specific account may be selectively determined through an institution code of an authentication server that is input as authentication details.

The authentication server 30 corresponds to an authentication processing system for user authentication and payment in a credit card company or a bank. Accordingly, the authentication server 30 performs wireless communication with the personal mobile terminal through a CDMA mobile communication network, and is connected to the authentication client 10 through a communication network such as a conventional VAN, a leased line network, and other telephone networks. .

In addition, the authentication server 30 is a payment account that is pre-set to enable the payment transaction through the phone number of the personal portable terminal, which is the primary authentication key owned by the registered customer, and the telephone number of the personal portable terminal. It further comprises an authentication database 31 for storing a password set as a credit card number or a bank account, and a password which is a secondary authentication key for approving a transaction for the payment account.

In this configuration, first, in the case of general commerce and e-commerce, a customer wants to purchase goods and the like at a store (also referred to as an internet homepage) registered as an affiliate of a user authentication service according to the present invention and perform payment accordingly. In this case, the customer enters the personal mobile terminal number of the customer through the first network into the authentication information input unit installed in the store, and an institution in which a payment account preset to be payable through the payment amount of the purchased amount and the customer's mobile terminal number is opened. You will be asked to enter the code of your bank or credit card company.

At this time, the mobile phone number and the payment amount input through the first network are input to the main computer of the credit card company (or bank), which is an authentication server corresponding to the corresponding certification authority code, through an existing communication network (for example, VAN). In this case, the credit card company performs an automatic call through the second network with the received mobile terminal number. In this case, when there is a response to the automatic call signal, a message regarding whether to approve a transaction regarding the purchase item details and the payment amount of the customer received from the authentication client is transmitted.

On the other hand, when the user 20 receives the incoming signal of the mobile phone after a predetermined time and responds to the reception, the user 20 confirms the transaction approval message transmitted in the ARS, voice message or text message through the second network. At this time, if the contents of the transaction approval message are correct, the credit card password is input as an example of the payment account as the user authentication code for approving the transaction.

In addition, the main computer of the credit card company transmits a transaction approval message to the customer's mobile phone, and checks whether a password, which is a user authentication code for transaction approval, has been entered within a predetermined time, and if a password is entered, the authentication database 31 is checked. After confirming that the corresponding mobile phone number, credit card number, password of the customer through the case of a legitimate user, and outputs a user authentication approval signal to the authentication client (10).

Finally, the authentication client completes payment for the customer's purchases when a transaction authorization is received from the credit card company, which is an authentication server.

On the other hand, this authentication method using a personal portable terminal according to the present invention can be generally applied to other financial transactions in addition to the case of purchasing goods through a credit card in the commerce, the whole process is applied in the same way, the first authentication details There are some differences in the steps to determine.

Referring to the case of account transfer, which is another embodiment of the present invention, the authentication client and the user are the same means. In this case, the user can access the primary authentication key, the payee account number, the transfer amount, and the authentication server through his mobile terminal. Enter the institution code. At this time, the generated authentication details are the payee account number (or payee mobile terminal number), the transfer amount, the institution code of the authentication subsection as described above. After that, the authentication details are transmitted to the authentication server, and the authentication server calls the user's mobile terminal through the second network through the first authentication key to transmit the transfer details, and the user checks the transferred details and then performs the second authentication. The key will be sent to the authentication server. Similarly, the authentication server checks the primary and secondary authentication keys, determines whether the transfer is approved, and informs the user of the authentication result.

On the other hand, in another embodiment, such as cash withdrawal through ATM, the user first enters his personal mobile terminal number as the primary authentication key through the ATM at a place where a certain ATM is installed, and then inputs the withdrawal amount and the institution code of the authentication server. Will be entered. The generated authentication details are the withdrawal amount and the authority code of the authentication server. After that, the authentication server connected to the ATM device sends a call signal to the user's mobile terminal through the input primary authentication key, and requests the user to input the secondary authentication key. At this time, if the user inputs the second authentication key through a communication network separate from the communication network in which the first authentication key has been input, the authentication server checks the first and second authentication keys, and then transmits the authentication approval result to the ATM to open the cash withdrawal transaction. To be terminated.

Hereinafter, an operation and an effect of a user authentication method using a personal portable terminal according to the present invention will be described in detail with reference to the accompanying drawings.

