KR100835820B1 - Total internet security system and method the same - Google Patents

Abstract

An integrated internet security system and method are disclosed. The system according to the present invention includes an integrated solution for personal information protection and various authentication procedures management on the Internet, and stores each web site and data code in a predetermined database according to the security level based on the integrated solution. Internet access through a security service provided based on an integrated security server and a secure access program to block harmful traffic or provide a secure access program to wired and wireless Internet access terminals to prevent personal information leakage or internet access to dangerous sites. Includes wired and wireless Internet access terminals. Accordingly, the present invention implements an integrated Internet security service to fundamentally cope with Internet fraud by managing the personal information and authentication process of the user who uses the Internet from before the internet connection to the middle of the internet connection. Can protect.

Privacy, Internet Fraud, User Authentication

Description

Integrated Internet Security System and Method {TOTAL INTERNET SECURITY SYSTEM AND METHOD THE SAME}

1 is a block diagram of an integrated Internet security system according to an embodiment of the present invention,

FIG. 2 is a flowchart illustrating an operation of the security system shown in FIG. 1;

3 is a flowchart showing a process of protecting personal information in response to Internet phishing through the security system shown in FIG.

4 is a flowchart illustrating a process of protecting personal information in response to Internet farming through the security system shown in FIG. 1.

<Description of Symbols for Main Parts of Drawings>

100: integrated security server 110: security authentication service center

120: Personal Information Protection Service Center 130: Cyber Security Center

200: wired internet access terminal 300: wireless internet access terminal

The present invention relates to an integrated Internet security system and method, and more particularly, to the integrated Internet for detecting and blocking Internet fraud in real time, and to implement the user authentication on the Web to a reliable level to cope with the prevention of personal information theft A security system and method are disclosed.

Recently, convenience that eases time and space constraints between financial companies and customers for providing electronic financial services such as home trading, phone banking, and personal computer banking. As a result, the services are rapidly spreading and the number of users using them is continuously increasing.

However, such electronic financial services are very likely to cause not only personal economic loss but also social disruption if user authentication and information security are not secured. In other words, due to the development of various electronic and communication technologies, devices such as computers that can access specific information that requires security through various communication paths are widely used, and the security of information according to the existing encryption technology is dismantled. Technology is also readily available to professionals as well as non-experts. Therefore, high-performance, high-performance security technology has been continuously developed to protect information by preventing illegal activities such as access, reading, copying, theft, and destruction of specific information by unauthorized persons.

As the security of such information becomes more important, systems developed and used in connection with user authentication of electronic financial services, which occupy one of the mainstream of security systems, generally establish an authentication server for user authentication. And operate. As a representative method for a user to access such an authentication server, there is a method of connecting through the Internet using a personal computer. When the connection with the authentication server is made through such a communication system, the authentication process is performed to verify the authenticity of the user from the authentication server. When the authentication password for the financial service is required, the user directly inputs the user. The method of authenticating the authenticity of is widely used.

However, in this method, the authentication password remembered by the user has a high risk of being exposed by others, and since a fixed authentication password is used every time, a fingerprint or authentication password is detected on a data input means such as a keypad or keyboard. There is a possibility that it can be easily leaked to others due to an illegal method such as recording the scene input to the video recording apparatus. In addition, due to the advancement of Internet technology, phishing, which is an Internet fraudulent method that illegally finds personal information from financial institutions, is used to steal a domain of a legally owned user or to alter the address of a domain name system or proxy server. To increase the number of attempts at various Internet scams, such as Pharming, a new computer crime scheme that steals personal information after encouraging users to misunderstand and access real sites, In response to the growing need for countermeasures, users can be protected from personal information and malicious attacks throughout their secure Internet use, financial services, and home network environments. And monetary It is time to prevention / off function. Against this backdrop, a secure network based on the original blocking of fraud attempts using the Internet and trust between external certification authorities, web portals and financial institutions is required.

Accordingly, the present invention was created to solve the above problems, and an object of the present invention is to fundamentally cope with Internet fraud by managing the personal information and authentication procedure of the user using the Internet from before and during the Internet connection. To provide an integrated Internet security system and method.

The integrated Internet security system according to the first aspect of the present invention for achieving the above object is provided with an integrated solution for personal information protection and various authentication process management on the Internet, and each website and data based on the integrated solution The code is stored in a predetermined database according to the security level, and harmful data is blocked based on the database, or a secure access program is provided to the following wired / wireless internet access terminals to prevent personal information leakage or internet access to dangerous sites. And a wired and wireless Internet access terminal for accessing the Internet through an integrated security server and a security service provided on the basis of the secure access program.

