KR100578226B1 - Credit card authorization device on internet and method thereof - Google Patents

Abstract

The present invention has a front end processor in front of a system for managing intelligent network service subscriber data, and a process for receiving authentication request messages generated from various hosts on the Internet on the front end processor and requesting authentication to a system having an intelligent network service subscriber database. The present invention relates to an apparatus and method for processing in real time a postpaid card (KT-CARD service) authentication request message that occurs simultaneously on the Internet.

Description

Credit card authorization device on internet and method

1 is a block diagram illustrating an apparatus for processing a postpaid card authentication request on the Internet according to the present invention.

2 is a flowchart illustrating a method process for processing a postpaid card authentication request on the Internet according to the present invention.

<Description of Symbols for Major Parts of Drawings>

10: Internet network 11-n: user host

20: front end processor 21: connection request receiving unit

22: authentication message transmission and reception unit 23: authentication request message storage message queue

24: Message queue for storing authentication result messages

25: intelligent network system linkage

30: intelligent network system 31: authentication processing unit

32: Postpaid Card Subscriber Database

The present invention relates to an apparatus and method for processing a post-paid card authentication request on the Internet, and more particularly, a front end processor in front of a system for managing subscriber data, on which a large amount of authentication request messages are generated from various hosts on the Internet. The present invention relates to a technology for processing real-time authentication request messages generated on the Internet by receiving and requesting authentication from a system having a service subscriber database.

The post-paid card service currently provided (eg KT-CARD service) is one of the intelligent network services. After the authentication process using the 'KT-CARD' number and password on the phone, the user uses the telephone and the charge is the "KT-CARD" number. It is a postpaid service that is charged as.

Recently, with the activation of the 'KT-CARD' service and the Internet service, PC room operators, Internet commerce operators, bus card charger operators, vending machine operators, etc. are increasingly using these features of the KT-CARD service. For example, when the subscriber of the 'KT-CARD' service uses the PC room, he / she authenticates the intelligent network system using the 'KT-CARD' number and password, and then charges the usage fee to the 'KT-CARD' number. to be.

For these services, the KT-CARD service provider uses the functions and fees that authenticate the subscriber to the 'KT-CARD' service using the 'KT-CARD' number and password on the Internet as when using a telephone with the KT-CARD. We need a function to make it into a billing format.

 SUMMARY OF THE INVENTION In view of the conventional requirements as described above, an object of the present invention is to implement a method for efficiently processing a large number of post-paid card number authentication requests to an intelligent network system through the Internet.

An apparatus for processing a postpaid card authentication request on the Internet of the present invention for achieving the above object comprises: a plurality of user hosts using a postpaid card service on the Internet; A front end processor for receiving and processing an authentication request requested by the Internet network; An intelligent network system for performing authentication for the authentication request transmitted from the front end processor;

The front end processor receives a connection request generated from a plurality of user hosts using a postpaid card service connected to the Internet network, and determines a connection request receiving unit (PARENT process) for determining whether the host making the connection request is a legitimate host;

Receives the authentication request message sent by the host determined to be a legitimate user host in the connection request receiver and stores the authentication request message in the message queue for storing the authentication request message, and reads the authentication result message from the message queue for storing the authentication result message and delivers it back to the host on the Internet. Authentication message transmission and reception unit (CHILD process)

A message queue for storing an authentication request message for temporarily storing the authentication request message received by the authentication request message transmission / reception unit before being transmitted to the intelligent network system;

A message queue for storing an authentication result message for temporarily storing the authentication result of the authentication request message before transmitting the authentication result to a host on the Internet;

An intelligent network system interworking unit configured to read the authentication request message stored in the authentication request message storing message queue, transmit the authentication request message to the intelligent network system, and receive the completed message from the intelligent network system and store the message in the authentication result message storing message queue;

The intelligent network system includes an authentication processing unit for performing an authentication process for the authentication request message transmitted from the intelligent network system interworking unit;

And a subscriber database for storing subscriber data necessary for the authentication process.

