KR100830603B1 - Security service method with locking login - Google Patents

Abstract

The present invention relates to a security service method through login lock setting. The security service method through login lock setting according to the present invention provides a security service that blocks a service provided to a third party who accesses a server by stealing user information. In the method,

A user information registration step of registering user information with the server; An environment setting step of setting whether to allow login for user information registered in the user information registration step; And a log-in notification setting step of notifying the user of log-in generation information when a log-in is generated through the user information when log-in permission is set in the environment setting step.

According to the security service method through the login lock setting according to the present invention as described above, by blocking the occurrence of the login through the lock setting, reservation setting and AUTO setting, it is possible to prevent the third party to log in by stealing the user's account There is an advantage.

Login lockout, notification setting, incident handling

Description

Security service method with locking login}

1 is a system configuration diagram of a security service method through a login lock setting according to an embodiment of the present invention;

2 is a flowchart illustrating a security service method through login lock setting according to the present invention;

3 is a flowchart showing an accident process and an environment setting process of the security service method through the login lock setting of the present invention;

Figure 4a, 4b, 4c, 4d, 4e is an exemplary view showing the configuration process of the security service method through the login lock setting of the present invention,

5 is a use example showing an accident handling process of the security service method through the login lock setting of the present invention,

FIG. 6 is an explanatory view showing notification contents transmitted to a mobile terminal when a login occurs in a security service method through a login lock setting according to the present invention.

* Description of the symbols for the main parts of the drawings *

10: user computer 20: user mobile terminal

21: user interface 30: Internet

40: mobile communication network 50: security server

60: third party terminal

S100: user information registration step S200: environment setting step

S250: login lock setting step S300: login notification setting step

S400: login lock release step S500: login generation step

S600: login notification step S700: accident determination step

S800: Incident Processing Stage

The present invention relates to a security service method through login lock setting, and more particularly, by preventing the occurrence of login through lock setting, reservation setting, and AUTO setting, it is possible to prevent a third party from logging in using the user's account. It relates to a security service method by setting a login lock.

In general, a security service is a service that guarantees the safety of information contained in a computer from unjustifiable third-party acts, and monitors operations that may illegally use or damage the information contained in the computer. A service that includes the ability to block access. In addition to protecting the information contained on the computer, these security services are applied to websites and used to prevent third parties from accessing the website through the user's account.

In recent years, a serious social crime that uses a username and password registered on the website to log in to the user's account to hack the user's e-money and game items or illegally use the social security number It is a problem.

Therefore, in order to solve this problem, there is a need for a solution for strengthening a secure connection at each site login.

Hereinafter, a conventional security service method will be described.

In the related art, a login security service method for preventing a third party from stealing a user's account by transmitting an authentication number to a mobile terminal (SMS) whenever a user accesses a website is provided.

However, the above-described login security service method may block a third party from stealing the user's account, but there is a problem that the user is inconvenient because the authentication process must be performed at every access.

In addition, there was a difficulty in accessing the corresponding site in a situation where the mobile terminal is not lost or possessed.

In addition, there is a problem that the cost increases because the SMS (short text service) is provided every time.

Next, a conventional security service method will be described with reference to Patent No. 10-0447806 registered by the present applicant.

Referring to Korean Patent No. 10-0447806, the conventional security service method is a security service method for blocking a service provided to a third party who accesses a server by stealing user information, which is (a) set by a user. An event setting step of storing event information in association with user information; (b) a notification step of notifying the user of an event occurrence when the occurrence of the set event is detected; And (c) an accident processing step of receiving an accident occurrence notification about the occurrence of the event from the user, and performing an accident processing on a connection generating the event.

However, in the conventional security service method as described above, it is possible to process an accident when a third party logs in using the user's account by notifying the user when the login occurs, but the third party Since a method for blocking the login itself by itself is not provided, there is a problem that the personal information of the user may be leaked due to an error or time delay on the network in the course of handling an accident.

In addition, since the original login blocking method is not provided, there is a problem that the SMS (short text service) cost increases because the user is notified of the login occurrence every time a login occurs through the notification step.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and an object of the present invention is to prevent a third party from logging in by stealing a user's account by blocking a login occurrence through lock setting, reservation setting, and AUTO setting. It provides security service method through lock setting.

The present invention also provides a security service method through a login lock setting that can prevent a third party from logging in to an account of a user through a login lock setting that blocks a login by any one or more of date, time, and day.

In addition, when login permission is set, the user can check whether the user is properly accessed by notifying the user through SMS (email), email, or messenger when logging in with the user account registered through the login notification setting. It provides security service method through lock setting.

In addition, it provides a security service method through the login lock setting that can be automatically updated to the affiliated site through a single update when the user information is changed by linking the registered user information with the affiliated site.

In order to solve the above problems, the security service method through the login lock setting according to the present invention is a security service method for blocking a service provided to a third party to access the server by stealing user information,

A user information registration step of registering user information with the server; An environment setting step of setting whether to allow login for user information registered in the user information registration step; And a log-in notification setting step of notifying the user of log-in generation information when a log-in is generated through the user information, when the log-in permission is set in the environment setting step.

