KR20020045292A - An electronic certificate management system for electronic transaction and a method thereof - Google Patents

Abstract

PURPOSE: A system and a method for managing an EC(electronic certificate) for the EC are provided to realize the electronic certificate including from a simplified electronic certificate to the certification format contents of a complex structure. CONSTITUTION: The system for managing the electronic certificate comprises a web server(400) keeping a session, a physical contact relation, by receiving a request signal for a physical relation from a user computer(100) and supporting a user to input the data by confirming the electronic certificate through a web page, a management server(500) writing out the electronic certificate needed for the user and managing the electronic certificate, and a DB server(600) storing the electronic certification format and the data inputted by the user. A certification server(700) includes a user certification module(710) and a certification format authentication module(720). The electronic certificate management server includes an electronic certificate format writing module(510), an electronic certificate format management module(520) and an API(Application Program Interface) module(530).

Description

Electronic certificate management system and method for electronic transaction {AN ELECTRONIC CERTIFICATE MANAGEMENT SYSTEM FOR ELECTRONIC TRANSACTION AND A METHOD THEREOF}

The present invention relates to an electronic transaction, and more particularly, to an electronic certificate management system and method for facilitating the submission of an electronic certificate for performing a transaction electronically, and using the same, when the electronic data is exchanged through a network. It is about.

Recently, various applications using the Internet have been developed, and data exchange between individual users or organizations has gained much popularity in terms of convenience, cost reduction, and productivity improvement. Inevitably, electronic data is exchanged during business or electronic commercial transaction (EC) over the Internet, and individuals and corporate organizations are doing business through such data exchange. E-commerce is a form of commerce in which a user can shop and purchase an item at an internet shopping mall site, which is a virtual space through a network such as the Internet, without a buyer going to a store that sells products directly. The e-commerce is not limited to the operating hours of the seller, and can reduce the time required for the buyer to move directly to the store and the cost of the movement, and thus it is becoming a main form of commerce for the general public.

This electronic data exchange itself is also important, but in some cases a reliable record or archive of the electronic data exchange can also play a significant role as evidence. For example, EDI (Electronic Data Interchange (EDI)), an important tool for conventional electronic trading, provides a legally valid evidence by ensuring that records of transactions between traders are always securely referenced. do. In recent years, such as B2B (Business To Business), the electronic commerce using the Internet authenticates key transaction data using authentication technology and keeps it in a safe place to increase the trust in the transaction. EDI or B2B generally seeks to simplify and fully automate transactions by sharing integrated computer networks among traders.

For example, if a user A buys a product on an e-commerce site and pays it with a credit card, the payment result is checked on the screen, and the displayed contents are printed and stored on the printer in case of emergency. There is also. However, such output alone does not become a perfect proof. The same is also true for the transfer of funds through internet banking. Thus, the user of the consumer position has a problem in that there is no separate means for proving their transaction in case of emergency.

In addition, there is no electronic means for the user to accurately remember the transaction behavior, there is no electronic means for later management, and if necessary, the data value can be transferred to the computer system of the user or a third party (individual or institutional). There is a problem that can not be easily moved while maintaining.

In order to solve such a problem, the technical problem to be achieved by the present invention is to implement an electronic certificate containing a proof form content of a complex structure from a simplified electronic certificate.

In addition, it is possible to move the substance of a certificate to a third party by implementing an electronic certificate that can be used as a verification means as an electronic certificate and as an attached means for electronically submitting or exchanging documents, and easily exchanges data values contained in the certificate. There is another purpose to make it possible.

1 is a block diagram showing an electronic certificate management system according to an embodiment of the present invention.

2 is a flowchart illustrating an electronic certificate management method according to an embodiment of the present invention.

3 is a diagram showing a D TID of an electronic certificate.

4 is a diagram showing main contents included in an electronic certificate.

5 is a diagram schematically illustrating a method of extracting and associating an attribute from an electronic certificate.

