KR100482407B1 - Method, Device and System for performing authentication by using card information - Google Patents

Abstract

The present invention relates to a method, apparatus, and system for performing authentication using card information. More particularly, the present invention can provide an integrated authentication service using card information, and also provides a payment service at a plurality of sites using such authentication results. And inventions capable of providing additional services such as mailing services. In the authentication service providing method according to the present invention, using the wireless tag recognition means, reading the authentication information from the card equipped with a radio frequency identification tag possessed by the user, transmitting the read authentication information to the card company server, authentication Receiving and displaying the authentication approval information from the server, Receiving and displaying the CP (Contents Provider) list information from the authentication server according to the execution command of the web browser, and displaying on the screen, CP (Contents Provider) Receiving the selection information for the SIP server in any one of the list, and transmitting to the authentication server, and using the authentication approval information and logging in to the SIP server corresponding to the selection information.

Description

Method, device and system for performing authentication by using card information}

The present invention relates to a method, an apparatus, and a system for performing integrated authentication using card information. More particularly, the present invention can not only provide an integrated authentication service using card information, but also uses a plurality of authentication results. It relates to an invention that can automatically log in to a CP (Contents Provider) server and provide additional services such as payment service and mailing service.

At present, according to the development of the system and the network environment, the Internet has become a necessary procedure in Korea, and due to the popularization of the Internet, the user has subscribed to various sites and uses the Internet. Most web sites categorize services on their web sites into members and non-members to provide differentiated services. Accordingly, users subscribe to membership and receive contents, services, and the like.

However, it is a cumbersome process for the user to go through the authentication process by inputting ID and password for each site to be accessed. That is, the user is inconvenient to remember all the ID and password of the subscribed sites and hassle of having to go through a re-login process that can not be a day.

In addition, the sites require membership in order to provide a service, and indiscriminate exposure of personal information generated during the membership registration process is a serious social problem. In addition, there are many cases where it is unclear whether the site is subscribed to, unless it is frequently accessed due to the subscription of various sites.

In order to eliminate this inconvenience, there have been several attempts to unify or share the authentication process by sharing members. Hereinafter, an existing member sharing method will be described with reference to FIGS. 1A and 1B.

1A is a block diagram illustrating a system for sharing members using a common member database.

Referring to FIG. 1A, a system using a common member database consists of a terminal 100, multiple servers 120, and a shared member database 125, where the terminal 100 and multiple servers 120 are connected to the Internet 110. Is connected via the multi-server 120, and includes a plurality of sites (120-1, 120-2, 120-3 .....).

That is, the existing multiple server 120 is configured to share and use the member database 125, and may search the member database to perform authentication for a user.

The existing system sharing a member using a common member database accesses one server and then moves to the next server. When the user wants to connect to the second server linked to the homepage of the first server, the first server may perform authentication by encrypting user identification information of the user and transmitting it to the second server.

However, even with the above method, not only the problem of exposing member information can be eliminated, but the second server does not solve the problem of performing a separate authentication procedure.

1B is a view showing a member sharing method according to another existing embodiment.

Referring to FIG. 1B, after performing authentication at one authentication server, the first server may encrypt the social security number of the user according to a preset method, and then transmit it to the second server in combination with the member ID of the user. The second server does not query the member database using the member ID and password of the user as in the prior art.

That is, the link-connected second server proceeds to decrypt the combination code transmitted by the first server. As a result, the second server generates a social security number of the user and proceeds to determine whether the generated social security number is valid. Since the above-described second member authentication process of the second server does not access the member database but performs the time (CPU) operation according to the selected calculation method, unlike the prior art, excessive database query traffic for member authentication is not required. Do not.

Therefore, once the user ID is authenticated while the user connects to the first server, when the user wants to link to a plurality of second and third servers using the shared member database, member authentication can be promptly performed. However, this method does not only require a procedure for entering a subscriber ID and password, but also eliminates the risk of indiscriminately exposing personal information to multiple sites.

In addition, the above-mentioned authentication method through the shared member is merely proposed to simplify the authentication process in a plurality of sites, and after performing the authentication process, it is necessary to input cumbersome payment approval information for additional services such as payment. There is discomfort.

Therefore, the present invention has been made to solve the above problems, and after passing through the authentication process through the authentication server, a method, apparatus and system for automatically logging in to a plurality of sites to provide services such as payment, mailing, etc. The purpose is to provide.

Another object of the present invention is to provide a method, apparatus, and system for performing authentication without entering a subscriber ID and password.

In addition, another object of the present invention is to provide a method, apparatus and system that can remove the risk of personal information exposed to a plurality of sites indiscriminately, and can perform a secure financial transaction.

In addition, another object of the present invention is to provide a method, apparatus and system that can block the opportunity to encounter harmful information by the youth who is not allowed to issue the card by providing an authentication procedure using the card information.

In addition, another object of the present invention to provide a method, apparatus and system that can reduce the cost required to prevent the leakage of personal information in the site that distributes the content.

In addition, another object of the present invention to provide a method and system that can be provided with a variety of services and content, while relieving the inconvenience that the consumer goes through the sign-up procedure every visit to the site, anxiety about the disclosure of personal information.

In addition, another object of the present invention is to provide a method, apparatus and system that can be used in different sites by integrally storing and operating information such as earning points, cyber money or cash.

According to an aspect of the present invention in order to achieve the above object, in the user terminal having a wireless tag recognition means in combination with the card company server, authentication server and a plurality of SIP server using the wireless tag recognition means, the user possesses Reading authentication information from a card equipped with a radio frequency identification tag, and transmitting the read authentication information to a card company server, where the card company server receiving the authentication information is generated by performing authentication on the user. Transmitting the authentication approval information to the authentication server, receiving and displaying authentication approval information from the authentication server, receiving CP (Contents Provider) list information from the authentication server, and displaying the authentication approval information on the screen; Selection information for the server on any one of the CP (Contents Provider) list Receiving and transmitting to the authentication server, wherein the authentication server transmits the authentication approval information to the SIP server corresponding to the selection information, and uses the authentication approval information to correspond to the selection information. A method of providing an authentication service for logging in to a server of at least one of the plurality of SIP servers with only the authentication approval information without the disclosure of user information, the method comprising: logging in to a server, and providing a user terminal device performing the method. have.

