KR20030010241A - Hyper-Internet Networking Access Protection System - Google Patents

Abstract

PURPOSE: A system for preventing an illegal connection and a use of a very high speed Internet network using an IC chip built-in card is provided to protect a right and interest of a very high speed Internet network service supply company by blocking an illegal connection to a very high speed Internet network. CONSTITUTION: In a very high speed Internet illegal connection and usage preventing system using an IC chip built-in card(11) including a memory unit such as a RAM, a ROM, an EPROM, an EEPROM, etc. for storing data, a CPU, and an input/output interface of the data and an IC chip built-in card read/writer which performs an electromagnetic connection to other system for reading data, a very high speed Internet network connection key is stored in the memory unit as a non-readable code. The very high speed Internet network connection key is endowed to a very high speed Internet host system(20). When a client computer(10) requests an Internet connection to the very high speed Internet host system(20), a random coded by the very high speed Internet network connection key is transmitted/received among the very high speed Internet host system(20), the client computer(10), and the IC chip built-in card(11), and an authentication procedure is performed. Thus, the Internet network is connected by the corresponding IC chip built-in card(11) without exposing a key.

Description

High speed internet illegal access and use prevention system using IC chip built-in card {Hyper-Internet Networking Access Protection System}

The present invention relates to a system for preventing illegal access and use of high speed internet using IC chip embedded card, and more particularly, to protect the rights of a high speed internet network service provider by blocking illegal access to the high speed internet network. The present invention relates to a hyper-internet networking access protection system (HINAPS) using an IC chip embedded card.

In order to prevent illegal access to the Internet, it is possible to access the high-speed Internet by the authorization method of the high-speed Internet provided by the number of users, but even in this case, it is illegally accessed and used more than the number of users contracted in advance. Not only can it cause mental and economically fatal losses for network service providers, but it can also cause national losses by contracting the growth of the service industry using the high-speed Internet network, which is the national backbone network.

In addition, in order to search for illegal Internet users, high-speed Internet network communication companies are using user filtering equipment, but the equipment itself is expensive, and there is a disadvantage in that it requires a lot of installation cost.

In addition, a similar Internet site access prevention system and method thereof include Patent Application Publication No. 2001-0044268 (published date: June 05, 2001, application number: 2001-0004291, application date: January 30, 2001). Although the system is open to the public, the system forms a sniffing server that can be linked to a web server to monitor and block the presence of illegal access users, and through a backdoor that enables efficient use of the Internet site. There is a disadvantage that it does not prevent the connection to the Internet itself.

Therefore, the present invention, overcoming the above environment to solve this problem, by blocking the illegal access to the high-speed Internet network inherently high speed using IC chip embedded card that can protect the rights of the high-speed Internet network service provider Provide a system to prevent illegal access and use of the Internet.

1 is a block diagram showing the configuration of a high-speed Internet illegal access and use prevention system using IC chip embedded card according to an embodiment of the present invention,

Figure 2 is a block diagram showing the configuration of a high-speed Internet illegal access and use prevention system using IC chip built-in card according to an embodiment of the present invention,

Figure 3 is a block diagram showing the configuration of a high-speed Internet illegal access and use prevention system using IC chip built-in card according to an embodiment of the present invention,

Figure 4 is a block diagram showing the configuration of a high-speed Internet illegal access and use prevention system using IC chip built-in card according to an embodiment of the present invention,

Figure 5 is a block diagram showing the configuration of a high-speed Internet illegal access and use prevention system using IC chip built-in card according to an embodiment of the present invention,

Figure 6 is a block diagram showing the configuration of a high-speed Internet illegal access and use prevention system using IC chip embedded card according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