2 is a schematic flowchart showing an embodiment of a user authentication method using a personal portable terminal according to the present invention. As shown in FIG. 2, in the user authentication method using the personal portable terminal according to the present invention, in the user authentication processing method of receiving an authentication history from an authentication client and processing user authentication for a corresponding user,

An authentication preparation step of generating an authentication history for the user and receiving the mobile terminal number of the user as a primary authentication key required for user authentication through the first network from the user (S10);

An authentication request step (S20) of requesting user authentication by transmitting a primary authentication key including the authentication details and the mobile terminal number to an authentication server;

An authentication confirmation request for transmitting a message requesting confirmation of authentication details and input of a second authentication key for authentication approval to the mobile terminal number of the user of the received primary authentication key through a second network distinct from the first network. Step S40,

An authentication confirmation response step (S50) of receiving a second authentication key required for confirmation of authentication details from the user who received the authentication request message and transmitting it to the authentication server;

An authentication determination step (S60) of comparing the second authentication key and the first authentication key received through the authentication confirmation response step (S50) with the authentication details stored in the database of the authentication server (S60),

And an authentication result delivery step (S70) of completing the authentication process by delivering the authentication determination result to the user requesting authentication.

On the other hand, the user authentication processing method using a personal portable terminal according to the present invention determines the user's portable terminal number from the primary authentication key received through the authentication request step (S20) authentication database (of the authentication server 30) 31) further comprises an authentication verification step (S30) for determining whether the corresponding payment account set to the mobile terminal number is a valid account, the authentication verification step (S30) can optionally be omitted.

If it is omitted to be selectively added or omitted depending on the load capacity of the authentication server 30, a series of processes performed in the user verification step is also performed in the authentication determination step (S60) to improve the processing speed of the authentication server. You can do it.

Meanwhile, in the authentication confirmation request step (S40) and the authentication confirmation response step (S50), for example, the service is provided through communication between the credit card company and the mobile terminal of the customer who is the buyer. At this time, the communication network for requesting the authentication details and the second authentication key in the authentication confirmation request step (S40) may not require high security, but the authentication confirmation response step (S50) may include the personal information of the customer ( Second authentication key, which is the password of the payment account, is transmitted through the wireless network, so it must be made through a secure network, and such a security network can be used as a CDMA-type mobile communication network or a WAP SSL network.

3 is a detailed flowchart of the authentication preparation step and the authentication request step shown in FIG. 2. As shown in Figure 3, in the case of the user authentication method according to the present invention by first showing the preparation process for generating the authentication details to be the target of the customer, the purchase items, purchase price, institution to generate the authentication details Generating an authentication history by determining a code and the like (s11), and inputting a mobile terminal number of the user as the primary authentication key (s12) to pay for the authentication details determined in the authentication history generation step (s11). It is made to include. The authentication history generation step (s12) and the second authentication key providing step (s12) is connected to the mobile terminal number, which is the primary authentication key to the store owner, the institution code (bank code, credit company of the payment institution opened) Code) orally, or directly entering the corresponding payment field on the homepage.

When a plurality of payment accounts are connected to the mobile terminal of the customer by inputting the organization code in the input step (s11), it is possible to select to enable payment in a specific payment account through the organization code input as the authentication details.

On the other hand, inputting the number of the mobile terminal, which is the primary authentication key, is performed through the primary network. In this case, the primary network uses wireless data from the mobile terminal to the authentication information input unit such as a credit card inquiry machine. A wireless interface network configured to be input as is applicable. Or, in the case of Internet commerce, the Internet network is applicable. Furthermore, the user's telephone number can be inputted to the authentication client using an existing credit card through a storage medium such as a card in which the telephone number of the portable terminal is embedded. The embodiment of the first network has been described above. It is not limited.

When the authentication details (purchase item, purchase price) are generated and the input of the primary authentication key, which is the user's mobile terminal number, is completed, the entered authentication details and the primary authentication key are the authentication server, which is the authentication server through the same network as the existing VAN The authentication request is sent to the card company's computer.

