KR100822890B1 - The Security Method for Authentication by Substitutive Symbol of the Residence Registration Number in Internet Environment - Google Patents

Abstract

The present invention relates to a security authentication procedure on the Internet, including a wireless mobile network, and more specifically, in order to determine the membership registration process or the presence of an authorized customer, in the step of requesting the input of the resident registration number as a unique identification number, the leakage of the resident registration number It prevents improper use or storage by unnecessary media by other persons (websites or private certification centers that require a request level) and prevents unnecessary storage of media in advance, and fundamentally establishes an indiscriminate management system of social security numbers that are closely related to such property rights. As a method for improving the security, it is characterized in that it provides a security method for authentication through the replacement of the social security number on the Internet.

This not only incurs excessive reorganization of the existing membership management system or new maintenance cost of the database system, but also ensures clarity of responsibility and transparency of management system in light of the trend of social leakage of personal information. It is also desirable in terms of establishing a security system and protecting personal privacy, so that the future industrial availability and ripple effect will be excellent.

Social security number, unique identification number (alternative code), personal identification number (PW), authentication center, random key generation, verification center, decryption, OTP (One Time Password)

Description

The Security Method for Authentication by Substitutive Symbol of the Residence Registration Number in Internet Environment}

1 is a schematic diagram showing the configuration of a social security number input field for a conventional authentication (real name verification) procedure.

Figure 2 is a reference diagram showing the conceptual structure of the authentication security method through the social security number replacement service according to the present invention.

Figure 3a is a block diagram showing the overall flow of the authentication security method through the social security number replacement service according to the present invention.

Figure 3b is a block diagram showing a process for a user for changing the social security number in the authentication security method through the social security number replacement service according to the present invention.

Figure 3c is a block diagram showing an embodiment of a process for a user to join a number of sites in the authentication security method through the social security number replacement service according to the present invention.

Figure 4 is a flow chart illustrating a step-by-step process of the authentication security method through a social security number replacement service according to the present invention.

The present invention relates to a service for replacing an resident registration number on the Internet. The present invention relates to the use of an internet banking service, the settlement of goods through an internet shopping mall, the registration of various websites, the investigation of data by a blog, a search engine, and the authentication of the user. The input method of the social security number, which is generally used at the required stage, has been pointed out many problems.

That is, the social security number is subject to various hacking attacks including leaking of the social security number due to security vulnerabilities of the administrator, and spoofing as a forgery technique to perturb a network environment based on sniffing or reliability such as network traffic eavesdropping. If the database of a web hosting company or a personal company that operates the server is hacked, the stored personal information, especially the social security number, is leaked, which can be used for unauthorized purposes. Not only are they at risk, but their responsibilities are unclear and realistically hacked or not recognized by security personnel, so the damage is passed on to individual members (clients or users). As the same precedent thinking overlaps, The vicious cycle of distrust of the internet environment and reluctance to enter the social security number is repeated.

In addition, if the company operates its own server and database from the point of view of the company that operates the website, the service user social security number should be used only as a verification procedure through the authentication center in the verification (authentication and payment) phase of the member. This can cause problems such as storing through the database and the database, or using it for other purposes (authorization of access to CRM or affiliates). This damage can lead to distrust and dissatisfaction with the Internet environment. .

The present invention has been made in order to solve the above problems, in the process of inputting the social security number on the Internet, the Internet service user, instead of the input of the social security number, the authentication center in real time to the corresponding website that requires the input of the social security number Check the character system mapped to the social security number that is randomly assigned through the screen provided from the authentication center, enter the character code value corresponding to the social security number accordingly, and click the OK button. The input value is transmitted to the authentication center. After confirming the integrity and identity of the resident registration number and transmitting the result to the Internet service provider, the information such as leakage of the resident registration number by hacking or the individual resident registration number of members by the service provider To be used One purpose is to provide a more secure Internet environment by controlling at the source, the specific structure thereof will be described in detail in the configuration of the invention.