In addition, the method for processing a post-paid card authentication request on the Internet of the present invention for achieving the above object, by generating a socket for communication with a host on the Internet, by setting an address to the generated socket generated on the Internet A first step of setting a communication environment to receive a connection request;

When the environment is set up, the set ports are monitored. When a connection request is input on the Internet, the path is set, and the Internet protocol (IP) address of the host requesting the connection is checked to determine whether the host is authorized. A second process of doing;

If the IP address of the connected host is an IP address for which connection is not permitted, terminating the connection, and performing a process of monitoring the port to handle another connection request generated on the Internet;

If it is determined that the IP address of the connected host is an IP address permitted to be connected, an authentication message transceiver (CHILD process) is generated to transmit and receive an authentication message using the set path, and the connection request receiver (PARENT process) A fourth step of performing a process of monitoring the port to terminate the established connection and to handle other connection requests occurring on the Internet;

A fifth step of receiving a postpaid card number authentication request message from a user host on the Internet through the authentication message transmission / reception unit (CHILD process), requesting authentication processing and setting a timer;

A sixth step of, if the requested authentication processing result message is input within the set timer value, forwarding it to the internet user host and terminating it;

If the requested authentication processing result message does not arrive from the intelligent network system within the set timer value, it is regarded as a failure, generates a timeout message, delivers it to the Internet user host, and terminates.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing an apparatus for processing a postpaid card authentication request on the Internet according to the present invention, including an internet network 10, a front end processor 20 for receiving an authentication request message requested by the internet network 10, and And an intelligent network system 30 for performing authentication on the authentication request message transmitted from the front end processor 20.

The Internet network 10 includes a plurality of user hosts 11 to n using postpaid card services.

The front end processor (20) includes a connection request receiving unit (21) for receiving authentication requests generated in the plurality of user hosts (11 to n) and determining whether the host that has made the authentication request is a legitimate host;

An authentication message transmission / reception unit 22 for receiving an authentication request message transmitted from a host determined as a legitimate user host in the connection request receiving unit 21 and requesting the intelligent network system 30 for authentication processing;

An authentication request message storage message queue 23 for temporarily storing an authentication request message received from the authentication message transmission / reception unit 22;

An authentication result message storage message queue 24 for storing an authentication result message for the authentication request message;

Interworking with the intelligent network system that reads the authentication request message stored in the authentication request message storage message queue 23 and transmits the authentication request message to the intelligent network system 30, and stores the authenticated message in the authentication result message storage message queue received from the intelligent network system. The part 25 is provided.

The intelligent network system 30 includes an authentication processing unit 31 for performing an authentication process for the authentication request message transmitted from the intelligent network system interworking unit 23;

A subscriber database 32 for storing subscriber data necessary for the authentication process is provided.

The detailed operation of each unit is as follows. For reference, the present invention will be described using 'KT-CARD' as a postpaid card.

The connection request receiving unit 21 is a kind of server process (PARENT process) that accepts a large amount of connection requests generated on the Internet for 'KT-CARD' number authentication. Each user host 1 to n on the Internet network 10 needs to request connection to a specific port previously agreed with the connection request receiving unit 21 in order to receive 'KT-CARD' number authentication.

The connection request receiver 21 accepts a connect request to a port monitored by the user, and sets a communication path with the user hosts 1 to n on the Internet network 10. When the communication path is established, the connection request receiving unit 21 compares the list of Internet Protocol (IP) addresses maintained by the IP address of the connected user hosts 1 to n.

If the IP address of the connected host is not a registered IP address, it performs a function of selecting a port to terminate the connection and handle other connection requests occurring on the Internet network 10, If the IP addresses 1 to n are registered IP addresses, a CHILD process (authentication message transceiver 22) is generated to take over the established communication path.

In this case, the authentication message transceiver 22 is a kind of 'CHILD process' generated by the connection request receiver 21.

When the handover is completed, the PARENT process (connection request receiver 21) terminates the established connection with the user host on the Internet and performs a port monitoring function to process other connection requests generated on the Internet network 10. .

At this time, the generated CHILD process (authentication message transmission / reception unit) receives and processes the 'KT-CARD' number authentication request message while maintaining the connection with the user host on the Internet network 10. That is, the actual 'KT-CARD' number authentication process is performed between the CHILD process and the user host on the Internet network 10. The PARENT process detects a connection request and establishes a communication path. Only play the role of judgment.