Here, the method is the step of transmitting the purchase request information on the goods provided by the server to the server server, wherein the server receives the payment request information corresponding to the purchase request information through the authentication server Transmitting to the card company server, receiving payment approval information corresponding to the payment request information from the card company server and generating purchase completion information using the same, and receiving the purchase completion information from the server. However, payment may be performed in the server with only the authentication approval information.

The payment request information may include information on a product name, authentication approval information, and a payment amount, and the payment approval information may include information on a card approval number, a product name, and a payment amount.

The method may further include receiving mail list information corresponding to the user from the authentication server, wherein the mail list information is received by the authentication server together with the authentication approval information from the card company server. Extracting an e-mail address corresponding to the user identification information from the authentication server; transmitting a mail information request signal from the authentication server to at least one IP server corresponding to the e-mail address; Receiving the information may be generated using the received mail information.

According to another aspect of the present invention, a card company server, which is combined with a user terminal having a wireless tag recognition means, an authentication server, and a plurality of SIP servers and holds user information, can be used by the user using the wireless tag recognition means. Receiving the authentication information from the user terminal that reads the authentication information from the card equipped with a radio frequency identification tag, carrying out authentication for the user using the authentication information and the user information to generate authentication approval information And transmitting the generated authentication information to the authentication server, wherein the authentication approval information transmitted to the authentication server is transmitted to at least one of the plurality of SIP servers to which the user terminal logs in. By performing the authentication procedure, the server can be reminded without the disclosure of user information. It is possible to provide an authentication service providing method in a card company server and a card company server apparatus using the method, wherein the authentication service is logged in at least one of the plurality of IP servers.

The method may include receiving payment request information corresponding to the purchase request information through the authentication server from the receiving server, which receives the purchase request information about the product, using the payment request information. Performing a payment procedure, generating payment approval information, and transmitting the payment approval information to the IP server through the authentication server, so that payment can be performed at the IP server using only the authentication approval information. .

The payment request information may include product name, authentication approval information, and payment information, and the payment approval information may include card authorization number, product name, and payment information.

According to another aspect of the present invention, an authentication server combined with a user terminal having a wireless tag recognition means, a card company server, and a plurality of SIP servers generates authentication approval information using authentication information received from the user terminal. Receiving the authentication approval information from the card company server, authenticating the user using the authentication approval information, extracting a predetermined recipe server list, and transmitting it to the user terminal, the recipe ( Receiving selection information for the SIP server in any one of the CP (Contents Provider) list, Transmitting the authentication approval information to the SIP server corresponding to the selection information, wherein the user receives the authentication approval information Logged in to a server corresponding to the selection information using the user information, It is possible to provide an authentication service providing method and an authentication server apparatus using the method, which are logged in at least one of the plurality of SIP servers without the disclosure of the authentication approval information.

Here, the authentication information is extracted from the card with the radio frequency identification tag possessed by the user by using the radio tag recognition means provided in the user terminal.

The method may further include receiving payment request information generated by the SIP server corresponding to the purchase request information received from the terminal, transmitting the payment request information to the card company server, the card company server. Receiving payment approval information corresponding to the payment request information from the step and transmitting the payment request information to the server, the payment may be performed in the server with only the authentication approval information.

In addition, the payment request information may include information on a product name, authentication approval information and payment amount, and the payment approval information may include information on a card approval number, a product name, and a payment amount.

The method may further include receiving mail list information corresponding to the user from the authentication server, wherein the mail list information is received by the authentication server together with the authentication approval information from the card company server. Extracting an e-mail address corresponding to the user identification information from the authentication server; transmitting a mail information request signal from the authentication server to at least one IP server corresponding to the e-mail address; Receiving the information may be generated using the received mail information.

According to another aspect of the present invention, in an authentication system including a user terminal having a wireless tag recognition means, a card company server, an authentication server, and a plurality of SIP servers, one of the plurality of SIP servers is configured to perform the authentication. Receiving authentication approval information corresponding to the user terminal from a server, wherein the user terminal selects any one of the CPs (CP, Contents Provider) list information received from the authentication server, thereby Accessing a server, and performing authentication on the user terminal using the authentication approval information. The authentication approval information using the wireless tag recognition means, reading the authentication information from the card equipped with a radio frequency identification tag possessed by the user, transmitting the read authentication information to the card company server, the authentication information The card company server having received the information is stored in the authentication server, including transmitting the authentication approval information generated by performing authentication on the user to the authentication server, and the plurality of the plurality of authentication information is provided only by the authentication approval information without disclosure of user information. An authentication service providing method for logging in to at least one of the IP servers, and a IP server apparatus for performing the method may be provided.

Here, the authentication information may be extracted from a card provided with a radio frequency identification tag possessed by a user by using the radio tag recognition means provided in the user terminal.

The method may further include receiving purchase request information about a product provided by the SIP server from the terminal, transmitting payment request information corresponding to the purchase request information to the card company server through the authentication server. Receiving payment approval information corresponding to the different payment request information from a card company server, and generating purchase completion information corresponding to the payment approval information, and transmitting the generated payment completion information to the user terminal. Payment can be performed at the server.

The payment request information may include information on a product name, authentication approval information, and a payment amount, and the payment approval information may include information on a card approval number, a product name, and a payment amount.

The method may include receiving a mail information request signal including an email address from the authentication server, extracting mail information corresponding to the email address, and transmitting the extracted mail information to the authentication server. However, the authentication information may generate mail list information by using mail information received from at least one SIP server, and transmit the mail list information to the user terminal.

