KR100216076B1 - Device and method for securing the file transfer protocol login in accounting data on-line transfer system - Google Patents

Abstract

The present invention relates to a security device and a method of file transfer protocol (FTP) login of the billing data online transmission system, wherein any user of the system who periodically or aperiodically requests a login does not know the password of the system to which the login target is logged in. It is a technology that has the advantage of improving the reliability of developing a packet network charging data online transmission system or similar application program by enabling encryption and password encryption.

Description

Security Device and Method for Login of High Transfer Protocol (FTP) in Billing Data Online Transfer System

The present invention relates to a security device and a method for file transfer protocol (FTP) login of the billing data online transmission system, wherein any user of the system who periodically or aperiodically requests a login does not know the password of the system to which the login target is logged in. It also relates to a technique for securing a file transfer protocol login by enabling a password and encrypting a password.

In general, in order to build a daily billing system, the billing data generated from the packet network is transmitted to the daily billing system in real time.

The protocol used is the File Transfer Protocol (hereinafter referred to as FTP). In order to transfer the billing data file in real time using this, the system requesting login must know the user account and password of the target system. do.

Accordingly, in the conventional FTP client system, the host name, the user name, and the password of the server system are described in advance in a specific file in the home directory of the specific user. You can log in directly to FTP without being asked for it.

This approach is currently used in applications that require real-time FTP login.

However, this method has a disadvantage that the client system user must know the username and password of the server system, and also because the username and password of the server system are stored in the client system.

This is also a security problem because not only FTP login to the server system from the real-time FTP application of the client system but also anyone can freely log in to the server system on the screen where the client system is logged in as a specific user. Cause.

In the related art, since the password is transmitted as text, there is a security problem that hackers can easily intercept the password by a method such as packet sniffer.

Accordingly, although one-time passwords have been conventionally used in view of the above problems, the one-time passwords are not suitable for applications that transmit files in real time.

In view of the problems described above, the present invention provides a method of performing an FTP login that provides efficient security when developing a billing data online transmission system or similar application program that FTP logins to a server system in real time from a client system. It is intended to provide such a method that any user of the system (client system) that has requested a login can log in without knowing the password of the system (server system) to be logged in. An apparatus for doing this is presented.

That is, in order to achieve the above object, the application program of the client system receives the user account and password of the server system and performs FTP login to the server system. The password is encrypted according to the public key encryption technique, not the text. The method of using the old password is applied.

1 is a schematic block diagram of a billing data online transmission system for applying the present invention.

2 is a block diagram of an online transmission system including a security device implemented by the present invention.

3 is a flowchart illustrating a series of processes executed by an application client unit in the client system of the present invention.

4 is a flowchart showing a series of processes executed by an application server unit in the server system of the present invention.

5 is a flowchart showing a series of processes executed by the password transfer unit of the FTP server in the server system of the present invention.

6 is a flowchart showing a series of processes executed by the password recovery management unit in the server system of the present invention.

7 is a flowchart showing a series of processes executed by the password recovery unit in the server system of the present invention.

8 is a flowchart showing a series of processes executed by a secret key input unit in the server system of the present invention.

9 is a flowchart showing a series of processes executed by the password encryption unit in the server system of the present invention.