FIG. 4 shows a detailed flowchart of the authentication confirmation request step shown in FIG. As shown in FIG. 4, in the request delivery step of the user authentication processing system according to the present invention, the authentication server first checks whether an authentication request for a specific authentication history has been received from an example of an authentication requester in step s410. When the authentication request is received, the process proceeds to the next step (s420) to check the mobile terminal number of the corresponding authentication target through the authentication details and the primary authentication key. Then perform an automatic call (dial through CDMA / WAP) to the number of the mobile terminal confirmed in the next step (s430), if there is a response within a predetermined time through the automatic call in the next step (s450) The confirmation message for the authentication details is transmitted through the second network. At this time, the confirmation message for the authentication details may be made through a text message (SMS) or voice message using the mobile communication network or through an automatic response service (ARS). These various methods are delivered to the mobile terminal of the customer to request the customer's authentication confirmation (s460).

On the other hand, even if the authentication confirmation request message is transmitted, if there is no call response from the mobile terminal, after repeating the predetermined number of times, the authentication confirmation is canceled (s480), and the authentication requestor is notified of the authentication result (s70).

FIG. 5 is a detailed flowchart of an authentication confirmation response step in the user authentication method according to the present invention. As shown in FIG. 5, the authentication confirmation response step may be applied to its own mobile terminal through the authentication request step. When the automatic call from the authentication server 30 is received, the customer confirms an authentication confirmation message received in response to the automatic call in step s510. In this case, the authentication details transmitted from the authentication server 30 may be a merchant name, a purchased article, a purchase price, a purchase date and time in the case of purchasing a product. Therefore, if the authentication details received through the mobile terminal in step s520 are the same as the details purchased by the customer in step s520, as a response to the authentication in the next step (s530) of the payment account of the second authentication key of his payment account. The password is entered and sent to the authentication server. In this case, the secondary authentication key is performed through a second network, which is a separate communication network that is distinct from the first network, and the second network may be a CDMA telephone network applied as a security network.

However, if the authentication details received in step s520 do not match their purchase details, the transaction is terminated by not ending the call without inputting the second authentication key required by the authentication server in the next step s560. It will abort and refuse authentication.

In this case, the password is input through a communication network such as CDMA or WAP SSL, which is a security network for which security is guaranteed. On the other hand, the password is a function of confirming that the customer is a legitimate user of the corresponding mobile terminal and the actual user of the credit card stored in the authentication database 31 of the authentication server 30, the contents of the password It can be not only numbers, but also other information such as letters or fingerprints. In addition, in the case of biometric information of an individual such as a fingerprint, a corresponding fingerprint database should be established in the authentication database of the authentication server.

Figure 6 shows a detailed flowchart of the authentication determination step and the authentication result delivery step in the user authentication method according to the present invention. As shown in FIG. 6, in the user authentication method according to the present invention, the authentication determination step is performed for the authentication history from the customer within a predetermined time in step s620 after the authentication details are transmitted to the user through the authentication confirmation response step. It is determined whether a second authentication key is input. At this time, if the authentication details are transmitted from the authentication server to the customer's mobile communication terminal and there is no input of the second authentication key or other response from the customer within a predetermined time, the authentication is rejected and the transaction cancellation message is sent to the affiliated store. do.

On the other hand, if the password of the payment account is entered as a second authentication key, which is an authorization number for the authentication details from the customer, after checking the password of the customer's mobile terminal and the corresponding payment account stored in the authentication database in the next step (s630) ( In step s640), it is determined whether the password of the payment account confirmed in the database and the password which is the second authentication key transmitted through the mobile terminal of the customer match.

If the second authentication key received and the password stored in the database does not match as a result of the determination, the process proceeds to step s651 to transmit to the customer terminal and the merchant that the authentication for the transaction has been rejected.

On the other hand, if the transmitted password and the password stored in the database is matched with the determination result, the process proceeds to the next step (s660) to establish a transaction by transmitting a transaction approval message to the customer terminal and the authentication client.

The network level security required by the user authentication processing system and method using the personal mobile terminal according to the present invention is sufficient to have only the security of the existing VAN financial network and the CDMA mobile communication network level. In particular, even if information about authentication details, such as the type and price of a personal mobile phone number transmitted through a first network or a separate communication network, such as a VAN, is not likely to cause a serious financial accident. In addition, credit card numbers, which are the subject of direct financial damages, are not transmitted through the network at all, so the risk of leakage is inherently blocked. In addition, even if the second authentication key, which is the password of the payment account transferred to the mobile communication network, which is the second network, is leaked, it is of no use to a person who does not have both the mobile terminal number and the mobile terminal at the same time.