An authentication system according to another aspect of the present invention includes a card having a radio frequency identification tag storing authentication information, radio frequency recognition means for reading authentication information stored in the radio frequency identification tag, and the radio frequency identification means. And transmitting the authentication information read in the radio frequency identification tag to the card company server means, receiving a recipe list from the authentication server means, and then selecting any one of the recipe servers from the CP (Contents Provider) list. User terminal means for receiving information and transmitting the information to the authentication server, the user terminal means is connected via the Internet, and after receiving the authentication approval information to the card company server means, and generates the recipe list to the user terminal Transmit to the server corresponding to the selection information. The authentication server means for transmitting authentication approval information and the user terminal means and authentication server means are connected via the Internet, and after receiving authentication approval information corresponding to the user terminal from the authentication server, the authentication approval information is used. Including at least one SIP server means for performing authentication for the user terminal, it is possible to log in to at least one of the plurality of IP server means of the plurality of IP server means only with the authentication approval information without the disclosure of user information.

Here, the wireless tag recognition means is a transmitter for generating and transmitting an authentication information request signal to the card, a receiver for receiving authentication information stored in the radio frequency identification tag corresponding to the authentication information request signal, and connected to the transmitter and the receiver. It may include a control unit for controlling the antenna unit, the transmitting unit and the receiving unit, the signal processing so that the user terminal device can recognize the received authentication information.

The control unit includes a processor and a memory, and the transmitter includes a signal generator, a modulator, a power amplifier, and a tuning circuit, and the receiver includes a detector, a first filter, an amplifier, and a second filter. can do. The first filter part may be a band pass filter, the second filter part may be a band stop filter, and a notch filter may be inserted between the first filter part and the amplification part. The wireless tag recognition apparatus may be installed in a mouse provided in the user terminal means.

In addition, the user terminal means transmits the purchase request information for the goods provided by the server server means to the server server means, and receives the purchase completion information corresponding to the purchase request information from the server server means, The server means generates payment request information corresponding to the purchase request information to the authentication server means, generates purchase completion information corresponding to the payment request information received from the authentication server means, and transmits to the user terminal means. The authentication server means transmits the payment request information received from the server server means to the card company server means, and transmits the payment approval information received from the card company server means to the server server means. Number from the authentication server means By generating payment approval information corresponding to a new payment request signal and receiving the generated payment approval information to the authentication server, payment may be performed at the sippy server using only the authentication approval information.

Here, the payment request information may include information on a product name, authentication approval information, and payment amount, and the payment approval information may include information on a card approval number, a product name, and a payment amount.

The authentication server means receives user identification information together with the authentication approval information from the card company server, extracts an e-mail address corresponding to the user identification number, and then mails the mail to at least one SIP server corresponding to the e-mail address. Transmits an information request signal, receives mail information from the SIP server, and then sends mail list information generated using the mail information to the user terminal means, wherein the IP server means sends an email address from the authentication server means. After receiving a mail information request signal including a, extracts the mail information corresponding to the email address, and transmits the extracted mail information to the authentication server. Here, the authentication information is preferably a card number.

Hereinafter, a preferred embodiment of an authentication performing method, apparatus and system using card information according to the present invention will be described in detail with reference to the accompanying drawings.

Figure 2a is a block diagram showing the overall configuration of an integrated authentication system according to an embodiment of the present invention.

The present invention performs a single authentication procedure through the authentication server, and then automatically authenticates to a plurality of sites, that is, CP (Contents Provider) servers coupled to the authentication server, to provide services such as payment and mailing. And relates to a system, and relates to an invention that can perform authentication using only authentication approval information, not sharing subscriber information.

2A, an integrated authentication system according to an exemplary embodiment of the present invention includes a wireless tag card 215 including a radio frequency identification tag, a user terminal 200, an authentication server 240, a card company server 230 and CP (Contents Provider) server 220, the component is connected through the Internet (230). In addition, the CP (Contents Provider) server 220 may be configured of a plurality of CP (Contents Provider) servers 220-1, 220-2, 220-3, .....

The user terminal 200 includes a wireless tag recognition device, and according to an embodiment of the present invention, the wireless tag recognition card may be installed in a mouse 210 provided in the user terminal 200.

Of course, the wireless tag card 215 according to the present invention can have a function such as a traffic card function and medical insurance card access control card in addition to the basic personal information.

The wireless tag card 215 may use an RFID (Radio Frequency Identification) method for recognizing data information in a non-contact manner. The wireless tag card 215 according to an embodiment of the present invention includes authentication information, and the authentication information may include personal information or card information of a user. Here, personal information refers to a name, social security number, etc., and card information refers to a card number, expiration date, and the like. Of course, the authentication information may be configured to include both personal information and card information.

Authentication approval information is generated by comparing the authentication information and the user information stored in the card company server 230. The authentication information is managed by the card company server 230, and since authentication is performed only with the authentication approval information generated by the card company server 230, the subscriber can be shared without exposing the user's personal information.

In addition, the wireless tag is composed of frequency selection, modulation (modulation) method, inductive or capacitive, data encoding method, anti-collision, etc. In particular, the wireless tag may be composed of a silicon chip, a coil, and a tuning capacitor.

In addition, the user terminal 200 includes a wireless tag recognition card according to the present invention, and the wireless tag and the wireless recognition card transmit and receive data in the following manner.

Upon receiving a request for authentication information from the wireless tag recognition card, the wireless tag sends a synchronization signal to synchronize with the wireless tag recognition card, and if the synchronization is not correct, repeatedly transmits a power signal and a synchronization signal. After matching the synchronization, authentication information is transmitted to the wireless tag recognition card.

According to the present invention, the wireless tag card is a card using a contactless wireless frequency method, and when the information is stored within 10 cm of the wireless tag recognition card that reads the card by inputting and storing information on an IC chip embedded in the card, within 0.1 seconds. The information stored on the card can be read.

Therefore, when the user terminal 200 is booted, when the user terminal 200 is booted close to the wireless tag recognition card, the user is automatically authenticated through data transmission and reception with the card company server and the authentication server by a preset program. Consists of.

The card company server 230 stores subscriber information including authentication information and payment information corresponding to the user. Thereafter, when authentication information is received from the user terminal, authentication approval information corresponding to the authentication information is generated.

