KR100817707B1 - Integrated single authentication service method in network environment - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to an integrated single authentication service method in a network environment and a computer readable recording medium having recorded thereon a program for realizing the method.

2. The technical problem to be solved by the invention

The present invention provides an integrated single authentication service method and a method for allowing a user to access the site without additional authentication procedure with a single authentication to the first integrated single authentication system. To provide a computer-readable recording medium that records a program for realization.

3. Summary of Solution to Invention

The present invention provides an integrated single authentication service method in a network environment, the method comprising: checking whether a URL is already registered as a specific URL is input from a browser; Intercepting a corresponding packet according to a pre-registered URL as a result of the URL registration checking, and checking whether a storage flag of the intercepted packet is set; Checking whether there is a corresponding packet already authenticated with respect to the intercepted packet according to the storage flag being set as a result of the storage flag setting check; As a result of the pre-authenticated packet existence test, if a pre-authenticated packet exists, the pre-authenticated packet is delivered to the server corresponding to the URL to receive an authentication success response from the server. Temporarily storing the received packet and delivering the packet to a server corresponding to the URL; And storing the temporarily stored intercepted packet as an authenticated packet regarding the URL according to the authentication success response from the server as a result of the intercepted packet delivery.

4. Important uses of the invention

The present invention is used for integrated single authentication service.

Integrated single authentication, auto proxy, redirection, interception, cookies

Description

Integrated single authentication service method in network environment}             

1 is an exemplary configuration of an integrated single authentication service system to which the present invention is applied.

2 is a flow diagram of one embodiment of an integrated single authentication service method in accordance with the present invention.

FIG. 3 is a detailed flowchart illustrating an example of a processing process of inputting a URL after storing authentication information in the integrated single authentication service method according to the present invention. FIG.

* Explanation of symbols for the main parts of the drawings

11: web browser 12: integrated single authentication system

13: Web server to be authenticated

 The present invention relates to the field of user authentication technology that provides an integrated single authentication service to a user in an Internet web environment. More specifically, the site is transparent to an Internet user without additional authentication procedures. An integrated single authentication service method for enabling easy access and a computer-readable recording medium having recorded thereon a program for realizing the method.

Conventional technology is a method for eliminating the inconvenience of having to input ID and password every time a user enters a registered site when using the Internet. A mandatory input item is displayed in a state where a login page is displayed. Automatically fills in the username and password fields and allows the user to click the Submit button to access and log in by analyzing the HyperText Markup Language (HTML) source code of the login site. Internet service that obtains and stores login data, name, ID, password, ID variable, password variable, login page Uniform Resource Locator (URL), etc. In this case, the login server transmits the login data.

In other words, as the Internet is now active, many sites require membership registration, and accordingly, users use the Internet through numerous authentication processes in one day. However, the burden of ID and password management causes personal security loopholes, and authentication through cookies, which many sites currently use, eliminates multiple authentications for the site, but at least once for the site. There is a hassle for the user to authenticate individually.                         

That is, conventionally, the user had to enter his or her ID and password every time a site requiring authentication. However, this may cause a great inconvenience for the user as the number of sites increases.

Although authentication schemes in Internet sites vary from site to site, at least a common aspect is that some packet information for authentication is passed at the time of authentication. Therefore, if a predetermined system has successful authentication information and automatically provides it when necessary, it will be convenient authentication. Here, the predetermined system should not affect the user's other Internet environment, and the contents of the service provided by the site should not be changed for automatic authentication. For example, if the first splash screen of the site is not visible due to automatic authentication, this would also be a limitation. This is because advertisements, announcements, etc. are presented on the first initial screen. Therefore, in consideration of the user and the operator, a method for transparently providing a single authentication is required so as not to affect the service provided without changing the user's Internet environment.

The present invention has been proposed to solve the above problems, and allows the user to authenticate the site that the user needs to authenticate to the first integrated single authentication system with only one authentication without additional authentication procedure. It is an object of the present invention to provide an integrated single authentication service method that enables access and a computer-readable recording medium that records a program for realizing the method.

