KR100406292B1 - Password Transmission system and method in Terminal Communications - Google Patents

Abstract

The present invention relates to a password transmission system and a transmission method for user security and automatic authentication in terminal communication, and more particularly, access information such as a user identification number (ID) and a password required to access a terminal server. Passwords for user security and automatic authentication in terminal communication that ensures authenticity from password leaks, theft, identity fraud, and enables automatic logins to terminal servers by comparing and authenticating uniquely generated 128-bit security key values without passing through them. It relates to a transmission system and a transmission method.

Password transmission system for user security and automatic authentication in the terminal communication according to the present invention, a plurality of client computers and a web server is connected through the Internet, the password input system for transmitting and authenticating a user's password through the client computer The client computer 100 may include a password parser 110 that analyzes an ID and a password of a user logging in to execute various applications with a built-in web browser and encrypts a security key value in 128 bits. It includes; The web server 300 generates a private pair key generator 310 that generates a private pair key value and a key_security value at the request of the client computer 100. And a non-portable password and a private pair key value associated with a secret key value (Key_security), which is a secret key value received from the client computer (100). Perform a function of transmitting to 100; A member security key (Key_security) DB 400 for storing secret key values of users registered through the web server 300; When it is authenticated through the web server 300, it characterized in that it comprises an application server 200 for providing a variety of information for executing various applications.

Description

Password transmission system and method for terminal security and automatic authentication in terminal communication {Password Transmission system and method in Terminal Communications}

The present invention relates to a password transmission system and a transmission method for user authentication in terminal communication, and more particularly, to transmit access information such as a user identification number (ID) and a password required for accessing a terminal server through a network. Password transmission system for user security and automatic authentication in terminal communication that ensures reliability from password leakage, theft, identity fraud, and enables automatic login to terminal server by comparing and authenticating uniquely generated 128-bit security key values without authentication. It relates to a transmission method.

The Internet is the world's largest network connected to telecommunication networks in more than 190 countries around the world, and is connected by communication protocols such as Transmission Control Protocol / Internet Protocol (TCP / IP).

The Internet is a very widespread and general purpose network with 200 million users and about 30 million hosts connected to the Internet.

FIG. 4 is a schematic diagram of such a general Internet environment, which may include a plurality of networks, which are a number of Local Area Networks (LANs) 10 as shown in the figure, each of which preferably comprises a plurality of individual computers ( Includes 20) each one. Of course, it is obvious that a plurality of Intelligent Work Stations (IBS) coupled to the host processor may be used for each such network.

In addition, each network may include a plurality of processors connected through a communication medium, a shared memory, a shared storage device, or an interconnection network. Systems including the processor are general systems, where each individual computer (system) may be connected to storage 18 and / or output device (printer) 16 and may be equipped with a pointing device such as a mouse.

It may also include main frame computers 14, which may be preferably connected to the LAN 10 by a communication link. Main frame computer 14 may also be connected to storage device 18, which may function as a remote storage device for LAN 10. LAN 10 may likewise be connected to gateway server 12 via a subsystem control unit / communication controller and a communication link via a communication link. The gateway server 12 is preferably an IWS that functions to link the LAN 10 to the LAN 10.

In a general LAN 10, a plurality of documents or resource objects are stored in the storage device 18, and the stored resource objects are stored as main resource computers (resource managers or library services). 14).

Application service provider (ASP) to a computer connected to the internet or network requires an auto login structure that can handle web authentication and system authentication at the same time. It must be followed.

Such a user authentication system individually assigns a user identification number (hereinafter referred to as 'ID') and a password to a person who accesses an Internet site, and provides a user's personal information and contact information. In general, using the material commercially or giving special benefits to its members. The ID here indicates that the person is authorized to use the system, and the ID is verified with a password.

In addition, this user authentication system enables data communication between multiple computer systems that control a large amount of data, allowing different users to easily access their computer system resources.

5 is a conventional password input system on a conventional Internet, and FIG. 6 is a configuration diagram of a conventional general client.

As shown in FIGS. 5 and 6, the conventional password input system on the Internet logs in to the host computer 14 from the client side computer 20 to solve security problems of a general network computer system. This prevents unauthorized clients from accessing the system.