Fig. 6 is a diagram showing an example of the created electronic certificate.

Electronic certificate management system according to one feature of the present invention for achieving the above object,

As a management system that receives information from one or more user terminals, authentication systems, and online business processing systems connected to a network, provides and manages electronic data desired by a user.

A document providing unit providing one or more cyber documents to the user terminal to support issuance of an electronic certificate through the network;

An electronic certificate processing unit which receives the electronic certificate information desired by the user from the document providing unit, generates one or more electronic certificate expressions, and manages the generated electronic certificate expressions; And

Electronic certificate information storage unit for storing the electronic certificate data processed by the electronic certificate processing unit

It includes.

Electronic certificate management method according to another aspect of the present invention,

A management method using a management system that receives information from one or more user terminals, authentication systems, and online business processing systems connected to a network, and provides and manages electronic data desired by a user from an information storage device.

Receiving electronic certificate issuing request information from a user terminal to produce an electronic certificate of a desired type based on one or more electronic certificate forms for which authentication has been completed;

When the authentication process for the produced electronic certificate is completed, issuing an authenticated electronic certificate

It includes.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing an electronic certificate management system according to an embodiment of the present invention.

As shown in FIG. 1, the electronic certificate management system according to an embodiment of the present invention receives a physical connection request signal from the user computer 100 to maintain a session in physical connection with the user computer 100, and the user. A web server 400 which enables a user to input data by checking one or more electronic certificates through a web page; An electronic certificate management server 500 for creating an electronic certificate required by the user and managing the electronic certificate; And a database server 600 for storing one or more electronic certificate formats and data entered by the user.

The router 300 receives a connection request and a data request signal from the user computer 100 to optimize a data communication path to a destination of the signal.

The authentication server 700 includes a user authentication module 710 which performs authentication of a user, and a certificate type authentication module 720 which performs authentication of an electronic certificate requested by a user. The authentication server 700 may be included in the electronic certificate management system to perform its function, or may operate as a single system of an authorized certification authority.

The online business processing server 800 is a transaction server system that performs operations such as Internet banking, online trade, ERP (Enterprise Resource Planning, ERP), etc., which provide banking services through the Internet 200. server system), but the present invention is not limited to the embodiment.

The administrator computer 900 creates an electronic certificate form required by the user, authenticates it with the authentication server, and registers the created electronic certificate form in the database server 600.

The user computer 100 may include a web browser 110 allowing access to the Internet 200; One or more application software 120 to operate a Work Flow System, an Electronic Document Management System (EDMS), an Electronic Data Interchange (EDI) system, and the like; And electronic certification form creation software 130 to assist the user in filling out the desired form of electronic certificate form. The user computer 100 may be connected to the Internet 200 through a dedicated line provided by an Internet Service Provider (ISP) or may be connected to the Internet 200 through a LAN.

The web server 400 may include a web page providing module 410 representing one or more electronic certificate management web pages requested by the user on the web browser 110 of the user computer 100; When the electronic certificate search and creation item is selected, the server interworking module 420 supports the electronic certificate management server 500 and the database server 700 so as to transmit and receive data.

The electronic certificate management server 500 manually generates an electronic certificate form that can be used by the certificate creation software 130 of the user computer 100 by an administrator or automatically generates an electronic certificate form of a preformatted form. Generating an electronic proof form creation module 510; Plug-in to the user computer 100 to download the certificate creation software 130, and the certificate data included in the electronic certificate form and the electronic certificate form objectified and transmitted by the certificate creation software 130. An electronic certificate form management module 520 for receiving and storing the data, requesting data authentication of the electronic certificate requested by the user, and delivering the authenticated electronic certificate data; Interface module (API: Application) that can interoperate with external systems such as Work Flow System, Electronic Document Management System (EDMS), Electronic Data Interchange (EDI) system, etc. Program Interface 530). Each module of the web server 400 and the electronic certificate management server 500 may be implemented as a single device that performs independent functions, or may be a single device in which each function is integrated and driven. In addition, the web server 400 and the electronic certificate management server 500 may operate as a single device integrated, the present invention is not limited to the embodiment.