* Explanation of symbols for main parts of the drawings

200: client system 300: server system

10: application client section 11: host information section

12: communication function unit 13: electronic signature unit

14: FTP client drive unit 20: FTP client drive

21: FTP client 30: secret key input unit

31: secret key input function 32: secret key investigator

40: password encryption unit 41: encryption function unit

42: encrypted password changing section 50: application server section

51: communication function unit 52: host information reading unit

53: client host information checker 54: host information extractor

60: password transfer unit of the FTP server 61: message transfer unit

62, 71: message receiving unit 70: password recovery management unit

72: message transmission unit 73: password recovery drive unit

80: password recovery unit 81: message transmission / reception unit

82: password recovery function

FTP login security device of the present invention to operate as described above, the application to transfer the host information of its own to the server system to be connected, the host information of the corresponding server system to sign, and to drive the FTP client A client system including a client unit, an FTP client unit receiving host information of a server system from the application client unit, and performing an FTP login through an FTP channel to a server system; and receiving host information from the client system. After determining the access right of the system, the application server unit for transmitting the host information of the server system to the client system, the password encryption unit for encrypting the password of the server system to pass the strong application server unit, and the encrypted password from the client system The password and the password recovery unit of the FTP server performing the login process after receiving the word and the process identifier of the server system itself to the password recovery management unit, receiving the decrypted password from the password recovery unit, and checking the password recovery process information. A password recovery management unit for generating and driving a password recovery unit, a password recovery unit for receiving a message from the password recovery management unit, decrypting the password, and then transferring the password to a password transfer unit of the FTP server, and a secret key from the server system operator. And a server system including a secret key input unit which receives the input, determines the authenticity of the secret key, and stores it in a memory.

In addition, the FTP login security method of the present invention to operate as described above, transmits the pseudo password for checking the access information of the host system and the signal channel of the client system side to the server system, and then the server system to respond to the response. (1) receiving and processing information, and receiving and inspecting the information and password transmitted in the above process, and transmitting the host information and the encrypted password of the server system corresponding to the request to the access client system ( ②), a process of encrypting the password of the server system among the information transmitted in the process (③), and a password transfer process (④) of mutually transmitting / receiving messages generated between the client system and the server system, and Verify password received through password delivery process to drive password recovery unit Is a process (⑤), and when a password restoration drive is input in the process, a process of restoring a password (⑥) and a process of receiving a server system secret key used in the process of restoring the password are stored in a memory (⑦). ), The access password between the client system and the server system is secured.

The above objects, features, and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram of a network configuration of a packet network charging data online transmission system to which the present invention is applied, and collects a raw charging record generated at a packet switch of a packet network 400 through an X.25 line to generate a charging data file. The data collection system 100 and the charging data collection system 100 are periodically connected to determine whether there is a new charging data. After receiving the data using FTP, the charging file is transmitted to the packet network charging data online transmission system. Server network packet data charging data for the server (300) and also the server for transmitting the data transmitted from the packet network charging data online transmission system 200 for the client to transmit using FTP, the packet network charging data for the server It is configured to include an online transmission system 300.

In this case, the client packet network billing data online transmission system 200 is connected to the billing data collection system 100 through a local area network (LAN), each part 100, 200, 300 is a packet network through the X.25 line Connected with 400.

2 is a block diagram of the FTP login security apparatus of the packet network charging data online transmission system implemented by the present invention. The object of the present invention is shown among the packet network charging data online transmission system for clients and the packet network charging data online transmission system for servers. The device needed to achieve is shown.

At this time, the client packet network charging data online transmission system and server packet network charging data online transmission system will be described as a client system and a server system to facilitate the description of the specification.

First, the client system 200 includes an application client unit 10 and an FTP client unit 20. The application client unit 10 includes a host information unit 11 for extracting its own host information, and the host information unit. A communication function unit 12 which transmits the host information outputted from (11) to the application server unit 50 in the server system 300 through the signal channel S-ch, and receives a response thereof; An electronic signature unit 13 for signing a password portion of the host information of the server system 300 received from the unit 50 with its own private key, and an FTP client driver 14 for operating the FTP client unit 20. It is configured by.

In addition, the FTP client unit 20 receives the host information of the server system 300 from the FTP client driver 14 and performs FTP login to the server system 300 through the FTP channel (FTP-ch). It is configured to include a client 21.

On the other hand, the server system 300 includes a secret key input unit 30, password encryption unit 40, application server unit 50, password transfer unit 60 of the FTP server, password recovery management unit 70, and It is composed of a password recovery unit 80, the function of each unit will be described in detail as follows.

The secret key input unit 30 is configured to include a secret key input unit 31 for receiving a secret key input from the operator of the server system 300, and a secret key research unit 32 for changing the secret key.

The password encryption unit 40 encrypts the password of the server system 300 with the public key of the server system 300, and the password encrypted through the encryption function unit 41 FTP login. And an encrypted password changer 42 for changing to a form that can be transmitted over the channel FTP-ch.