At this time, the user accesses the Internet initial access document stored in the host computer 14 by using the client computer 20, and inputs an ID and password into input fields 33 and 34 on the screen 35 to use them.

For example, when a user inputs an ID such as 'ABC12' of a predetermined number or letter combination and a predetermined password through the keyboard, 'ABC12' is displayed in the ID input field 33, and the password input field 34 ) Shows '******'.

That is, when authentication is requested by inputting an ID and password on the web browser 22, the ID and password stored in the member information DB 15 of the host computer 14 are verified to verify the match of the client computer 20. The login will be authenticated.

In addition, some password input systems on the Internet use SSL (Security Socket), a protocol used by Netscape for secure transactions over a network in order to prevent illegal information leakage or data tampering that may occur when data is transmitted on the Internet. It uses encryption technology such as Layer.

However, since the terminal password transmission and authentication system according to the prior art uses the clear-text method and the portable password method to use the encrypted technology, there is a high possibility of being leaked through the network monitoring tool. Since it is impossible, there is inconvenience of having to perform web login and system login separately.

The present invention was devised to solve the above problems, and an object of the present invention is to generate a unique security key value through a password generator and store the user identification number and password in a database on a web server, and to the client's request. Accordingly, by comparing the security key value through a password analyzer, automatic authentication to various application servers prevents any user information from leaking on the network, preventing hacking such as password leakage and theft, and simultaneously processing web authentication and system authentication. The present invention provides a password transmission system and a transmission method for user security and automatic authentication in a terminal communication to eliminate inconveniences that had to go through various steps.

In the present invention for achieving the above object, a plurality of client computers and a web server is connected via the Internet, in the password input system for transmitting and authenticating a user's password through the client computer, the client computer 100 is A password analyzer (Password Parser) 110 which analyzes the ID and password of the user logging in to execute various applications by embedding a web browser and encrypting the security key value as 128 bits; The web server 300 generates a private pair key generator 310 that generates a private pair key value and a key_security value at the request of the client computer 100. And a non-portable password and a private pair key value associated with a secret key value (Key_security), which is a secret key value received from the client computer (100). Perform a function of transmitting to 100; A member security key (Key_security) DB 400 for storing secret key values of users registered through the web server 300; When it is authenticated through the web server 300, it characterized in that it comprises an application server 200 for providing a variety of information for executing various applications.

In addition, the present invention for achieving the above object, a plurality of client computers and a web server is connected through the Internet, in the password input method for transmitting and authenticating a user's password through the client computer, the web server 300 A login step of logging in to use the application server 200 by inputting an ID and a password at 130; Extract the password for the HTTP connection in the form of text that is the ID and password to be logged in, and the Active-X Component to the web server 300 through the password analyzer 110 provided in the client computer 100 And a security key (Key_security) value transmission step of transmitting a security key (Key_security) value in the form of a Java class or an ASP (Active Server Page); Private pairs associated with each other by comparing the security key (Key_security) value transmitted from the client computer (100) in the member key (security_key) DB (400) already registered, the associated security key (Key_security) value A private pair key value and a non-portable password transmission step of transmitting a key pair key value and a non-portable password to the client 100; The transmitted private pair key value and the non-portable password are transmitted to the application server 200 through the ActiveX component of the client computer 100, and the application server 200 ), The private pair key value and the non-portable password are checked with the contents of the member security key (Key_security) DB 400, and if a match is found, the server access token is converted into a client computer ( 100 to be obtained, characterized in that it comprises an automatic authentication step for automatic authentication to the application server 200.

In addition, preferably when a new member is registered, the user accesses the web server 300, inputs an ID, a password, and various information for a normal member registration, and a private pair key (Private Pair) of the web server 300. A key_security value request step of requesting a key-security value through a key generator 310; In response to the request, a private pair key value and a secret key value are generated through a private pair key generator 310 embedded in the web server 300 and encrypted using 128 bits. And further comprising the storing step of storing in the member security key (Key-security) DB (400).

1 is a schematic configuration diagram of a password transmission system for user security and automatic authentication in terminal communication according to the present invention;

Figure 2 is a private pair key (Private Pair Key) generator that will be used during login authentication according to the present invention,

3 is an operation flowchart of a login process according to the present invention;

4 is a block diagram of a general Internet environment,

5 is a conventional password input system on the Internet,

6 is a configuration diagram of a conventional general client.

