KR100923395B1 - Electronic authentication service method for non-members of internet merchant web-sites using smart card - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to a smart card based non-member electronic authentication service method in an internet multi-website.

2. The technical problem to be solved by the invention

According to the present invention, when a non-member uses multiple websites (independent websites where there is no partnership or the like), the web service can be connected with the existing member subscribers without leaking personal information due to the cumbersome procedure of the member subscribers. Similarly, a computer-readable recording medium that records a non-member electronic authentication service method and a program for realizing the method to make the web service provider more easily attract users with authenticated credit information. To provide.

3. Summary of Solution to Invention

The present invention provides a smart card-based non-member electronic authentication service method in an Internet multi-web site, wherein the website requests authentication with an authentication server when a non-member login request is not registered as a member of any website. Stage 1; A second step of the authentication server authenticating the smart card of the non-member user through the electronic wallet program interface of the non-member user terminal; A third step of transmitting the authentication information (meta ID and encrypted temporary password) of the effective user to the corresponding website and the electronic wallet program of the user according to the authentication result of the second step; A fourth step of comparing the authentication information received from the electronic wallet program and the authentication server by the corresponding website; And a fifth step of notifying the non-member user terminal of the login authentication result according to the comparison result of the fourth step.

4. Important uses of the invention

The present invention is used for non-member electronic authentication service system based on smart card.

Website, Non-member, Smart Card, E-Authentication, Electronic Wallet

Description

Electronic authentication service method for non-members of internet merchant web-sites using smart card}             

1 is a configuration example of a smart card-based non-member electronic authentication service system in the Internet multi-website to which the present invention is applied.

2 is a diagram illustrating an embodiment of a smart card based non-member electronic authentication service method in an Internet multi-website according to the present invention.

3 is a detailed flowchart illustrating a detailed message processing process that appears in an authentication process of a smart card-based non-member electronic authentication service method in an internet multi-website according to the present invention.

* Explanation of symbols for the main parts of the drawings

210: user terminal 211: card terminal

212: electronic wallet program 213: smart card

220: individual website (web server) 221: gateway module

230: authentication server 231: server daemon program

The present invention relates to a smart card-based non-member electronic authentication service method and a computer-readable recording medium recording a program for realizing the method in an internet multi-website, and in particular, to a user smart card used in a conventional offline POS terminal. The present invention relates to a non-member electronic authentication service method for providing a non-member login authentication service in multiple websites by extending the authentication method to an online Internet environment, and to a computer-readable recording medium recording a program for realizing the method.

That is, in the non-member electronic authentication method using a smart card in the Internet multi-website proposed in the present invention, when a non-member uses a website such as an Internet shopping mall, the web without leaking personal information due to the cumbersome procedure of membership registration It provides a non-member login process so that the service can be used like the existing member subscribers. In addition, the web service provider side can easily attract more users with authenticated credit information. To do this, the user inserts his smart card into the terminal, presses the login (non-member login) button and requests a secure non-member authentication as in the general website. The authentication server connected to the web server sends the authentication result information to the gateway module ( The gateway module can be used to inform the website so that a qualified user can be accepted. In the present invention, description of the smart card technology itself is omitted, and the electronic authentication service assumes that each Merchant website and the provider providing the authentication service should be affiliated with each other.

Currently, when using any website as a non-member, there are a lot of restrictions or impossible to use the service, and there is a lot of problems about personal information leakage due to membership. In addition, even if a website subscriber enters inaccurate information, a member subscriber is not helpful in managing customer loyalty, and a method for easily acquiring non-member users endorsed by a trusted certification authority is sought.

At present, as a technology for website authentication using a smart card, “a single authentication method for user authentication and a single authentication system for multiple websites (Korean Patent Publication No. 2002-0039703, Publication Date 2002. 5. 30) And so on. This allows the use of subscriber information recorded on a smart card to unify user authentication on multiple websites, for example between multiple second websites belonging to the payment authentication service group of the first website. By eliminating the membership registration process, the process of unifying this process can be unified by the initial user authentication process on the first website.

However, in the prior art, the second website must belong to the payment authentication service group of the first website. In other words, the prior art uses the concept of Single Sign On (SSO), and assumes websites that are affiliated with each other or used by SSO, and only if one company currently has several websites. It is possible. However, for example, when using "Samsung Mall" and "LG Shop", it is impossible to pass user personal information to "LG Shop" in "Samsung Mall", and the user does not want it. The method of handing over the result of authenticating once (ie personal information and IP only) from the first domain website without authenticating the card itself (that is, the second domain website does not authenticate the card) is the disclosure of personal information. In addition, in the prior art, a member ID / password must be stored in a card to use a member restriction service such as a community, and a URL address input to a browser is registered in a smart card. 2 You must verify the URL address each time for URL hooking to see if it's a domain website, and if you don't want to log in, Unnecessary cases occur when attempting to sign in, and since card authentication is performed in the first domain, payment authentication must be received only in the first domain when using services such as payment in the second domain.

