JP2006343968A - Method of wireless authentication login system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method of a wireless authentication login system that includes authenticating logins or logouts to a system by means of a wireless authentication device that a user has, thereby improving a conventional technique that involves such a complex login step to the system as account, password and user selections. <P>SOLUTION: The method includes a step for entering into the valid range of an authentication module in a computer system; a step for causing the authentication module to create a login request message after reacting to the wireless authentication device; a step for causing the authentication module to transmit the authentication request message to the wireless authentication device; a step for causing the authentication module to receive an authentication code sent from the wireless authentication device; a step for determining whether or not the match between the authentication code and user information is valid by collating the authentication code with the user information; a step for connecting the wireless authentication device to the authentication module after the match is determined to be valid; and a step for self-logging in to the computer system. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a method for a wireless authentication login system, and more particularly to a method for a user to log in to a host by performing an authentication procedure via a wireless authentication device.

  In the conventional method, for example, in order to ensure information safety of a system such as a computer, a homepage, and an Internet facility, various biometric authentication methods such as a preset user account, password, fingerprint, and iris are used in the login system. Used for safety certification. The most commonly used method was an account and password when logging into the computer operating system. This method allows a user to enter his / her own working environment when an account and password are verified in an operating system used by multiple people.

  FIG. 1 is a schematic diagram showing a standard login screen by a conventional Microsoft Windows (registered trademark) operating system login method. On this login screen, after a key input for selecting a user name (system administrator, first user, second user, etc.), a corresponding password set in advance is key-input. Then, the user's work environment can be entered.

  Patent Document 1 discloses a method in which a user terminal logs in to an Internet system using an account and a password. Furthermore, Patent Document 2 discloses a biometric authentication method, but its recognition ability is limited and the cost of installing a biometric authentication device is too high for general consumers to use.

In view of the complicated and complicated login authentication step, the prior art system provides a wireless authentication login method and a secure logout system in order to simplify the login procedure. Achieve the purpose of entering the user's work environment.
US Pat. No. 5,671,354 US Pat. No. 6,487,662

  An object of the present invention is to perform a log-in step to a complicated system such as an account, a password, and a user selection by performing a log-in or log-out approval to the system by a wireless authentication device possessed (carried) by a user. An object of the present invention is to provide a wireless authentication login system method with improved technology.

  The wireless authentication login system method of the present invention includes a step in which a wireless authentication device falls within a valid range of an authentication module in the system, a step in which the authentication module generates a login request message in response to the wireless authentication device, The method includes transmitting an authentication request message to the wireless authentication device, receiving an authentication code transmitted from the wireless authentication device, entering an authentication procedure, and actively logging into the system.

  The wireless authentication login system method of the present invention includes a step of entering an effective range of an authentication module in a computer system, a step of generating a login request message after the authentication module is sensitive to a wireless authentication device, and The step of transmitting the authentication request message to the authentication device, the step of receiving the authentication code transmitted from the wireless authentication device by the authentication module, and the correspondence between the authentication code and the user information, and the correspondence between the authentication code and the user information The method includes a step of determining whether or not is valid, a step of connecting the wireless authentication device and the authentication module after the determination is valid, and a step of automatically logging in to the computer system.

  According to the method of the wireless authentication login system of the present invention, when a wireless authentication device possessed by a user approaches a computer system including an authentication module, an authentication procedure is generated and automatically logs into the user's work environment. An authentication system that used accounts and passwords in technology can be substituted.

  In the method of the wireless authentication login system according to the present invention, the login or logout of the system is approved by the wireless authentication device owned by the user. As shown in FIG. 2, the user 20 wears or holds the wireless authentication module 23. When the user 20 having the wireless authentication module 23 approaches the computer system 21, the user 20 is coupled to the authentication module 22 provided in the computer system 21 by electromagnetic coupling, electromagnetic induction, or the like, and performs an authentication procedure. The computer system 21 corresponds to the authentication code and user information generated immediately, and if it is valid authentication, the user registered in the wireless authentication module 23 is automatically logged into the system. This eliminates the need for user key input or selection and password key input.

  The authentication module 22 in the above-described computer system 21 may be a circumscribed (external) type or a host built-in type, or may be a type in which an authentication chip (IC) is embedded on a computer motherboard. The wireless authentication module 23 may be an active or passive radio frequency identification (RFID) IC card, bar code, magnetic card or other embedded format, and is limited to the illustrated one. I don't mean. The coupling mechanism between the authentication module 22 and the wireless authentication module 23 may be a wireless communication system such as a wireless (wireless) Internet, Bluetooth (registered trademark), wireless telegraph, infrared (IrDA), or laser, but is not limited thereto. is not.