On the other hand, if the security is likely to be a problem First, in the case of lost or illegal terminal duplication of the personal portable terminal, the transaction is not possible without inputting the password of the payment account, which is the second authentication key in the processing procedure of the present invention, the user Can be defended by a loss report.

Second, when the personal portable terminal number is leaked, since the authentication result is called to the personal portable terminal in the second authentication procedure, the problem does not occur unless the portable terminal is lost.

Third, in the case of a credit card number leakage, the credit card number and the financial account number are not likely to be leaked because they are not transmitted through the network in the processing procedure of the present invention.

Fourth, if the card password is leaked, even if the card's password is leaked during transmission, it can not be used without a personal portable device and password.

Fifth, when a mobile terminal number and a card password are leaked to the same person at the same time, since a terminal device is necessary for the second authentication, it cannot be used without a personal portable terminal.

Sixth, when the same person acquires a personal handheld terminal and a card password at the same time may be caused by a compulsory reason and can only be prevented by the user's self-defense. This problem is solved not only in the present invention but also in all other authentication procedures. Can't.

The following Table 1 shows a case where a financial accident can occur in the existing authentication / payment method and the authentication method of the present invention. As shown, the present invention has the lowest possibility of a financial accident.

Accident due to card or card number leakage Accident due to leak of password Accident due to simultaneous spill General Merchandise Transactions by Credit Card △ X O Internet / Credit Card Purchase O X O Electronic wallet △ * X △ * The present invention X X X

(△: △: Possible if there is a card loss and signature forgery, △ *: possible if the encryption algorithm is broken, it may be stolen).

The system for authenticating a user using a personal portable terminal and a method thereof according to the present invention are not limited to the above-described embodiments, and various modifications can be made within the scope of the technical spirit of the present invention.

As described above, in the user authentication processing system and method using the personal mobile terminal according to the present invention, a customer who purchases through general commerce or electronic commerce registers with a bank or a card company without having a credit card or a cash card. Payment can be made using your own personal mobile terminal. In addition, since the credit card number, which is a direct payment method, is not transmitted through mobile communication networks or other networks such as VANs at the time of payment settlement, it is possible to prevent financial accidents due to direct credit card number leakage and provide high security accordingly. can do.

Furthermore, by connecting with multiple credit cards or bank accounts through one personal portable terminal, it is possible to provide simplicity of portability and convenience of use.

Claims (32)

