KR20040040412A - Management System and method of Social Security number - Google Patents

Abstract

PURPOSE: A system and a method for managing a resident registration number are provided to make a resident registration number managing system offer a procedure and a method for authenticating a user when the resident registration number is inputted on a portal server or a banking server. CONSTITUTION: Communication terminals(410,420) or a computer(430) are equipped with an agent program(450) for the resident registration number managing system and the method. The portal server or the banking server(100) is equipped with a member information database(120) including the resident registration number related to personal information. A resident registration number managing server(300) is connected to the portal server or the banking server through the Internet or the network(200), and is equipped with a registration information database(320) including an ID, a password, a telephone number of the communication terminal, a messenger, an e-mail, and other information.

Description

Social Security number management system and method {Management System and method of Social Security number}

The present invention relates to a social security number management system and method, and more specifically, to detect and use the social security number when using and inputting a social security number using a wired / wireless internet or network, and notifying a user in real time to verify whether it is legitimate use. Service management method. Likewise, the business registration number and the phone number can be implemented by applying the present invention.

In general, the name / resident registration number entered during membership registration / modification or identity verification in the portal service is a means of verifying the identity of the user who accesses the service.If the name and social security number are leaked, Can be used as In this case, a lot of damage may be caused to property damage and personal information of others. Similarly, insurance companies, banks, credit card payments, mobile phone payments where you need a social security number is illegally used.

Moreover, leaks of names and social security numbers can allow illegal third parties, such as criminals and foreigners, to forge illegal ID cards.

The development of information and communication has made it possible to conveniently use various services such as information retrieval, information exchange, and electronic commerce in daily life, and as a result, personally identifiable information is leaked by hacking or virus dissemination by malicious third parties. It also happens. Accordingly, various technologies for prevention and prevention of security accidents are required.

However, conventionally, when personal information is leaked due to malicious actions or carelessness of a user, the fact is detected only after a security accident occurs to deal with a damaged state.

In order to prevent such a security incident, it is necessary to establish a new security system service method.

Therefore, the present invention proposes a solution to solve such conventional problems, and then, identity authentication in the resident registration number management system, which is a central server authentication (security) system, when inputting existing resident registration numbers such as portal servers or financial servers such as Naver. Its purpose is to provide procedures and methods. That is, in the social security number management system, which is a central authentication (security) server security system, an object of the present invention is to provide a security service through an event notification so that a user can be notified in real time whether a set event is detected.

In addition, another object of the present invention to provide a security service method through the event notification to notify the user through a short message, an email, a wired / wireless messenger, and the like access to a third party stealing user information.

1 is a network diagram showing a system and a method for managing a social security number according to an embodiment of the present invention.

Figure 2 is a flow chart showing a social security number management system and method according to the configuration of one embodiment of the present invention.

Figure 3 is a functional block diagram showing the configuration of a social security number management system and method agent program applied to the present invention.

4 is an event processing flowchart of a wireless terminal device in a social security number management system and method according to an embodiment of the present invention.

Figure 5 is a flow chart of a central authentication (security) system in the social security number management system and method according to the configuration of one embodiment of the present invention.

According to an aspect of the present invention, a communication terminal device or a computer on which a social security number management system and a method agent program are installed; A portal server or a financial server having a member information database including a social security number related to personally identifiable information; It is connected to the portal server or financial server through the Internet or network, and has a registration information database including personal information of the user using the social security number management system and method, including ID, password, telephone number of communication terminal device, messenger, e-mail, and other information. Consisting of a central authentication (security) server; The central authentication (security) server receives a name / resident registration number from a portal server or a financial server, etc., and determines whether or not a registered member and notifies the user in a set event notification method if the member is a member; And an incident processing step of checking an event notification content received by the wireless terminal device and handling an accident in a set event notification method.

According to another aspect of the invention, the step of executing the social security number management system and method agent program to enter the ID, password of the central authentication (security) server; Selecting a target subscription site; Selecting at least one of an event such as temporary suspension, revocation, or membership withdrawal for the selected site; Transmitting the social security number and name together with the selected event contents to the corresponding portal server; Selecting at least one of events, such as temporary suspension or use of a subscriber, withdrawal of membership, based on the contents received by the portal server; And notifying the selected event processing contents.

According to another aspect of the invention, the step of executing the social security number management system and method agent program to enter the ID, password of the central authentication (security) server; A notification means step of setting at least one of an event notification method, i. A notification setting step of designating a notification by the selected notification means; And a lock setting step of enabling or not logging in to the Internet for the central authentication (security) server.

According to another aspect of the invention, the step of entering the social security number during membership registration / modification and payment in the portal server or financial server; Collecting information such as subscriber information, IP, date / time, website address, name, social security number, etc .; Transmitting the collected information to a central authentication (security) server; Comparing the name / resident registration number with the member information of the central authentication (security) server in the received information; Storing the received information in the member information database of the central authentication (security) server when the verification result matches the name / resident registration number; Next, confirming the event notification setting method; Determining a notification means when the event notification setting method is confirmed; Notification means result of the event notification in the manner of at least one of wireless / email / messenger; characterized in that it comprises a.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a network diagram showing a system and a method for managing a social security number according to an embodiment of the present invention.