The authentication approval information is irrelevant to the subscriber information of the user, and according to an embodiment of the present invention, the authentication approval information may be an authentication approval number generated in order every day. Thereafter, the authentication server 235 and the plurality of CP (Contents Provider) server (220-1, 220-2, 220-3, ....) at the time of authentication using the authentication authorization number to authenticate Perform. Therefore, by performing authentication with only the authentication approval number without sharing subscriber information, the authentication procedure can be simplified without sharing the user's personal information.

Furthermore, the card company server 230 performs payment using the authentication approval information, and then provides only payment approval information corresponding to the payment to the CP (Contents Provider) server, thereby making payment information of the user at the time of payment. Can protect.

The authentication server 240 acts as an agent for the authentication service through the card company server 230 and stores a log file of the user's authentication. In addition, the user may receive user identifier information along with authentication approval information from the card company server, and extract an e-mail address corresponding to the user to provide a mail matching service.

In other words, even if a user is not connected to a CP (Contents Provider) server that provides his / her subscribed mail service, the mail information received from a plurality of CP (Contents Provider) servers to which he / she subscribes through the authorized server is accessed. Can be provided. Also. According to an embodiment of the present invention, the wireless tag recognition card may be supplied to the authentication server 240.

CP (Contents Provider) server 220 refers to a general site that provides content on the Internet, and performs authentication with only authentication approval information without an ID and password input procedure, thereby eliminating the burden caused by authentication. Can be.

In addition, the card company server 230, authentication server 240 and CP (Contents Provider) server 220 may perform data transmission and reception on an encrypted basis.

2B and 2C illustrate a configuration and installation aspect of a wireless tag recognition card according to an exemplary embodiment of the present invention.

2B, there is also shown an embodiment in which a wireless tag recognition card according to the present invention is installed.

Since the wireless tag recognition device 270 can be implemented in a small size, the wireless tag recognition device 270 may be mounted inside a peripheral device such as a mouse 210 and connected to the user terminal 200. In addition, the wireless tag recognition device 270 is not installed in the mouse 210, and may be connected to the user terminal 200 using the USB or IEEE1394 port as a peripheral device of the user terminal 200. .

Referring to Figure 2c, the configuration of the wireless tag recognition card is shown in a block diagram. The wireless identification card according to the present invention includes a wireless tag using an RFID method. Unlike the other contact cards, the wireless identification card does not require mechanical contact because the user inserts the card, so that there is no mechanical contact, so that friction or damage is not provided. none.

The wireless tag recognition card 270 is mounted in the mouse 210 and combined with the mouse card 250. Since the mouse card 250 is the same as the existing mouse card, the description thereof will be omitted.

Referring to FIG. 2C, the wireless tag recognition card 270 according to the present invention includes a controller 275, a transmitter 280, a receiver 290, and an antenna 296.

The controller 275 may include a processor and a memory, and the transmitter 280 may include a signal generator, a modulator, a power amplifier, and a tuning circuit. The antenna unit 295 may include an antenna, and the receiver 290 may include a detector, a first filter unit, an amplifier, and a second filter unit.

In the memory according to the present invention, a predetermined program is stored to perform an authentication procedure using card information, and the processor may control a transmitter and a receiver by the program.

The signal generator periodically generates an authentication information request signal, and the generated authentication information is transmitted to the wireless identification card via a modulator, a power amplifier, and a tuning circuit. Here, the tuning circuit is used to match a synchronization signal with a radio tag included in the radio identification card.

After the authentication information received from the wireless identification card is detected through the detection unit, the authentication information is converted into a signal that can be processed by the control unit through the first filter unit, the amplifier unit, and the second filter unit.

According to an embodiment of the present invention, the first filter part may be configured as a band pass filter, and the second filter part may be configured as a band stop filter. A notch filter of about 13 MHz band may be inserted between the first filter unit and the amplifier unit.

3 is a diagram illustrating a module for each function of an authentication server according to an exemplary embodiment of the present invention.

Referring to FIG. 3, the card company server 300 according to the present invention includes an authentication module 313 and a payment module 316, and the authentication server 350 includes an authentication service module 351 and a payment service module 353. And a mailing service module 355. In addition, mail (CP, Contents) including a plurality of CP (Contents Provider) servers 370-1, 370-2, ..... providing mailing services among CP (Contents Provider) servers Provider) may further include a server (370).

When the booting is completed, the program installed in the terminal outputs a message to the user to approach the card to the wireless tag recognition card, and reads the card information when the user approaches the card to the wireless tag recognition card.

When the authentication information read from the wireless tag card is encrypted by a program set in the terminal and then transmitted to the card company server, the authentication module 313 of the card company server compares the authentication information with the card company holding information and authorizes the authentication. Determine whether information is generated. According to a preferred embodiment of the present invention, when there is no abnormality in comparison, the final verification can be performed by receiving basic password information from the user. The authentication approval information generated as described above is transmitted to the authentication server, and the authentication service module 351 of the authentication server transmits the authentication approval information when the user terminal accesses another CP (Contents Provider) server. Allow users to log in to the CP (Contents Provider) server automatically.

In addition, the authentication server provides a list of CPs (CPs) that can be logged in with the authentication approval information, so that the user can conveniently access the CPs (CPs) server with a click.

The payment module 316 purchases a product, etc. from the CP (Contents Provider) server, performs a payment of a price corresponding to the product when requesting payment, and then generates payment approval information. Provided to server and CP (Contents Provider) server. The payment service module 353 may collectively manage cyber money, points, and the like so that the payment service module 353 may be used in the CP (Contents Provider) server as a whole.

When the mailing service module 355 receives a user identifier corresponding to the user from the card company server, the mailing service module 355 extracts an e-mail address corresponding to the user identifier, and mails CP (Contents Provider) server corresponding to the extracted e-mail address. Request mail information at 370.

A mailing content (CP) server 370 extracts mail information and transmits the mail information to the authentication server in response to the mail information request, and the mailing service module 355 of the authentication server sends the mail information. The mail information list can be generated and provided to the user. Therefore, the user accesses the authentication server even though the user does not log in to the mailing content server (CP) server 370 to which the user subscribes, and checks all the mailing content server (CP, Contents Provider) server (CP). The mail information of 370 may be provided.

