KR20110013038A - Web based authentication method for wireless internet access service at business places - Google Patents

Abstract

PURPOSE: A web based authentication method for wireless Internet access service at business places is provided to implement the web authorization by using the ID and password mapped with the serial number. CONSTITUTION: An ID and a password are registered in an authorization server(15). The ID and the password are mapped by generating the serial number. The ID and the password are allocated to the place of business. The serial number delivered from a user terminal(11) within the place of business is compared with the allocated serial number.

Description

Web Based Authentication Method for Wireless Internet Access Service at Business Places}

The present invention relates to a web authentication method for providing a wireless Internet access service at a workplace. More particularly, the present invention relates to a wireless customer access service through a serial number in a wireless internet access service. The present invention relates to a web authentication method for enabling a user to provide a paid or free wireless Internet access service to a user at a workplace conveniently without the hassle of inputting an ID and password by performing web authentication using a password. .

In general, representative wireless Internet access services include public wireless LAN service, portable Internet (also called "WiBro"), and third generation mobile communication service. Mobile Internet and 3G mobile communication services are slower than public WLAN service, but the cell coverage is wide and handoff is possible even during high-speed mobile, so wireless Internet can be used anywhere in / out of the room. While it is narrower than the portable Internet or 3G mobile communication service, it is much faster than the portable Internet or 3G mobile communication service, and it is in the spotlight for wireless internet access indoors.

Recently, as well as laptops, personal digital assistants (PDAs) and smart phones are also equipped with Wi-Fi chips, and thus, demand for public wireless LAN services is increasing.

In order to provide a wireless Internet access service through a WLAN, user authentication for checking whether the user is allowed to access is required. At this time, there are 802.1x based authentication and web authentication. Here, the 802.1x authentication method is a user authentication method through an Extensible Authentication Protocol (EAP) authentication protocol such as Extensible Authentication Protocol-MD5 (EAP-MD5) or Extensible Authentication Protocol-Tunneled Transport Layer Security (EAP-TTLS). In order to access the user terminal requires a program. In addition, the web authentication method is a web browser-based authentication method, and a wireless internet service application, bill payment, and access log-in can be made on the spot using a web browser without a separate access program to a user terminal.

Therefore, a web authentication method that can accommodate temporary customers is suitable as a user authentication method of a workplace that provides wireless Internet services such as coffee shops (Starbucks, etc.), fast food restaurants, hotels, and airports.

In general, the web authentication method is a method in which a user enters an ID (ID) and a password in a web login window, and a business that provides a wireless Internet service provides a randomly generated ID and password to the customer. Enters the ID and password provided in the web login window to access the wireless Internet service network.

In such a case, the user has difficulty in entering a randomly generated ID and password directly. In addition, since the ID and password provided to the customer at the workplace may be used in another hot spot area, the authentication server compares the login ID and the IP address of the AP (access point) together during the authentication process. If not, the connection shall not be allowed. In addition, even if the workplace provides free wireless Internet access on the condition of seeing the web redirect initial page advertisement, the method of issuing ID and password to the customer is inconvenient for both the operator and the customer.

As such, in order to provide paid or free wireless Internet access services with high customer convenience at the workplace, a user authentication method is required to allow users to conveniently access the wireless Internet without issuing an ID and password.

Therefore, the prior art as described above has a cumbersome problem in that a user must directly input an ID and password when providing a paid or free wireless Internet access service at a workplace, and also has a different ID and password provided to the customer at the workplace. There is a problem that can be used in the hot spot area, it is an object of the present invention to solve this problem.

Therefore, the present invention confirms that the customer is a business customer through the serial number in the wireless Internet access service and performs the web authentication using the ID (ID: IDentifier) and password mapped to the user, the user inputs ID (ID) and password Its purpose is to provide a web authentication method for providing a paid or free wireless Internet access service to a user at a workplace conveniently without any hassle.

The objects of the present invention are not limited to the above-mentioned objects, and other objects and advantages of the present invention which are not mentioned can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

In the method of the present invention for achieving the above object, in the web authentication method, the ID (ID) and password are registered in the authentication server, a serial number is generated and mapped with the ID (ID) and password, Assigning; Confirming whether the serial number received from the user terminal in the workplace matches the assigned serial number; Querying an ID (ID) mapped with the verified serial number; And performing web authentication by transmitting an ID and a password mapped to the serial number to the authentication server through a wireless access device.