The application server unit 50 receives the host information of the client system 200 from the communication function unit 12 of the application client unit 10, and receives the host information of the server system 300 to the client system 200 The communication function unit 51 for transmitting to the side, information about a client system authorized to log in stored in the server system 300, and a host information reading unit 52 for reading user information, and the communication. A client that checks whether host system of the client system 200 received through the function unit 51 has the authority to log in to the server system 300 by the client system 200 that attempts to connect to the server 200. If the client system 200 has the authority to log in to the server system 300 through the host information checker 53 and the client host information checker 53, And a host information extracting unit 54 for extracting the hopping information of the server system 300.

The password transfer unit 60 of the FTP server transfers the message transfer unit 61 for transmitting the FTP server process identifier and the encrypted password to the password recovery management unit 70, and the password decrypted from the password recovery unit 80. It comprises a receiving message receiving unit 62.

The password recovery management unit 70 transmits the message receiving unit 71 which receives the message from the password transfer unit 60 of the FTP server, the encrypted password and the process identifier of the FTP server to the password recovery unit 80. The master is configured to include a message transmitter 72 and a password recovery driver 73 for driving the password recovery unit 80.

The password recovery unit 80 receives the message from the password recovery management unit 70, the message transmission / transmission unit 81 for transmitting the decrypted password to the password transmission unit 60 of the FTP server, and the encrypted password And a password recovery section 82 for decrypting.

The process of maintaining the security of the FTP login when transmitting and processing the billing data between the client system 200 and the server system 300 configured as described above will be described in detail with reference to a flowchart for processing in various parts.

3 is a detailed flowchart illustrating a series of processes performed by the application client unit 10 in the client system of the present invention. The host name and host address of the client system stored in the client system 100 and the storage medium are shown in FIG. Extracts the host user name and the user's pseudo password, determines whether this information is correct, and then if an error occurs, such as when an error occurs or the information cannot be extracted. Log so that system users know

In this case, the pseudo password of the user is not an actual password of a specific user of the client system 200, but the access authority of the signal channel S-ch that the client system 200 and the server system 300 exchange host information with. This is the password for ---- When extraction of the determination result information is completed in the first step (A1) and step (A1), the extracted host information is 'RPC (Remote Procedure Call)' through the signal channel (S-ch). To the server system 300.

At this time, if the transmission process is performed, the following process is performed. If a problem occurs in the transmission and transmission is not performed properly, an error sentence is logged ---- the second step (A2), and then the server system 300 When a response to the host information is received from the host system, the host information of the server system 300 is received, and this process also logs the error state if the reception is not normally performed.

Here, the host information of the server system 300 is' RPC through the signal channel (S-ch) when the server system 300 is determined that the system having the authority to log in the server system to a specific user of the client system Information inputted using '---- Step 3 (A3), and then the password is signed from the host information of the server system 300 received in the above step using the secret key of the client system 200, Change the signed password back into a form that can be transmitted through the FTP channel. Step 4 (A4) and run the FTP client using the host information of the server system 300 as a parameter. In the fifth step A5, the application client 10 transmits the host information of the client system 200, and receives the host information of the server system 300.

4 is a detailed flowchart illustrating a series of processes executed by the application server unit 50 in the server system of the present invention. The host information of the client system 200 transmitted from the application client unit 10 is received. Next, the client system 200 host information stored in the server system 300 is read.

At this time, the host information of the client system 200 is stored only in the host information corresponding to the client system 200 that can log in the server system. ---- First step (B1), the host information received after the above step and The host information read is compared to identify whether the client system attempting to access the system is authorized to log in the server system. In the second step (B2), the server system if the system can log in as a result of the determination. Extracts its own host information. The host information includes a host name, a host address, a host user identification number (ID), and a password. Among these, the password is a password encrypted by the password encryption unit 40 ---- the third step (B3), The host information of the extracted server system 300 is transmitted to the client system 200 using the 'RPC' through the signal channel S-ch ---- the fourth step (B4), and the above. All the processes execute a series of operations and then judge whether or not the execution was successful. If the result of the determination is an error, this error status is logged and the error number corresponding to the error status is returned. .