According to an aspect of the present invention, there is provided a integrated single authentication service method in a network environment, the method comprising: checking whether a URL is already registered as a specific URL is input from a browser; Intercepting a corresponding packet according to a pre-registered URL as a result of the URL registration checking, and checking whether a storage flag of the intercepted packet is set; Checking whether there is a corresponding packet already authenticated with respect to the intercepted packet according to the storage flag being set as a result of the storage flag setting check; As a result of the pre-authenticated packet existence test, if a pre-authenticated packet exists, the pre-authenticated packet is delivered to the server corresponding to the URL to receive an authentication success response from the server. Temporarily storing the received packet and delivering the packet to a server corresponding to the URL; And storing the temporarily stored intercepted packet as an authenticated packet regarding the URL according to receiving an authentication success response from the server as a result of the intercepted packet delivery.

In addition, the method of the present invention, by receiving a packet about the authentication success response from the server inserts a direction change code in the packet to configure the browser to configure the site initial screen in the successful authentication state for the URL It further comprises the step of setting.
In addition, the method of the present invention, as a result of the check whether the storage flag is set, after passing the intercepted packet to the server corresponding to the URL according to the storage flag is not set, the intercepted packet transmission result Storing the intercepted packet as an authenticated packet regarding the URL upon receiving an authentication success response from a server.

On the other hand, the present invention, in the integrated single authentication system having a processor, a function of checking whether the URL is registered in advance as a specific URL is input from the browser; A function of intercepting a corresponding packet and checking whether a stored flag of the intercepted packet is set according to a pre-registered URL as a result of the URL registration confirmation; A function of checking whether there is a corresponding packet already authenticated with respect to the intercepted packet according to the storage flag being set as a result of the storage flag setting check; As a result of the pre-authenticated packet existence test, if a pre-authenticated packet exists, the pre-authenticated packet is delivered to the server corresponding to the URL to receive an authentication success response from the server. Temporarily storing the received packet and delivering the packet to the server corresponding to the URL; And recording a program for realizing a function of storing the temporarily stored intercepted packet as an authenticated packet for the URL upon receiving an authentication success response from the server as a result of the intercepted packet delivery. Provide the medium.

In addition, the present invention, as a result of the check whether the storage flag is set, after transmitting the intercepted packet to the server corresponding to the URL according to the storage flag is not set, from the server as a result of the intercepted packet transmission A computer readable recording medium having recorded thereon a program for further realizing a function of storing the forwarded intercepted packet as an authenticated packet for the URL upon receiving an authentication success response.

The present invention seeks to resolve the authentication of a site that a user has to authenticate as a single authentication in the first integrated single authentication system. At this time, the user's environment should not be affected by the automatic authentication, and the information provided to the user should also be the same environment as without the automatic authentication.

To this end, the present invention uses an auto-proxy setting function, a login information interception function, and a redirection function.

Here, the auto-proxy setting function is a function for bringing a packet for a specific URL into an integrated single authentication system.

The login information interception function intercepts and stores the login information based on the auto-proxy setting function.

In addition, the redirection function is to show the user the first screen in the logged in state, not the screen after logging in.

Based on this function, the present invention allows an Internet user to transparently access the site without additional authentication procedure with the first successful single authentication. This provides users with better security and convenience in an Internet environment where more IDs and passwords and more frequent authentications are required.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary configuration diagram of an integrated single authentication service system to which the present invention is applied.

As shown in FIG. 1, the integrated single authentication service system provides a single integrated authentication service to a user in an Internet environment and displays a first screen in a logged-in state. The web browser 11 and the integrated computer are implemented on a user PC. It consists of a single authentication system 12 and an authentication target web server 13.

The integrated single authentication system 12 which provides integrated single authentication (automatic authentication) and the first screen upon login status between the web browser 11 and the web server 13 is implemented in various ways such as client, Java applet, plug-in, etc. There may be branches.

In order to provide a single integrated authentication service (automatic authentication service) to the user in the Internet environment and to display the first screen in the logged-in state, the integrated single authentication system 12 must be provided with the following functions.

First, there is a need for an auto-proxy configuration function that directs packets for a particular URL to the integrated single authentication system 12.

Second, based on the auto-proxy setting function, a login information interception function is required to intercept and store the login information.

A single authentication service (automatic authentication service) may be performed through the auto-proxy setting function and the login information interception function.

Third, a redirection function is needed to show the user the first screen in the logged in state rather than the screen after logging in.

The integrated single authentication system 12 intercepts only the packets related to authentication for the site desired by the user, maintains the information related to the authentication, and then transparently presents the information of the site to the user at the time of access to the site without the same authentication procedure. Provide. Of course, the initial screen in the logged-in state of the site is shown. Looking at this in detail.

