KR20000012776A - Method and system for identifying an identity on Internet - Google Patents

Abstract

PURPOSE: An identity conformation method and system on internet is provided to improve security of identification and password for user and prevent steal of identification and remove procedure of registration for member. CONSTITUTION: The identity conformation method and system on internet comprises the steps of confirming an identification an applicant for membership; registering the applicant's affair and a password; issuing one of internet-id on web or sending the internet id to the applicant's mail-address; presenting an internet-id on a site to identify the identification; sending a internet-id to a identification confirming system and requesting a confirm of identification; requesting password of user and transmitting an authentication key.

Description

Method and system for identifying an identity on Internet

The present invention relates to an identity verification method and system for verifying identity on the Internet, and to an identity verification method and system for verifying on behalf of a subscriber every time identity verification is required with only one identity verification on the Internet. In this case, identity refers to the one-to-one correspondence of a person who actually exists in society, and actually corresponds to the person's actual identity, but it is an Internet identity that guarantees anonymity without knowing who is outside of this system.

Until now, in the case of password checking systems used in bank accounts and credit cards on non-Internet, if a person uses different passwords for various types of bank accounts and credit cards, they have to remember their passwords individually. If you fail to do this, the process of verifying him is very cumbersome in that he must know the password by going to the issuing window.

In addition, since the recent rapid development of the Internet network and the frequent exchange of information and resources using the Internet, there is a need to confirm the identity of each individual using the Internet, and with the development of electronic commerce using the Internet, the identity and credit status of individuals There is a need to verify and guarantee. However, until now, it has been an identity verification and registration system that does not actually check personal status and credit status on the Internet, but only checks the ID and password of the individual inputted by the individual and registers the registered ID. Under such a personal identity (including personal and credit information) registration system, it is impossible to prevent or confirm the double or triple registration of a single person, and has the problem of multiple registration. In addition, if each individual has a plurality of IDs, if the ID is not memorized or if the same person registers as a new subscriber by a new ID as necessary, it is difficult to identify the identity of the subscriber. Even if the total number of subscribers is an error.

Under a system where multiple registrations cannot be prevented at the member registration site, problems such as waste of resources caused by multiple registrations, difficulty in managing members, and difficulty in calculating site value cannot be solved. In addition, in the case of cyber polls / voting, statistical significance may be lost because plural participation cannot be excluded.

In addition, in the conventional identity verification system, an individual has to register his / her details on various websites, which makes it difficult to register the user, and guarantees one-to-one identity and anonymity of information such as polling / voting. There is a disadvantage that cannot be used if it is to be maintained. In addition, it is not easy to prevent the outflow of personal information registered by the subscriber to the outside, so personal privacy cannot be protected.

Moreover, the existing Internet identity registration system cannot prevent duplicate subscriptions, so it cannot be directly put into polls and polls, and there is no proper identification system that guarantees anonymity and confidentiality. Despite the high cost of polling and polling votes without raising the turnout rate, the existing polling and voting system is still used.

Recently, advanced countries such as the United States are preparing legislation of electronic voting using the Internet to raise the low turnout rate, reduce enormous costs such as voting, and manage efficiently. Especially, online voting using computer system installed in home and polling place Plan to allow. In addition, in case of absentee voting, there is a plan to allow internet voting.In this case, even though internet voting is allowed, considerable cost and effort must be invested up to the principle of secret election such as personal identification and security. Opponents have a lukewarm response that the lack of transparency in identity verification will lead to problems such as fraudulent voting, privacy infringement debate, prevention of intrusion by professional hackers, and disturbance of voting by hackers.

The technical problem to be achieved by the present invention is to issue a single Internet ID per subscriber and register him, thereby confirming the registered subscriber's identity on behalf of the subscriber to the third party on the Internet. The purpose of the third party is to provide an identification method and system for verifying the identity of the Internet in a state where anonymity is unknown without knowing who the subscriber is.

Another technical problem to be achieved by the present invention is to prevent multiple registrations in the member registration site that needs to check the identity of each subscriber, so that waste of resources caused by multiple registrations, difficulty of member management, and site value calculation The purpose is to provide an identification method and system that can solve problems such as difficulties.