5 is a detailed flowchart illustrating a series of processes performed by the password transfer unit 60 of the FTP server in the server system of the present invention, which is inserted into the password checking portion of the existing FTP server to decrypt the encrypted password. Module.

In other words, it decrypts the encrypted password and delivers it to the module that performs the existing password check.

First, the encrypted password inputted from the client system 200 is taken as a factor, and the process identifier of the FTP server is extracted and used to identify the type of message.-Step 1 (C1), message type identification is completed. When the encrypted password and the process identifier of the FTP server are transmitted to the password recovery management unit 70, and then a message is received from the password recovery unit 80 ---- the second step (C2), the password recovery unit ( 80) It checks the type of message received from 80) to determine if it is the decrypted password. If the message is decrypted, the decrypted password is transmitted to the password checking module of the existing FTP server, and if it is not decrypted, the log is logged. The process processed in the third step C3, and also in the first step C1 and the second step C2, is logged according to the state of whether the work is normally performed. .

6 is a detailed flowchart illustrating a series of processes performed by the password recovery management unit 50 in the server system of the present invention, and receives a message, that is, an encrypted password and an identifier of the FTP server from the password transfer unit of the FTP server, Create a child process for its processing.

At this time, if an error occurs in the reception and the process generation operation, it is logged, and in the process generation process, the log is repeated and the reception of the message is repeated (ⓐ)---First step (D1), and then the generated It is determined whether the child process identifier is not '0' (child process identifier! = 0), and if it is '0', the password recovery unit is driven. If the drive is successful, the message is received to receive the next message. If the operation fails, log this status and repeat the message reception.

In this case, if the identifier value is '0', it means a child process, and if not '0', it means a parent process. In the second step (D2), as a result of the determination, the identifier of the child process is '0'. Otherwise, a task of determining whether a login request is input from the client system 200 is performed, which is executed by an operation of a parent process managing the child process.

Increase the number of child processes generated above by one, and then substitute this value for a variable (called num in the present invention), and then replace the variable (called i in the present invention) with '0' to repeat the loop. ---- In the third step (D3), it is checked whether other conditions are generated from the client system 200 in addition to the currently generated child processes. It allows you to accept different conditions, which is done as follows.

That is, the number of processes currently created and the number of iterations are compared (i num), and if the number of iterations is large, the message reception is repeated again to accept another request (ⓐ). (D4) However, if the value of the number of iteration loops is small in this step, after adding 1 to the variable (i) (i ++), whether the value obtained in the web processing is greater than '0' (wait3 () 0 ) Is determined, and if it is not greater than '0', the fourth step D4 is repeated.

In this case, the weighting process is a processing function that indicates that a certain requirement has been destroyed by executing the restoration unit driving process among the currently generated child processes. Here, the weighting process indicates that one child process has been destroyed. If the weight function value is greater than -'0 ', the number of generated child processes is decreased by one and then the fourth step (D5). Repeat D4) ---- In step 6 (D6), if other requirements occur while the current child process remains in this process, the number of remaining child processes is the number of child processes generated by the next requirement. It is combined with the number of and processed.

For reference, the role of the parent process is to manage the fish offspring processor, the role of the offspring process is to start the password recovery unit, and the encrypted password and the identifier of the FTP server is used as the argument.

7 is a detailed flowchart illustrating a series of processes executed by the password recovery unit 80 in the server system according to the present invention. The password received from the password recovery management unit 70 and the identifier of the FTP server are taken as parameters.

At this time, the encrypted password is a password encrypted with the public key of the server system and the secret key of the client system, and is a password changed into a form that can be transmitted through an FTP channel (FTP-ch). Therefore, in order to restore the original password from the encrypted password, the password recovery unit 80 performs the following operations.

First, the size and special character information of the password signed with the secret key of the client system 200 are extracted from the changed password. In the first step (E1), the client system 200 is extracted from the changed password using the extracted information. The password signed with the secret key of the C) is extracted, and the public key of the client system 200 is decrypted.