The wireless tag card with the radio frequency identification tag according to the present invention can be supplied by the card company server, and the wireless tag recognition card can be provided by the authentication server. In addition, the radio frequency identification tag may further include personal information in addition to the basic information about the card.

As described above, the authentication system according to the present invention may perform services such as authentication service, payment service, mailing service, and messenger service as authentication approval information without exposing user's personal information.

4A is a flowchart illustrating an authentication server access procedure according to an embodiment of the present invention, and FIG. 4B is a diagram illustrating an authentication information table according to an embodiment of the present invention.

When booting a computer according to the present invention, after performing the authentication process according to the invention automatically, it can be configured to be connected to the authentication server.

Hereinafter, an authentication server access procedure according to the present invention will be described with reference to FIG. 4A.

In step 400, the user terminal reads card information from the wireless tag card possessed by the user. According to the present invention, when booting is completed, a message may be displayed on the output device of the user terminal to perform authentication using a wireless tag card.

The user terminal according to the present invention includes a wireless tag recognition card, and an authentication procedure can be performed without a keyboard input procedure through transmission and reception of the wireless tag recognition card and a wireless tag included in the card.

The apparatus for recognizing a wireless tag reads authentication information included in the wireless tag in a non-contact manner using a radio frequency identification (RFID) scheme. According to an exemplary embodiment of the present invention, the authentication information may be card approval information. Is preferably. Therefore, the authentication process can be performed using an existing card. By performing such a wireless authentication method, it is possible to shorten the authentication time.

In step 403, the terminal transmits the extracted card information to the card company information. In step 406, the card company server authenticates the user using the received card information. The authentication procedure is performed by comparing the card information held in the card company server with the card information included in the authentication information. The card company server may perform authentication for the user using only card information using a database in which card information and personal information are stored in advance. In operation 410, a password verification procedure may be further performed as an additional procedure for authentication.

Referring to FIG. 4B, an authentication information table according to an exemplary embodiment of the present invention is illustrated, and an authentication procedure may be performed by comparing read authentication information with the authentication information table.

After performing the authentication procedure as described above, the card company server generates authentication approval information. Preferably, the authentication approval information does not include personal information, and according to one embodiment of the present invention, it is calculated according to the authentication order. Number or the like.

Currently, since most users have a card, a login procedure may be performed using the authentication information included in the card. As described above, the authentication information may include personal information, and there is a risk of loss. It can be configured to include only the card information to avoid. That is, the authentication approval information generation process in the card company server according to the present invention may be performed only with the authentication information, it may be performed including a password input procedure.

In step 415, the card company server sends the generated authentication approval information to the authentication server, and in step 420, the authentication server creates a log file using the authentication approval information. In operation 425, the authentication server may transmit authentication approval information indicating that authentication was successfully performed to the user terminal. In operation 435, the user terminal may output the authentication approval information on the screen.

If the authentication is successful, it is preferable that the CP (Contents Provider) list information, which is automatically connected to the authentication server and can log in without an authentication procedure, is transmitted to the user terminal. Hereinafter, the procedure of providing CP (Contents Provider) list information will be described with reference to FIG. 4B. As described above, the user may automatically perform the authentication procedure through the card company server and the authentication server without the keyboard input procedure.

FIG. 5A is a flowchart illustrating a CP access method according to an embodiment of the present invention. FIG. 5B is a table of a CP list according to an embodiment of the present invention. .

After generating the authentication approval information in FIG. 4A and FIG. 4B, it is possible to log in to a plurality of CPs using only the authentication approval information. Here, the authentication server may be connected to the authentication server and provide a plurality of CPs (Contents Provider) lists that do not require login. A user may log in to the CP (Contents Provider) server without an authentication procedure by simply clicking an area corresponding to a desired CP (Contents Provider) server in the CP list.

Hereinafter, the authentication procedure according to the present invention will be described in detail with reference to FIGS. 5A and 5B.

In step 500, the authentication server extracts a CP list and transmits the CP list to the user terminal. Referring to FIG. 5B, a Siri List Table in accordance with a preferred embodiment of the present invention is shown. According to the present invention, the CP (Contents Provider) list is preferably provided linked to the IP address (CP, Contents Provider) list, the CP (Contents Provider) list is provided in the CP (CP, In addition to the Contents Provider (Server) name, an additional description corresponding to the Contents Provider (CP) server may be added and provided.

In operation 510, the user terminal may display the received content provider list on the output device of the terminal, and the user may move to the desired content server with reference to the list. Here, the selection of the list may be configured to be made by clicking.

If the user terminal receives the click information from the user in step 515, the user terminal transmits the click information received in step 525 to the authentication server.

In step 525, the authentication server extracts an IP address corresponding to a CP (Contents Provider) server corresponding to the click information, and in step 530, authenticates the authentication to the CP (Contents Provider) server using a different IP address. Send the information.

Upon receiving the authentication approval information, in step 535, the CP (Contents Provider) server recognizes that authentication has been performed for the user corresponding to the authentication approval information, and extracts preset content. In operation 540, the content may be transmitted to the user terminal, and in operation 545, the content may be displayed on an output device of the terminal.

6A is a flowchart illustrating a payment procedure according to an exemplary embodiment of the present invention, and FIG. 6B is a diagram illustrating a payment information table according to an exemplary embodiment of the present invention.

After logging in to a CP (Contents Provider) server through the authentication server, when the user performs a payment procedure according to the purchase of a product in the CP (Contents Provider) server, the present invention provides the authentication approval information. Using can provide a way to easily perform the payment.

Hereinafter, the payment procedure will be described with reference to FIGS. 6A and 6B.

In step 600, a user who wants to purchase a product selects a product and transmits a purchase request signal for the product to the CP (Contents Provider) server. In step 610, the Contents Provider (CP) server extracts authentication approval information corresponding to the user, and generates a payment request signal including the authentication approval information in step 613.