In addition, setting whether to allow the login in the environment setting step, lock setting to block the generation of the login; Schedule setting to block the occurrence of the login on a specific day or a specific time; And AUTO setting to repeatedly block the generation of login at a specific time; It is characterized by consisting of any one of.

The login information may be provided to the user through any one of a mobile communication terminal, an email, and a messenger.

In addition, after the login notification setting step is characterized in that it further comprises an accident processing step of checking and processing whether the login information is a suitable access.

In addition, the user information registered in the user information registration step is characterized in that the automatic renewal in connection with the linked affiliate site.

Hereinafter, the present invention will be described in detail with reference to the drawings. Like reference numerals in the drawings denote like elements.

1 is a system configuration diagram of a security service method through a login lock setting according to a preferred embodiment of the present invention, FIG. 2 is a flowchart illustrating a security service method through a login lock setting according to the present invention, and FIG. It is a flow chart showing the accident handling and environment setting process of security service method through login lock setting.

1 to 3, the security service method through the login lock setting according to the preferred embodiment of the present invention includes a user information registration step (S100), an environment setting step (S200), a login notification setting step (S300). .

In the user information registration step (S100), a user accesses a corresponding web site where a security server 50 is installed through a user computer 10 and a user mobile terminal 20, and transmits an ID to a database of the security server 50. Registering user information such as a password, social security number, and phone number, wherein the user information registered in the user information registration step (S100) includes a login notification setting step (S300) to be described later when a user or a third party logs in; It is possible to notify the user of the login occurrence.

The user information registered in the user information registration step (S100) preferably includes a mobile terminal phone number, an email address, and a messenger address. It's a good idea to be able to notify them in a way.

On the other hand, the user information registered in the security server 50 in the user information registration step (S100) is associated with the associated affiliated site, if the user information is changed at any one of the affiliated sites automatically changed user information in the remaining affiliated sites It is desirable to have it updated.

The security server 50 has a database in which user information is registered, and when a login occurrence is detected, the security server 50 is notified to the user through the Internet network 30 and the mobile communication network 40. It is determined whether the accident is recognized by the security server 50 to notify the occurrence of the accident. The security server 50 that receives the accident occurrence notification determines that the third party has made illegal access through the third party terminal 60, releases the login connection notified of the accident occurrence, and notifies the user of the new password. Carry out an incident handling process.

On the other hand, the security server 50 is preferably to provide a user interface so that the user can be managed as a whole integrated management or separately separated sites registered by the user.

The environment setting step (S200) is a step of setting whether to allow login for the user information registered in the user information registration step (S100), and is preferably divided into a reservation setting, a lock setting, and an AUTO setting. Do.

The reservation setting is to set the login lock by date, time, day of the week, as shown in Figure 4a, by setting the start period and the end period for each date, time, day of the week and store the set contents, respectively, If login time is reached, time and day will be automatically blocked.

In this case, the date, time, and day of the week setting may be set one by one, but preferably, one or more of date, time, and day of the week may be selected to enable login lock setting.

The lock setting basically blocks the login itself when the third party accesses the security server 50. As shown in FIG. 4B, the lock setting and the site unlocking can be selected and set by the user. If you do not use the site for a long period of time, or if the security must always be thoroughly secured, by setting a site lock can be completely blocked illegal access by third parties. In addition, the lock setting basically blocks the user from logging in through the user account. At this time, the user can log in to the administrator mode to release and use the lock setting. In addition, after accessing the Internet using the user mobile terminal 20, it is also possible to release and use the lock setting.

The AUTO setting is to set a login lock by date, time, and day of the week as in the reservation setting. Referring to FIGS. 4C and 4D, the AUTO setting is divided by time and day of the week. And end time can be set separately.If user needs to specify additional day or date, user can set the start day or date and end day or date, and save the set contents. Will block.

In addition, when day by day is selected, you can set the start day and the end day, respectively.If you need to specify additional time, you can set the start time and end time and save the set contents. Repeatedly block login occurrences.

In this case, the date, time, and day of the week setting may be set one by one, but preferably, one or more of the date, time, and day of the week may be set in the same manner as the reservation setting to enable the login lock setting.

On the other hand, when the reservation setting and the lock setting is made, if a user or a third party tries to log in with a user account registered at the corresponding site, a logout message is displayed together with a message indicating that the lock is set.

The login notification setting step (S300) is a step of setting the user to notify the login generation information when the login lock setting is released (S400). As shown in FIG. 4E, the login notification setting and the login notification setting release are performed. Select to set whether or not to provide login occurrence information to the user. If the login notification is set, when a login occurs through the user or a third party (S500), a login notification (S600) message indicating that the login has occurred (S500) is transmitted to the mobile terminal, messenger, or e-mail set by the user. In the present invention, for example, the login notification notification contents of the user mobile terminal 20 are illustrated in FIG. 6.