Another technical problem to be achieved by the present invention is to increase the statistical significance in the case of cyber polls / votes, because it can exclude multiple participation, the individual who participates need to input personal information for the aggregation of statistics No individual who participates in a poll / voting site can provide the information required by their poll / voting site within the scope of anonymity, and protects privacy by making it difficult to expose real identity through the use of cyber identity. The purpose is to provide a method and system for identification.

Another technical problem to be achieved by the present invention is that each subscriber can prove his or her identity at any site by remembering only one ID / password, thereby providing an identity verification method and system that does not require a separate member registration procedure. The purpose is. This is because when a subscriber needs membership registration at a site or social activity, necessary identity information can be transmitted to a desired place in real time through the identification method and system of the present invention. Of course, if the information is changed or added to the subscriber, only the identification method and system of the present invention need to be updated.

Another technical problem to be achieved by the present invention is to provide a method and system for identifying the identity that can act as a substitute for the subscriber's commerce payment, cyber credit management. For example, if a credit transaction is made and no payment is made, credit management such as disallowing further credit transactions to the subscriber, that is, the owner of the ID, becomes possible.

Another technical problem to be achieved by the present invention is to verify the identity of individuals at government offices such as offices and ward offices, and personal information such as military service, education, qualifications, illness, financial credit status of each individual, and corporate registration of each company, Its purpose is to provide identification methods and systems that can be used for all services that require identification, such as taxation, manufacturing licenses, import and export licenses, etc.

1 is a schematic diagram showing a schematic identification system for explaining the identification method on the Internet of the present invention.

Figure 2 is a flow chart illustrating the identity registration process of new subscribers to the identity verification system of the present invention.

3 is a flowchart illustrating a process when a subscriber who has registered an identity in the identity verification system of the present invention registers an identity on a member site.

4 is to confirm the address and name of the subscriber to the member site according to the request of the subscriber who has completed the identity registration to the identity verification system of the present invention, and the member site transmits the access / transaction details to the subscriber to prevent theft of the Internet ID This is a flowchart for explaining the process.

<Explanation of symbols for the main parts of the drawings>

10.Internet, 20.New subscribers

30, 32, 34 ... guarantor, 40 ... registered subscriber

50, 52, 54 ... member sites, 100 ... identification systems,

120 ... storage, 140 ... system server.

In accordance with one aspect of the present invention, there is provided a method of verifying an identity of a subscriber on the Internet, the method comprising: (a) identifying an identity of a person who wants to join; And (b) assigning only one Internet ID to the person whose identity has not been registered, and registering the personal information with a password in the identity verification system. to provide.

Preferably, the identification method comprises the steps of: (c) presenting the Internet ID to a member site where the person who has issued the Internet ID wants to verify his or her identity when the Internet ID is required for the identity verification procedure on the Internet; (d) a member site which has been presented with an Internet ID, transmitting the Internet ID to the identification system to request identification; And (e) the identity verification system, which has been requested for identification, transmitting a authentication key for verifying the identity of the subscriber to the member site if the subscriber requests a password and matches the identification.

Preferably the identity verification method is to confirm the identity of the person who wants to join the step (a) if the subscriber to the new identity verification system by the guarantee of the guarantor (a1) Inputting the social security number and the guarantor's Internet ID; (a2) transmitting the resident registration number and authentication key of the applicant who wishes to join the guarantor in the identification system; (a3) the guarantor determining the authenticity of the resident registration number of the subscriber who wishes to subscribe and notifying the identification system of the guarantee; (a4) in the case of guaranteeing in the step (a3), the guarantor delivers (transmits or orally) the authentication key to the subscriber who wishes to enter his or her password and details through the authentication key; (a5) the identity verification system; issuing an Internet ID to the subscribers to join; includes.

Preferably, in the identification method, in the step (a3), when the guarantor notifies the identification system that the subscriber does not guarantee the identity of the subscriber, the identification system notifies the subscription applicant that registration is not possible. It further includes. In this case, the applicant may have to seek another guarantor or apply for the subscription directly through the certification body.