Therefore, the front end processor 20 has the number of CHILD processes (authentication request message transmitting and receiving unit 22) corresponding to the number of hosts requested to be connected to the PARENT process (connection request receiving unit 21) on the Internet network 10, and each CHILD. The process can be connected one-to-one with the user host on the Internet network 10 to process the 'KT-CARD' authentication request message, so that a large number of simultaneous 'KT-CARD' number authentication requests can be processed in real time. .

Meanwhile, the authentication message transmission / reception unit 22 is a 'CHILD process' generated by the connection request receiving unit 21 as mentioned above, and the 'KT-CARD' authentication message substantially generated on the Internet. Is a process of receiving and processing a message, which is generated by the connection request receiving unit 21 whenever there is a connection request on the Internet network 10, and receives a 'KT-CARD from the user hosts 1 to n on the Internet network 10. FIG. When the number authentication request message is received, the message is sent to the authentication request message storing message queue 23 and a timer (about 10 seconds) is set, and the message processed by the intelligent network system 30 is the authentication result message storing message. Wait for the queue 24 to arrive.

If the message processed in the set timer value arrives in the message queue for storing the authentication result message, the message is read and transferred to the host on the Internet, and then terminated after the 'KT-CARD' number authentication procedure is completed. On the contrary, if an authenticated message does not arrive within the set timer value, a network failure, process failure, or processor failure occurs, and it is considered as unable to process authentication. Deliver to host 1-n and exit.

Meanwhile, the intelligent network system interworking unit 25 and the authentication processing unit 31 use 'UDP / IP communication' as a process for transmitting and receiving all messages between the front end processor 20 and the intelligent network system 30. This is because the intelligent network system 30 and the front end processor 20 are directly connected through a LAN, so that the 'TCP protocol' can be used even if the 'UDP protocol' is used. Using the 'UDP protocol' allows you to send / receive messages without setting up a separate virtual route, so it is convenient because the source code is simple and you do not have to manage the virtual route. The intelligent network system interworking unit 25 reads the authentication request message in the authentication request message storing message queue 23 and delivers the authentication request message to the authentication processing unit 31 of the intelligent network system 30, and sends the authenticated message to the intelligent network system. It is a kind of client process that performs a function of receiving from the authentication processing unit 31 of 30 and storing it in the authentication result message author message queue 24. In addition, the authentication processing unit 31 receives the 'KT-CARD' authentication message from the intelligent network system interworking unit 25 to complete the authentication procedure, and then forms a verification result message and delivers it back to the intelligent network system interworking unit 25. Process.

2 is a flowchart illustrating a process of processing a post-paid card authentication request on the Internet according to the present invention. A socket is created for TCP / IP communication, and an address is set for the socket to receive a connection request generated on the Internet. The communication environment is set to be entered, but this is repeated as many times as the number of ports to be monitored (S1).

When all of the above conditions are set, the connection request receiving unit 21 monitors the set ports using a select system call, accepts a connection request from the Internet, and checks the IP address of the host requesting the connection. It is determined whether or not the host is permitted to access (S2).

If the IP address of the connected host is an IP address for which the connection is not permitted, the determination is terminated, and the process returns to the step S2 of monitoring the port for processing other connection requests generated on the Internet (S3). If the IP address of the connected host is an IP address permitted to be connected, a CHILD process (authentication message transmission / reception unit 22) is generated to take over the established communication path to transmit and receive authentication messages, and a PARENT process (connection request reception unit 21). And) terminates the established connection with the user host on the Internet 10 and monitors the port to process other connection requests occurring on the Internet (S4) (S4).

Subsequently, the CHILD process (authentication message transmission / reception unit 22) receives a KT-CARD number authentication request message from a user host on the Internet, stores the authentication request message in the message queue 23, and simultaneously sets a timer (S5). . The authentication request message is read by the intelligent network system interworking unit 25 and transmitted to the authentication processing unit 31 of the intelligent network system 30 so as to process the authentication.