In order to achieve the above object, the authentication security method through the resident registration number replacement service on the Internet according to the present invention allows a user to access a website to control membership registration, real name verification, adult authentication and other important information of an individual. A security authentication method through a social security number replacement service on the Internet for providing transparency and reliability of the leakage and processing of the input and transmission of the social security number, which may occur upon input of the required social security number, as a means for;

A start step (S0) for the user to access a website or applet (hereinafter also referred to as an "information provider") that requires authentication;

A step (S1) of displaying a screen requesting input of a social security number by the step (S0);

Resident registration number input request step (S1) is an optional step, a selection button is provided to select the conventional social security number directly into the text field, and input by the authentication security method, or has a plurality of input fields Being done;

In the case of proceeding to the method of directly inputting the resident registration number (NO) according to the above selection, which is to use the service without the security authentication is made by the non-authentication conversion (S18) and ends the process (S23) and ;

When the security authentication is selected (YES), it is selected again according to the selection method, when the mouse event of the button is generated, and when the web page is loaded when a plurality of input fields are provided, respectively. Requesting a mapping table from the authentication center (S2);

In this case, the requesting mapping table is information substituted with letters for the number generated by the authentication center by the key generator, and each time the page is updated (refreshed), the mapping table is newly rearranged. A decryption key capable of reconverting the generated mapping table to a number to distinguish each corresponding user is generated together and stored in a virtual table loaded on the memory of the authentication center server;

The transmission of the mapping table may not be smooth depending on the situation of the network, and the information provider checks the reception of the mapping code (S3);

If the reception is not normally handled, the request of the material, and the step of checking the disabled state continuously by placing a conditional statement (S15);

Step S16 of notifying (sending) the reason for the disablement when the disable state is repeated (limit of the number of repetitions by the conditional statement, TIME OUT, etc.);

The server can accumulate the incapacity of the transmission and use it as data that can grasp the propensity of the entire network.

Recording it on the server for the reason for disabling, and transmitting a notice to the user (S17);

Accordingly, using the service in a state where security authentication is not performed by non-authentication conversion (S18) and terminating the above process (S23);

In the disable processing step (S15) and repeat the mapping request step (S2) through the material, if the code reception is normally processed (recovery of the disabled state) to activate the mapping table in the user's web page or a new applet display (initial) Step (S4) to be rearranged (updating);

Step S5 of referring to the mapping table and inputting a character code corresponding to its own social security number and personal identification number (PW) in a text field;

Encrypting the characterized social security number and personal identification number (PW) (password that the user directly inputs) and personal information (real name) and transmitting the encrypted information to an authentication center (S6);

The authentication center receiving the encrypted information and performing a decryption process (S8);

The mapping table transmitted from the authentication center to the information provider in the steps S2 to S3 for the characterized social security number through the above process is made with a decryption key so that it can be converted back to the number at the time of generation. Reducing the social security number (S8) and;

The social security number secured by the certification center through the above step is compared with the real name transmitted using its own server or a separate verification center (organization) server and the national information and communication network, etc. Step S10;

If the real name confirmation is not achieved through the verification step (S9) and the authentication step (S10), the step of notifying the user name confirmation impossible information on the user's screen (S19) and the step of asking whether to retry through the disable information (S20);

If it is not accepted in the retry step (S20), it is the step of using the service (S18) in the state that the security authentication is not made by the non-authentication conversion and ends the process (S23);

If it is accepted in the retry step (S20), returning to step S5 and performing a sequential process again;

When real name verification is made through the verification step (S9) and the authentication step (S10), the authentication center may include a part or all of the social security number, a personal identification number (PW) collectively referred to as a password, and a code of the information provider. A unique identification number (letters and numbers selected and mixed) that can be used to replace the social security number through a number (pre-assigned by a contract with a certification center in advance, and the process or pattern given may vary). Generating a possible replacement code (S11);

The information that can be identified through the unique identification number includes the basic information of the individual (age, gender, region, etc.) and the information provider's information, and the information provider can use the basic personal information of the verified user. And, the authentication center is characterized by being able to manage the history of the information provider using the real name identification information.

Checking integrity of the generated unique identification number by interworking with a database that manages the entire generated unique identification number (S12);

In the case where duplication occurs through the step S12, the step S21 of notifying the user of the change of the personal identification number PW and the step S22 of being re-entered by the user (time out) may be performed; ;

If the personal identification number (PW) is input through the re-input step (S22), it branches to step S11 to replace only the personal identification number of the user's stored information to generate a unique identification number again to the sequential step to step S12 Going forward,

If the duplication does not occur in the duplication check step (S12), transmitting the information to the information provider and storing the information in the database of the authentication center managing the unique identification number and the database of the information provider (S13);

An authentication conversion step (S14) in which the user uses the service in a state where security authentication is made through a unique identification number transmitted to the information provider;

Characterized in that the step of using the service is terminated through the series of authentication conversion or non-authentication conversion (S23).