Preferably the identity verification method is to confirm the identity of the person who wants to join the step (a) if the subscriber is a new subscriber to the identity verification system without a guarantor, (a11) the subscriber's registration number, Inputting personal details such as an address; (a22) in the identification system, requesting a visitor to visit a nearby certification authority for proof of identity; (a33) ending the identity verification process if the subscriber wishes to visit the certification authority to perform the identity verification process or does not visit; (a44) confirming the identity of the certification body and notifying the identity verification system of the applicant by inputting the resident registration number of the member who wishes to join; (a55) the identification system transmits an authentication key to a subscriber who wishes to enter his / her password and details through the authentication key; (a66) The identification system includes the step of issuing an Internet ID to the subscribers. In other words, in the absence of a guarantor, it can take over the role of a guarantor in a certification body recognized by the identification system.

Preferably, the identification system may, at the request of the owner of the Internet ID, display personal information such as name and address for product delivery or information for statistical processing (e.g., region, occupation, age, gender, etc.) of the member site. It further comprises the step of transmitting in real time.

Preferably the identification system further comprises the step of transmitting the connection / transaction details with the member site to the owner of the Internet ID.

In order to achieve the above technical problem, according to another aspect of the present invention, in the identity verification system for verifying the identity of subscribers on the Internet, the identity of the person who wants to join is confirmed, A website server for issuing an Internet ID and registering his / her personal information with a password securely on the Internet; And a storage unit for storing the registered subscriber's Internet ID and personal information and password.

Preferably, in the identification system, if the person who issued the Internet ID needs an identification process on the Internet, the person who has been issued the Internet ID presents the Internet ID to a member site that wants to verify his / her identity, and has received the Internet ID. The member site transmits the Internet ID to the identification system to request identification, and the identification system which has been requested to verify the identity requires the subscriber to request a password to verify the identity of the subscriber at the member site. Sending the key.

Hereinafter, with reference to the accompanying drawings, it will be described in more detail the configuration and operation of the identification method and system for identifying the identity of the subscriber on the Internet according to the preferred embodiments of the present invention.

1 is a schematic diagram showing a schematic identification system for explaining the identification method on the Internet of the present invention. As shown in FIG. 1, the identification method and system on the Internet of the present invention causes the identification system 100 to be newly identified after an identification procedure between the new subscriber 20 and the identification system 100 on the Internet. The subscriber 20 issues a unique anonymous Internet ID. In this case, when the new subscriber 20 has a guarantor 30, 32, 34, ... (when the guarantor directly passes the authentication key to the new subscriber, the new subscriber 20 in the guarantor 30 of FIG. 1). Arrow is required.) The guarantor's guarantee registers the new subscriber with the identification system, and if there is no guarantor, the identity is confirmed by a predetermined certification authority (60, 62, 64, ...). After the registration, the new subscriber's identification system is registered. When the registered subscriber 40 makes a transaction with the member sites 50, 52, 54, ..., the identity verification system 100 causes his / her identity to be represented on behalf of the member site 50, 52, 54, ... ...). In Fig. 1, the solid line shows a system for communicating using the e-mail 10 on the Internet, the new subscriber 20, the guarantor (30, 32, 34, ...), authentication at the time of issuance of Internet ID It shows the exchange of information using the e-mail 10 between the institutions (60, 62, 64, ...) and each of the identification system 40. However, since e-mail is not secure enough to send password-informed information, communication between subscribers and identification systems is secured, for example, passwords when connected via SSL (Secured Socket Layer). It is preferable to confirm. Most of the information is passed through the http protocol, but it is convenient to email the authentication key sent to the guarantor and the member site access / purchase report. In addition, new entrants and certification bodies can verify their identity by actually visiting or submitting a public certification document. Meanwhile, the dotted line in Fig. 1 shows the exchange of information by direct access to the website of the identification system on the Internet. In this case, the electronic mail 10 may be used in parallel when the information is input and transmitted. Here, the Internet ID may be issued unilaterally by the identification system, or may be issued after checking that the ID desired by the subscriber is not duplicated.