In addition, the method of the present invention further includes the step of deleting whether the validity of the ID (ID) is deleted by checking whether the validity of the ID (ID).

In addition, the method of the present invention further includes the step of identifying the corresponding business place using the IP address of the wireless access device (AP).

In addition, the method of the present invention, the method further comprises the step of transmitting the confirmed web login page for the user terminal.

On the other hand, another method of the present invention, Web authentication method, generating an ID (ID) and password to register with the authentication server; Identifying the workplace using an IP address of a wireless access device (AP) in response to a connection request from a user terminal in the workplace; Transmitting the verified web site login page to the user terminal; And performing web authentication by transmitting the ID and password to the authentication server through the wireless access device in response to a login request from the user terminal.

In the present invention as described above, by confirming that the customer in the business site through the serial number in the wireless Internet access service, and performing the web authentication using the ID (ID: IDentifier) and password mapped to the user, the user ID and ID (ID) There is an effect that can provide a paid or free wireless Internet access service to users in the workplace conveniently without the hassle of entering a password.

In addition, the present invention has the effect that it is possible to prevent the ID (ID) and password provided to the customer in the workplace to be used in other hot spot areas.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, It can be easily carried out. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a configuration diagram of an embodiment of a wireless Internet access service authentication system to which the present invention is applied.

As shown in FIG. 1, the wireless Internet access service authentication system to which the present invention is applied includes a terminal 11, a wireless access device 12, a web server 13, a user management server 14, and an authentication server 15. ). Since the configuration of the wireless Internet access service authentication system is a general technology, it will not be described in detail here.

However, in the case of a public wireless LAN service, an access point (AP) supporting web authentication may serve as the wireless access device 12. The wireless access device 12 and the authentication server 15 communicate with each other by using AAA (Authentication, Authorization, Accounting) protocol such as RADIUS (Remote Authentication Dial-In User Services) or Diameter.

2A and 2B are flowcharts illustrating an embodiment of an access authentication process of a temporary user (paid user) of a web authentication method for providing a wireless Internet access service at a workplace according to the present invention.

First, the user management server 14 generates an ID (ID: IDentifier) and password of a temporary user (paid user) (201) and transmits the corresponding ID (ID) and password to the authentication server 15 (202). At this time, the user management server 14 generates serial numbers, maps them with the generated IDs (IDs) and passwords, stores them in the serial number_user ID mapping table 430, and assigns them to each business terminal. Here, the workplace refers to a terminal of a workplace that provides wireless Internet services such as coffee shops (Starbucks, etc.), fast food restaurants, hotels, airports, and the like.

Then, the authentication server 15 registers the received ID and password in the database DB (203). The above processes 201 to 203 should be performed before the authentication request, and can generate a plurality of IDs and register them in the authentication server 15.

Subsequently, when the terminal 11 accesses the wireless access device 12 to receive an IP address and drives a web browser to make an Internet access request (http request) (204), the wireless access device 12 transmits the corresponding Internet access request ( http request) is redirected to the web server 13 (205).

Then, the web server 13 finds the business place to which the AP belongs through the IP address of the access point (206) and transmits the corresponding web site for the business site (207). At this time, in the case of a business that provides wireless Internet access service to customers for a fee, the web login page is a web login page for paid access.

Thereafter, when the user inputs the serial number written on the wireless Internet access service use coupon purchased at the business site into the web login page, the terminal 11 transmits the serial number to the web server 13 (208), and the web server. 13 transmits the serial number to the user management server 14 (209).

Then, the user management server 14 checks if the serial number matches the serial number which is stored in advance (210) and if it does not match, transmits a failure message to the web server 13 (211), and accordingly the web server 13 transmits a result page indicating the authentication failure to the terminal 11 (212).

Meanwhile, if the serial numbers match, the user management server 14 inquires (confirms) the ID (ID) and password mapped to the serial number in the serial number_user ID mapping table 430 (213), and the corresponding ID. The ID and password are transmitted to the web server 13 (214). Then, the web server 13 transmits the ID and password to the wireless access device 12 (215).