10: client computer 11: IC chip embedded card

20: high-speed Internet host system

In order to achieve the above object, the high-speed Internet illegal access and use prevention system using IC chip embedded card according to an embodiment of the present invention includes at least a memory unit such as RAM, ROM, EPROM, EEPROM, CPU for storing data, and the like. It is a high-speed Internet illegal access and use prevention system using IC chip built-in card that reads data through IC chip built-in card reader / writer which includes the input / output interface of the data and electromagnetic connection for communication with other system. In the IC chip embedded card, a key for accessing a high speed internet network is stored in the memory unit with a password that cannot be read by itself, and a key for accessing a high speed internet network is given to a high speed internet host system. High-speed Internet when requesting Internet connection from computer to high-speed Internet host system Access is made between the host system and the client computer and / or the IC chip embedded card by transmitting and receiving a random number value encrypted by the key for accessing the high speed internet network, thereby exposing the key to the Internet network without exposing the key. It is characterized by.

The key for accessing the high speed internet network of the IC chip embedded card and the high speed internet host system may be a symmetric key in which the keys of the IC chip embedded card and the high speed internet host system are the same as each other and a public key and a private key as different keys. And a single asymmetric key and a plurality of asymmetric keys each of which is a public key and a private key as different keys from each other, and the authentication process in each case may be configured as follows.

In other words, when the connection request from the client computer is requested, the random number value is different from either the client computer and / or the IC chip embedded card and the high-speed Internet host system when the key for the high-speed Internet network connection is a symmetric key. And transmit the ciphertext by encrypting the random number in one and the other, respectively, transmitting the ciphertext from the other to the one, and transmitting the ciphertext and the encrypted ciphertext in itself This can be done by allowing the use of the Internet network at the same time in comparison.

In addition, when the key for accessing the high-speed Internet network is a single asymmetric key, the random number value is transmitted from one to the other, and the other is encrypted by encrypting the transmitted random number by a private key or a public key. And generates and transmits it to any one of the above, in one of which decrypts the transmitted cipher text by a public key or a private key to generate a random number, and compares the transmitted random number value with the decrypted random number value at the same time. An authentication process is allowed to allow the use of the network; When the key for accessing the high-speed Internet network is a plurality of asymmetric keys, the random number generated in any one of them is transmitted to the other, and the other random number is transmitted by its own public key and private key. Generates a ciphertext by encrypting and transmits the ciphertext to one of the above, and in one of the above, decrypts the transmitted ciphertext by its own public key and private key to generate a random value and simultaneously transmits the random number and the decrypted random number. By comparing the values, an authentication process is performed that allows the use of the Internet at the same time.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 to 6 are shown the configuration of a high-speed Internet illegal access and use prevention system using IC chip embedded card 11 according to an embodiment of the present invention.

IC chip built-in card 11, which is also known as a scart card, is largely classified into a contact type, a contactless type, and a mixed type thereof (COMBI type). The contact type refers to a method of bidirectional communication through the electrical contact with the terminal, the non-contact type is a two-way communication without direct contact with the terminal, the shape and specification prescribed in the credit card or international standard here (ISO7810, ID-1, ID-2, ID-3) and those with contacted, contactless communication ICs having external specifications other than these standards.

The IC chip structure includes an IC chip composed of at least a memory unit such as a RAM and an EPROM (EEPROM), a CPU driven by a COS (chip operating system), and an input / output interface of the data. It is mounted and configured to access the IC chip through its input / output interface. In the case of the non-contact type or the combination type, the contactless interface and the RF interface are included. In this case, the external card reader / writer and the electric energy are connected with the ends connected to the connection part for the electrical connection of the IC chip. And an antenna line, which is mainly a coil of copper wire for transmitting and receiving data signals, is arranged in a loop between the card sheets.

According to the present invention, the IC chip embedded card 10 is used, and as mentioned above, the IC chip embedded card 11 and the high speed internet host system 20 are embedded with a key for accessing the high speed internet network. Through this authentication system, illegal access to the high-speed Internet network or its use can be eliminated.