Subsequently, when the message authenticated by the authentication processor 31 within the set timer value enters the authentication result message storage message queue 24 via the intelligent network system interworking unit 25, the message is read and transmitted to the user host on the Internet. (S6). In this case, if the authenticated message does not arrive at the authentication result message storage message queue 24 within the set time (10 seconds), a failure may occur between the front end processor 20 and the intelligent network system 30 to perform authentication processing. It is assumed that there is no and generates a timeout message and delivers it to the user host on the Internet network 10 and terminates (S7).

As described in detail above, the present invention has an effect of extending the postpaid service provided only to a telephone by processing authentication for the postpaid card number when the postpaid card service is to be used through the Internet.

In addition, preferred embodiments of the present invention are disclosed for the purpose of illustration, those skilled in the art will be able to various modifications, changes, additions, etc. within the spirit and scope of the present invention, such modifications and modifications belong to the following claims You will have to look.

Claims (4)

A plurality of user hosts connected through an internet network and using a postpaid card service; A front end processor for receiving an authentication request message requested by the Internet network; An intelligent network system for performing authentication on an authentication request transmitted from the front end processor; The front end processor receives an authentication request generated from a plurality of user hosts connected to the Internet network and uses a postpaid card service, and determines a connection request receiver (PARENT process) for determining whether the host making the authentication request is a legitimate host; An authentication message transmission and reception unit (CHILD process) for receiving an authentication request message and transmitting the authentication request message to an intelligent network system for authentication processing of a host determined as a legitimate user host by the connection request receiver; An authentication request message storing message queue for storing the authentication request message received from the authentication message transmission / reception unit at a start; A message queue for storing an authentication result message for storing an authentication result message for the authentication request message; An intelligent network system interworking unit for transmitting the authentication request message stored in the authentication request message storing message queue to the intelligent network system, receiving the authenticated message from the intelligent network system, and storing the authenticated message in the authentication result message storing message queue; The intelligent network system includes an authentication processing unit for performing an authentication process for the authentication request message transmitted from the intelligent network system interworking unit; And a subscriber database for storing subscriber data necessary for the authentication process. The method of claim 1, The connection request receiving unit (PARENT process) performs a function of monitoring the port to terminate the connection and handle other connection requests generated on the Internet, if the Internet Protocol (IP) address of the connected host is not a registered IP address, If the IP address of the connected user host is a registered IP address, an authentication message transmission / reception unit (CHILD process) is generated and the communication path can be transmitted and received, and the authentication message can be transmitted and received. An apparatus for processing a postpaid card authentication request on the Internet, characterized in that a port monitoring function is performed to handle other access requests generated on the Internet. The method of claim 1, The authentication message transmission / reception unit transmits an authentication request message and sets a timer at the same time, when an authenticated message is received within the set timer value, it is transmitted to the user host to terminate the authentication procedure, and the authentication is performed within the set timer value. And if the processed message does not arrive, determining that it is a failure and transmitting a timeout message to the user host. A first method of creating a socket for communication with an Internet user host, and setting a communication environment to receive a connection request generated on the Internet by setting an address in the generated socket, and repeatedly performing the same number of ports to be monitored. Process; When the environment is all set, the second process of monitoring the set ports to accept a connection request generated on the Internet and checking an internet protocol (IP) address of the host requesting the connection to determine whether the host is authorized to access. and; If the IP address of the connected host is an IP address for which connection is not permitted, terminating the connection, and performing a process of monitoring the port to handle another connection request generated on the Internet; If the determined IP address of the connected host is an IP address that is permitted to be connected, an authentication message transmission / reception unit (CHILD process) is generated to take over the set communication path to transmit / receive the authentication message, and a connection request reception unit (PARENT process). A fourth step of performing a process of monitoring the port to terminate the established connection and to handle other connection requests occurring on the Internet; A fifth step of receiving a postpaid card number authentication message from a user host on the Internet through the authentication message transmission / reception unit and then requesting an authentication process to an intelligent network system and setting a timer; A sixth step of transmitting an authentication result message for the requested authentication request message to the Internet user host within the set timer value; And a seventh process of generating a timeout message and transmitting the generated timeout message to the internet user host if the requested authentication result message is not input within the set timer value. .

Images