At this time, the decrypted password is a password that is encrypted with a public key of the server system and changed into a form that can be transmitted through an FTP channel (FTP-ch). In the second step (E2), secondly, the password size and the special character information are extracted from the password changed in such a manner that it can be transmitted to the FTP channel while encrypted with the public key of the server system. In a third step (E3), the password encrypted using the public key of the server system is extracted from the changed password by using the extracted information, and then decrypted using the secret key of the server system.

Here, the decrypted password is a text-type password and the FTP server checks the password and decides whether to allow or disallow the FTP login. In the fourth step (E4), the decryption is normally performed. If the password is decrypted, the process identifier of the FTP server at this time is replaced with the message type. If the error occurs, the reason for the error is replaced with the message type. E5), through the above steps, the value substituted for the message type and the decrypted password are transmitted, and after the transmission, it is determined whether it is in a transmission state and terminates as it is. If the error occurs in transmission, the error log is lost. ---- The sixth step (E6), FIG. 8 is a series of operations executed by the secret key input unit 30 in the server system of the present invention. In the detailed flow chart described above, first, the common memory (not shown) is examined to check whether the server system 300 has already executed the secret key input process. If the secret key input has not been executed in F1), create a new public memory and then execute a new secret key input operation. In the second step (F2), the secret of the determination result is secreted in the step (F1). If a key has already been entered, the user will be asked if a new secret key should be entered. If not, exit. ---- Step 3 (F3). After accessing the common memory to read the key, the user receives an existing secret key from the user. In the fourth step (F4), when the secret key is input, the secret key input unit 30 uses the secret key and the common memory. Read from Judging whether or not the secret key is matched, if there is a match, jumps to execute a routine for inputting a new secret key ---- Step 5 (F5), if the secret key does not match the secret key input process If it repeats three or more times and matches during this process, it jumps to execute the routine for inputting a new secret key, and if it does not match three times or more, it executes an error log and ends. ---- In the sixth step (F6), on the other hand, the new secret key input process performed in the step F2 in detail, in order to ensure the accuracy of the secret key input, the secret key is input twice in succession and then the two secrets Comparing the keys to determine whether they match ---- step 7 (F2-1), if the determination result in the above, if the secret keys match with each other, it is stored in the shared memory and terminates ---- step 8 ( F2-2) If it does not match, the secret key input process is executed three times or more, and if there is a double match, it is stored in the shared memory. Otherwise, if the third or more iterations are executed, the error log is executed and terminated. ---- The ninth step (F2-3) and FIG. 9 are detailed flowcharts describing a series of processes performed by the password encryption unit 40 in the server system of the present invention, and it is determined whether or not a changed password exists. Pass it If no password exists, jump to the routine for generating a text password. In the first step (G1), if a password exists in the above step, it is determined whether there is a password encrypted with the public key of the server system 300. You are asked whether you want to create a changed password.

If a password is to be generated at this time, jump to the routine for generating a text password, and if it is not, terminate the step ---- In the second step (G2), if the encrypted password exists, is it generated from the password? If it is not generated after checking whether or not to generate a new changed password during the step (G2) is processed according to the response ---- the third step (G3), while the text password during the process In detail, the text password is first encrypted with the public key of the server system 300, and then the special character information and the size of the encrypted password are extracted from the encrypted password.

At this time, the size of the password of the extracted information is replaced with a variable (in the present invention, the string variable is used) .---- Step 4 (G4), and then a password encrypted using special character information among the extracted information. To a form that can be transmitted over an FTP channel, the modified password file consisting of the size of the encrypted password, the password that changed the encrypted password, and special character information. G5), through the steps described in detail as described above to solve the security problems that occur during FTP login to the server system.

As described in detail above, the present invention encrypts and changes a password used for interconnection between a server system and a client system, exchanges passwords, searches for these, and executes a login when the passwords match, so that the packet network charging data online transmission system or There is an advantage in improving their reliability when developing similar applications.

In addition, preferred embodiments of the present invention are disclosed for the purpose of illustration, those skilled in the art will be able to make various modifications, changes, additions within the spirit and scope of the present invention, such modifications and modifications belong to the following claims You will have to look.