The database server 600 includes a customer database 610 that stores one or more user details; An electronic certificate database 620 for storing data entered by the user in the electronic certificate; An electronic certificate template database 630 stores one or more electronic certificate templates of various types. Each database of the database server 600 may be a storage medium for storing respective information, and each database may be one database composed of tables having respective characteristics, and the present invention is limited to the embodiments. It is not.

2 is a flowchart illustrating an electronic certificate management method according to an embodiment of the present invention.

Hereinafter, with reference to the accompanying drawings, the operation of the electronic certificate management system according to an embodiment of the present invention will be described in detail.

First, the electronic certificate manager creates a certificate for the administrator through the manager computer 900. The authentication server 700 receives an administrator certificate from the administrator computer 900, and the user authentication module 710 processes authentication of the administrator, and transmits the authenticated administrator certificate to the administrator computer 900. The administrator creates an electronic certificate through electronic certificate creation software (not shown) stored in the manager computer 900.

3 shows a document type definition (DTD) of an electronic certificate created by an administrator. According to an embodiment of the present invention, an electronic certificate DID may include: style information defining a category for one document; Document information about the document being created; Digital signature information included in the document; Table structure information for one or more tables represented in the document; It is divided into data area for data included in the document. Here, as a special definition that follows the rules of Standard General Markup Language (SGML), it is a markup that distinguishes paragraphs of web documents, identifies subject headings, and indicates how each should be handled. Is one rule that accompanies the document. For example, if a program writer sends a D-TID with an document to the other party by e-mail, the document can be processed anywhere on the screen with the D-TID reader (or SGM compiler) and displayed on the screen as originally intended. It can be displayed or printed.

Electronic certificates are processed as Transferable Objects or Non-Transferable Objects. In the case of a portable electronic certificate, the first applicant can be stored and reused when necessary after the digital certificate has been issued to the user, and can be transferred (or exchanged) between heterogeneous computer systems. ), Intermediate stopovers and final destinations should be included. In contrast, non-portable digital certificates are processed for the purposes of the user's initial application and only include the original user and the final destination. In addition, the electronic certificate is configured to be able to issue a large number of copies at the time of issuance. At this time, the administrator designs the electronic certificate to count the number of electronic certificates, and is designed to allow continuous management of data from the initial issue of the electronic certificate to the expiration time.

The electronic certificate according to an embodiment of the present invention is formatted in XML (eXtensible Markup Language). XML was proposed by the World Wide Web Consortium (W3C) in 1996 and is a standardized text format designed to transmit structured documents on the Web. This method overcomes the limitations of the HyperText Markup Language (HTML) used in the Internet and solves the complexity of the Standard Generalized Markup Language (SGML). The user can use this function to define a new tag. Added web expression language.

4 is a diagram showing main contents included in an electronic certificate.

As shown in FIG. 4, the electronic certificate includes the date of issuing the electronic certificate, the title of the electronic certificate, the expiration date during which the electronic certificate can be used, the document ID of the currently issued electronic certificate, and the applicant of the digital certificate. For example, a representative who prepares or submits an electronic certificate may be included. Other certifications may be added by DID. In addition, the electronic certificate includes the title, subject, period, item, description of the proof content, and data area of the document to be proved. It may also include a submission area for submitting the electronic certificate, a publisher who issues the electronic certificate, a form number, a serial number input area, and include a constraint and condition area, which is a data area that must be specified when issuing the electronic certificate. Can be.

FIG. 5 is a diagram schematically illustrating a method of extracting and associating an attribute from an electronic certificate, and FIG. 6 is a diagram illustrating an example of a created electronic certificate.