Referring to FIG. 6B, a data structure of a payment request signal according to an exemplary embodiment of the present invention is shown. The payment request signal is a payment request signal identifier. It includes data about authentication approval information, payment amount, purchase type, place of use, and the like. Here, the purchase form refers to information on whether or not to install.

In step 615, the CP (Contents Provider) server transmits the generated payment request signal to the authentication server, and in step 620, the authentication server receiving the payment request signal transmits the received payment request signal to the card company server.

In step 625, the card server extracts the authentication approval information from the payment request signal, and uses the card information of the user corresponding to the authentication approval information to perform a payment in response to the purchase request. In step 637, the card company server generates card authorization information corresponding to the payment, and transmits the card authorization information generated in step 635 to the authentication server.

In step 633, the authentication server may accumulate the cyber money by using the payment amount corresponding to the card approval information. The accumulated cyber money can be used not only in the CP (Contents Provider) server where the product is purchased, but also in other CP (Contents Provider) servers.

In step 635, the authentication server transmits the received card authorization information to a CP (Contents Provider) server. In step 640, the CP (Contents Provider) server generates a purchase completion signal including the card authorization information. Send to In operation 645, the user terminal displays the received purchase completion information on the output device of the user terminal.

7A is a flowchart illustrating a mailing service providing procedure according to an exemplary embodiment of the present invention, and FIG. 7B is a diagram illustrating an email address matching table according to an exemplary embodiment of the present invention.

The authentication server according to the present invention may include a user identifier in authentication approval information and provide a mailing integration service for a user in the user identifier. Here, the user identifier may be any identifier unique to the user, such as a user's ID, social security number, and card number.

According to the present invention, the authentication server includes at least one email address corresponding to the user identification in advance, and mail information for the user through transmission and reception of mail information with a CP (Contents Provider) server corresponding to the email address. Can be provided. Therefore, a user can be provided with an integrated mailing service by accessing the authentication server without the hassle of checking mail information by subscribing to a plurality of CPs.

Hereinafter, a procedure of providing an integrated mailing service according to the present invention will be described in detail with reference to FIG. 7.

In step 700, the authentication server extracts a user identifier included in the authentication approval information. The authentication and payment procedure according to the present invention may be provided using only authentication approval information without identifying the user. On the other hand, the integrated mailing service according to the present invention requires an identification process for the user.

In step 710, the authentication server extracts an email address corresponding to the user identifier from the email address matching table. 7B shows an email address matching table according to a preferred embodiment of the present invention.

The mail information request signal is transmitted to a CP (Contents Provider) server corresponding to the e-mail address extracted in step 715. Here, if there are a plurality of Contents Provider (CP) servers, a mail information request signal is transmitted to the plurality of Contents Provider (CP) servers. Here, the mail information request signal includes an email address.

Upon receiving the mail information request signal in step 720, the CP (Contents Provider) server extracts an email address corresponding to the mail information request signal, generates mail information corresponding to the email address, and generates the mail generated in step 725. Send the information to the authentication server. Here, it is preferable that the mail information includes only the subject of the mail.

In step 730, the authentication server generates a mail list using mail information received from at least one CP (Contents Provider) server, and transmits the mail list generated in step 735 to the user terminal.

In step 740, the user terminal displays the received mail list, and in step 745, the user terminal receives selection information about any one mail. The selection procedure can be made in a simple manner such as a click with a mouse.

If the selection information according to the mail selection is transmitted to the CP (Contents Provider) server corresponding to the mail in step 750, the CP (Contents Provider) server extracts detailed information corresponding to the mail in step 755. In step 760, the mail detail information extracted is transmitted to the user terminal. Here, the mail detail information includes contents corresponding to the mail, attachments, and the like.

In step 765, the user terminal displays the received mail details on the output device of the user terminal, thereby completing the mailing service procedure according to the present invention.

Although the present invention has been described above based on an integrated authentication service and a payment service and a mailing service based on the integrated authentication service, the integrated authentication service may be applied to various service fields as well as the payment service and mailing service. Of course.

As described above, the present invention may not only provide an integrated authentication service using card information, but also use payment and mailing services in connection with a plurality of CP (Contents Provider) servers using such authentication results. There is an effect that can provide additional services such as. Hereinafter, the effects of the present invention will be described by dividing the user, the card company, the authentication server, and a plurality of CPs.

First, the effects of the present invention on the user side are as follows.

Since the member sharing according to the present invention is not the sharing of member information, there is no need to subscribe to the site desired by the user, and there is no need to provide personal information to the desired site. In addition, the present invention can not only prevent the leakage of personal information to prevent spam mails, but also has the effect of preventing the hacking damage by transmitting and receiving data based on the encrypted basis of the credit card.

In addition, the present invention can prevent the leakage of card information by providing only the authorization number of the card to the corresponding CP (Contents Provider) server when payment is required through shopping or the like with a credit card, and moreover, the system at home Since the card must be authenticated at the time of access, there is an effect that the teen can block access to the harmful site by the teenager when using the computer. In addition, the present invention has the effect that it is possible to remove the re-login process when connecting to another site from the site to provide the convenience of access and authentication is performed only by clicking on various sites.

In addition, the authentication server can store the user log file, and can be integrated with the operation of storing information such as points, cyber money or cash as well as card information in the wireless tag. In addition, there is an effect that the user can use the desired site by integrating and managing different cyber money and earn points of different sites.

Second, the effects of the present invention in terms of card companies are as follows.

Card companies according to the present invention can be easily recruited card users, can expect a sharp effect of the brand image. In addition, the card can be used online or offline, and licenses can be sold to other card companies, merchants can be expanded, card sales can be maximized, and the image of a leading online card company can be enhanced.

Third, the effects of the present invention in terms of CP (Contents Provider) server are as follows.

On the CP (Contents Provider) server side, we can expect to reduce the system cost for protecting existing personal information and maximize the effect of site advertisement. In addition, it is possible not only to attract new users through the use of an integrated login system, but also to maximize profits by reducing card fees through linkage with card companies.

