KR100284258B1 - Password authentication method of screen saver - Google Patents

Abstract

The present invention relates to a password authentication method of the screen saver, and to prevent the theft of password and to maintain the security of the main data and all systems by authenticating the password input when the screen saver is activated through a separate password authentication server The purpose is.

The password authentication method of the screen saver of the present invention comprises the steps of: providing a password authentication server and presetting a password of the screen saver on the password authentication server; Receiving an arbitrary password while driving the screen saver; Transmitting the password input in the step to the password authentication server; Receiving a password authentication result performed at the server; And continuously driving or releasing the screen saver based on the received password authentication result.

Description

Password authentication method of screen saver

The present invention relates to a screen saver, and more particularly, to a password authentication method of the screen saver to authenticate the input password when the screen saver operation is released through a separate password authentication server.

Screen savers are widely used in personal computers in recent years, and are software that continuously converts the output screen of the monitor to prevent damage to the monitor that may occur when displaying a fixed screen for a long time.

For example, in the case where a person who uses a predetermined system having a monitor as a display device is away from work for a long time, the output screen immediately before the user is away is continuously output on the monitor. In this case, if a fixed intensity electron beam is scanned at a predetermined position for a long time, the monitor is likely to be damaged. Thus, a software such as a screen saver is required as a way to prevent such a monitor from being damaged in advance.

Therefore, the screen saver counts the elapsed time since the last input operation performed, and when the next input operation is not performed for a predetermined time, the screen saver is driven by itself and outputs an image that changes every moment like a video on the monitor.

Meanwhile, as the network develops, a data communication network including resources such as a computer, a terminal accessible to the computer, a line connecting the computer and the terminal, and a relay point installed at a predetermined position of the line, that is, the terminal itself becomes a small computer. It is being replaced and computers are becoming larger like mainframes.

Accordingly, a computer or software that collectively manages and provides information for each resource constituting the network on the network is called a server, and the computer or software that requests a service to the server is called a client.

The client-server model is a client-server model that efficiently executes a task by connecting the client and the server as described above, and the window system, which has become popular in recent years, has adopted such a model.

In the system where client and server are connected, the main data stored in the server and the system program managing each resource of the network need to be thoroughly secured, so the general clients are not allowed to access the main data and system programs of the server. This access is restricted to privileged supervisors only.

On the other hand, screen savers are also used to prevent others from tampering with the system when the user is away from work, which requires the input of a password if any user tamperes with the screen saver. This can be done by disabling the screen saver only if the correct password is entered. Therefore, only the user who enters the correct password can operate the system.

However, the password of the screen saver as described above is likely to be burnt to others who pay close attention to the input process, and accesses the system to implement the password saver code by accessing the system while the authorized user is away but the screen saver is not yet operating. It is very likely to be stolen by someone who has acquired and decoded it.

On the other hand, in the case of password stealing of the screen saver as described above, if the password is a password used by a privileged administrator working in a client-server system environment, the privileged administrator operates a screen saver and leaves the user in an illegal state. The main data and system programs of the server can be stolen or manipulated, causing massive damage.

Also, since the screen saver implementation code and the encryption code are conventionally concentrated on the client computer, when one client computer is used by several users, the screen saver used by other users when the screen saver password of one user is stolen The passwords are all at risk of being stolen.

The present invention has been made to solve the problems described above, by preventing the theft of passwords and to maintain the security of the main data and all systems by authenticating the password input when the screen saver is activated through a separate password authentication server The purpose of the present invention is to provide a password authentication method of a screen saver.

The password authentication method of the screen saver of the present invention comprises the steps of: providing a password authentication server and presetting a password of the screen saver on the password authentication server; Receiving an arbitrary password while driving the screen saver; Transmitting the password input in the step to the password authentication server; Receiving a password authentication result performed at the server; And continuously driving or releasing the screen saver based on the received password authentication result.

1 is a flowchart illustrating a password authentication method of a screen saver of the present invention;

2 is a diagram schematically illustrating a data flow between a client computer and a server for password authentication.

*** Explanation of symbols for the main parts of the drawing ***

10: client computer, 20: server for password authentication

Hereinafter, a password authentication method of the screen saver of the present invention will be described in detail with reference to the accompanying drawings.

1 is a flowchart illustrating a password authentication method of the screen saver of the present invention, Figure 2 is a diagram showing a brief flow of data between the client computer and the server for password authentication according to the application of the password authentication method of the screen saver of the present invention to be. In FIG. 2, reference numerals 10 and 20 denote client computers and servers for password authentication, respectively.

The server 20 for password authentication provided for the implementation of the present invention performs only data processing related to the authentication of the screen saver password, and as a main operation, registration of a new user, authentication of the screen saver password, and modification of the screen saver password are performed. Can be mentioned.

Therefore, as shown in FIG. 1, first, in step S10, it is determined whether a user working through the client computer 10 wants to register with the server 20 for password authentication. That is, the presence or absence of a predetermined key input set to request user registration is determined.