Claims (29)

In order to maintain the login security status of the packet network charging data transmission system, the host information is transmitted to the server system to be accessed, the host information of the corresponding server system is received and signed, and the FTP client is run. A client system including a client unit, an FTP client unit which receives host information of a server system from the application client unit and performs an FTP login through an FTP channel to a server system, and receives the host information from the client system. After determining the access authority of the system, the application server unit for transmitting the host information of the server system to the client system, the password encryption unit for encrypting the password of the server system to the application server unit, and from the client system Password transfer unit of the FTP server performing the login process after passing the encrypted password and the process identifier of the server system itself to the password recovery management unit, receiving the decrypted password from the password recovery unit, and performing the login process, and password recovery process information A password recovery management unit for generating a password and driving the password recovery unit, receiving a message from the password recovery management unit, decrypting the password, and then transferring the password to the password transmission unit of the FTP server, and a secret key from the server system operator. And a server system comprising a secret key input unit for receiving an input, determining the authenticity of the secret key, and storing it in a memory. 2. The security apparatus for file transfer protocol (FTP) login of a billing data online transmission system. The communication function unit of claim 1, wherein the application client unit transmits a host information unit for extracting its own host information, and host information output from the host information unit to an application server unit in a server system through a signal channel, and receives a response thereof. And an electronic signature unit for signing a password portion of the host information of the server system received from the application server unit with its own secret key, and an FTP client driving unit for operating the progenitor FTP client unit. Secure device for File Transfer Protocol (FTP) login. The communication server of claim 1, wherein the application server unit receives the host information of the client system from the communication function unit of the application client unit, and transmits the host information of the server system to the client system, and logs in the server system. The client system which checks the information on the authorized client system, the host information reading unit for reading the user information, and the host information of the client system received through the communication function unit, logs in to the server system. If the client system is a system that has the authority to log in to the server system through the client host information inspection unit that checks whether or not the user is authorized to do so, and extracts the host information of the server system. Host Information extracted billing data file transfer protocol (FTP) security device log in online delivery system characterized in that comprises section. The encryption password of claim 1, wherein the password encryption unit encrypts the password of the server system with the public key of the server system, and an encrypted password for changing the password encrypted through the encryption function into an FTP login channel. Security apparatus for file transfer protocol (FTP) login of billing data online transmission system, characterized in that it comprises a change unit. The password recovery unit of claim 1, wherein the password recovery management unit drives a message reception unit for receiving a message from the password transfer unit of the FTP server, a message transmission unit for transmitting an encrypted password and a process identifier of the FTP server to the password recovery unit, and a password recovery unit. And a password recovery driving unit configured to secure the file transfer protocol (FTP) login of the billing data online transmission system. After transmitting the host information and the pseudo password of the client system to the server system, receiving and processing the server system information for the response (①), and receiving the information and the pseudo password transmitted in the above process, Thereafter, transmitting the host information and the encrypted password of the server system corresponding to the request to the access client system (②), encrypting the password of the server system among the information transmitted in the process (③), and the client Password transmission process (④) for transmitting / receiving messages generated between a system and a server system, a process of driving a password recovery unit by checking a message received through the password transmission process (⑤), and a password in the process If restoration drive is input, the process of restoring a password (6), and In the process of restoring a word, the server system secret key is input and stored in a memory (⑦) to secure the connection password between the client system and the server system. How to secure File Transfer Protocol (FTP) login. The method of claim 6, wherein the process (1) extracts a host name, a host address, a host user name, and a pseudo password of the user stored in the client system and the storage medium, and confirms that the information is correct. And a second step of transmitting the extracted host information to the server system through a signal panel when the extraction of the determination result information is completed in the first step, and then the host information from the server system. A third step of receiving the host information of the server system side when the response is received, and signing a password using the secret key of the client system among the host information of the server system received in the above step, and again signing the signed password on the FTP channel. A fourth step of changing to a form that can be transmitted through; and the received server system And a fifth step of driving the FTP client unit using the host information as a factor. The method of securing a file transfer protocol (FTP) login of an online billing data transmission system. 