The IC chip built-in card 10 is one of the IC chip built-in cards for contactless, contact, or a combination thereof, and includes at least a memory unit such as RAM, ROM, EPROM, EEPROM, CPU, and the like for storing data. General data is read through IC chip embedded card reader / writer, including the input / output interface, but the built-in high speed internet access key is stored in the masking memory and cannot be accessed directly from the outside. It is read only internally by the CPU driven by the operating system and outputs the required random number (random or random ') or ciphertext (ER or ER'). It may be configured to include a cryptographic processor or a software crypto module to perform such an algorithm.

The above-mentioned key for accessing the high-speed Internet network is a symmetric key in which the keys of the IC chip embedded card 11 and the high-speed Internet host system 20 are identical to each other, and a single asymmetric consisting of one of a public key and a private key as different keys. And a key different from each other, and composed of one of a plurality of asymmetric keys each consisting of a public key and a private key.

First, as shown in FIG. 1, the system of the present invention in which the IC chip embedded card 11 and the high-speed Internet host system 20 are configured with symmetric keys that are the same key, first, has an IC chip embedded card 10. When a key for accessing the high-speed Internet network is issued and issued to a user, the IC chip embedded card 10 is inserted into the IC chip embedded card reader / writer when the client computer 20 tries to access the Internet network. In step S11, the client computer 10 requests a connection, and at the same time, transmits a random number generated by the IC chip embedded card 10 to the high speed internet host system 20, and in step S12, the high speed internet host system. In step 20, the transmitted random number is encrypted by a key for accessing a high speed internet network to generate an encrypted text (ER or ER '). In step S13, the ciphertext ER is transmitted to the client computer 10. In the meantime, the IC chip embedded card 10 generates the ciphertext ER 'by encrypting the random number with its own high-speed Internet network connection key in steps S14 and S15.

Thereafter, in step S16, the IC chip embedded card 10 compares the transmitted cipher text ER with the encrypted cipher text ER 'itself and transmits an OK signal to the high speed Internet host system 20 at the same time. In step S17, the Internet network permission is transmitted from the high-speed Internet host system 20. Accordingly, in step S18, the client computer 10 can use the Internet network.

In addition, in the embodiment of the present invention shown in FIG. 2, when the connection request from the client computer 10 to the Internet network is received in step S20, the client computer 10 generates a random value in the high speed Internet host system 20. Is sent, and steps S22 to S27 are performed similarly to steps S12 to S17 described above. However, unlike FIG. 1, the roles of the IC chip embedded card 10 and / or the client computer 20 and the high speed internet host system 20 are configured in reverse, and the IC chip embedded card 10 is transmitted in step S26. By comparing the ciphertext ER 'and the ciphertext ER encrypted by itself, an OK signal is transmitted to the client computer 10 at the same time so that the client computer 10 can use the Internet network (step S27).

In FIG. 1 and FIG. 2, the symmetric key means that the encryption key and the decryption key have the same structure, and the smart card refers to a card in which a CPU is embedded in an IC chip and a ROM, RAM, EEPROM, and an encryption related chip. . In addition, a random value refers to an unspecified value, and different random numbers are generated every time software is installed or run. Encryption refers to a process of transforming data so that no one can read it. Refers to a method that cannot be decrypted. ER or ER 'is an Encrypted Random Number as a random number value encrypted by S / W in IC chip embedded card 11 or high-speed Internet host system 20.

3 and 4, which relates to an authentication system using a single asymmetric key, shows a system in which roles between the IC chip embedded card 10 and the client computer 20 and the high-speed Internet host system 20 are configured in reverse. It is.

First, a public key or a private key is recorded in the corresponding software in FIG. 3 or 4, and a private key or a public key as a key for accessing a high speed internet network to the IC chip embedded card 10. Is recorded and masked so that it cannot be directly accessed, and a public key or a private key is also stored in the high-speed Internet host system 20. Here, the asymmetric key refers to a structure in which the encryption key and the decryption key are different, and the decryption refers to the operation of decrypting the encrypted data in its original form, and the public key, that is, the public key, may inform the outside of the two encryption keys. It is a key, and a private key is a private key, which is a key that is not known to the outside of two encryption keys.