As shown in FIG. 5, when the electronic certificate created by the administrator on the administrator computer 900 is processed by the electronic certificate management system, the electronic certificate form management module 520 processes the attributes included in the created electronic certificate. Extract and match the mapping table. That is, matching the ID of the certificate, certificate title, issue number, use, submission, issuer, related document ID, and portability of the electronic certificate to be processed with the corresponding ID. The electronic certificate form management module 520 stores the matched electronic certificate data in the database server 600 in association with one or more web documents stored in the database server 600. If the electronic certificate is combined with the application software (PIM, ERP, etc.) or the online business processing server 800 to enable data exchange, the electronic module data stored in the database server 600 is called using the interface module 530. To connect with other systems. As such, the electronic certificate serves as a transferable transaction object having the characteristics of an XML that can port desired attribute values to other systems.

When the user drives the web browser 110 embedded in the user computer 100 (S100), the web browser 110 physically connects the user computer 100 to the Internet 200, and the web page according to the connection result. Is displayed. At this time, the initial access web page is displayed on the web browser according to the internet option recording result of the web browser 110. The user inputs a URL (Uniform Resource Locator) of a website capable of being provided with an electronic certificate in a web page displayed on the user computer 100 (S110). The web server 400 receives the access request signal from the user computer 100 to check the access result, and the server interworking module 420 transmits the user access authentication request signal to the authentication server 700 (S120). The authentication server 700 receives an authentication request signal, and the user authentication module 710 calls and compares and analyzes user ID and password data of a user who has attempted access stored in the customer database 610 to perform user authentication. (S130). In this case, when the authentication server 700 is included in the authorized certification authority to operate, authentication may be performed in a state in which ID and password data for one or more users are previously stored in an information storage device (not shown). It is not limited only to this embodiment.

The authentication server 700 transmits the authentication result data to the web server 400, and the web server 400 displays a web page corresponding to the authentication result for the user on the web browser 110 of the user computer 100. do. That is, if the ID and password of the user are correct, the homepage displaying the electronic certificate creation and transmission service is displayed. If the authentication of the user fails, the login failed webpage is displayed.

The user searches for one or more electronic certificate forms on the web page displayed on the user computer 100 (S140). The web page providing module 410 of the web server 400 displays a list of electronic certificate formats in various forms on a web browser so that a user can select an electronic certificate of a desired format (S150). When the user selects the electronic certificate form required, the web server 400 detects the user's selection and calls the electronic certificate form corresponding to the item selected by the user from the electronic certificate form database 630, and then the user's computer ( On the web browser. The user applies for the electronic certificate form required by the user among the displayed electronic certificate forms (S160). The web page providing module 410 calls the server interworking module 420 to provide the electronic certificate format requested by the user, and the previously generated electronic certificate form data stored in the electronic certificate form database 630 of the database server 600 is provided. Call it. The web page providing module 410 converts the called electronic certificate form data into a form that can be displayed on a web browser and transmits the converted electronic certificate form data to the user computer 100. At this time, the electronic certificate form generating software 130 of the user computer 100 is started and transmitted by the data transmission result and is displayed on the monitor screen of the user computer 100. The user may independently drive the electronic certificate form creation software 130 so that the transmitted electronic certificate form is displayed on the screen.

The user inputs necessary data of items requiring information input on the screen displayed according to the electronic certificate format application (S170). When the user's data input is completed, the user clicks the electronic certificate data transmission button (not shown) displayed on the screen, and the web server 400 receives the application data input by the user (S180). The server interworking module 420 transmits the received electronic certificate data to the electronic certificate management server 500, and the electronic certificate form management module 520 analyzes the transmitted data, so that the certificate type desired by the user is actual transaction history data. Determine and determine whether the contents of the certificate already stored (S190). Here, the actual transaction history data refers to transaction history data that can serve as an electronic receipt, for example, when transferring a bank account, and the stored certificate content is for the purpose of proof itself, for example, a business registration certificate or the like. It means that it can act as an electronic certificate by simply inputting actual data in a fixed format. If the electronic certificate form creation module 510 generates the electronic certificate of the form requested by the user if the actual transaction history data (S200).