8. The method of claim 7, wherein the pseudo password of the user in the first step is not a real password of a specific user of the client system, but a password for examining access rights of a signaling channel for transmitting and receiving host information between the client system and the server system. A security method for file transfer protocol (FTP) login of billing data online transmission system. 8. The method of claim 7, wherein the host information on the server system side transmitted in the second step is transmitted only when it is determined that the server system is a system that a specific user of the client system has the authority to log in to the server system. Security method of file transfer protocol (FTP) login of billing data online transmission system. The method according to claim 7, wherein in the steps (1, 2, 3), if an error occurs during the information extraction operation, the transmission of the client host information, and the operation of receiving the server host information, the error state is logged. A method of securing a file transfer protocol (FTP) login of an accounting data on-line transfer system, wherein the user is informed of an error condition. The method according to claim 6, wherein the step (②) includes receiving host information of the client system transmitted from the application client unit, and then reading client system host information stored in the server system, and reading the received host information and the received host information. Comparing the entered host information to identify whether the client system attempting to access the system is authorized to log in to the server system, and if the system is able to log in as a result of the determination, the server system extracts its host information, A method of securing a file transfer protocol (FTP) login for a billing data online transmission system, comprising the step of transmitting it to a client system. The file transfer protocol (FTP) of the billing data online transmission system of claim 11, wherein the client system host information stored in the server system stores only host information corresponding to a client system capable of logging in to the server system. ) Secure method of login. 12. The method according to claim 11, wherein each of all of the processes is performed after executing a series of operations, and determining whether the execution is normally performed. If an error occurs as a result of the determination, the error corresponding to the error state is logged while the error is generated. A method of securing a File Transfer Protocol (FTP) login for a billing data online transfer system, comprising returning a number. The method of claim 6, wherein step (3) comprises: a first step of determining whether or not a changed password exists and executing a routine of generating a text password if no password exists; and a server system if a password exists in the first step. A second step of judging whether there is a password encrypted with the public key of the public key and whether to generate a new changed password if it does not exist, and if the password encrypted in the second step exists, Checking whether or not to generate a password, and performing a response according to a response, asking whether to generate a new changed password during the second step. How to secure File Transfer Protocol (FTP) login for the transport system. 15. The method of claim 14, wherein the generating of the text password in the first step comprises: first encrypting the text password with the public key of the server system, and then extracting special character information and the size of the encrypted password from the encrypted password; Then, the file transfer protocol (FTP) of the billing data online transmission system, characterized in that it is carried out including the step of changing the encrypted password using a special character information of the extracted information in the form that can be transmitted through the FTP channel. How to secure login. 15. The file transfer protocol (FTP) login of the billing data online transmission system according to claim 14, wherein the changed password file comprises a size of the encrypted password, a password changed from the encrypted password, and special character information. Security method. The method of claim 6, wherein the step (4) takes an encrypted password input from the client system as a parameter, extracts a process identifier of the FTP server, and uses it to identify the type of message, and message type identification is completed. When the encrypted password and the process identifier of the FTP server are transmitted to the password recovery management unit, receiving a message from the password recovery unit, and checking the type of the message received from the password recovery unit to determine whether it is a decrypted password. And transmitting the decrypted password to the password checking module of the FTP server if the message is a decrypted message. 18. The method of claim 17, wherein each of all the processes is performed after executing a series of operations, and determining whether or not the execution is normally performed. If an error occurs as a result of the determination, the error corresponding to the error state is logged while the error is generated. A method of securing a file transfer protocol (FTP) login of a billing data on-mean transmission system, comprising returning a number. 7. The method of claim 6, wherein the step (5) receives an encrypted password and a message which is an identifier of the FTP server from the password transfer unit of the FTP server and generates a child process for processing thereof, and then whether the current process is a child process. Checking whether the parent process is an identifier or not, driving a password recovery unit if it is a child process, and if the parent process is determined as the above step, managing a currently generated child process while continuously requesting login from a client system; Performing the operation of judging whether a request is being made, and if there is a request, examining the current state of extinction of the descendant process and accepting an input request. (FTP) Sign In Way. 20. The method according to claim 19, wherein after executing each operation in the step of generating the child process and driving the pass-in restoring unit, it is determined whether or not the execution is normally performed. Method of securing a file transfer protocol (FTP) login of the billing data online transmission system, characterized in that for logging. The billing data online of claim 19, wherein whether to identify whether the current process is a child process or a parent process is recognized as a child process if the identifier is '0' and if the value is not '0'. How to secure File Transfer Protocol (FTP) login for the transport system. 