Then, the wireless access device 12 generates an authentication request message including the ID and password and transmits the authentication request message to the authentication server 15 (216).

Then, the authentication server 15 performs authentication (217), if authentication is successful, transmits an authentication success message to the wireless access device 12 (218) and registers a session (219). On the other hand, if authentication fails, the authentication server 15 transmits an authentication failure message to the wireless access device 12 (220).

Then, the wireless access device 12 transmits the result message (authentication success or authentication failure) to the web server 13 (221), and the web server 13 wirelessly transmits the result page according to the authentication success or authentication failure. The terminal 12 transmits the data to the terminal 11 through the access device 12 (222).

Then, the wireless access device 12 checks the authentication result (223) and establishes a session if authentication succeeds (224), and does not set up a session if authentication fails (225).

On the other hand, when the user clicks the button on the logoff page after using the wireless Internet service, the terminal 11 requests the web server 13 to terminate the connection (226), and the web server 13 requests the connection termination. The message is forwarded to the radio access device 12 (227), and thus the radio access device 12 forwards the access termination request message to the authentication server 15 (228).

Then, the authentication server 15 transmits the connection termination result message to the wireless access device 12 (229), deletes the session of the terminal 11 (230) and subtracts the remaining time (231).

On the other hand, the wireless access device 12 having received the connection termination result message transmits the connection termination result message to the web server 13 (232), whereby the web server 13 sends the connection termination result page to the terminal 11. It transmits (233).

Meanwhile, the user management server 14 checks whether the validity period (or validity time) of the ID (ID) mapped with the serial number has expired (234), and if the validity period has expired, the user ID (ID) to the authentication server 15. Request the deletion of c) (235). Accordingly, upon receiving the ID deletion request, the authentication server 15 deletes the ID from the database DB (236).

3 is a flowchart illustrating an embodiment of a process for authenticating a free user's access in a web authentication method for providing a wireless Internet access service at a workplace according to the present invention.

First, the user management server 14 generates and stores an ID (ID: IDentifier) and a password of the free user (301) and transmits the corresponding ID (ID) and password to the authentication server 15 (302).

Then, the authentication server 15 registers the received ID and password in the database DB (303). The above processes 301 to 303 should be performed before the authentication request, and can generate a plurality of IDs and register them in the authentication server 15.

Subsequently, when the terminal 11 accesses the wireless access device 12 to receive an IP address and drives a web browser to make an internet access request (http request) (304), the wireless access device 12 requests the corresponding internet access request ( http request) is redirected to the web server 13 (305).

Then, the web server 13 finds the business place to which the AP belongs through the IP address of the access point (306) and transmits the corresponding web site for the business site (307). At this time, in the case of a business that provides free wireless Internet access service to customers, the web login page is a free login page.

Thereafter, when the user clicks the access button of the web login page, the terminal 11 requests login to the web server 13 (308), and the web server 13 sends a login request message to the user management server 14. 309.

Then, the user management server 14 transmits the ID and password to the web server 13 (310). Then, the web server 13 transmits the corresponding ID and password to the wireless access device 12 (311).

Then, the wireless access device 12 generates an authentication request message including the ID and password and transmits it to the authentication server 15 (312).

Then, the authentication server 15 performs authentication (313), if authentication is successful, transmits an authentication success message to the wireless access device 12 (314) and registers the session (315). On the other hand, if authentication fails, the authentication server 15 transmits an authentication failure message to the wireless access device 12 (316).

Then, the wireless access device 12 transmits the result message (authentication success or authentication failure) to the web server 13 (317), and the web server 13 wirelessly transmits the result page according to the authentication success or authentication failure. The terminal 12 transmits the data to the terminal 11 through the connection device 12 (318).

Then, the wireless access device 12 checks the authentication result (319) and establishes a session if authentication succeeds (320), and does not set up a session if authentication fails (321).

4 is an exemplary diagram of a table used in a web server, a user management server, and an authentication server according to the present invention.