Hereinafter, exemplary embodiments will be described with reference to the accompanying drawings.

1 is a schematic diagram showing the configuration of a resident registration number input field for a conventional authentication (real name verification) procedure, as shown in the drawing, the conventional real name verification procedure (membership registration, adult authentication and access to important information of other individuals) Means for granting authority) require a resident registration number and name, and in some cases, require the application and input of the resident registration number, mobile phone certification number, and check registration e-mail. It is also because it is a unique number that is assigned to, but because the social security number is used as important information for personal identification in various fields, the leakage or unnecessary storage on the server is a serious social and moral problem.

Figure 2 is a reference diagram showing a conceptual structure of the authentication security method through the resident registration number replacement service according to the present invention, Figure 3a is a block diagram showing the overall flow of the authentication security method through the resident registration number replacement service according to the present invention, In this case, subscribers can be replaced by users, Internet operators can be replaced by information providers, and authentication centers by authentication centers.

When the subscriber (user) enters the resident registration number input screen of the internet operator (information provider), it communicates with the authentication center, generates a key in the random key generator, arranges the numbers, Relocate characters by sending them to the user input screen.

After that, the character information that replaces the entered social security number is encrypted and transmitted to the authentication center, which is then decrypted and then compared with the generated key to determine whether to authenticate.

After real name verification, the authentication center transmits the unique identification number to the user and the information provider after authentication, and stores it in the database of the authentication center and the database of the internet operator (information provider).

The random key generator may consider using a pseudo-random-number (SHA1PRNG) generation algorithm.

3b is a block diagram showing a process for a user whose social security number is changed in the method of authenticating security using a social security number replacement service according to the present invention, and performing a security authentication process through a PC-OPT (or terminal) on the web; If the existing resident registration number is changed due to the new resident registration number being changed due to circumstances, the newly assigned resident registration number is registered in the verification center (organization) (the registration process is an ex officio registration procedure by a government agency. In general, the verification body should notify the certification center of the change and suspend the use of the existing social security number of the user.

Subsequently, when the user transmits the changed social security number to the authentication center to the changed social security number to perform the security authentication procedure, the authentication center confirms that the existing social security number has been suspended from the verification center before the change, and is transmitted from the user. After verifying the verification from the verification center to confirm the real name of the new social security number, the information of the confirmed new social security number is stored in a mapping table that can simultaneously manage the existing social security number and the new social security number in the database where the existing social security number is stored. do.

Figure 3c is a block diagram showing an embodiment of a process for a user joining multiple sites in the authentication security method through the social security number replacement service according to the present invention, when the user subscribes to multiple sites, First, through the real name verification procedure for the user (via the verification center), a unique identification number (resident registration number + personal identification number + service provider code) is assigned, and through the unique identification number, the authentication center can verify the user's social security number. After that, the security authentication is compared with a unique identification number stored in its own database. The database generates a table of individual social security numbers, so that when the same person requests subscription from multiple sites, each unique identification to which the same user is assigned To store and manage numbers as a table It is preferred.

Figure 4 is a flow chart illustrating a step-by-step process of the authentication security method through the resident registration number replacement service according to the present invention, since the above-mentioned step-by-step process has been described in detail above, a characteristic embodiment of each step will be described here. .

The mapping code receiving (S3) step and the relocation (S4) step are the resident registration number replacement character codes given from the (certified) authentication center, which are shown before the user enters the resident registration number to receive the service through the information providing company. It is important that the same mapping code cannot be monitored or managed by the information provider's web server, and for this purpose, it is preferable to connect the authentication center and the user by using a (hyper) link or the like, or constitute an applet.

When generating a unique identification number (S11) based on only the inputted social security number, having a predetermined algorithm for avoiding duplication of the unique identification number, which is reconstructed by pattern analysis, eventually re-identifying the identification number only with the unique identification number. Problems that can be replaced with may occur.

Therefore, the unique identification number must be formed by combining a part of the social security number and the personal identification number (PW) entered by the user, and the code of the service provider (provided by prior consultation between the certification authority and the service provider). It is preferable that the certification body can manage the service provider's history together.

In the case of generating a unique identification number as described above, if a part of the social security number is removed and generated, a duplicate unique identification number may occur, which is a feature that can be solved by changing a personal identification number (PW). .