  FIG. 3 is a block diagram showing an apparatus of the wireless authentication login system of this embodiment. The system shown is a local or remote computer system, but is not limited to that shown. As shown in the figure, peripheral devices connected to the computer system 30 include a system login screen, a login state, a display unit 31 indicating a login error or success message, an input unit 32 such as a mouse and a keyboard, and a hard disk. The storage unit 33 is a storage medium for data stored in the computer system 30 such as a flexible disk and is a place where data that must be protected by the authentication method of the present embodiment exists.

  The computer system 30 further includes a user database 34, which is in a multi-user operating system, for example user information such as user accounts, passwords, affiliation files, work environment settings, and the like. The authentication module 36 used in this embodiment is built in or circumscribed in the computer system 30 or embedded on the motherboard, and when the authentication device 300 approaches within a specific range of the authentication module 36 of the computer system 30, When the authentication message is exchanged between the authentication device 300 and the authentication module 36 by a coupling relationship such as electromagnetic coupling or electromagnetic induction, and the system recognizes the request for login, the authentication module 36 immediately determines the authentication code of the wireless authentication device 300. Upon receipt, the authentication database 35 and the user database 34 are connected when the comparison is completed, and finally the purpose of the login system is achieved via the login management unit 301 of the computer system 30 with the compared user information. This method replaces the conventional system authentication method using an account and password.

  FIG. 4 is a flowchart showing the wireless authentication login of the present embodiment.

  Before starting the login procedure, the authentication module installed in the computer system is set in an authentication relationship with the wireless authentication device that must be owned by the user. For example, the authentication relationship is set by a public key or a private key. For example, a lookup table having authentication-related data corresponding to the user information is created.

  S401: After the correspondence between the user and the authentication relationship is completely established, the login procedure is started.

  S403: The system at the start is in a standby state, and waits for the authentication device to approach a predetermined sensitive range.

  S405: When the wireless authentication device falls within the effective range of the authentication module in the system, a coupling relationship occurs.

  S407: When the authentication module responds to the wireless authentication device, it generates a login request message to inform the computer system that there is a login message.

  S409: The authentication module immediately transmits an authentication request message to the wireless authentication device, and requests an authentication code of the wireless authentication device.

  S411: Subsequently, the wireless authentication device transmits a set of authentication codes, and the authentication module receives them.

  S413: An authentication procedure for comparing and contrasting users using an authentication code is entered. This authentication procedure includes a contrast between the authentication code and user information, which can be a converted default value and is not limited to the original authentication code. Thereafter, it is determined whether or not the authentication code is valid, and it is determined whether or not the corresponding user information is valid. If the authentication code is invalid, the system returns to standby or issues an error message. If the user information is invalid, the system returns to a standby state or issues an error message. If both pass authentication, the wireless authentication device and the authentication module are connected.

  S415: When authentication is passed, the system automatically logs into the system immediately.

  FIG. 5 is a flowchart illustrating a wireless authentication login according to a preferred embodiment of the present invention, the steps of which are as follows.

  Before logging in to the system, it is necessary to provide an authentication database for the wireless authentication device and the authentication module so as to correspond to user information of the computer system. This computer system is a work environment used by a plurality of people.

  S501: After establishing a correspondence between the user and the authentication relationship, a login procedure is started.

  S503: The authentication module of the computer system enters a system standby state for detecting at any time whether or not the wireless authentication device is approaching.

  S505: It is determined whether or not the wireless authentication device is approaching. If it is not detected that the authentication device is approaching, a standby state is entered (S503).

  S507: When the wireless authentication device falls within the authentication effective range of the computer system and falls within the effective range of the authentication module in the computer system, the authentication module and the wireless authentication device are sensitive to each other to establish a coupling relationship.

  S509: Responds to a message that a login request message is generated inside the authentication module and authentication is required.

  S511: The authentication module transmits an authentication request message to the wireless authentication device.

  S513: The wireless authentication device responsively transmits an authentication code embedded in the chip, and the sensitive module receives this authentication code.

  S515: The authentication module includes an authentication database of authentication codes and corresponding user information, and compares the authentication code with the user information.

  S517: It is determined whether the authentication code is valid. After the comparison, it is determined whether or not the authentication code transmitted by the wireless authentication device is effectively described in the authentication database. If the authentication code does not correspond to the data in the database, the display unit does not log in to the system, and the display unit returns to the system standby state without displaying a login error message (S503). Further, the security mechanism of the authentication database data may be strengthened by an encryption process.