Since the integrated single authentication system 12 acts as an auto-proxy when connecting to the Internet through the web browser 11, auto-proxy occurs when Internet traffic corresponding to a URL registered in advance by the user occurs. It is to go through an integrated single authentication system (12).

The integrated single authentication system 12 is set as an auto-proxy, so that it only engages when the user wants to access the site. In order for the integrated single authentication system 12 to be an auto-proxy, it must be configured by touching a specific part of the Windows registry. This leads to the integrated single authentication system 12 only if the packet corresponds to the URL desired by the user.

In addition, the integrated single authentication system 12 intercepts and stores the login information. Therefore, the integrated single authentication system 12 stores the packet used when the authentication succeeds and automatically delivers it when accessing the URL (automatic authentication).

In addition, when the integrated single authentication system 12 receives the packet after the successful authentication from the web server 13, the integrated single authentication system 12 analyzes the HTML of the received packet, and sends the code for redirection back to the original site at the last stage. Insert it. This is not to show the next screen after successful authentication, but to show the initial screen of the site in the successful authentication state.

Looking at the auto-proxy setting function in more detail, in order for the integrated single authentication system 12 to be an auto-proxy, it is necessary to adjust the Windows registry value. That is, it adjusts the values of certain parts of the registry, saves the original values to a file in advance, and resets them back to the original registry part when auto proxy is turned off. At this time, the registry to be changed needs to be adjusted in the "Default Connection Settings" portion of "SOFTWARE / MicroSoft / Windows / CuurentVersion / InternetSettings / Connection" as a subfolder of the "HKEY_CURRENT_USER" folder. And, to find out the value that needs to be changed, manually enter the URL in the "Tools / Internet Options / Connections / LAN Settings / Use Automatic Configuration Script (S)" section and change the value of the part to be changed in the registry. "Regedit" to find out. Then, the value is changed using "window32API's registry read / write function".

If most sites do not use auto-proxy and always use the proxy function such as S-HPPT, the page may appear broken. However, when using an auto-proxy, the above-described cracking phenomenon does not occur.

On the other hand, to look at the redirection function in more detail, to analyze the HTML and insert the JavaScript code, such as "location.herf = desired URL" in the next part of the execution location of the JavaScript SetCookie function. Here, the desired URL means a URL to which the user first attempted to connect. This URL value is already known to the client, so you can just insert it.

As described above, the integrated single authentication service system allows the Internet individual user to automatically log in without the need for multiple logins. Based on one successful login, all subsequent logins are automated due to the integrated single authentication system 12, which also provides a transparent environment and transparent services to the user. In other words, the integrated single authentication system 12 does not change the existing user's Internet environment, nor does it change the information obtained from the target site. As the number of sites that individual users have to log in in recent years, this integrated single authentication system 12 provides a lot of convenience and security for the user.

2 is a flow diagram of an embodiment of an integrated single authentication service method according to the present invention.                     

As shown in FIG. 2, in order to perform an integrated single authentication method, an auto-proxy function is set by first driving an integrated single authentication system (201). At this time, a specific URL for which the user wants integrated authentication is registered (202).

Then, when the user enters the URL through a web browser (203), the integrated single authentication system checks whether it is a registered URL based on the auto-proxy function (204), and if it is not a registered URL, the integrated single Processing is performed regardless of the authentication system (205), and if it is a registered URL, it intercepts the HyperText Transfer Protocol (HTTP) packet (206). In other words, since the integrated single authentication system is set as an auto-proxy and only engages when the user wants to access the site, it does not participate in any other site access.

Thereafter, after intercepting the HTTP packet of the registered URL, the integrated single authentication system checks whether the store flag is set in the intercepted HTTP packet (207), and if the store flag is not set, forwards the HTTP packet to the web server. If the storage flag is set (211), it is checked whether an authenticated HTTP packet exists (208). This is because the integrated single authentication system intercepts and stores the login information through the interception function.

As a result of the check, if the authenticated HTTP packet exists, the authenticated HTTP packet is transmitted to the web server (212). If the authenticated HTTP packet does not exist, the HTTP packet is stored and transmitted to the web server (209).

Next, it is checked whether the authentication is successful (210). If the authentication is successful, the stored HTTP packet is stored as an authenticated HTTP packet for the corresponding URL (213).                     