Referring to FIG. 6, the user interface 21 for notifying the occurrence of login informs the login by providing an SMS (Short Text Service) received from the security server 50 to the user. The user who has recognized the login occurrence through the message transmitted from the security server 50 determines that a third party who has stolen his / her user information is accessed when he / she has not logged in, and uses the user mobile terminal 20 to secure it. The server 50 is connected to proceed with the accident process.

On the other hand, when the login notification setting is released, it is determined that the user does not intend to provide the security service, and responds to the request of the accessor according to a normal procedure.

In addition, even if the login notification is set in the login notification setting step (S300), if the login lock is set in the login lock setting step (S250), the login is not blocked and the login information is not generated. You will not be notified.

On the other hand, after the login notification setting step (S300), when the user is informed of the login information through the login notification setting step (S300), the accident processing step (S800) to check and process whether the corresponding login information is the appropriate access is It is preferable to further include.

The accident processing step (S800) determines whether the user has received a login occurrence notification from the security server (50) whether the access is a suitable access (S700) and notifies the security server 50 of the accident occurrence, the user The security server 50 that receives the incident occurrence notification for the login occurrence (S500) from the step of handling the accident for the connection that caused the login.

The accident processing step (S800) is an accident occurrence notification receiving step for receiving an accident occurrence notification for a login occurrence from the user, the accident notification is determined that the login was generated by a third party who steal user information and the accident occurrence notification And a new password notification step of generating a new password, setting a new password to the new password of the stolen user information, and notifying the user of the new password set through the notification means. It is preferable.

In the accident processing step (S800), it is preferable to further include a step of collecting and tracking the information of the illegal user and reporting to an institution such as a cyber infringement response center or requesting an investigation.

As shown in Figure 5, the accident process proceeds when the user selects the 'connection' to display the accident occurrence notification after checking the SMS (short text service) occurred login, the accident process proceeds, first Enter the password of the site that occurred, access the site and select the incident handling.

In this case, a user interface for requesting an authentication number that has been transmitted to an SMS (short text service) is provided to the user for incident handling, and the user enters the authentication number and requests the incident processing to the security server 50. When the transmission of the incident treatment request to the security server 50 is completed, it is desirable to provide a user interface for granting a new password to the user with the message that the incident treatment has been received. The security server 50 receiving the notification of the accident releases the login connection generated by the third party, and thus, the user can normally access the security server 50 through the notified new password. Illegal reconnection attempts by third parties can be blocked.

In the above, the case of determining whether the accident and the process of the accident has been described using the user mobile terminal 20 as an example. However, this may be similarly performed in the case of all user terminals accessible to the security server 50 through the Internet.

On the other hand, the authentication number transmitted to receive the incident process can be generated every time in the security server 50 and transmitted to the user, it is also possible for the user to set in advance the authentication number to use during the accident process when registering the user information.

On the other hand, it is preferable to provide a help user interface to the user registered in the security server 50 to facilitate the use of the security service through the login lock setting according to the present invention.

For example, "1. Lock Settings: set access to the server, 2. Schedule Settings: set the lock / unlock function on a specific date, time and day. 3. Login Notification Settings: by the user Set whether to be notified when a set login occurs. " It is good to make it easy for the user to use the security service.

Optimal embodiments have been disclosed in the drawings and specification. Although specific terms have been used herein, they are used only for the purpose of describing the present invention and are not intended to limit the scope of the present invention as defined in the claims or the claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

As described above, according to the present invention, there is an advantage that the third party can prevent the third party from logging in to the user's account by blocking the login at the source through the lock setting at the time of login with the registered user information.

In addition, there is an advantage that can prevent the third party to log in to the user's account through the multi-lock setting to block the login by date, time, day.

In addition, the user can check whether the access is appropriate by notifying the user through SMS (short text service), e-mail, or messenger when logging in with the user account registered through the login notification setting when the lock is not set. There is this.

In addition, there is an advantage that the automatic renewal to the affiliated site through one update when the user information is changed in association with the registered user information associated with the affiliated site.

Claims (5)

A security service method for blocking a service provided to a third party accessing a server by stealing user information, A user information registration step of registering user information with the server; A lock setting for blocking login generation at the source information for the user information registered in the user information registration step, a reservation setting for blocking login generation at a specific day or a specific time, and automatic blocking of login generation repeatedly at a specific time period. An environment setting step of setting whether to allow login through any one of AUTO) settings; And And a log-in notification setting step of notifying a user of log-in generation information when a log-in is generated through the user information when the log-in permission is set in the environment setting step. delete The method according to claim 1, In the login notification setting step, the login information is a security service method through a login lock setting, characterized in that provided to the user of any one of a mobile terminal, an email and a messenger. The method according to claim 1, After the login notification setting step, the security service method through the login lock setting, characterized in that it further comprises an accident processing step of checking and processing whether the login information is a suitable access. The method according to claim 1, The user information registered in the user information registration step is automatically updated in connection with the linked affiliated site security service method through the login lock setting.

Images