In addition, the integrated Internet security method according to the second aspect of the present invention for achieving the above object, (A) determining whether the integrated security server subscription to the integrated Internet security service for the wired or wireless Internet access terminal connected to the Internet, ( B) if the wired / wireless internet access terminal is a service subscription terminal, downloading an automatic access induction program provided by the integrated security server or a secure access program through a web site; Based on the security vulnerability analysis program among the access programs, blocking access to the web site or confirming the possibility of access risk to the user until confirming the trust of the web site attempting to connect with the integrated security server. And (d) the integrated security server floats harmful traffic. Blocking the pick, confirming the security stability of the web site, characterized in that it comprises a step of supporting a reliable internet access between the wired and wireless Internet access terminal and the web site in real time.

Hereinafter, a preferred embodiment of the integrated Internet security system according to the present invention with reference to the accompanying drawings in detail as follows.

1 is a block diagram of an integrated Internet security system according to an embodiment of the present invention. As shown in FIG. 1, the integrated Internet security system includes at least one web of at least one wired or wireless Internet access terminal 200, 300 for accessing a wired or wireless internet, and a plurality of web sections which are data movement paths on the wired or wireless internet. It monitors the data code of the traffic floating in the section, and if the data code contains the code corresponding to the security level of the dangerous target, it is set as the harmful traffic and blocked, and the wired / wireless internet access terminal that provides the security service. (200, 300) is to determine the web pattern of the security authentication for the web site that is attempting to access or the web site that requests security authentication among the plurality of web sites that perform personal information authentication procedure on the wired and wireless Internet Settings to form dangerous site list information Based on the dangerous site list information stored in the base, the wired / wireless internet access terminal 200 or 300 determines whether the website to be accessed is a dangerous site. An integrated security server that provides security services to prevent personal information leakage or Internet access to dangerous sites based on an integrated solution for delivering notification messages to the wired and wireless Internet access terminals (200, 300). 100.
In addition, the integrated security server 100 is provided with a secure access program for executing the integrated solution in conjunction with the wired and wireless Internet access terminals (200, 300) for accessing the security service, the wired and wireless Internet access terminal 200 It is desirable to provide a secure access program included in (300).

The integrated solution is for personal information protection and internet fraud prevention. Intrusion detection system including malware, internet phishing, internet pharming, anti-spam and personal hacking prevention functions floating on the Internet based on the database is provided. Is developed.
In addition, the integrated security server 100 is a web site that the wired and wireless Internet access terminals (200, 300) attempts to access or secures a web site that requests security authentication among a plurality of web sites that perform personal information authentication procedures on the Internet. Determine through web pattern of authentication (e.g., web pattern for personal information authentication after proving that it is original site through domain name management system) and set security level for each web site based on the determined information And a database for generating and storing dangerous site list information according to the security level. If a predetermined data code is determined to be floated and it is determined that the security level conforms to a virus, a hacking attempt, a harmful code, it is regarded as harmful traffic. Block and manage the personal information of the terminal user subscribed to the security service In addition, the security authentication service center 110 for performing the Internet authentication process, equipped with a vaccine program for blocking various harmful elements on the Internet based on the integrated solution, real-time upgrade to the wired and wireless Internet access terminals (200, 300) It consists of a cyber security center 130 for upgrading the personal information protection service sensor and the security access program and the vaccine program for providing, or to take a quick response in the event of an Internet breach while the operator manages the security service.

delete

In addition, the security program is provided to the wired and wireless Internet access terminals (200, 300) to block harmful elements that the integrated security server 100 has not blocked in advance, or the database previously stored in the integrated security server 100 and It is to establish an integrated security stability platform between personal terminal and system server through interworking with various personal information theft prevention systems. Further, the security program includes a hacking detection tool, a malware / spyware detection tool, an email anti-phishing tool, a website anti-phishing tool, a website anti-pharming tool, a security vulnerability analysis program, and a keyboard monitoring defense program. This is a program for realizing service interworking between the integrated security server 100 and the wired / wireless internet access terminals 200 and 300.