The electronic certificate form management module 520 maps the attributes of the electronic certificate and the corresponding ID as shown in FIG. 5 based on the data input by the user. The electronic certificate form management module 520 transmits the created electronic certificate to the authentication server 700, and the certificate type authentication module 720 of the authentication server 700 authenticates the received electronic certificate (S210). When the authentication is completed, the authentication server 700 transmits the authenticated electronic certificate to the electronic attestation form management module 520, and the electronic attestation form management module 520 sends the authenticated received electronic certificate to the electronic certificate database 620. ). When filling out the electronic certificate form, only the form confirmed through the certificate authentication module 720, that is, the registered form is kept in the database server 700 through the electronic certificate management server 500 so that the authorized form can be verified. The certificate type authentication module 720 also performs authentication for issuing an electronic certificate, but also performs authentication on a blank form.

The electronic certificate form management module 520 issues an electronic certificate to the user computer 100 (S220). At this time, the issue of the electronic certificate may be issued in one or more. The issued electronic certificate is submitted directly to an online business processing server 800 such as an internet job site or attached to the application software 120. The form management module 520 of the electronic certificate maps the attributes of the electronic certificate with the corresponding ID as shown in FIG. 5 based on the contents of the issued electronic certificate, extracts data, and stores the data in the database server 600. . When a user wants to exchange data in combination with application software (PIM, ERP, etc.), the interface module 530 calls electronic certificate data stored in the database server 600 to manage ERP, PDM, CRM, and the like. Convert it to data that can be implemented in the system.

The user checks the electronic certificate issued through the user computer 100 (S230), and determines whether to store the received electronic certificate in the user computer 100 (S250). If the user wants to store the authenticated electronic certificate, the user stores the electronic certificate in the hardware of the user computer 100 or a storage medium not shown in comparison thereto (S260). If the user wants to submit the electronic certificate through the Internet, the user executes the submission support application software (S / W), creates an electronic document submission application form, and attaches the electronic certificate authenticated thereto (S270). For example, if a user applies for a job application for company A, he or she will run the application application software for job application provided by company A, record the input, and then submit the transcript, language certificate, etc. Attach the certified electronic certificate, and submit the application online with the electronic certificate attached (S280). The online business processing server 800 receives the job application form including the electronic certificate submitted through the Internet 200, and checks the electronic certificate included in the received job application through the electronic certificate form creation software 130. Can be. When the issued electronic certificate arrives at the user computer 100 or the final destination of the stopover, the electronic certificate management server 500 transmits a message notifying arrival of the arrival immediately after arrival, and immediately registers the current location so that the electronic certificate is issued. The purpose and status of each electronic certificate can be grasped in real time. In addition to the embodiment of the present invention, the electronic certificate management server 500 may be immediately submitted to the final destination of the electronic certificate to be submitted.

In the process of processing the electronic certificate, the present invention creates a database for continuous management after issuing the electronic certificate later, it is also possible to transfer the data to other systems through the API if necessary.

Embodiment of the present invention is only one embodiment and many variations and modifications to the components of the invention within the scope not departing from the gist of the invention, of course, the present invention is not limited to the embodiment.

As described above, the electronic certificate management system and method for the electronic transaction of the present invention can implement an electronic certificate including a proof form content of a complex structure from a simplified electronic certificate, and furthermore, an electronic certificate and an electronic certificate By implementing the electronic certificate available as an attached means when submitting or exchanging documents, the substance of the certificate can be moved to a third party and the data values contained in the certificate can be easily exchanged.