<Description of Symbols for Main Parts of Drawings>

100: Client 110: Password Analyzer

120: security key (Key_security) value 130: login

200: application server 300: web server

310: private pair key generator 400: member security key (Key_security) DB

Hereinafter, a password transmission system and a transmission method for user security and automatic authentication in terminal communication according to the present invention will be described in detail.

1 is a schematic configuration diagram of a password transmission system for user security and automatic authentication in terminal communication according to the present invention.

Referring to FIG. 1, an ID of a user who can be interconnected using TCP / IP on the Internet and has a predetermined web browser (Microsoft Internet Explorer or Netscape Netscape) to log in to execute various applications. The client computer 100 including a password parser 110 that analyzes a password and encrypts a security key value to 128 bits, and a private pair key at the request of the client 100. A private pair key generator 310 that generates a private pair key value and a security key value, and includes a private key value 310 which is a secret key value received from the client computer 100. Transmitting a non-portable password and the private pair key value associated with the client computer 100 to the client computer 100. Web server 300, a member security key (Key_security) DB 400 for storing the secret key value of the users registered through the web server 300, and various applications after the authentication through the web server 300 It consists of an application server 200 that provides a variety of information to execute.

The client 100 is a general computer. The client 100 receives an ID and a password 120 of a user who logs in 130 and receives an encrypted key-security value through the password analyzer 110. 300). The key-security value is transmitted through the web browser in the form of Active-X Compoent and Java Class or Active Server Page (ASP). At this time, the Active-X Compoent refers to a program running in the web browser, not the web server. In addition, in the case of registering the ID and password in the web server 300 for the first time, a password for HTTP connection is extracted using an encryption technique such as a conventional SSL (Security Socket Layer) in a plain text format.

In addition, the web server 300 receives the key-security value transmitted through the client computer 100 through a private pair key generator 310 in the web server 300. A secret key value (Key-security) and a private pair key (Private Pair Key) value is generated by encrypting the 128-bit (bit) and stored in the member security key (Key-security) DB (400). At this time, the generated key-security value is a non-portable password, preferably using Microsoft's encryption algorithm. Thus, the encrypted file is unknown to the general user. In addition, the encryption algorithm is not limited to the product of Microsoft Corporation.

Then, when a member makes a request for membership authentication to the application server 200 to execute an application through the client computer 100, the non-portable password (non-password) stored in the member-key DB (400) A key-security value and a private pair key value, which are -portable passwords, are requested, and are automatically transmitted to the application server 200 through the web browser.

Thereafter, the application server 200 stores the key-security value and the private pair key value, which are the non-portable passwords, as the transferred member key_securityDB ( In step 400), automatic login is executed. In other words, if it matches the contents of the member security key (Key_security) DB (400) of the web server 300, an access token is granted to automatically log in.

At this time, the verification process of the application server 200 is a digital envelope method, there is no actual application server 200 questions, the web server 300 authenticates the private pair key (Private Pair Key) value Only parts are present. Here, the application server 200 is a server that provides a variety of executable applications using HTTP, ASP.

2 is a flowchart illustrating a new member registration according to the present invention, and FIG. 3 is a flowchart illustrating a login process according to the present invention.

1 to 3, the operation of the present invention will be described in more detail. First, when a new member is registered in the web server 300, a normal member is connected to the web server 300 as shown in FIG. Enter the ID and password and various information for subscription (S10, S12). At this time, the ID and password inputted are the password for the HTTP connection by using an encryption technique such as a conventional SSL (Security Socket Layer) in a plain text format. Thereafter, a request for a key-security value of the member is made through the private pair key generator 310 of the web server 300 (S14).

In response to the request, a non-portable password, a secret key (Key-security) value and a private pair key (a private pair key generator 310 of the web server 300). It generates a private pair key value, encrypts it with 128 bits, stores it in the member security key (Key-security) DB 400, and ends the process. The process is included in an administrator tool or used for individual user registration. A predetermined process of generating a bit pair key value is completed (S16).