Here, the security weakness analysis program determines whether or not the security information for a predetermined web site connected to the wired and wireless Internet access terminal (200, 300) through the relevant database of the integrated security server 100, and the determination result is Until it is confirmed that it is safe, the user may block the access to the website or generate a guide message about the possibility of access harmfulness.

In addition, the personal information protection service center 120 is an anti-phishing, anti-pharming, anti-spam and malware, intrusion detection system, such as a network security solution used in conjunction with the firewall, such as IDS, such as a real-time upgraded and retained This is provided to the wired / wireless internet access module to protect against security threats currently available on the Internet.

Further, when the wired or wireless Internet access terminal 200, 300 is connected to a web site that requires a predetermined authentication process, that is, an accredited certification authority, an e-commerce site, and the like, the mobile disposable device mounted on the wireless internet access terminal 300 is used. User authentication is performed based on the authentication number (MOTP; Mobile One Time Password).

In more detail, when a predetermined wired / wireless internet access terminal 200 or 300 accesses a web site requiring user authentication after logging in, a mobile one-time authentication number is requested on the web screen of the web site. In response to the guidance window, the integrated security server 100 extracts the personal information for this, generates a security authentication value through an encryption process on the extracted personal information, and confirms the unique personal information protection name in response to the security authentication value. Temporarily stores the authentication number generated through the module, and provides the security authentication value to the wired and wireless Internet access terminals (200, 300). Accordingly, when the personal information protection real name verification module mounted on the wireless Internet access terminal 300 generates a mobile one-time authentication number corresponding to the security authentication value and transmits it to the integrated security server 100, the integrated security server ( 100) compares and determines the temporarily stored authentication number and the mobile one-time authentication number and executes user authentication according to the match, and provides the result to the corresponding web site to complete the user authentication.

Hereinafter, the operation of the integrated Internet security system according to the present invention with reference to the accompanying drawings in more detail as follows.

FIG. 2 is a flowchart illustrating an operation of the security system shown in FIG. 1. As shown in FIG. 2, the integrated internet security method is executed by internet access of the wired / wireless internet access terminals 200 and 300 (S100). Accordingly, it is checked whether the user of the wired / wireless internet access terminal 200 or 300 running on the Internet through the integrated security server 100 provided by the company providing the integrated Internet security service is a service target (S102). As a result of the check, if the service target is confirmed, the web site that attempts to block harmful traffic such as viruses, hacking attempts, and harmful codes floating on the Internet for the wired / wireless internet access terminals 200 and 300 of the target, It provides a secure internet access service through the line to determine whether a dangerous site is located and to block access to the dangerous site. However, if it is not the service target, the wired / wireless internet access terminals 200 and 300 perform general web access, which may potentially leak personal information, as the security service cannot be provided (S104).

Subsequently, the wired / wireless internet access terminals 200 and 300, which are provided with the security service, attempt to access a predetermined web site by accessing the Internet, and execute an integrated security server (i.e., access the web site that attempts to access the web site). 100 is provided with an automatic connection induction program for automatic connection (S106).
Accordingly, the wired / wireless internet access terminals 200 and 300 install and execute the downloaded secure access program to go through a process for protecting personal information and authentication through internet access (S108). Through the above steps, the wired / wireless internet access terminal 200 or 300 establishes a related program through a preparation process for receiving the security service of the present invention, and attempts to access a predetermined web site (S110).
Thereafter, the integrated security server 100 monitors the data code of the traffic that floats to at least one or more web sections of the plurality of web sections, which are data movement paths on the Internet, and the monitoring result corresponds to a preset security level of the risk target. If the traffic is set to harmful traffic to block in advance (S112).
Here, the traffic is traffic generated when the wired / wireless internet access terminal 200 or 300 attempts to access a web site, or traffic generated while another terminal which is not related to the wired / wireless internet access terminal 200 or 300 executes a web connection. It could be
During this process, the security vulnerability analysis program is started from among the security access programs possessed by the wired / wireless internet access terminals 200 and 300, and the web site attempts to access until the authentication procedure and related security checks are performed in the web access process. Blocks the access or delivers a notification message to the user that there is a possibility of danger (S114).