  S519: Subsequently, by comparing the authentication database, it is determined whether or not the user information is effectively described therein. If the user information does not correspond to the data in the database, the display unit may return to the system standby state without displaying the login error message without logging in to the system (S503).

  If there is an error in the control as in the above-described embodiment, it is displayed that the authentication code and the user data cannot be matched in the database, and the system returns to the system standby state (S503).

  S521: If there is no mistake in the control, the wireless authentication device and the authentication module are connected, and the system periodically transmits authentication data to check whether this connection is valid or not.

  S523: The work environment of the user who logs in to the computer system is specified based on the user information.

  FIG. 6 is a flowchart illustrating wireless authentication logout according to an embodiment of the present invention. If the connection between the wireless authentication device and the authentication module is lost, for example, if the authentication module fails, the wireless authentication device is damaged, or the user who owns the wireless authentication device leaves the system, the authentication system displays an error. In step S601, a logout procedure is performed.

  In S603, the system places the wireless authentication device and the authentication module in a connected state.

  In S605, the user with the wireless authentication module leaves.

  In S607, the system immediately determines that the connection state has been lost.

  In S609, the system automatically logs the user out of the work environment.

  In S611, the system returns to the standby state again and waits for the wireless authentication module to approach and log in.

  The drawings and description given above are merely preferred embodiments of the present invention, and other modifications can be made by the above description if those skilled in the art are familiar with the present invention. It should be included within the spirit and claims.

It is a schematic diagram which shows the user login screen of the Windows (trademark) operating system of a prior art. It is a schematic diagram which shows the use condition of the wireless authentication login system by one Embodiment of this invention. 1 is a block diagram illustrating a wireless authentication login system apparatus according to an embodiment of the present invention. 4 is a flowchart illustrating wireless authentication login according to an embodiment of the present invention. 3 is a flowchart illustrating a wireless authentication login according to an exemplary embodiment of the present invention. 4 is a flowchart illustrating wireless authentication logout according to an embodiment of the present invention.

Explanation of symbols

20 User 21 Computer 22 Authentication Module 23 Wireless Authentication Module 30 Computer System 31 Display Unit, 32 Input Unit, 33 Storage Unit, 34 User Database, 35 Authentication Database, 36 Authentication Module, 300 Authentication Device, 301 Login Management Unit

Claims (10)

A wireless authentication login system method for authorizing login or logout to a system by a wireless authentication device possessed by a user,
The system is in a standby state;
Detecting whether the wireless authentication device is within the effective range of the system;
A login request message is generated when the authentication module is responsive to the wireless authentication device;
Transmitting an authentication request message to the wireless authentication device;
The authentication module receiving an authentication code transmitted from the wireless authentication device;
Entering the authentication process,
Logging into the system. A method of a wireless authentication login system comprising:   2. The wireless authentication login system according to claim 1, wherein when the wireless authentication device enters an authentication effective range of the system, the wireless module in the wireless authentication device and the authentication module are electromagnetically coupled or electromagnetically induced. the method of. The authentication procedure is:
Contrasting the authentication code with user information;
Determining whether the authentication code is valid;
Determining whether the user information is valid;
The wireless authentication login system method according to claim 1, further comprising: connecting the wireless authentication device and the authentication module.   4. The method of wireless authentication login system according to claim 3, wherein when the connection is lost, a logout procedure is entered.   The method of claim 3, wherein the system returns to the standby state when the authentication code is invalid.   4. The method of wireless authentication login system according to claim 3, wherein when the user information is invalid, the system returns to the standby state. A step in which the computer system is in a standby state;
Detecting whether a wireless authentication device is within an effective range of an authentication module in the computer system;
Generating a login request message after the authentication module is sensitive to the wireless authentication device;
Transmitting an authentication request message to the wireless authentication device;
The authentication module receiving an authentication code transmitted from the wireless authentication device;
Contrasting the authentication code with user information;
Determining whether the authentication code is valid;
Determining whether the user information is valid;
Connecting the wireless authentication device and the authentication module;
Logging into the computer system. A method of a wireless authentication login system comprising:   8. The wireless authentication login system method according to claim 7, wherein a logout procedure is entered when the connection is lost.   The method of claim 7, wherein the computer system returns to the standby state when the authentication code is invalid or the user information is invalid. 8. The wireless authentication according to claim 7, wherein when the wireless authentication device enters the authentication effective range of the computer system, the wireless module in the wireless authentication device and the authentication module are electromagnetically coupled or electromagnetically induced. Login system method.

Images