Therefore, when a non-member uses multiple websites, the web service can be used like existing subscribers without leaking personal information due to the cumbersome procedures of the member subscribers. In order to attract more users more easily, there is a need for a solution that can solve the security problems of personal information leakage or hacking on the network.

The present invention has been proposed in order to meet the above-described demands, and when a non-member uses multiple websites (independent websites where no partnership or the like exists), an individual may be required due to the cumbersome procedure of a member subscriber. Non-member electronic authentication service method and the above method to use the web service as the existing member subscribers without leaking information and to attract more users with authenticated credit information to the web service provider side more easily. It is an object of the present invention to provide a computer-readable recording medium that records a program for realization.

In order to achieve the above object, the present invention provides a smart card-based non-member electronic authentication service method in a multi-internet website, when a non-member login request is not registered as a member of any website, the website is authenticated. Requesting authentication with a first step; A second step of the authentication server authenticating the smart card of the non-member user through the electronic wallet program interface of the non-member user terminal; A third step of transmitting the authentication information (meta ID and encrypted temporary password) of the effective user to the corresponding website and the electronic wallet program of the user according to the authentication result of the second step; A fourth step of comparing the authentication information received from the electronic wallet program and the authentication server by the corresponding website; And a fifth step of notifying the non-member user terminal of the login authentication result according to the comparison result of the fourth step.

In addition, the present invention, in the smart card-based non-member electronic authentication service method in the Internet multi-web site, when the non-member login request is not registered as a member of any website, the authentication server according to the authentication request of the website A first step of authenticating the smart card of the non-member user; And transmitting the authentication information (meta ID and encrypted temporary password) of the effective user to the corresponding website and the user's electronic wallet program according to the authentication result of the first step, so as to authenticate the non-member user on the corresponding website. It is characterized by comprising a second step.

In addition, the present invention is a smart card based non-member electronic authentication service system equipped with a processor, when the non-member login request is not registered as a member of any website, the website is requested to authenticate with the authentication server 1 function; A second function of the authentication server authenticating the smart card of the non-member user through the electronic wallet program interface of the non-member user terminal; A third function of transmitting authentication information (meta ID and encrypted temporary password) of the effective user to the corresponding website and the electronic wallet program of the user according to the authentication result of the second function; A fourth function of comparing the authentication information received from the electronic wallet program and the authentication server by the corresponding website; And a computer-readable recording medium having recorded thereon a program for realizing a fifth function of informing the non-member user terminal side of the login authentication result according to the comparison result of the fourth function.

In addition, the present invention, in the smart card-based non-member electronic authentication service system equipped with a processor, when the non-member login request is not registered as a member of any website, the authentication server is a non-member according to the authentication request of the website A first function of authenticating a smart card of a user; And transmitting authentication information (meta ID and encrypted temporary password) of the effective user to the corresponding website and the user's electronic wallet program according to the authentication result of the first function, thereby authenticating the non-member user on the corresponding website. A computer readable recording medium having recorded thereon a program for realizing a second function is provided.

The present invention replaces the existing ID / password-based user login method to provide a non-member login authentication service in multiple websites by extending the method of authenticating a user smart card used in a conventional offline POS terminal to an online Internet environment. The present invention relates to a system and a method for performing non-member login electronic authentication in multiple websites rather than building a smart card-based login service system in a single website.

To this end, a reliable separate service provider establishes a smart card user authentication server, and establishes a corresponding authentication service through interworking of a website requiring an electronic authentication service and an e-wallet program on the user terminal side. Will be provided. Currently, an electronic wallet program is installed and used on the online user terminal for the purpose of authentication, payment processing, etc. in order to use smart card-based electronic money. The electronic wallet program is used for the electronic authentication service proposed in the present invention.

The present invention provides a safe and convenient use of the site when an individual Internet user with a smart card visits various websites that do not register, and at the same time, users who are unwilling to sign up for the website It allows them to offer certified and reliable services to both individual users and web service providers. In other words, the present invention implements the function of the central authentication server that can provide a reliable electronic authentication function in the current Internet environment based on the smart card storage / security technology, and interworking with the electronic wallet program and the corresponding website. It provides an electronic authentication service for login of non-member users by implementing mutual authentication method through interworking with authentication server and web server (gateway program) and interworking authentication server and user terminal (electronic wallet program). have.

Here, the authentication server is operated by the organization that issued the smart card, has user information and card information for the corresponding authentication service, and can perform encrypted communication with a web server using a security key management system.