If the user registration request is determined as a result of the determination in step S10, the process proceeds to step S12, where the client computer 10 receives user information, that is, user ID (IDentification), an access code, and a screen saver password. Transfer to the server 20. The access code is a kind of password, and only the user whose access code is matched is allowed to communicate with the password authentication server 20 and change data.

In addition, the screen saver password is a password that is input when the screen saver is in operation. If the password matches a preset value, the screen saver password can be released to continue the operation before the screen saver is started. The screen saver password as described above may be set as one fixed password at all times or may be set as a special password implemented through a separate screen saver password implementation code. As an example of the latter, it is possible to set a preset password, for example a password that changes by date. For example, you can set the screen saver password to four numbers, but enter the number of months and days in succession for the number of days. If you add an arbitrary fixed number, such as 7 ″, the password is changed every day, which significantly reduces the risk of being stolen by others.

In a subsequent step S14 after the operation of the step S12, whether or not the user registration is successful is transmitted from the server 20 for password authentication to the client computer 10. When the user registration is successfully performed, the data input in step S12 is stored in the server 20 for password authentication and used for the screen saver password modification operation and password authentication operation.

The data input / output between the client computer 10 and the server 20 for password authentication during the operation of steps S12 and S14 as described above is shown in FIG. As shown in (a) of FIG. 2, the random number of the client is transmitted from the client computer 10 to the server 20 for password authentication, and the server is transmitted back to the client computer 10 from the server 20 for password authentication. The random number is a kind of identification code for accurately identifying a transmission / reception target in both communications to prevent a communication failure caused by a third terminal intervention.

On the other hand, if there is a request for a job other than user registration as a result of the determination in step S10, the flow advances to step S16 to determine whether the request is a request to modify the screen saver password. That is, the presence or absence of a predetermined key input set to request modification of the screen saver password is determined.

If there is a screen saver password correction request as a result of the determination in step S16, the flow proceeds to step S18, where the client computer 10 inputs a new screen saver password to be updated and set by user information, an access code and a user request. It receives and transmits to the server 20 for password authentication.

In a subsequent step S20 after the operation of step S18, whether the screen saver password modification is successful is transmitted from the server 20 for password authentication to the client computer 10. The changed screen saver password is stored in the server for password authentication 20 and used for a later screen saver authentication operation.

Data input and output between the client computer 10 and the server 20 for password authentication during the operation of step S18 and step S20 as described above is shown in FIG.

On the other hand, if there is a request other than the screen saver password modification as a result of the discrimination in step S16, the flow proceeds to step S22 to determine whether the request is a screen saver password authentication request. That is, the presence or absence of a predetermined key input set to require authentication of the screen saver password is determined.

If there is a screen saver password authentication request as a result of the determination in step S22, the flow advances to step S24, and the client computer 10 uses the screen saver password and user information input for the purpose of terminating the screen saver in operation. It transmits to the server 20 for password authentication.

In the subsequent step S26 after the operation of step S24, the screen saver password is authenticated based on the data stored in the server 20 for password authentication by performing the operation from step S10 to step S20. Is sent back to the client computer 10. Accordingly, the client computer 10 continues to drive or deactivate the screen saver according to the received authentication result.

Data input and output made between the client computer 10 and the server 20 for password authentication during the operation of steps S24 and S26 as described above are shown in FIG.

On the other hand, the server 20 for password authentication provided for the implementation of the present invention performs only data processing associated with the authentication of the screen saver password, there is a request other than the screen saver password authentication request as a result of the determination in step S22. In other words, if there is a key input other than a predetermined key set to require user registration, screen saver password modification, and screen saver password authentication, an error message is output.

The screen saver password authentication method implemented through the steps as described above is stored in the password authentication server 20, the password of the screen saver, even if the access code is the only screen saver password authentication and change is possible only because When a client computer is used by multiple users, one user's screen saver password can be prevented from stealing all other users' screen saver passwords.

In addition, even if the screen saver password is implemented as a separate password implementation code, the password implementation code is stored in the server 20 for password authentication, thereby preventing an illegal intruder from obtaining and interpreting the screen saver password implementation code.

According to the password authentication method of the screen saver as described above, the password input for the purpose of releasing the screen saver is authenticated through a separate password authentication server to prevent the theft of the password, and also to protect the security of important data and various systems. The effect is to remain effective.

Claims (4)

Providing a server for password authentication and presetting a password of a screen saver on the server for password authentication; Receiving an arbitrary password while driving the screen saver; Transmitting the password input in the step to the password authentication server; Receiving a password authentication result performed at the server; And And continuously driving or releasing the screen saver based on the received password authentication result. The method of claim 1, wherein providing a server for password authentication and pre-setting a password of a screen saver on the server for password authentication Connecting to the server; Transmitting user identification information and a predetermined password to the server; And And requesting that the predetermined password be preset as a password of the screen saver. The method of claim 1, wherein the data stored in the server is not readable by a client. The screen saver according to claim 1 or 2, further comprising a step of presetting a password for granting the right to update data stored in the server on a server for password authentication, and presenting a password that matches the set password. Password authentication method of the screen saver, characterized in that to be able to modify the password.

Images