The identification system 100 applied to the present invention may be applied to a general personal computer, a workstation computer, a high-capacity high-speed computer, etc., but may be appropriately applied according to the number of subscribers. A system server 140 that performs processing and a storage device 120 that stores the processed data are provided. In addition, the identification system 100 is of course provided with input and output means such as a keyboard, mouse, monitor, printer. In addition, the storage device applied here may be HD (hard disk), LD (laser disk), CD (compact disk), DVD (digital video disk), DVD-RAM, etc., capable of high-capacity high-speed processing of data. In the following, HD is applied.

Through the configuration shown in Figure 1, the identification method according to the present invention will be described with reference to Figures 2 to 4.

Figure 2 is a flow chart illustrating the identity registration process of new subscribers to the identity verification system of the present invention. According to Figure 2, the identification method of the present invention will be largely described by dividing into two stages of the Internet ID issuance process (Fig. 2) and the identity verification process by the Internet ID (Fig. 3).

The process of issuing an Internet ID in a method of verifying a subscriber's identity on the Internet begins by connecting a website of an identity verification system to a person who wishes to join the identification system (100 of FIG. 1) of the present invention (step 200). At this time, the website of the identification system asks if there is a guarantor (step 210). If there is a guarantor in step 210, the Internet ID issuance process is performed through steps 300 to 360. In step 300, the subscriber desires to input his / her social security number and the guarantor's Internet ID on the website of the identification system. In step 310, the identification system transmits the resident registration number and the authentication key of the subscriber who wants to join the guarantor. At this time, the resident's registration number and authentication key may be transmitted by the guarantor's e-mail, or the resident's registration number and authentication key may be sent to the guarantor's mobile phone, or simply inform the applicant's information to access the website of the identification system. You may. Next, in step 320, it is determined whether the guarantor can guarantee the social security number of the subscriber who wants to subscribe, and if so, in step 330, the identification system is notified of the intention to guarantee the subscriber. Then, the guarantor delivers the authentication key transmitted from the identification system to the subscriber who wishes to subscribe (step 340), and the subscriber desires to input his or her personal details and password to the identification system through the authentication key (step 350). . As a result, the identification system registers the identification information of the identified person with a password and issues a single Internet ID to the subscriber who wishes to join (step 360). Since registration and confirmation of personal information and password is a security process, it is desirable to communicate in a secure state. The subscriber's password applied in the present invention may use alphanumeric information selected by the subscriber himself or herself, but may use a technology of recognizing and transmitting fingerprint, voice, handwriting, etc., which are unique characteristics of an individual, as a unique password. Issuance of an Internet ID may be issued through the e-mail of the applicant, or may be issued publicly or privately within the website. Even if an Internet ID is issued publicly or privately on the website, it is possible because other people other than the Internet ID issuer cannot know the individual's personal information. There are other methods such as printing and mailing registered information registered on the Internet ID and identification system and issuing it through a communication means such as a mobile phone. However, this may be appropriate depending on the environment where the identification system is constructed and applied. Can be designed. If the guarantor cannot guarantee the subscriber in step 320, the guarantor informs the identity verification system in step 370 that there is no guarantee, and in step 380, there is no guarantee of the guarantor. Go to the site's home page.

On the other hand, if there is no guarantor in step 210, the subscriber wants to enter the details of the applicant's social security number and address, etc. (step 400). Since the identity verification system of the present invention must confirm the identity of the person who actually exists in society, if there is no guarantor, it must go through the certification body instead of the guarantor or verify the identity system directly. . In addition, the process of verifying one's own identity simply compares the data stored with personal characteristics such as human fingerprints, voices, and handwriting with the actual input data, and notarizes notaries of public institutions, certificates issued by government offices, etc. It is apparent to those skilled in the art that such a certificate and a method of directly comparing the actual identity can be employed. In FIG. 2, as a preferred embodiment thereof, a subscriber who wishes to subscribe performs his / her verification through a certification authority.

In step 400, if the subscriber desires to enter his / her ID number and address, the identity verification system notifies the requesting member to visit a nearby certification authority to take steps to verify his / her identity. If the subscriber desires to visit the certification authority in step 420, if the identity verification is confirmed in step 430, the certification body notifies the identity verification system to the identity verification system. Then, in step 440, the identification system grants an authentication key to the subscriber who wishes to sign up. In step 450, the subscriber desires to input his / her password using the authentication key on the website of the identification system. To be stored in the storage of the identification system (120 in FIG. 1). Next, the Internet ID issuance in the identification system is performed in step 360. As described above, the communication of the certification authority, the identification system, and the subscriber wishes can be performed by using e-mail on the Internet, directly on the website of the identification system, or through a personal terminal such as a mobile phone.