The present invention does not simply receive authentication information when a user attempts to access from an individual website, but uses a separate authentication / communication gateway module that can receive the corresponding authentication result from an authentication server. After verifying the login information attempted from the terminal (electronic wallet program) in the authentication gateway module, the verification result is passed to the web server, thereby solving the security problem of personal information leakage or hacking on the network.

Here, meta_id is used, which is a user identification ID provided to the shopping mall by the certification authority. In view of the prior art, according to the present invention, there is no need to provide any personal information of a user to an affiliated site such as a shopping mall for the login itself. However, when personal information such as address information according to the use of a shopping mall is required, Only on request the information is passed to the mall. Since the method used in the existing website is based on ID / password, even if the smart card based authentication is allowed for the non-member login service on the actual website, the existing webpage and database composed of the existing ID / password method are used as it is. It should be possible. Therefore, in the present invention, by providing a meta_id managed by the certification authority, the meta_id and the encrypted temporary password provided by the certification authority can be used in place of the existing ID / password, the transaction that can occur when using the website of the non-member user Manage your data. In other words, from the standpoint of the website, the same member information structure as the existing member is secured. In addition, in the present invention, payment-related processing is handled on an individual website, and login is performed on the individual website.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary configuration diagram of a smart card-based non-member electronic authentication service system in an internet multi-website to which the present invention is applied, and simply illustrates an internet network environment in which a non-member electronic authentication service is performed in a multi-web site.

As shown in FIG. 1, the service terminal 11 has an interface module for a contact card reader that performs communication through an IC contact point for contact communication with a smart card. And a smart card reader configured with a control unit for controlling the interface module. In addition, the authentication server 13 in the service system and the electronic wallet program for communication with the web server are installed, and a separate Merchant module for communication with the authentication server 13 on the web server 12 of any Merchant. The gateway module is installed on the server.

In addition, the authentication server 13 is provided with an authentication program in the form of a daemon for processing electronic authentication requests from multiple websites. Therefore, in order to provide the electronic authentication service, the above-described processing programs are required for each of the service terminal 11, the web server 12, and the authentication server 13, and the respective programs interoperate with each other to perform the electronic authentication process. When the gateway module of Merchant Web is first installed on the web server 12 side, it registers to the authentication server 13 with a unique ID through the Internet (network) 14, and performs communication with the authentication server 13. By doing so, the authentication server 13 is managed in a similar concept to a credit card online merchant. In addition, although not shown in FIG. 1, a key management system server (KMS) for encryption communication and a system server (SCMS) for smart card management are basically required for the actual service as described above.

2 is a diagram illustrating an embodiment of a smart card based non-member electronic authentication service method in an internet multi-website according to the present invention.

As shown in FIG. 2, when an individual user accesses an individual web site 220 providing an electronic authentication service and requests a smart card-based non-member login (①), the web server is connected to the user terminal 210. The electronic wallet program 212 of the request to be authenticated from the authentication server 230 (②).

The authentication server 230 checks whether the corresponding user smart card 213 is valid through the electronic wallet program 212, and if it is valid (③), the user's meta ID and encrypted temporary password and the electronic wallet program 212. Each of them (AuthInfo1, AuthInfo2) is transferred to the gateway module 221 of the web server side (④).

Here, the meta ID meta_id is an identifier for identifying a user managed by the authentication service provider. The electronic wallet program 212 retransmits the received meta ID and temporary password to the gateway module 221 of the web server 220 (⑤) and the gateway module 221 is received from the authentication server 230. After checking whether the information matches (AuthInfo1 = AuthInfo2) (⑥), the final authentication result is notified to the web server 220 (⑦).

And finally, the web server 220 shows the success or failure of the login to the user's web browser to show (⑧). Here, the communication between each service configuration module is encrypted and processed.

Referring to the operation of the smart card-based non-member electronic authentication service method in the Internet multi-website of the present invention having the structure as described above in detail as follows.

FIG. 3 is a detailed flowchart illustrating a detailed message processing process that appears in an authentication process of a smart card-based non-member electronic authentication service method in an Internet multi-website according to the present invention. The authentication server 230 and the gateway module 221 ) Shows the message processing in the web server 220, the electronic wallet program 212 of the user terminal, etc., and illustrates basic message elements necessary to implement the actual electronic authentication service.

As shown in FIG. 3, the user having the smart card 213 makes an authentication request to the server daemon program 231 of the authentication server 230 through the electronic wallet program 212, and the electronic wallet program 212. In operation 301, the authentication merchant ID received from the web server 220 is transferred to the authentication server 230 together with its request number. Here, the authentication merchant ID refers to a web service provider that provides a non-member electronic authentication service.