The wireless terminal device 400 possessed by the user includes a terminal device including a communication module such as a PCS 420, a cellular phone 420, and a PDA 410.

The wireless terminal device 400 is provided with a social security number management system and method agent program 450. To this end, the user accesses a website provided by the central authentication (security) server 300 through the Internet 200 and registers as a member to receive the service according to the present invention.

When registering as a member in the web service provided by the central authentication (security) server 300, name, ID, social security number, password, phone number of the wireless terminal device, messenger, e-mail, address provided as registration information, such registration The information is stored in the member information database 320.

On the other hand, in the case of joining as a member through the corresponding web service 100 such as Naver and Kookmin Bank, the name, ID, social security number, password, telephone number of the wireless terminal device, messenger, e-mail, and address are provided as registration information. These registration information is stored in the member authentication database 320 of the central authentication (security) server 300.

In addition, the central authentication (security) server 300 to the wireless terminal device 400 through the SMS (Short Message Service) to the phone number of the wireless terminal device 400 of the registered member Social Security number management system and method agent program 450 ), And installs the transmitted social security number management system and method agent program in the wireless terminal device (400).

As described above, the social security number management system and method according to the configuration of one embodiment of the present invention will be described in detail with reference to the flowchart of FIG. 2.

First, the web server 100 enters a social security number during membership registration / modification or credit card / cell phone payment (step S110).

Subsequently, the authentication is executed if the entered social security number is correct (step S120). When it is executed, first determine whether the correct social security number format in the web server 100 itself (step S120).

If it is determined that the correct social security number format, the subscriber's current computer ip address and location, date / time, name, ID, password, social security number, and information such as the registered site address is transmitted to the central authentication (security) server 300 (step S140). ). At this time, the central authentication (security) server 300 determines whether the member subscribed to the present invention's social security number management system and method based on the received information (step S150). If it is determined that the non-member, the membership is induced (step S240). If it is determined that the registered member, the member information database 320 of the central authentication (security) server 300 checks information such as name, resident registration number (step S160).

It is checked whether the resident registration number / name registered in the member information database 320 of the central authentication (security) server 300 matches the name / resident registration number transmitted from the user web server 100 (step S170).

If there is no abnormality according to the test result, the subscriber information transmitted from the user web server 100 is stored (step S180).

Table 1 below illustrates the transmitted subscriber information.

name Hong Gil Dong ID hong password password Resident registration number 700101-1000000 Current subscriber's computer IP address 192.168.0.1 Current subscriber's computer location Korea Telecom Megapass Gangnam Star PC Room Current subscriber's computer name Star PC_10 Current subscriber's computer cookie information Date / time 2004/04/01 01:10:50

After storing the subscriber information, confirm the event notification setting by the social security number management system and method (step S190).

If the event notification is set, the notification means is checked (step S200).

In the notification means, at least one or more of wireless (S210), email (S220), messenger (S230) and the like are set and generated. Subsequently, the generated event notification method, that is, wireless (S215), email (S225), messenger (S235) is executed.

Event notification is made until the web server 100 currently used by the user enters the resident registration number and authentication is completed.

3 is a functional block diagram showing the configuration of a social security number management system and method agent program applied to the present invention.

The reception module 451 checks the contents by receiving the event notification contents set in the central authentication server 300. At this time, the content stored in the wireless terminal device 400 confirms the event content including the date / time, the subscription site address.

In addition, it may include a control module 452 as a selection, if there is more than a check result received from the wireless terminal device 400, may optionally include an information management module 453, the accident handling Along with this, the central authentication (security) server 300 is locked / unlocked so that it cannot be used by logging into the Internet.

In addition, the transmission module 454 is a central authentication (security) server 300 according to the control of the control module 452, the information of the accident processing, the central authentication (security) server lock / unlock, notification setting, the notification means input by the user ) Is used to send.

As described above, the event notification content reception in the wireless terminal device 400 will be described in detail with reference to the flowchart of FIG. 4 with respect to the social security number management system and method according to the exemplary embodiment.

Confirm the event notification content received by the short message (S200), email (S210) or messenger (S220) (step S410). At this time, it is determined whether the accident based on the confirmed result (step S420).

In case of an accident, a transmission is made for reporting an accident (step S430).

On the other hand, the central authentication (security) server 300 receives the accident report reception center based on the contents of the accident report in the wireless terminal device (400) (step S440). At the same time, the corresponding site is suspended (step S450).

Figure 5 is a flow chart of a central authentication (security) system in the social security number management system and method according to the configuration of one embodiment of the present invention.

If you want to use the service of the social security number management system and method of the present invention, you must register as a member in the web service provided by the central authentication (security) server 300.

First, it is a step of determining whether it is a member / non-member (step S310). Then, in the case of a non-member asks whether to join (step S311). When registering as a member, enter the member information (S312) and membership registration (S313). Along with membership registration, the wireless terminal device 400 notifies the member registration fact and the agent program installation information (step S314).