Further, the integrated security server 100 retrieves the security level for the web site that the wired and wireless Internet access terminals 200 and 300 attempt to access (S116).
Subsequently, the integrated security server 100 determines whether the web site that the wired / wireless internet access terminal 200 or 300 attempts to access is a dangerous site based on previously stored dangerous site list information (S118). If it is determined that the web site is not a dangerous site based on the result of the determination, the security level of the security authentication target is checked and the additional security authentication procedure for the web site is simplified (S120).
On the other hand, if the web site is a dangerous site, it is determined that the security level is set to the risk level, and a process of re-confirming the security stability at the user particle by reinforcing a security authentication procedure additionally executed for the web site (S122).
After the step S120 and the step S122, the process of checking the security stability of the web site again (S124). If the security stability of the web site is not confirmed in step S124, the feedback to the step before the step S114 and delivers a guidance message about the possibility of web access risk to the user (S126). When the security stability of the web site is confirmed in step S124, the web access to the page (S128).

In this case, the general process for the user authentication procedure is a process for the wireless Internet access terminal 300, such as a mobile communication terminal to access the integrated security server 100, issuing and storing and installing a personal information protection real name verification module Rough as Subsequently, when the wired Internet access terminal 200 such as a personal computer accesses and logs in to a web site requiring a user authentication procedure, and executes a mobile one-time authentication number input screen on a monitor screen, The integrated security server 100 responding to the mobile one-time user authentication request extracts the relevant personal information by using the log-in information, generates a security authentication value related to the personal information, and generates a unique personal information protection real name verification module for the personal information. Generate and temporarily store an authentication number corresponding to the security authentication value through the security authentication value, and transmits the security authentication value to the wired Internet access terminal 200 via a wired or wireless Internet to display on the corresponding input screen, or the wireless Internet access terminal ( 300).

In addition, the wireless Internet access terminal 300 generates a mobile one-time authentication number corresponding to the security authentication value through the mounted personal information protection real name verification module and transmits to the integrated security server 100. Accordingly, the integrated security server 100 determines whether the authorized mobile one-time authentication number matches the authentication number being temporarily stored and executes user authentication. The result of this is transmitted to the corresponding web site to complete the user authentication step at the web site.

Furthermore, after the web connection is made in step S128, a process is performed in which the integrated security server 100 can quickly respond by monitoring the risk of personal information leakage to the terminal of the service target in real time (S130). ). When the wired / wireless internet access terminal 200 or 300 releases the access to the web site through the above steps, a series of processes are terminated (S132).

Further, looking at the process of protecting personal information in response to Internet phishing through the integrated Internet security method through Figure 3, if the wired and wireless Internet access terminal (200, 300) is connected to the Internet (S200), the data on the Internet Monitors a data code including a URL address for an email floating to at least one web section of a plurality of web sections that are movement paths, and sets the email as a phishing email if the monitoring result is a security level of a preset risk target. The process of blocking the difference is executed (S202 and S204).
Subsequently, when the wired / wireless Internet access terminals 200 and 300 interoperating with the integrated solution-based secure access program receive the phishing e-mail which is not monitored through the integrated security server 100 (S206 and S208). By performing email anti-phishing tool processing of the secure access program included in the terminal to determine each data code for received e-mails, the phishing e-mail is extracted, and the connection to the web site linked through the extracted phishing e-mail is established. Carry out a process of blocking (S210, S212).

Furthermore, if the phishing email passes even the secondary blocking function (S214), the web site anti-phishing tool function of the secure access program checks whether the web site related to the phishing email is a dangerous site (S216 to S220). If it is determined that the web site is a site that is subject to security authentication, a pre-identified negative method for comparing the image watermarking that is previously set and given to the site of security authentication with the image watermark provided from the web site Through the final determination whether the authenticity of the web site to prevent the leakage of personal information (S222).

In addition, looking at the process of protecting personal information in response to Internet farming through the integrated Internet security method through Figure 4, the wired and wireless Internet access terminals (200, 300) through the Internet through a trusted domain name management system Registered main website (S300, S302), the integrated security server 100 having an integrated solution for the protection of personal information and various authentication procedures on the Internet, the original site proof data pre-committed for the main website It provides to the wired and wireless Internet access terminal (200, 300) (S304). Accordingly, the wired and wireless Internet access terminals 200 and 300 receive the original site proof data (S306), and the web site phishing and pharming implemented by the integrated solution-based secure access program based on the original site proof data. By checking whether or not the web site is trusted through the prevention tool function (S308, S310), it is determined whether the web site accessed by the wired / wireless Internet access terminals 200, 300 is a dangerous site (S312), and the user Through the logo of the web site accessed through the browser, IP / URL, directory system, dangerous site list information, etc. to block the web or check the warning about the risk of access to respond to (S314).