20. The method of claim 19, wherein the step of managing the currently created child process compares the number of processes currently created with the number of iterations of the management step, and if the number of iterations is large, receives a message again to accept another request. In the first step of repeating, and if the comparison result shows that the value of the number of loops is small, after increasing the number of iterations, it is determined whether the value obtained in the weight processing process is greater than '0' and not greater than '0'. The second step of repeating the first step; and the first step of repeating the first step after reducing the number of generated child processes by one if the weight function value is greater than '0' as a result of the determination in the second step. A method of securing a file transfer protocol (FTP) login of an accounting data on-line transfer system, characterized in that it is executed. 23. The method of claim 22, wherein the weighting process is a processing means for examining an extinction state of a descendant process, and if there is an extinction of the descendant process, a value greater than '0' is returned, and if there is no extinction, a '0' value is returned. Security method of file transfer protocol (FTP) login of billing data online transmission system. The method of claim 6, wherein the process (6) takes an encrypted password and an identifier of an FTP server from a password recovery management unit as parameters, and then extracts the size and special character information of the password signed with the secret key of the client system from the changed password. And a second step of extracting a password signed by the secret key of the client system from the changed password using the extracted information, and starting decryption using the public key of the client system, followed by the server system. A third step of extracting the password size and the special character information from the password changed in a form that can be transmitted to the FTP channel in the encrypted state with the public key of the public key; Extract the encrypted password, which is the secret key of the server system Determining whether the decryption was performed normally by using the above step, and if the password has been decrypted, replaces the process identifier of the FTP server with the message type if the password is decrypted. A fifth step of replacing the cause of occurrence with the message type, and the value substituted for the message type and the decrypted password through the above steps; And a sixth step of executing an error log when an error occurs in the file transfer protocol (FTP) login of the billing data online transmission system. 25. The method of claim 24, wherein the password encrypted in the first step is a password encrypted with a public key of the server system, signed with the secret key of the client system, and then changed in a form that can be transmitted to the FTP channel online transmission of billing data How to secure file transfer protocol (FTP) login for your system. 25. The file transfer protocol of the billing data online transfer system according to claim 24, wherein the password decrypted in the second step is a password encrypted with a public key of a server system and changed into a form that can be transmitted through an FTP channel. ) Secure method of login. 25. The billing data online transfer according to claim 24, wherein the password decrypted in the fourth step is a password in text form, and the FTP server checks the password and uses it to determine whether or not to permit FTP login. How to secure File Transfer Protocol (FTP) login on your system. The method of claim 6, wherein step (⑦) comprises: a first step of checking a common memory to check whether a secret key input process has already been executed in the server system, and a test result secret key input has not been executed in the first step; If not, the second step of creating a new public memory and then executing a new secret key input operation, and if the secret key input has already been executed in the first step, the user is prompted to enter a new secret key. The third step of terminating; and the fourth step of accessing the common memory to read the existing secret key, and then receiving the existing secret key from the user, when the new secret key is to be input. It is determined whether or not this secret key and the secret key read from the public memory match and input a new secret key if they match. In step 5 of executing the routine, and if the determination result does not match the secret key, repeats the secret key input process three or more times. If it does not match, the method including the sixth step of performing the error log and terminates, characterized in that the execution of the file transfer protocol (FTP) login security method of the online data transfer system. 29. The method of claim 28, wherein the new secret key input process performed in the second step receives two consecutive secret keys consecutively and compares the two secret keys to determine whether the secret key is input correctly. And if the secret keys match with each other as a result of the determination, storing and ending them in the shared memory, and if not, executing the secret key input process three times or more and storing them in the shared memory if there is a double match. Otherwise, if the repetition is performed three or more times, executing an error log and terminating the error log, wherein the file transfer protocol (FTP) login of the billing data online transmission system is executed.

Images