KR20050097160A - System and method for providing internet service to use official recognition certificate - Google Patents

Abstract

The present invention relates to a system and method for providing an Internet service using a public certificate that can guarantee anonymity and prevent abuse of anonymity.

An Internet service providing system using a public certificate according to the present invention includes a mobile communication terminal having a certificate stored therein; And a content providing server providing a service to the mobile communication terminal digitally signed using the certificate.

Description

System and Method for Providing Internet Service To Use Official Recognition Certificate}

The present invention relates to a system and method for providing an Internet service using a public certificate, and more particularly, to a system and method for providing an internet service using a public certificate that can guarantee anonymity and prevent abuse of anonymity.

Today, the Internet provides a variety of information, ranging from life information necessary for our daily lives to professional academic and scientific knowledge, as well as e-mail services, Internet banking, cyber securities, It is also used in electronic commerce for purchasing goods. As such, it provides convenience in many parts of our lives without the internet.

Service providers that provide these various Internet services are focusing on providing better quality information and services, and securing and memberizing customers who use their services.

On the other hand, in order to become a member of an Internet service provider, the user must go through a series of user authentication and registration procedures for accessing the service provider's Internet site and inputting personally identifiable information. Registration is possible only after entering personal information (for example, name and social security number).

However, since it is not easy to prevent leakage of personal information registered on the Internet site to the outside, personal information can be forged and stolen, and there is a problem that the Internet site operator knows all of the user's personal information.

Therefore, in order to guarantee anonymity to a user, a plurality of Internet sites can register to a plurality of Internet sites without undergoing user authentication. In this case, anonymity may be abused by a malicious user, causing a dysfunction such as invading the privacy of another person or causing mental damage.

Accordingly, it is an object of the present invention to provide an internet service providing system and method using a public certificate that can ensure anonymity and prevent abuse of anonymity.

In order to achieve the above object, the Internet service providing system using a public certificate according to an embodiment of the present invention and the mobile communication terminal is stored; And a content providing server providing a service to the mobile communication terminal digitally signed using the certificate.

The content providing server is characterized in that to post a post transmitted from the mobile communication terminal.

The Internet service providing system using the public certificate includes a database storing at least one of the post, an electronic signature value for the post, a certificate URL of a publisher, and a publisher ID; Issuing the certificate to the mobile terminal, characterized in that it further comprises an interworking module of an authorized certification authority that provides information of the publisher when a legal problem with the post.

The certificate may be stored in at least one of an internal memory of the mobile communication terminal and an external memory connectable to the mobile communication terminal.

The external memory is characterized in that the smart card.

In order to achieve the above object, the Internet service providing method using a public certificate according to the present invention comprises the steps of providing a mobile communication terminal is stored; Accessing a content providing server using the mobile communication terminal; And providing a service to the mobile communication terminal which is electronically signed to the content providing server using the certificate.

Providing a service to the mobile communication terminal that is electronically signed to the content providing server using the certificate comprises: accessing the content providing server and anonymously writing a post using the mobile communication terminal; Electronically signing the post; And storing information on the electronically signed post in a database of the content providing server.

Providing a service to the mobile communication terminal that is electronically signed to the content providing server using the certificate may include accessing the content providing server to create an ID and an electronically signed post of the user of the mobile communication terminal; Electronically signing the post with a user's certificate; And registering the post that has been successfully verified by the electronic signature with the certificate transmitted by the user to the bulletin board of the content providing server.

The Internet service method using the public certificate further comprises the step of acquiring information on the user stored in the public certification authority by using the information on the public post stored in the database when a legal problem with the public post. .

Other objects and advantages of the present invention in addition to the above object will be apparent from the detailed description of the embodiments with reference to the accompanying drawings.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to FIGS. 1 to 6B.

1 shows an Internet service providing system using a public certificate according to the present invention. The mobile communication terminal 2 stores a user certificate from a certification authority (CA) 8, and the internet service is provided to the mobile communication terminal 2; It is provided with a content provider (Contents Provider) server (4).