In FIG. 3, when a random number is generated from the IC chip embedded card 11 and the client computer 10 transmits the random number, the connection is requested to the high-speed Internet host system 20 (step). S31), in step S32, encrypts the random number with a ciphertext ER using a public key in the high-speed Internet host system 20, and then encrypts the ciphertext ER with the client computer 10 in step S33. Send it. The client computer 10 decrypts the ciphertext ER transmitted using the private key in step S34 to a random number, and in step S35 the random number value and the decrypted random number ( random ') is compared to allow use of the Internet network at the same time as in FIG. 1 (steps S36 and S37).

On the other hand, in the embodiment of the present invention shown in FIG. 4, when the connection request from the client computer 10 to the Internet network is received in step S40, the client computer 10 generates a random value in the high speed Internet host system 20. In step S42 to step S46, similarly to steps S32 to S37 described above. However, unlike FIG. 3, the roles of the IC chip embedded card 10 and / or the client computer 20 and the high speed internet host system 20 are reversed, and the IC chip embedded card 10 is transferred in step S45. By comparing the random number (random) and the random number (random) decoded by itself and transmitting the OK signal to the client computer 10 at the same time, the client computer 10 can use the Internet network (step S46). .

5 and 6 relate to an authentication system using a plurality of asymmetric keys, in which the roles of the IC chip embedded card 10 and the client computer 20 or the local server 21 are reversed as in FIGS. 3 and 4. It is composed.

In this embodiment, first, the public key of the card and the private key of the host are stored in the high-speed Internet host system 20 as a key for accessing the high-speed Internet network, and the public key of the host and the private key of the card are stored in the IC chip embedded card. It is built inaccessible as described above in (11).

In FIG. 5, when the random number value is generated from the IC chip embedded card 11 and the client computer 10 transmits the random number value, the connection is requested to the high-speed Internet host system 20 (step). S51), in step S52, the random number is encrypted by using the public key of the card and the private key of the host, and a ciphertext ER is generated, which is transmitted to the client computer 10 in step S53, and step S54. In step S55, the client computer 10 decrypts the ciphertext ER received by the host's public key and the card's private key into a random number, and then transmits the decrypted random number and the 'random' value in step S55. The random numbers are compared to allow use of the Internet network at the same time as in FIG. 1 (steps S56 and S57).

On the other hand, in the embodiment of the present invention shown in FIG. 6, when receiving a connection request from the client computer 10 to the Internet network in step S60, the client computer 10 generates a random value in the high-speed Internet host system 20. In step S62 to step S66, it is performed similarly to the above-described steps S52 to S57. However, unlike FIG. 5, the roles of the IC chip embedded card 10 and / or the client computer 20 and the high speed internet host system 20 are configured in reverse, and the random number transferred from the IC chip embedded card 10 in step S65. The Internet network can be used by the client computer 10 by comparing the value random with the random number decoded by itself and transmitting an OK signal to the client computer 10 at the same time (step S66).

In this way, the ciphertext (ER, ER ') encrypted by random numbers (random, random') and various keys during the authentication process between the IC chip embedded card 10 and the client computer 10 and the high-speed Internet host system 20. Since it is possible to fundamentally prevent the exposure of the key value, since the key value is unknown even when the random value is exposed, it is impossible to infer the original key value and hacking is impossible.

In addition, the IC chip embedded card 10 is also masked, so that the key value is not leaked, so that the card itself cannot be duplicated, and only the user who is authorized and verified the integrity and authenticity through the above-described authentication procedure can access the broadband network. Access and operation are made possible.