In the user authentication processing system of a client / server structure for processing authentication of a user who is an authentication subject for a predetermined authentication history, An authentication client generating the authentication details and receiving a personal digital assistant number as a primary authentication key from a user through a first network and requesting authentication of the user; Receiving the user authentication request from the authentication client and receiving the first authentication key and forwarding the authentication details to the personal portable terminal, the second authentication key to the user through a second network that is distinct from the first network And an authentication server for receiving the request, receiving the request, and processing the user's authentication using the transmitted primary and secondary authentication keys. The method of claim 1, wherein the authentication client, And a credit card inquiry machine which receives the personal mobile terminal number as a primary authentication key through a first network and transmits it to the authentication server to enable transaction payment. The system of claim 2, wherein the authentication details include an identification code of an authentication client, an organization code of an authentication server, and a transaction history. The user authentication of claim 1, wherein the authentication client is an automatic financial transaction terminal that receives the personal mobile terminal number as a primary authentication key and transmits the same to the authentication server for cash withdrawal. Processing system. 5. The user authentication processing system according to claim 4, wherein the authentication details include a withdrawal amount and an organization code of the authentication server. The system of claim 1, wherein the authentication client is the same as the user, and the authentication details include a payee account number, a transfer amount, and an organization code of an authentication server. 7. The individual according to claim 6, wherein the authentication details include a recipient's mobile terminal number, a credit institution code of a recipient account, a transfer amount, and an authority code of a certificate server, which are connected to the recipient's mobile terminal number. User authentication processing system using a mobile terminal. The system of claim 1, wherein the secondary authentication key is a password of a payment account which is connected to a user's personal mobile terminal number. 9. The user authentication processing system according to claim 8, wherein the password of the payment account includes biometric information of the user. The method of claim 1, wherein the authentication server, And a database storing a phone number of the user's personal mobile terminal, a payment account that enables payment transactions through the phone number of the personal mobile terminal, and a password set to enable transactions through the payment account. User authentication processing system using a mobile terminal. 2. The system of claim 1, wherein the first network is a network that performs a wireless interface between a user's personal portable terminal and the authentication client. The system of claim 1, wherein the first network is a network capable of reading a terminal number of a storage medium in which a user's personal portable terminal number is stored through the authentication client. The user authentication processing system using a personal portable terminal as claimed in claim 1, wherein the first network is the Internet. The system of claim 1, wherein the second network is an automatic answering service through a mobile communication network. The system of claim 1, wherein the second network is a wireless Internet using a mobile communication network. The system of claim 1, wherein the second network is a short message service (SMS) through a mobile communication network. delete The authentication server of claim 1, wherein the mobile terminal number of the user is connected to at least one payment account capable of financial transactions in response to an input of a second authentication key by the user, and is provided at the time of generating the authentication details. And a corresponding payment account is selected from the at least one payment account according to the institution code input of the user authentication processing system. A user authentication processing method of processing a user's authentication by providing an authentication history in the authentication client to the authentication server in a user authentication system having a client / server structure for authentication, A first step of the authentication client generating an authentication history for the user and receiving from the user a mobile terminal number of the user with a primary authentication key required for authentication of the user over a first network; A second step of the authentication client requesting authentication of the user by transmitting the first authentication key including the authentication history and the mobile terminal number to the authentication server; The authentication server checks the authentication details of the user using the received first authentication key and then carries a message requesting input of a second authentication key for authentication approval through the second network which is distinguished from the first network. Transmitting to a terminal number; The authentication server determines the authentication result by comparing the first and second authentication keys with the authentication details stored in its database when the second authentication key for the authentication approval is input from the mobile terminal of the user through the second network. A fourth step of making; And And a fifth step of completing the authentication process by transmitting the determination result of the fourth step to the user's portable terminal. The method of claim 19, A sixth step of determining whether a corresponding payment account set to be connected to the mobile terminal number by searching the database of the authentication server by determining the mobile terminal number of the user from the first authentication key received through the second step; User authentication processing method using a personal mobile terminal, characterized in that further comprising the step. 20. The user of claim 19, wherein the second authentication key is a password of a payment account that is connected to the mobile terminal number of the customer inputted as the first authentication key and pays for the authentication details. How authentication is handled. 22. The method of claim 21, wherein the password of the payment account, which is the secondary authentication key, includes biometric information of the user. The method of claim 19, wherein the third step, And transmitting the authentication details and the second authentication key request message from the authentication server to the user's portable terminal through an ARS call using a mobile communication network. The method of claim 19, wherein the third step, And a second authentication key request message and a second authentication key request message from the authentication server to the user's mobile terminal through a short message service using a mobile communication network. The method of claim 19, wherein the third step, The user authentication processing method using a personal portable terminal, characterized in that for transmitting the authentication details and the second authentication key request message from the authentication server to the user's portable terminal through the wireless Internet using a mobile communication network. delete delete The method of claim 19, wherein the authentication details A method for processing user authentication using a personal mobile device, comprising: an identification code of an authentication client, an authority code of an authentication server, and a transaction history. The method of claim 19, wherein the authentication details If the authentication client is an automatic financial transaction terminal (ATM) user authentication processing method using a personal portable terminal, characterized in that it comprises a withdrawal amount, the authority code of the authentication server. The method of claim 19, wherein the authentication details In the case of the same account transfer, the authentication client and the user includes a payee account number, the transfer amount, the authority code of the authentication server. 31. The personal portable device according to claim 30, wherein the authentication details include a recipient's portable terminal number, a credit institution code of a payment account set to be connected with the portable terminal number, a transfer amount, and an organization code of an authentication server. User authentication processing method using a terminal. 20. The authentication server of claim 19, wherein the mobile terminal number of the user is connected to at least one payment account capable of financial transactions in response to an input of a second authentication key by the user, and is provided at the time of generating the authentication details. And a payment account of the corresponding authentication server is selected from the at least one payment account according to the institution code input of the user.