The step of storing in the database (S13) includes the step of storing the resident registration number in the database of the authentication center, and the step of storing the unique identification number, characterized in that only the unique identification number is stored in the database of the service provider company. It is.

As a result, an individual can perform authentication procedures such as verification of real name without inputting his or her social security number, and a service provider can also be free from risks or responsibilities of personal information leakage. Since it contains information and is a unique number, the same service provider will receive the same unique identification number when entering the same personal identification number.

In addition, the service provider has a feature that can identify whether the duplicate registration by interworking with the database at the time of membership registration by matching the feature number and name of the same unique identification number by itself.

The authentication security method through the substitution service of the resident registration number on the Internet according to the present invention introduces a means of replacing the resident registration number due to the necessity of protecting personal information due to the theft and hacking of the resident registration number. Since the user cannot collect and retain the social security number, and only the authentication center manages the individual social security number, it is effective to solve the problem of how the social security number is used for the user and to fundamentally prevent serious information leakage.

In addition, in order to determine the membership registration process or the existence of an authorized customer, the leak of a social security number or improper use by another person (a website or a private certification center granting a request step) at the step of inputting a social security number as a unique identification number. It is effective in preventing unnecessary storage in the medium, and fundamentally improving the indiscriminate management system of the resident registration number which is closely related to such property rights of the individual.

As described above, the present invention has been described in detail only with respect to the specific examples described, but it is natural that the implementation image of the webpage within the technical scope of the present invention can be modified and rearranged and modified, and the appended claims Being belonging to will be apparent to those skilled in the art in the same realm of substantial constitution and function.

Claims (9)

Claims [1] A security authentication method using a social security number replacement service on the Internet including a user implemented by an automatic processing device, an information provider, and an authentication center; Requesting a mapping table from an authentication center when a user accesses a website or applet of an information provider that requires the input of a social security number, Receiving a personal number including a social security number from the user as a character code substituted according to the mapping table, encrypting the personal number and transmitting it to the authentication center; The authentication center receives and decrypts the encrypted information, and then evaluates whether the authentication is performed through real name verification, If the authentication is made, the security authentication method through the social security number replacement service on the Internet comprising the step of notifying the information provider to allow the user to use the service. The method according to claim 1, The website or applet of the information provider provides a selection button for inputting a social security number directly into a text field / authentication security method to request a mapping table when a mouse event occurs, or provide a plurality of input fields. The security authentication method through the social security number replacement service on the Internet, characterized in that requesting a mapping table when loading the website or applet. The method according to claim 2; The authentication center generates a mapping table by a key generator according to a request of the mapping table, provides the information provider to the information provider, and generates and stores a decryption key to decrypt the encrypted information when received from the authentication center. Security authentication method through social security number replacement service. The method according to claim 1; The information provider is a security authentication method through the resident registration number replacement service on the Internet, characterized in that the transmission of the personal information, including the resident registration number from the user to the authentication center and at the same time encrypts the personal information. The method according to claim 1; The authentication center is a security authentication method using an alternative social security number on the Internet, characterized in that to evaluate the authentication by comparing and verifying the decrypted information with information transmitted using its own server, a separate verification center server or a national information communication network. The method according to claim 1; When the authentication center is authenticated, by using a combination of a code number previously given to the information provider and the decrypted personal number, the identification center generates and stores a unique identification number and transmits it to the information provider so that the user can use the service. Security authentication method through the social security number replacement service on the Internet, characterized in that to enable. The method according to claim 6; The authentication center generates a new unique identification number by re-entering the changed personal number from the user when the generated unique identification number is duplicated in comparison with the existing stored unique identification number for the integrity of the generated unique identification number. Security authentication method through the social security number replacement service on the Internet. The method according to claim 1, If the social security number of the user who is assigned a unique identification number has changed, The authentication center receives the fact that the user's existing social security number has been suspended from the third verification center and a new social security number, performs verification by newly preparing the social security number from the user, An authentication security method using an alternative social security number on the Internet, characterized in that the existing social security number and the new social security number can be stored together and managed simultaneously. The method according to claim 1; If you use multiple information providers, When the authentication center receives the decrypted resident registration number received from the user and compares it with the stored resident registration number, the authentication center manages the newly generated unique identification number with the existing unique identification number at the same time. Security method.

Images