The mobile communication terminal 2 stores a user certificate for leaving a post on a bulletin board of the content providing server 4 without exposing personal information. That is, the user certificate is stored in the WPKI security-related module in the mobile communication terminal 2 or stored in a smart card that can be connected to the mobile communication terminal 2. Such a user certificate may be stored in the mobile communication terminal 2 through the issuing process shown in FIG. 4 to be described later.

The mobile communication terminal 2 accesses the content providing server 4, writes anonymously, and registers a post on the bulletin board of the content providing server 4 using at least one of an electronic signature and an ID.

The content providing server 4 acquires a certificate using a certificate URL transmitted from the mobile communication terminal 2, and if the verification of the electronic signature signed by the user succeeds, the post input by the user of the mobile communication terminal is posted to the bulletin board. Register. The publisher's information about posts posted on the bulletin board is thoroughly guaranteed until the problem occurs.

The database 6 stores posts registered on the bulletin board of the content providing server 4, an electronic signature value for the posts, and a publisher's certificate URL. The database 6 requests information about the publisher from the certification authority 8 through the stored URL of the publisher when a problem occurs in a specific post.

The certification authority 8 provides the information of the authenticator about the specific certificate required by the database 6 of the content providing server 4. In addition, the public certification authority 8 issues a certificate to be stored in the mobile communication terminal 2 and the content providing server 4.

As such, when the Internet service providing system using a public certificate according to the present invention posts a content providing server that does not use an ID, the user is authenticated only by an electronic signature for the post, and the post is provided to the content providing server using the ID. When uploading, the ID of the post and the electronic signature of the ID are verified by the user. After the user verification is completed, the post is registered on the bulletin board, thereby ensuring the anonymity of the user of the mobile communication terminal and preventing the forgery and theft of the user's personal information. In addition, when a problem with a particular post occurs, the identity of the post can be known through a certificate associated with at least one of an electronic signature and an ID, so that legal measures can be taken for infringement or privacy of others.

2 is a flowchart illustrating a method of posting a post to a content providing server that does not use an ID.

Referring to FIG. 2, the mobile communication terminal accesses a content providing server that does not use an ID. (S11) The mobile communication terminal connected to the content providing server anonymously creates a post. (S12) After creating a post certificate The electronic signature is performed on the post by inputting the password (S13). That is, after taking the hash value for the post as shown in FIG. 6, the electronic signature is obtained by using the secret key of the mobile terminal user. Do this. Only posts that have successfully validated a digital signature are allowed to be published by the content delivery server, and the content delivery server's database stores the publisher, the publisher's posts, the digital signature value for the post, and the publisher's certificate Uniform Resource Locator (URL). do. After that, if there is no problem with the post, the publisher's personal information on the post is thoroughly guaranteed. On the other hand, if a problem occurs in the post, the administrator of the content providing server obtains the publisher's personal information from an authorized certification authority using the publisher's certificate URL stored in the database. Then, the administrator of the content providing server takes legal action on the electronic signature value of the post. (S14, S15)

As described above, the method for providing an Internet service using a public certificate according to the present invention may use a service provided by a content providing server without receiving at least one of an ID and a password by using a mobile communication terminal in which a certificate is stored. Accordingly, the anonymity of the user of the mobile communication terminal connected to the content providing server can be guaranteed as much as possible.

3 is a flowchart illustrating a method of uploading a post to a content providing server using an ID.

Referring to FIG. 3, the mobile communication terminal accesses the content providing server using the ID. (S21) The mobile communication terminal accesses the content providing server and checks whether or not the content providing server is subscribed. The user who has not received the ID is issued with an electronic signature for the issued ID as shown in FIG. 5 so that the registered user can be confirmed by the bulletin board operator that the user is a legitimate user of the certificate (S23, S24). In the subscriber database of the content providing server, the user's ID, the electronic signature for the ID, and the user certificate URL are stored so that the user certificate possession proves successful.