The present invention can be applied to the issuance of certificates related to the purchase and sale of goods, such as electronic receipts for business to business (B2B) or business to consumer (B2C) transactions, proof of transaction results, proof of delivery, and the like. Certificate of discount issued by proving that you have participated in a specific promotional campaign on an e-commerce site or promotional website as an electronic coupon function It can also be used for issuing original / copy copies of electronic contracts, receipts of individual withholdings and sources of VAT for corporations, issuing electronic insurance policies, and submitting corporate financial statements for financial institution loan examinations.

Claims (9)

In a management system that receives information from one or more user terminals, authentication systems, and online business processing systems connected to a network, provides and manages electronic data desired by a user. A document providing unit providing one or more cyber documents to the user terminal to support issuance of an electronic certificate through the network; An electronic certificate processing unit which receives the electronic certificate information desired by the user from the document providing unit, generates one or more electronic certificate expressions, and manages the generated electronic certificate expressions; And Electronic certificate information storage unit for storing the electronic certificate data processed by the electronic certificate processing unit Electronic certificate management system comprising a. The method of claim 1, wherein the electronic certificate processing unit Providing a first program for checking the electronic certificate and inputting necessary data to the user terminal, receiving the electronic certificate form and the authentication data included in the electronic certificate form, which is objectized and transmitted by the first program, An electronic certificate form management module, stored in a certificate information storage unit, for requesting data authentication of the electronic certificate requested by the user to the authentication system to transmit the authenticated electronic certificate data; An electronic certificate creation module for selectively or manually generating an electronic certificate form included in the electronic certificate; An interface module for interworking the electronic certificate data with one or more application programs Electronic proof management system comprising a. The method of claim 1, wherein the electronic certificate information storage unit A user database that stores detailed information about one or more electronic certificate users; An electronic certificate template database for storing electronic certificate template data generated by the electronic certificate creation module; An electronic certificate database for storing electronic certificate data that has been authenticated when the electronic certificate including the input data of the user is authenticated by the electronic certificate type management module through the user terminal. Electronic proof management system comprising a. In the management method using a management system that receives information from at least one user terminal, authentication system, online business processing system connected to the network to provide and manage the electronic data desired by the user from the information storage device, Receiving electronic certificate issuing request information from a user terminal to produce an electronic certificate of a desired type based on one or more electronic certificate forms for which authentication has been completed; When the authentication process for the produced electronic certificate is completed, issuing an authenticated electronic certificate Electronic certificate management method comprising a. The method of claim 4, wherein the electronic certificate production step Transmitting a first program to the user terminal, the first program capable of checking the electronic certificate and inputting necessary data; Receiving electronic certificate format input data objectified and transmitted by the first program according to the intention of the user; Creating an electronic certificate based on the received input data; Authenticating the created electronic certificate data through the authentication system; Storing the authenticated electronic certificate information in the information storage device; Electronic certificate management method comprising a. The method of claim 4, wherein the step of issuing the electronic certificate Transmit the electronic certificate of which authentication is completed to the user terminal, and allow the user to transmit to the online business processing system; Or transmitting the authenticated electronic certificate to the online business processing system without passing through the user terminal. The method of claim 5, wherein the electronic certificate creation step Extracting an attribute included in the created electronic certificate and matching the mapping table; Calling electronic certificate data stored in the information storage device and converting the data into data that can be implemented in the application program so that a user can exchange data with one or more application programs. Electronic certificate management method comprising a. 8. The method of any of claims 4 to 7, wherein the electronic certificate is The electronic certificate management method of claim 1, wherein the digital certificate is created as an XML data object, transmitted through the network, stored in the user terminal, can be reused, and can be transplanted into a computer system for processing online tasks. The method according to any one of claims 4 to 8, wherein the electronic certificate is Issue one or more copies, count the number of copies of the electronic certificate upon issuing multiple electronic certificates, And a delivery path and a state of the electronic certificate can be managed until the intermediate waypoint of the electronic certificate, the final destination, and the final disappearance of the electronic certificate.