Meanwhile, the user who is a member enters the ID and password into the central authentication (security) server 300 and logs in (step S320). At this time, the site lock / release function for the central authentication (security) server 300 is checked (step S330). If the check result is locked, the login (S320) is not completed, and the login may be completed only when it is released. The initial default mode is released when the user first registers.

In the state of logging in, his security registration information is checked and set, and this registration information is based on the contents entered at the time of membership registration (step S340). Next, the event notification setting for notifying the fact of use when someone uses the resident registration number is designated (step S350). In this step, it is specified whether or not to notify the wireless terminal 400 when the use of its own social security number (step S350). Basically you have to choose between YES / NO.

When event notification setting (S350) specifies YES (use), the event notification method should be selected together (step S360). In this step, at least one or more of the wireless phone 420, the PDA 410, the messenger 430 of the personal computer, the e-mail and the like must be selected.

In order to apply the settings, the password must be input again and the entered password must be correct (step S370). In this next step, the registration / modification completion (S380) is completed and the event notification for informing the fact of the registration contents is executed (step S390).

According to the present invention, it is possible to prevent the damage caused by the indiscriminate collection of personal information, which is a problem these days, and contribute to a healthy e-commerce.

This is not a way of dealing with personally identifiable information of the individual in the state where the damage occurs after use, but it can be said to be a way to know and deal with the accident early.

Although the above has been described with reference to the preferred embodiment of the present invention, various changes and modifications can be made at the level of those skilled in the art. As such, changes or modifications are naturally within the scope of the present invention without departing from the spirit of the present invention. Therefore, the scope of the present invention should not be limited to the above embodiments, but should be determined by the claims described below.

As described above, according to the present invention, it is possible to prevent a malicious person from collecting and using an individual's social security number indiscriminately and contribute to healthy e-commerce by minimizing personal damage.

In addition, it is a good way to solve the controversy in filling out the social security number when signing up.

Claims (8)

Completing member registration to the web service provided by the central authentication (security) server to which the social security number management system and method is applied and inputting an ID and password for login; And Confirming the lock / unlock of the web service provided by the central authentication (security) server; Logging in as the web service is set to be released and specifying an event notification setting of Yes / No; Setting the notification means of wireless / email / messenger if the designation is Yes; Applying all of the settings as input of the web service password; And A management method for event notification of the application setting contents. Stealing the user's social security number and inputting the social security number when registering to access the corresponding server; Collecting information such as subscriber information, IP, date / time, website address, name, social security number, and transmitting the collected information to a central authentication (security) server; The relevant company server detects the need for a resident registration number, such as membership registration / modification / credit card and cell phone payment to collect the information and manage the transmission to a central authentication (security) server. The method of claim 2, Comparing the name / resident registration number with the member information of the central authentication (security) server in the received information; Storing the received information in a member information database of a central authentication (security) server when the collected information matches the name / resident registration number; Confirming to an event notification setting method based on the received information; Determining notification means when the set event notification setting is confirmed; Notifying the designated user of the event occurrence when the occurrence of the set event is detected; If the central authentication (security) server is to use the social security number in the company server, the name detection notice to check whether the right use and to determine whether or not to use the site. The method of claim 3, Resident registration number management system and method Incident processing step of checking the event notification content received in real time from the wireless terminal device installed with the agent program and the incident processing; An accident processing step of checking the contents of a real-time event notification by an email or a messenger from a computer on which the social security number management system and method agent program is installed, and dealing with accidents; Receiving the event content in the wireless terminal device with the social security number management system and method agent program is installed, and if the case is used by another person or a third party management method. The method of claim 4, wherein Inputting the ID and password of the central authentication (security) server by executing the social security number management system and method agent program on the wireless terminal device; Selecting a target subscription site based on the input contents; And Selecting at least one of events such as temporary suspension, revocation, and membership withdrawal for the selected site; Method of managing the temporary registration / release / membership withdrawal by accessing the central authentication (security) server from the wireless terminal device installed with the social security number management system and method agent program. The method of claim 5, The central authentication (security) server, including the resident registration number and name, as well as the subscriber information of the portal server that received the incident handling in the member information database of the central authentication (security) server based on the contents of the accident handling in the wireless terminal device Transmitting the received portal server to the processing; And Selecting at least one of events, such as temporary suspension / disablement / subscription of the corresponding subscriber of the server based on the set contents; Notifying event processing contents for the above processing; The central authentication (security) server is judged to be illegal use by another person or a third party on the site that received the incident processing based on the subscription information stored in the member information database, and temporarily stops / disables the user from using it forcibly. Management method to implement at least one of the following. Inputting 13 digits of a social security number to verify that it is the correct name and social security number; And Inputting the first six digits from the 13 digits of the social security number; And Inputting the last seven digits from the 13 digits of the social security number; And transmitting the subscriber information to the central authentication (security) server when the input is detected, and the central authentication (security) server checks the contents and processes the event notification to the set notification means. Retrieving a business registration number similar to a social security number using a social security number management system and method; And Retrieving the bank account number similar to the resident registration number using the resident registration number management system and method; And Notifying the fact to the wireless terminal device; Management method for confirming the notification content.