Fourth, the effects of the present invention on the authentication server are as follows.

Authentication server according to the present invention can not only generate additional advertising revenue through the operation of the authorized certification site, it can also increase the company awareness. In addition, the authentication server according to the present invention can be grown into a portal site by providing a search engine function.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the invention as set forth in the claims below It will be appreciated that modifications and variations can be made.

1A and 1B illustrate an existing authentication service.

Figure 2a is a block diagram showing the overall configuration of an integrated authentication system according to a preferred embodiment of the present invention.

Fig. 2B is a diagram showing an installation aspect of a wireless tag recognition card according to a preferred embodiment of the present invention.

Figure 2c is a block diagram showing the configuration of a wireless tag recognition card according to an embodiment of the present invention.

3 is a view showing a module for each function of the integrated authentication server according to an embodiment of the present invention.

4A is a flow chart illustrating an authentication procedure in accordance with one preferred embodiment of the present invention.

4B illustrates an authentication information table according to an embodiment of the present invention.

Figure 5a is a flow chart showing a CP (Contents Provider) server access procedure according to an embodiment of the present invention.

5B is a table of a series of lists according to one preferred embodiment of the present invention.

Figure 6a is a flow chart showing a payment procedure according to an embodiment of the present invention.

Figure 6b is a diagram showing a payment information table according to an embodiment of the present invention.

7A is a flowchart illustrating a mailing service providing procedure according to an embodiment of the present invention.

7B illustrates an email address matching table in accordance with one preferred embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

200: user terminal

215: Wireless Tag Card

220: CP (Contents Provider) server

230: card company server

240: authentication server

270: Wireless Tag Recognition Card

275 control unit

280: transmitter

290: receiver

296: antenna unit

Claims (39)