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art will be variously modified and changed within the scope of the invention without departing from the spirit and scope of the invention described in the claims below. I can understand that you can.

Therefore, the present invention implements an integrated Internet security service to fundamentally cope with Internet fraud by managing the personal information and authentication process of the user who uses the Internet from before the Internet connection to during the connection, thereby attempting fraud through the Internet. Proactively prevent and detect personal information leaks and theft attempts to protect your privacy through anti-phishing, pharming, email spoofing and countermeasures against Internet fraud, and lists databases of forged or phishing sites. It is possible to provide more secure web services and financial services through a reliable network configuration with information providing financial institutions.

Claims (15)

At least one wired or wireless Internet access terminal for connecting to the Internet; And Monitoring the data code of the traffic that floats to at least one or more web sections of the plurality of web sections, which are data movement paths on the Internet, and if the monitoring result is a security level of a preset risk target, blocks the traffic by setting it as harmful traffic, A security level corresponding to a web pattern that the wired / wireless internet access terminal attempts to access, or a web pattern for performing security authentication for a web site requesting security authentication among a plurality of web sites that perform personal information authentication procedures on the Internet; The risky site list information is formed by the setting of, and if the web site that the wired / wireless internet access terminal attempts to access is a dangerous site based on the dangerous site list information, the integrated solution for blocking web access is applied to the wired / wireless internet access terminal. Including an integrated security server that provides security services, The integrated security server, And providing a secure access program to the wired / wireless internet access terminal to execute the integrated solution in connection with the wired / wireless internet access terminal requesting the security service. The method of claim 1, wherein the integrated security server Set whether to block according to the result of monitoring the data code of the traffic floating to the at least one web section by executing the integrated solution, and manages personal information of the terminal user registered in the security service based on the dangerous site list information And a security authentication service center for performing a personal information authentication procedure. A personal information security service center for providing the wired / wireless internet access terminal with a vaccine program formed on the basis of the secure access program and a data code which is a security level of the dangerous object; And And a cyber security center for upgrading the security access program and the vaccine program or for controlling the security service. The method of claim 2, wherein the secure access program Integrated Internet security, including hacking detection tools, malware / spyware detection tools, email anti-phishing tools, web site anti-phishing tools, web site anti-pharming tools, security vulnerability analysis programs, and keyboard monitoring defense programs system. According to claim 3, wherein the vulnerability analysis program The security information of a predetermined web site accessed by the wired / wireless internet access terminal is interlocked with the integrated security server to determine whether it is safe, and the access to the web site is blocked until the determination result is determined to be safe or harmful. Integrated Internet security system, characterized by generating a guidance message about the possibility. The method of claim 1, wherein the wired or wireless Internet access terminal When accessing a web site requiring a predetermined authentication process, integrated Internet security system characterized in that for performing the user authentication based on the mobile one-time authentication number generated through a mobile communication terminal equipped with a personal name protection real name verification module. When the wired / wireless internet access terminal accesses a web site requiring a user authentication procedure, the mobile terminal generates a security authentication value related to the personal information in response to the mobile one-time user authentication request for the web site, and then corresponds to the security authentication value. Temporarily storing a predetermined authentication number, and transmitting the security authentication value to the wired / wireless internet access terminal through a wired / wireless internet, and corresponding to the security authentication value through a personal name protection module installed in the wireless internet access terminal. Integrated security server, characterized in that for performing the user authentication by receiving the generated mobile one-time authentication number and whether or not match with the stored authentication number. The method of claim 6, wherein the integrated security server The web site that the wired / wireless internet access terminal attempts to access or determines a web pattern of security authentication for a web site requesting security authentication among a plurality of web sites that perform a personal information authentication procedure on the wired / wireless internet and responds to the security Level setting forms dangerous site list information, and blocks access depending on whether the web site that the wired or wireless Internet access terminal attempts to access is a dangerous site based on the dangerous site list information. Monitors the data code of the traffic that floats to at least one or more web sections of the plurality of web sections, the data movement paths on the wired and wireless Internet, and blocks the traffic as harmful traffic if the monitoring result is a security level of a preset risk target. Integrated security server. The method of claim 7, wherein the integrated security server Integrated security server, characterized in that for providing the wired and wireless Internet access terminal by upgrading the vaccine program formed on the basis of the data level of the security target of the risk in real time. (A) determining, by the integrated