As shown in FIG. 4, the wireless access device (AP) IP table 400 stored in the web server 13 stores the IP address 401 and the business ID 402 of the wireless access device. Accordingly, when the radio access device 12 redirects the web to the web server 13, the web server 13 uses the radio access device IP address 401 to access the radio access device IP table 400. Locate the business ID (402) from the web login page of the business can be delivered to the terminal (11).

The serial number table 410 stored in the user management server 14 stores the serial number 411 and the business ID 412. Accordingly, when the web server 13 transmits the serial number input by the user to the user management server 14, the user management server 14 may check whether the corresponding serial number is a serial number used in a specific workplace.

In addition, the ID_password table 420 stored in the user management server 14 is a user ID 421 and a password 422, and an ID type that distinguishes whether a temporary user or a free user. (423) is being saved.

In addition, the serial number_user ID mapping table 430 stored in the user management server 14 may include a serial number 431, a user ID 432 and a password 433 which are combined (mapped) with the serial number, and The validity period 434 of the serial number is stored. In addition, the user management server 14 requests the authentication server 15 to delete the corresponding ID when the validity period of the user ID assigned to the business site has passed, and the serial number_user ID mapping table Delete at 430.

The user authentication table 440 stored in the authentication server 15 stores a user ID 441, a password 442, an ID (ID) type 443, and a remaining time 444. Here, the type of ID 443 is a date and time (paid) and free, and if the date and time, you can use the wireless Internet service for the initial time assigned, and if it is free, you can use the wireless Internet service without time limit. have. When the authentication is successful, the remaining time 444 is transmitted to the wireless access device 12, and when the wireless access time of the terminal exceeds the remaining time, the wireless access device terminates the wireless access. At this time, if the wireless Internet connection is made less than the remaining time and the terminal is terminated, the remaining time of the authentication server is subtracted by the used time.

In the above-described embodiment of the present invention, the case of providing a wireless Internet access service at a workplace has been described. However, the present invention may be applied to a case of providing a wired Internet access service at a workplace.

On the other hand, the method of the present invention as described above can be written in a computer program. And the code and code segments constituting the program can be easily inferred by a computer programmer in the art. In addition, the written program is stored in a computer-readable recording medium (information storage medium), and read and executed by a computer to implement the method of the present invention. The recording medium may include any type of computer readable recording medium.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

The present invention can be used in the case of providing a wireless or wired Internet access service in the workplace.

1 is a configuration diagram of an embodiment of a wireless Internet access service authentication system to which the present invention is applied;

2a and 2b is a flow chart of an embodiment of a connection authentication process of a temporary user in a web authentication method for providing a wireless Internet access service in a workplace according to the present invention;

3 is a flowchart illustrating an embodiment of a connection authentication process of a free user among web authentication methods for providing a wireless Internet access service at a workplace according to the present invention;

4 is an exemplary diagram of a table used in a web server, a user management server, and an authentication server according to the present invention.

* Explanation of symbols for the main parts of the drawings

11: terminal 12: wireless access device

13: Web Server 14: User Management Server

15: authentication server

Claims (5)

In the web authentication method, Registering an ID and a password with an authentication server, generating a serial number, mapping the ID and a password, and assigning the ID and password to a workplace; Confirming whether the serial number received from the user terminal in the workplace matches the assigned serial number; Querying an ID (ID) mapped with the verified serial number; And Performing web authentication by transmitting an ID and password mapped to the serial number to the authentication server through a wireless access device; Web authentication method comprising a. The method of claim 1, Confirming whether the validity period of the ID expires and deleting the expired ID. Web authentication method further comprising. The method according to claim 1 or 2, Identifying the business place using the IP address of the wireless access device (AP); Web authentication method further comprising. The method of claim 3, wherein Transmitting the confirmed web login page to the user terminal Web authentication method further comprising. In the web authentication method, Generating an ID and a password and registering the ID with an authentication server; Identifying the workplace using an IP address of a wireless access device (AP) in response to a connection request from a user terminal in the workplace; Transmitting the verified web site login page to the user terminal; And Performing web authentication by transmitting the ID and password to the authentication server through the wireless access device according to a login request from the user terminal; Web authentication method comprising a.

Images