That is, in general, both the high speed Internet host system 20 and the CPU embedded IC chip embedded card 11 for accessing the high speed Internet network are transmitted as a key value in plain text or as an encrypted key value. The key value itself can only be exposed so that not only illegal access and use of the Internet, but also card copying can be performed. According to the above-described system of the present invention, a high-speed Internet network and an Internet user can use a CPU embedded IC chip. (11) Through the authentication process between the random number (random, random ') and / or encrypted cipher text (ER, ER') encrypted by the key to prevent the exposure of the key value, and also, the random number Even if this leaks, the key value is unknown, so it is impossible to infer the original key value. In addition, since the keys of the IC chip embedded card 11 and the high-speed Internet host system 20 cannot be read, the key value is not leaked and thus the card itself is not duplicated.

According to the configuration and operation of the system for preventing illegal access and use of the high speed internet using IC chip embedded card according to the embodiment of the present invention described above, a hacking device such as a modem that does not allow the high speed internet network without formal registration procedure No matter how illegally you attempt to access and use the high speed internet network, it is impossible to illegally access or operate the internet network without using the IC chip embedded card 11 having the key for accessing the high speed internet network. As a result, the illegal use of the product is blocked, and it is economically effective compared to the introduction of a separate user filtering equipment for extracting illegal users from the point of view of a high-speed internet network operator.

Claims (2)

Interleaving IC chip built-in card reader / writer, including at least a memory unit for storing data, a memory unit such as a ROM, an EPROM, an EEPROM, a CPU, and an input / output interface for the data, and an electromagnetic connection for communication with other systems. In the high-speed Internet illegal access and use prevention system using IC chip built-in card (10) data is read: The IC chip embedded card 11 is stored in the memory unit with a password that cannot be read by itself, and a key for accessing the high speed internet network is stored in the high speed internet host system 20. The internet connection between the high speed internet host system 20 and the client computer 10 and / or the IC chip embedded card 11 upon request of an internet connection from the client computer 10 to the high speed internet host system 20. IC chip embedded, characterized in that the IC chip embedded card 11 is connected to the Internet network without exposing the key by transmitting and receiving a random number (random, random ') encrypted by the network connection key. High speed internet illegal access and use prevention system using card. The key of the IC chip embedded card 11 and the high speed internet host system 20 is a key of the IC chip embedded card 11 and the high speed internet host system 20. A symmetric key that is the same key to each other, a single asymmetric key of one of a public key and a private key as different keys, and a plurality of asymmetric keys each of a public key and a private key as different keys; The authentication process at the time of the connection request from the client computer 10 includes the client computer 10 and / or the IC chip embedded card 11 and the high speed internet host system when the key for the high speed internet network connection is a symmetric key. 20) transmits a random number from one of the other to the other, and encrypts the random number from each of the one and the other to generate a ciphertext (ER, ER '), and the other Send a ciphertext (ER or ER ') to either, and compare the transmitted ciphertext (ER or ER') with the encrypted ciphertext (ER 'or ER) encrypted by itself to allow use of the Internet network at the same time. Is done by; When the key for accessing the high-speed Internet network is a single asymmetric key, the random number is transmitted from one of the other to the other, and the random number transmitted by the private key or the public key is transmitted from the other. Generates a ciphertext (ER or ER ') by encrypting and transmits the ciphertext (ER or ER'), and decrypts the transmitted ciphertext (ER or ER ') by either a public key or a private key. An authentication process is performed that allows the use of the Internet network at the same time by comparing the transmitted random number with the decrypted random number; When the key for accessing the high-speed Internet network is a plurality of asymmetric keys, the random number generated in any one of them is transmitted to the other, and in the other, the random number transmitted by its own public key and private key. A value (random) is encrypted to generate a ciphertext (ER or ER '), which is transmitted to either of which, and the decryption of the transmitted ciphertext (ER or ER') by its own public and private keys. An IC chip characterized by generating a random number and comparing the transmitted random number with the decrypted random value and allowing the use of the internet network at the same time. High speed internet illegal access and use prevention system using internal card.