security server, whether to join the integrated Internet security service for a wired or wireless Internet access terminal connected to the Internet; (B) providing a secure access program to the wired / wireless internet access terminal according to the determination result; (C) when the wired / wireless internet access terminal starts a security vulnerability analysis program of the security access program and accesses a web site on the internet, the web is based on the risk site list information previously stored in association with the wired / wireless internet access terminal; Blocking a connection with the web site if the site is a dangerous site, or transmitting a guide message to the wired / wireless internet access terminal about a possibility of access risk; And (D) In the case where the web site is a security authentication target site based on the dangerous site list information, the data code of the traffic floating to at least one or more web sections among the plurality of web sections, which are data movement paths on the Internet, may be monitored. And setting the traffic as harmful traffic if the security level is set to a dangerous target, and executing whether or not to block web access to another web site linked to the web site in real time. . The method of claim 9, wherein the step (c) The security level of the web site that the wired / wireless internet access terminal attempts to access through the integrated security server which database the dangerous site list information preset according to the corresponding security level by analyzing various web sites may be higher than the reserved level. And in case of connection with the web site. The method of claim 9, wherein the step (c) The security level of the web site that the wired / wireless internet access terminal attempts to access is lower than the reserved level through the integrated security server that analyzes various web sites and database predetermined risk site list information according to the corresponding security level. If the Internet-based phishing and pharming algorithm. The method of claim 10 or 11, wherein the user authentication procedure (C-1) the wireless Internet access terminal accessing the integrated security server to receive, store, and install a personal information protection real name verification module; (C-2) the wired internet access terminal accessing and logging in to a web site requiring a user authentication procedure, and executing a mobile one-time authentication number input screen on a monitor screen; (C-3) The integrated security server, which responds to the mobile one-time user authentication request for the web site, extracts the corresponding personal information by using the log-in information, generates a related security authentication value, and generates unique information about the personal information. Temporarily storing a predetermined authentication number corresponding to the security authentication value through a personal information protection real name verification module of the personal information protection module, and transmitting the security authentication value to the wired / wireless internet access terminal through a wired / wireless internet; (C-4) transmitting the mobile one-time authentication number generated in correspondence with the security authentication value to the integrated security server through the personal information protection real name verification module mounted in the wireless internet access terminal; And (C-5) the integrated security server comprises the step of determining whether the mobile one-time authentication number transmitted from the wireless Internet access terminal and the authentication number stored in advance and performing user authentication. . In a way to protect personal information in response to Internet phishing, (A) The integrated security server monitors a data code including a URL address for an email that is floated to at least one web section of a plurality of web sections that are data movement paths on the Internet, and monitors the security of the risk object for which the monitoring result is preset; Executing the anti-phishing function of the integrated solution to block the email by setting the email as a phishing email at the first level; (B) when the wired / wireless internet access terminal which receives the integrated solution-based secure access program from the integrated security server receives the phishing e-mail which is not monitored through the integrated security server, Executing email anti-phishing tool processing to extract and secondary block the phishing email according to a determination of the data code formed by the phishing email; And (C) When attempting to access a web site linked to the phishing email that has passed the secondary blocking function, the web site anti-phishing tool processing of the secure access program is executed to link the web site with the integrated security server. And accessing after checking whether the information is included in the preset dangerous site list information. The method of claim 13, wherein the integrated Internet security method When the web site is determined to be a site to be secured, the image watermarking preset and assigned to the site of the secured certificate is compared with a pre-identified negative method for comparing the image watermarking to the web site. And further determining the authenticity of the website. In the way to protect personal information in response to Internet farming, (A) receiving, by the integrated security server, setting registration for the main web site of the wired / wireless Internet access terminal connected to the domain name management system; (B) forming original site identification data for the main web site through the domain name management system and transmitting the same to the wired / wireless internet access terminal; (C) When the wired / wireless internet access terminal attempts to access the main web site or a similar site corresponding to the main web site, web site phishing and anti-pharming tool processing of the secure access program provided from the integrated security server is performed. Executing; And (D) receiving the site authentication data from the main web site or a similar site corresponding to the main web site which is attempting to connect with the integrated security server by executing the secure access program; and the site proof data and the original site. And determining whether the main web site or a similar site corresponding to the main web site is the main web site according to whether the attestation data match.

Images