Subsequently, the user of the mobile communication terminal accesses the content providing server through verification of the ID and the electronic signature of the ID. (S25) The user accesses the content providing server to create a post. The content providing server bulletin board operating system extracts a registered user certificate through ID information and performs digital signature verification of an electronically signed post using the corresponding certificate. The content providing server permits posting only for posts that have successfully verified digital signature. Then, the user ID, the post, and the electronic signature for the post are stored in the post database of the content providing server.

After that, if there is no problem with the post, the publisher's personal information on the post is thoroughly guaranteed. On the other hand, if a problem occurs in the post, the administrator of the content providing server obtains the publisher's personal information from an authorized certification authority using the publisher's certificate URL for the post stored in the subscriber database. Then, the administrator of the content providing server will take legal action on the electronic signature value of the post. (S27, S28)

As described above, in the method of providing an Internet service using a public certificate according to the present invention, a user is authenticated without a social security number using a mobile communication terminal in which a certificate is stored. Accordingly, it is possible to prevent exposure, forgery and theft of personally identifiable information such as the social security number of the mobile communication terminal and to ensure the anonymity of the user to the maximum.

4 is a flowchart illustrating a certificate issuing process of the mobile communication terminal illustrated in FIG. 1.

First, a user of a mobile communication terminal 2 to issue a public certificate is required to register with a Registration Authority (RA) 10, for example, a public key infrastructure (PKI) portal service unit. The user confirms his / her identity in face to face. The registration authority 10 transmits the user authentication request information data to the authentication authority 8 through the network communication network (step S33). Then, the registration authority 10 transmits the information data. Of the user selects a certificate request menu in the mobile communication terminal 2 to generate an electronic signature key pair (public key, private key) in the mobile communication terminal 2, and then The signed certificate issuance request signal is transmitted to the registrar 10 through a network communication network (for example, a web gateway) (step S34). (8) transmits a request signal for issuing a public certificate for each user. After creating the file, the user publishes it to the directory server 12 (step S36). Then, the user downloads the public certificate from the registration authority 10 to the user's mobile communication terminal 2 (step S37).

On the other hand, as in the mobile communication terminal according to the present invention, the content providing server downloads the certificate using the issuing process shown in FIG.

5 is a diagram illustrating an electronic signature process according to the present invention using a public key.

The digital signature process according to the present invention shown in FIG. 5 uses a public key cryptography method. Public key cryptography is a method of encryption / decryption using a key pair consisting of a public key that is open for anyone to use and a private key that is kept privately by itself, and the key used for encryption and the key used for decryption are different from each other. different.

The user of the mobile communication terminal creates a document to register on the bulletin board and transmits the document by encrypting (electronic signature) using the private key (public key of the content providing server) of the mobile communication terminal and transmitting the document. The administrator verifies the electronically signed document by decrypting the encrypted document using the public key of the mobile communication terminal (private key of the content providing server). In this manner, the content providing server and its administrator can authenticate the user and the document of the mobile communication terminal using the public key technology. Here, the authentication of the mobile communication terminal proves that the mobile communication terminal connected to the content providing server through the mobile communication terminal is a legitimate user, and the authentication of the document proves that the document transmitted by the user of the mobile communication terminal is not forged.

6A and 6B are diagrams illustrating the integrity verification and digital signature process of information according to the present invention using a hash function.

The integrity verification and digital signature process of the information shown in FIGS. 6A and 6B use a hash function. The hash function produces a secure output bit string of a constant length for any input bit string, and is a technique that is actively used in various mechanisms of information communication protection. In other words, the hash function is a function that maps an input data string to a hash code that is a fixed length output. It is not computationally feasible to find a data string that generates this hash code for a first given hash code. Finding another data string that generates the same hash code for a function is a function that satisfies the two properties of being computationally infeasible.

When using the hash function to verify the integrity of the information as shown in FIG. 6A, the hash value generated by the hash function is inserted into the document M created using the mobile communication terminal and registered in the bulletin board. The code <[H (M)]> is transmitted to the content providing server. Here, the hash value is an algorithm that compresses a bit string of arbitrary length into a hash code which is a fixed length output value, and the output value is attached to the original document and transmitted after being encrypted. That is, a document created using a mobile communication terminal is inserted into a hash value and transmitted to a content providing server through a network communication network.