3 is a flowchart illustrating a process when a subscriber who has registered an identity in the identity verification system of the present invention registers an identity on a member site. As described with reference to FIG. 2, if the subscriber desires to confirm his / her identity on the Internet after the identity is registered in the identification system of the present invention and the Internet ID is issued, the identity identification system of the present invention is used. You can verify your identity by submitting it to the member site you wish to use. This will be described with reference to FIG. 3.

As shown in FIG. 3, when the person who has issued the Internet ID needs an identification procedure on the Internet, the person who has been issued the Internet ID presents the Internet ID to the member site that wants to verify his / her identity (step 351). At this time, of course, you can directly enter your Internet ID from the member company's website on the Internet, or may be transmitted to the member company's website through a terminal such as a mobile phone. In step 352, the member site presented with the Internet ID transmits the input Internet ID to the identification system to request identification. In step 353, the identification system, which has been requested to verify the identity, requests a subscriber a password (usually an alphanumeric password, but various other forms of password, such as fingerprint, voice, and handwriting, can be used later). If a match is found in step 354, in step 355, an authentication key confirming the identity of the subscriber is transmitted to the member site, and in step 356, the member site notifies the customer that the member registration or transaction is effectively performed. If it is determined that there is a mismatch in step 354, in step 357 the identification system notifies the member site, and in step 358 the member site performs a member registration disapproval notification to the customer and completes the work.

4 is to confirm the address and name of the subscriber to the member site according to the request of the subscriber who has completed the identity registration to the identity verification system of the present invention, and the member site transmits the access / transaction details to the subscriber to prevent theft of the Internet ID This is a flowchart for explaining the process. As shown in Fig. 4, in step 362, if the user's Internet ID and password, the recipient's Internet ID, the member company's information, etc. are input to the identification system, the identification system receives the product recipient's permission and sends the product to the member site. Provide the name, address and contact information for the delivery. At this time, the name, address and other contact information for product delivery are transmitted to the member companies in real time on an e-mail or a website. In this case, when the person directly receives the goods, his / her name, address, contact information, etc. are transmitted to the member companies in real time. The member site may then report the transaction to the identification system and may require a settlement agent. Then, the product is delivered to the recipient of the goods (step 364), and the identity verification system transmits the access / transaction details to the Internet ID owner on a regular basis or every time there is a transaction to prevent theft of the Internet ID. .

As described above, the present invention is a method and system for verifying the identity and issuing only one Internet ID per person. System site officials can directly check the ID card and issue an Internet ID. You can also issue an Internet ID after verifying your identity. If the person (s) with one or more Internet IDs issue an Internet ID based on a prior guarantee through verification of their resident registration card, a penalty such as ID deletion / bonus deletion / credit deletion issued in the event of a wrong warranty. Regulations can also give accountability. The present invention may include not only the guarantee of identity, but also other guarantees such as credit guarantee and financial information. In addition, by granting a bonus as a measure for activating the subscription and use of the identification system of the present invention, not only the use of his own, but also based on the profit from the subscription / use of the guarantor (subscriber of his guarantee) and his descendants You can also give a bonus. In the present invention, it is possible to reinforce the security of the ID and password by entering the identification system without checking the ID and password in each member site. The password will not be leaked outside of the identification system's website. When checking the Internet ID, the personal information (name and address for product delivery, etc.) is sent to the member site in real time through the request / confirmation of the owner of the Internet ID. It acts as a payment between the commerce site and the Internet ID owner. Payment includes credit card, direct debit and credit transaction. In this case, it is possible to manage the cyber credit of the owner of the Internet ID, and to set the cyber credit transaction limit of each Internet ID. In the present invention, every time there is a connection / transaction from a member site (including a commerce / a poll, etc.), the ID owner is notified by e-mail or other method every time there is a connection / transaction or a certain period of time. As described above, the identity verification method and system of the present invention can prove its identity to any site if only one ID / password is stored, so there is no need for a separate member registration procedure. This is because the information required for membership registration can be transmitted in real time. Of course, the Internet ID owner's information only needs to be updated in the identification system. It can act as an internet identity owner to make commercial payments and manage cyber credit. For example, if a credit transaction is made and no payment is made, credit management can be performed by disallowing further credit transactions to the owner of the ID. In addition, it will be able to provide all services that require identification.