A method for providing an authentication service in combination with a card company server, an authentication server, and a plurality of SIP servers in a user terminal having a wireless tag recognition means, (a) using the radio tag recognition means, reading authentication information from a card equipped with a radio frequency identification tag possessed by a user; (b) transmitting the read authentication information to a card company server, wherein the card company server receiving the authentication information transmits authentication authorization information generated by performing authentication on the user to the authentication server; (c) receiving and displaying authentication approval information from the authentication server; (d) receiving a CP (Contents Provider) list information from the authentication server and displaying it on a screen in response to an execution command of a web browser; (e) receiving selection information about a recipe server from any one of the contents list (CP) and transmitting it to the authentication server, wherein the authentication server sends to the recipe server corresponding to the selection information; Send the authentication approval information; (f) logging into a SIP server corresponding to the selection information using the authentication approval information; (g) transmitting the purchase request information about the goods provided by the server to the server, wherein the server sends the payment request information corresponding to the request information to the terminal through the authentication server; Transmitting to a card company server, receiving payment approval information corresponding to the payment request information from the card company server, and using the same, generating purchase completion information; And (h) after the purchase completion information is received from the server, the payment is performed in the server with only the authentication approval information Including, A method for providing an authentication service, characterized in that the user is logged in to at least one of the plurality of SIP servers without the disclosure of user authentication information. delete The method of claim 2, The payment request information Authentication service providing method comprising the information on the product name, authentication approval information and payment amount. The method of claim 2, The payment authorization information Authentication service providing method comprising the information on the card authorization number, product name and payment amount. The method of claim 2, And receiving mail list information corresponding to the user from the authentication server. The method of claim 5, The mail list information is Receiving, by the authentication server, user identification information together with the authentication approval information from the card company server; Extracting an e-mail address corresponding to the user identification information from the authentication server; Transmitting, by the authentication server, a mail information request signal to at least one SIP server corresponding to the email address; Receiving mail information from the SIP server; Authentication service providing method characterized in that it is generated using the received mail information. delete In the card company server holding the user information, in a method of providing an authentication service in combination with a user terminal having a wireless tag recognition means, an authentication server and a plurality of SIP servers, (a) receiving the authentication information from a user terminal that reads the authentication information from a card equipped with a radio frequency identification tag possessed by a user using the radio tag recognition means; (b) generating authentication approval information by performing authentication on the user using the authentication information and the user information; (c) transmitting the generated authentication information to the authentication server. (d) receiving payment request information corresponding to the purchase request information through the authentication server from the sippy server receiving the purchase request information about the product, and then using the payment request information to make a payment procedure for the product. Performing payment, generating payment approval information, transmitting the payment approval information to the IP server through the authentication server, and performing payment on the IP server using only the authentication approval information; Including, The authentication approval information transmitted to the authentication server is transmitted to at least one of the plurality of SIP servers to which the user terminal is to log in to perform an authentication procedure, so that the authentication server uses only the authentication approval information without disclosing user information. Authentication service providing method in a card company server, characterized in that the logged in to at least one of the plurality of SIP server server. delete The method of claim 9, The payment request information Authentication service providing method in the card company server, characterized in that it includes information on the product name, authentication approval information and payment amount. The method of claim 9, The payment authorization information Authentication service providing method in the card company server, characterized in that it includes information on the card authorization number, product name and payment amount. delete A method for providing an authentication service in combination with a user terminal having a wireless tag recognition means, a card company server, and a plurality of SIP servers in an authentication server, (a) receiving the authentication approval information from the card company server that generates authentication approval information by using the authentication information received from the user terminal. (b) authenticating the user using the authentication approval information. (c) extracting a predetermined recipe server list and transmitting it to the user terminal; (d) receiving selection information on the SIP server at any one of the CP (Contents Provider) list (e) transmitting the authentication approval information to the SIP server corresponding to the selection information, wherein the user is logged in to the SIP server corresponding to the selection information using the authentication approval information. (f) when the SIP server receives the generated payment request information corresponding to the purchase request information received from the terminal, transmits the payment request information to the card company server, and the payment is made from the card company server. Receiving payment approval information corresponding to the request information, and then transmitting the payment request information to the server, the payment is performed in the server with only the authentication approval information Including, A method of providing an authentication service in an authentication server, wherein the user logs in to at least one of the plurality of SIP servers without the disclosure of user information. The method of claim 13, The authentication information is And extracting from a card provided with a radio frequency identification tag possessed by a user, by using the radio tag recognition means provided in the user terminal. delete The method of claim 15, The payment request information Authentication service providing method in the authentication server comprising a product name, authentication approval information and information on the payment amount. The method of claim 15, The payment authorization information Method for providing authentication service in the authentication server, characterized in that it includes information on the card authorization number, product name and payment amount. The method of claim 13, And receiving mail list information corresponding to the user from the authentication server. The method of claim 18, Receiving, by the authentication server, user identification information together with the authentication approval information from the card company server; Extracting an e-mail address corresponding to the user identification information from the authentication server; Transmitting, by the authentication server, a mail information request signal to at least one SIP server corresponding to the email address; Receiving mail information from the SIP server; Further comprising, the authentication service providing method characterized in that it is generated using the received mail information. delete In an authentication system including a user terminal having a wireless tag recognition means, a card company server, an authentication server, and a plurality of SIP servers, in the authentication method of one of the plurality of SIP servers, Receiving authentication approval information corresponding to the user terminal from the authentication server, wherein the user terminal selects any one of the CP (Contents Provider) list information received from the authentication server, Access the server; Authenticating the user terminal using the authentication approval information; Including but not limited to. The certification approval information Reading authentication information from a card equipped with a radio frequency identification tag possessed by a user using the radio tag recognition means Transmitting the read authentication information to a card company server The card company server receiving the authentication information transmits the authentication approval information generated by performing authentication on the user to the authentication server. When the purchase request information about the product provided by the SIP server is received from the terminal, the payment request information corresponding to the purchase request information is transmitted to the card company server through the authentication server, and the different payment request information from the card company server. When receiving the payment approval information corresponding to the step of generating purchase completion information corresponding to the payment approval information, and transmits to the user terminal, the payment is performed in the server with only the authentication approval information Including is stored in the authentication server, A method for providing an authentication service in the IP server, characterized in that the user logs in to at least one IP server of the plurality of IP servers with only the authentication approval information without disclosure of user information. The method of claim 21, The authentication information is And extracting from a card provided with a radio frequency identification tag possessed by a user using the radio tag recognition means provided in the user terminal. delete The method of claim 23, wherein The payment request information Authentication service providing method in the SIP server, characterized in that it includes information on the product name, authentication approval information and payment amount. The method of claim 23, wherein The payment authorization information Method of providing an authentication service in the server, characterized in that it contains information on the card authorization number, product name and payment amount. The method of claim 23, wherein Receiving a mail information request signal including an email address from the authentication server; Extracting mail information corresponding to the email address; And Transmitting the extracted mail information to the authentication server. More, And the authentication information generates mail list information by using mail information received from at least one SIP server, and transmits the mail list information to the user terminal. delete In the authentication system, Card with radio frequency identification tag storing authentication information Radio frequency recognition means for reading authentication information stored in the radio frequency identification tag And transmitting the authentication information read in the radio frequency identification tag to the card company server means, receiving a recipe list from the authentication server means, and then randomly selecting the content from the CP list. A user terminal means for receiving selection information of one SIP server and transmitting the received selection information to the authentication server After receiving the authentication approval information from the card company server means and connected to the user terminal means, and generating the recipe list to the user terminal, the authentication approval to the SIP server corresponding to the selection information Authentication server means for transmitting information, and Connected to the user terminal means and the authentication server means via the Internet, and receives authentication approval information corresponding to the user terminal from the authentication server, and then performs authentication on the user terminal using the authentication approval information. At least one sippy server means Including, but logged in to at least one of the plurality of server server means of the server server with the authentication approval information without the disclosure of user information, The user terminal means transmits the purchase request information on the goods provided by the server server means to the server server means, and receives the purchase completion information corresponding to the purchase request information from the server server means, The server server means generates payment request information corresponding to the purchase request information to the authentication server means, and generates purchase completion information corresponding to the payment request information received from the authentication server means, the user terminal means Send to The authentication server means sends the payment request information received from the server server means to the card company server means, and transmits the payment approval information received from the card company server means to the server server means, The card company server means generates payment approval information corresponding to the payment request signal received from the authentication server means so that payment is performed at the server using only the authentication approval information, and the generated payment approval information is sent to the authentication server. Authentication system, characterized in that for receiving. The method of claim 28, The wireless tag recognition means, A transmitter for generating and transmitting an authentication information request signal to the card; A receiver configured to receive authentication information stored in the radio frequency identification tag corresponding to the authentication information request signal; An antenna unit connected to the transmitter and the receiver; And And a controller configured to control the transmitter and the receiver, and to process the signal so that the user terminal device can recognize the received authentication information. The method of claim 29, The control unit includes a processor and a memory, The transmitter includes a signal generator, a modulator, a power amplifier, and a tuning circuit. The receiver comprises a detector, a first filter, an amplifier and a second filter. The method of claim 30, Authentication system, characterized in that the first filter portion is a band pass filter. The method of claim 30, Authentication system, characterized in that the second filter portion is a band stop filter. The method of claim 30, Authentication system, characterized in that the notch filter is inserted between the first filter and the amplifier. The method of claim 28 or 29, The wireless tag recognition apparatus is installed in a mouse provided in the user terminal means. delete 36. The method of claim 35 wherein The payment request information Authentication system, characterized in that it includes a product name, authentication approval information and information about the payment amount. 36. The method of claim 35 wherein The payment authorization information Authentication system, characterized in that it contains information about the card authorization number, product name and payment amount. The method of claim 28, The authentication server means, Receiving user identification information together with the authentication approval information from the card company server, extracting an email address corresponding to the user identification number, and transmitting a mail information request signal to at least one SIP server corresponding to the email address; After receiving mail information from the server, sending mail list information generated using the mail information to the user terminal means, Said server means, Receiving a mail information request signal including an email address from the authentication server means, extracting mail information corresponding to the email address, and transmitting the extracted mail information to the authentication server. The method of claim 1, The authentication information comprises at least one of personal information or card information.