FIG. 3 is a detailed flowchart illustrating an example of a processing process of inputting a URL after storing authentication information in the integrated single authentication service method according to the present invention.

As shown in FIG. 3, in the integrated single authentication service method according to the present invention, when the URL is input after storing authentication information, the URL is input from the user through a web browser (301). Check whether the input URL is a registered URL (302), if it is a registered URL, intercept the HTTP packet (303), and pass the authentication information corresponding to the URL to the web server (304), HTTP packet from the web server Receive a response to (305).

Thereafter, a code for redirection to the original URL is inserted (306) in the received packet and transmitted to the web browser (307).

On the other hand, if the URL is not registered, the system is terminated.

That is, when a user attempts to access the user with the URL, the authentication related information is transmitted to the web server and automatic authentication is performed. Then, the direction change code is inserted into the packet received from the web server, and the cookie is set in the user's PC. Subsequently, when the first connection attempt is made according to the set cookie, the initial screen in the authentication state of the URL is moved.

The method of the present invention as described above may be implemented as a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes can be made without departing from the technical spirit of the present invention. It will be apparent to those of ordinary skill in Esau.

As described above, the present invention enables the Internet individual user to automatically log in without the need for multiple logins, and based on one successful login, all subsequent logins are automated due to the integrated single authentication system, and also transparent to the user. It is effective to provide transparent and transparent services.

In other words, the present invention does not change the Internet environment of the existing user due to the integrated single authentication system, and does not change the information obtained from the target site. Increasingly, this integrated single authentication system can provide a lot of convenience and security to users.

Claims (6)

In the integrated single authentication service method in a network environment, Checking whether the URL is registered according to a specific URL received from a browser; Intercepting a corresponding packet according to a pre-registered URL as a result of the URL registration checking, and checking whether a storage flag of the intercepted packet is set; Checking whether there is a corresponding packet already authenticated with respect to the intercepted packet according to the storage flag being set as a result of the storage flag setting check; As a result of the pre-authenticated packet existence test, if a pre-authenticated packet exists, the pre-authenticated packet is delivered to the server corresponding to the URL to receive an authentication success response from the server. Temporarily storing the received packet and delivering the packet to a server corresponding to the URL; And Storing the temporarily stored intercepted packet as an authenticated packet regarding the URL according to the authentication success response from the server as a result of the intercepted packet delivery. Integrated single authentication service method in a network environment including a. The method of claim 1, In response to receiving a packet regarding the authentication success response from the server, inserting a direction change code into the packet to set a browser so that a site initial screen in a successful authentication state for the URL is configured; Integrated single authentication service method in a network environment further comprising. The method of claim 1, Register a list of URLs for integrated authentication from users, Checking whether the URL input from the browser is already registered, And confirming whether an input URL from the browser is included in the registered integrated authentication target URL list. The method according to any one of claims 1 to 3, As a result of checking whether or not the storage flag is set, after forwarding the intercepted packet to the server corresponding to the URL because the storage flag is not set, receiving an authentication success response from the server as a result of the intercepted packet delivery. Storing the forwarded intercepted packet as an authenticated packet regarding the URL. Integrated single authentication service method in a network environment further comprising. In an integrated single authentication system with a processor, A function of checking whether the URL is already registered according to receiving a specific URL from a browser; A function of intercepting a corresponding packet and checking whether a stored flag of the intercepted packet is set according to a pre-registered URL as a result of the URL registration confirmation; A function of checking whether there is a corresponding packet already authenticated with respect to the intercepted packet according to the storage flag being set as a result of the storage flag setting check; As a result of the pre-authenticated packet existence test, if a pre-authenticated packet exists, the pre-authenticated packet is delivered to the server corresponding to the URL to receive an authentication success response from the server. Temporarily storing the received packet and delivering the packet to the server corresponding to the URL; And Storing the temporarily stored intercepted packet as an authenticated packet regarding the URL according to the authentication success response from the server as a result of the intercepted packet delivery; A computer-readable recording medium having recorded thereon a program for realizing this. The method of claim 5, wherein As a result of checking whether or not the storage flag is set, after forwarding the intercepted packet to the server corresponding to the URL because the storage flag is not set, receiving an authentication success response from the server as a result of the intercepted packet delivery. Storing the forwarded intercepted packet as an authenticated packet for the URL A computer-readable recording medium that records a program for further realization.

Images