Claims (10)

In a method of verifying a subscriber's identity on the Internet, (a) verifying the identity of the person wishing to join; And (b) identifying the identity of the subscriber on the Internet, including registering the personal information with a password in the identity verification system and issuing a single Internet ID from the web or sending it to the subscriber's e-mail address. Way. The method of claim 1, wherein the person who has issued the Internet ID needs an identification procedure on the Internet, (c) presenting the Internet ID to the member site which has been issued the Internet ID by the person who has received the ID; (d) a member site which has been presented with an Internet ID, transmitting the Internet ID to the identification system to request identification; And (e) the identity verification system, which has been requested for identification, transmitting a authentication key for verifying the identity of the subscriber to a member site if the subscriber requests a password and matches the identification. The method of claim 1 or 2, wherein the step (a) of confirming the identity of the person who wants to subscribe is performed when the subscriber newly joins the identification system by the guarantee of the guarantor. (a1) a subscriber who enters his / her social security number and the guarantor's Internet ID; (a2) transmitting the resident registration number and authentication key of the applicant who wishes to join the guarantor in the identification system; (a3) the guarantor determining the authenticity of the resident registration number of the subscriber who wishes to subscribe and notifying the identification system of the guarantee; (a4) in the case of guaranteeing in the step (a3), the identification system transmits an authentication key to the subscriber who wishes to enter his / her password and details through the authentication key; (a5) the identification system issuing an Internet ID to the subscribers to join; identification method comprising a. The method according to claim 1 or 2, wherein the step (a) of identifying the identity of the person who wants to subscribe is performed when the subscriber newly joins the identification system without a guarantor. (a11) the subscriber entering the details of his / her resident registration number, address, etc .; (a22) in the identification system, requesting a visitor to visit a nearby certification authority for proof of identity; (a33) ending the identity verification process if the subscriber wishes to visit the certification authority to perform the identity verification process or does not visit; (a44) confirming the identity of the certification body and notifying the identity verification system of the applicant by inputting the resident registration number of the member who wishes to join; (a55) the identification system transmits an authentication key to a subscriber who wishes to enter his / her password and details through the authentication key; (a66) The identification system comprises the step of issuing an Internet ID to the subscribers wishing to join. The system of claim 1 or 2, wherein the identification system uses a name / address for product delivery required by a member site and a vote / pollution survey such as age, occupation, and gender according to a request / permission of the owner of the Internet ID. Identity identification method, characterized in that it further comprises the step of transmitting the personal information for the member site in real time. The method of claim 1 or 2, further comprising transmitting a connection / transaction history with the member site to the owner of the Internet ID. The identification method of claim 1 or 2, wherein the alphanumeric information of the subscriber or fingerprint, voice, handwriting, etc., which are inherent characteristics of the subscriber, can be used. In the identification system for identifying the subscriber on the Internet, A website that verifies the identity of the person who wants to join, registers the identity of the person who has been identified with the password, secured on the Internet, and issues a single Internet ID on the web or sends it to the subscriber's e-mail address. server; And And a storage unit for storing the registered subscriber's internet ID and personal information and a password. The member site of claim 8, wherein if the person who issued the Internet ID needs an identification procedure on the Internet, the person who has been issued the Internet ID presents the Internet ID to a member site that wants to verify his or her identity, and the member site where the Internet ID is presented. The ID is transmitted to the identification system to request identification, and the identification system, which has been requested to verify the identity, requests a password from the subscriber and sends a certificate to the member site to verify the identity of the subscriber. Identification system, characterized in that it comprises. 10. The identification system of claim 8 or 9, wherein alphanumeric information of a subscriber or fingerprint, voice, handwriting, etc., which are inherent characteristics of a subscriber, can be used.