The content providing server compares the hash code value <[H (M)]> stored in the content providing server with the value <[H (M)]> of the result of taking the hash function on the document received from the mobile communication terminal. do. When forgery is performed on the contents of the original document, since the hash values are different, it is easy to check whether the forgery or forgery of the document is correct.

In the case of electronic signature using the hash function as shown in FIG. 6B, a hash code <[H] having a hash value generated by the hash function inserted into a document M prepared by using a mobile communication terminal and registered in a bulletin board. (M)]>, the user of the mobile communication terminal encrypts <S [H (M)]> with the private key and transmits it to the content providing server. The content providing server decrypts this with the public key and compares the result <[H (M)]> with the value <[H (M)]> of the result of hashing the received document to determine the authenticity of the electronic signature. do.

As described above, the Internet service providing system and the method using the public certificate according to the present invention is connected to the Internet service using the mobile terminal stored the certificate. Accordingly, when chatting or using a bulletin board, the anonymity of the user may be compensated to the maximum, and identity information of the malicious user may be secured.

Those skilled in the art will appreciate that various changes and modifications can be made without departing from the technical spirit of the present invention. Therefore, the technical scope of the present invention should not be limited to the contents described in the detailed description of the specification but should be defined by the claims.

1 is a block diagram showing an Internet service providing system using a public certificate according to the present invention.

2 is a block diagram showing a method for providing an Internet service using a public certificate according to the present invention.

3 is a block diagram showing another embodiment of a method for providing an Internet service using a public certificate according to the present invention.

4 is a view showing a system and a method for issuing an authorized certificate to be stored in a mobile communication terminal according to the present invention.

5 is a diagram illustrating an electronic signature process according to the present invention using a public key.

6A and 6B are diagrams illustrating an integrity verification and digital signature process of information according to the present invention using a public key.

<Short description of the symbols in the drawings>

2: mobile communication terminal 4: content providing server

6: database 8: certification authority

10: registration authority 12: directory server

Claims (9)

A mobile communication terminal in which a certificate is stored; And a content providing server providing a service to the mobile communication terminal digitally signed using the certificate. The method of claim 1, The content providing server is an Internet service providing system using a public certificate, characterized in that for posting a post transmitted from the mobile communication terminal. The method of claim 2, A database storing the post, the electronic signature value for the post, the certificate URL of the publisher, or the ID of the publisher; Issuing the certificate to the mobile terminal, the Internet service providing system using a public certificate, characterized in that it further comprises an interworking module of an authorized certification authority for providing information of the publisher when a legal problem with the post. The method of claim 1, And the certificate is stored in at least one of an internal memory of the mobile communication terminal and an external memory accessible with the mobile communication terminal. The method of claim 4, wherein The external memory is an Internet service providing system using a public certificate, characterized in that a smart card. Providing a mobile communication terminal in which a certificate is stored; Accessing a content providing server using the mobile communication terminal; And providing a service to the mobile communication terminal digitally signed by the content providing server using the certificate. The method of claim 6, Providing a service to the mobile communication terminal electronically signed by the content providing server using the certificate Accessing the content providing server and creating a post anonymously using the mobile communication terminal; Electronically signing the post; And storing information on the electronically signed post in a database of the content providing server. The method of claim 6, Providing a service to the mobile communication terminal electronically signed by the content providing server using the certificate Connecting to the content providing server to create an ID and an electronically signed post of the user of the mobile communication terminal using the mobile communication terminal; Electronically signing with a user's certificate for the post; And registering the post that has been successfully verified by the electronic signature with the certificate transmitted by the user to the bulletin board of the content providing server. The method according to any one of claims 7 and 8, And obtaining information on a user stored in an accredited certification authority by using the information on the post stored in the database when a legal problem occurs with the post.