After completing the new member registration as described above, if the login 130 to use the application server 200 by inputting the ID and password to the web server 300 as shown in Figure 3 (S20), the HTTP Password for connection is extracted (S22), and the password provided in the client computer 100 through the form of Active-X Component and Java Class or Active Server Page (ASP) in the web browser on the client computer 100 The analyzer 110 transmits a security key (Key_security) value to the web server 300 (S24).

The Key_security value generated at this time is encrypted with 128 bits by MD5 (Microsoft's encryption algorithm) and transmitted to the web server 300.

The web server 300 receiving the security key (Key_security) value from the client computer 100 corresponds to the member security key (Key_security) DB (400) through a private pair key generator (310) The server security key (Key_security) value of the member is compared with each other and a non-portable password, the security key (Key-security) value and the private pair key (Private Pair Key) value is transmitted to the client computer 100 (S26), the client computer 100 transmits it to the application server 200 through the Active-X component of the web browser, the application server 200 is the 128-bit non-portable password ( A non-portable password key-security value and a private pair key value are checked with the contents of the member key_security DB 400 (S28), and if they match, the server access token. Client computers (100 ) To obtain (S30), the automatic authentication to the application server 200 (S32).

Therefore, the initial login process is performed through secure communication such as SSL between the web server and the client computer, and the authentication of the application server on the web prevents the leakage of information that may occur during the user information transmission process. The ID is not directly transmitted, and is automatically authenticated to various application servers 200 linked to the web server 300 at the same time.

As described above, according to the present invention, since information such as a password inputted to log in to a web server is transmitted to the network by an encryption module, hacking such as password leakage and theft is prevented in advance, and authentication to the web server is performed once. As it is automatically authenticated to various application servers linked with it, it is effective to use various information conveniently.

Claims (3)

In a password input system in which a plurality of client computers and a web server is connected via the Internet, and transmits and authenticates the user's password through the client computer, The client computer 100 includes a password parser 110 that analyzes an ID and a password of a user who logs in to execute various applications with a built-in web browser and encrypts a security key value in 128 bits. and; The web server 300 generates a private pair key generator 310 that generates a private pair key value and a key_security value at the request of the client computer 100. And a non-portable password and a private pair key value associated with a secret key value (Key_security), which is a secret key value received from the client computer (100). Perform a function of transmitting to 100; A member security key (Key_security) DB 400 for storing secret key values of users registered through the web server 300; Password authentication system for user security and automatic authentication on the terminal communication, characterized in that it comprises an application server 200 for providing a variety of information for executing a variety of applications when authenticated through the web server (300). In the password input method of connecting a plurality of client computers and a web server via the Internet, and transmitting and authenticating a user password through the client computer, A login step of logging in to use the application server 200 by inputting an ID and a password to the web server 300; Extract the password for the HTTP connection in the form of text that is the ID and password to be logged in, and the Active-X Component to the web server 300 through the password analyzer 110 provided in the client computer 100 And a security key (Key_security) value transmission step of transmitting a security key (Key_security) value in the form of a Java class or an ASP (Active Server Page); Private pairs associated with each other by comparing the security key (Key_security) value transmitted from the client computer (100) in the member key (security_key) DB (400) already registered, the associated security key (Key_security) value A private pair key value and a non-portable password transmission step of transmitting a key pair key value and a non-portable password to the client 100; The transmitted private pair key value and the non-portable password are transmitted to the application server 200 through the ActiveX component of the client computer 100, and the application server 200 ), The private pair key value and the non-portable password are checked with the contents of the member security key (Key_security) DB 400, and if a match is found, the server access token is converted into a client computer ( 100) to obtain, the password transmission method for user security and automatic authentication in the terminal communication, characterized in that it comprises an automatic authentication step for automatic authentication to the application server (200). The method of claim 2, In the case of newly registering a member, the user accesses the web server 300, inputs an ID, a password, and various information for a normal member registration, and generates a private pair key generator of the web server 300 ( Requesting a security key value (Key_security) through a key-security value (310); In response to the request, a private pair key value and a secret key value are generated through a private pair key generator 310 embedded in the web server 300 and encrypted using 128 bits. And a storing step of storing in the member security key (Key-security) DB (400).