Subsequently, the authentication server 230 requests information for smart card authentication (302), and the electronic wallet program 212 on the user terminal 210 side reads the information of the smart card 213 through the smart card reader. It transmits by encrypting (using a card random number) (303).

Then, the authentication server 230 establishes a session for encrypted communication with the electronic wallet program 212 of the user terminal 210 (304) using the key management system server (KMS) (305), the authentication server ( The signatures S1 and Signature1 of 230 are generated (306) and transmitted to the user's electronic wallet program 212 (307).

Accordingly, the electronic wallet program 212 on the user terminal 210 also establishes a session for encrypted communication with the authentication server 230 (308), decrypts the received information (S1) (309) and sends the information to itself. After confirming that the (card random number) match, and generates a card signature (S2, Signature2) (10) is transmitted to the authentication server 230 (311).                     

Subsequently, when authentication of the smart card 213 is confirmed (312), an encrypted temporary password for logging in to the web server 220 is generated (313) and a certificate name (S3) is generated (314) of the user. Transfer to the electronic wallet program (315). At this time, the same authentication information is also transmitted to the gateway module 221 (315). Here, the generated temporary password is generated by encrypting using the user's smart card information, and is designed to change upon every electronic authentication request.

Then, the user tries to authenticate to the web server 220 based on the received authentication information (316,317), the gateway module 221 checks (318) the non-member user login authentication results web server 220 In step 319, the web server 220 finally displays 320 a login success (or failure) message in the user's web browser.

In the non-member login electronic authentication service in the above-described multi-web site, when the merchant web site (web server 220) is a shopping mall, there is a need to maintain the transaction or purchase information of the non-member user. When such a need arises, for example, when a non-member user wants to search his purchase information, the authentication server 230 informs the web server 220 of the meta ID of the user (or is delivered at login authentication). ), The web server 220 may be to find and show the purchase information of the user in the purchase history DB.

Since the above-described electronic authentication service method for non-members proposed in the present invention is based on each user's smart card as described above, a large operator having a large number of customers can provide information on the smart card and the user. It is based on the premise that it can manage and provide authentication services through cooperation with various useful websites. And since the network uses the existing environment, there can be no additional economic burden.

The method of the present invention as described above may be implemented as a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes are possible in the art without departing from the technical spirit of the present invention. It will be clear to those of ordinary knowledge.

The present invention as described above, when using a useful website that the user has not subscribed, can reduce the risk of exposure of personal information, while allowing the user to use the same web services as the subscribed members, security on the user side It is effective to solve the problem of the problem and convenience at the same time, and to secure a reliable customer at the same time from the website operator.

In addition, the present invention has the effect that the electronic wallet program can be used in the original payment purposes service to provide additional security services by eliminating the possibility of personal information leakage caused by the input of credit card or bank account information.

Claims (5)

A smart card based non-member electronic authentication service method in an internet multi-website, A first step of requesting authentication by a web server when a non-member login request is not registered as a member of any website; A second step of the authentication server authenticating the smart card of the non-member user through the electronic wallet program interface of the non-member user terminal; A third step of transmitting the authentication information (meta ID and encrypted temporary password) of the effective user to the corresponding website and the electronic wallet program of the user according to the authentication result of the second step; A fourth step of comparing the authentication information received from the electronic wallet program and the authentication server by the corresponding website; And A fifth step of notifying the non-member user terminal of the login authentication result according to the comparison result of the fourth step Smart card-based non-member electronic authentication service method in the Internet multi-website including a. A smart card based non-member electronic authentication service method in internet multi-websites, A first step of authenticating the non-member user's smart card according to the authentication request of the website when the non-member login request is not registered as a member of any website; And According to the authentication result of the first step, the authentication information (meta ID and encrypted temporary password) of the effective user is transmitted to the corresponding website and the user's electronic wallet program, respectively, to authenticate the non-member user on the corresponding website. 2nd step Smart card-based non-member electronic authentication service method in the Internet multi-website including a. The method of claim 2, The website mentioned above, The smart card-based non-member electronic authentication service method of the multi-web site of the Internet, characterized in that by comparing the authentication information received from the electronic wallet program and the authentication server, and informs the login authentication result to the non-member user terminal. In smart card-based non-member electronic authentication service system having a processor, A first function that, when a non-member login request is not registered as a member of any website, the website requests authentication with an authentication server; A second function of the authentication server authenticating the smart card of the non-member user through the electronic wallet program interface of the non-member user terminal; A third function of transmitting authentication information (meta ID and encrypted temporary password) of the effective user to the corresponding website and the electronic wallet program of the user according to the authentication result of the second function; A fourth function of comparing the authentication information received from the electronic wallet program and the authentication server by the corresponding website; And A fifth function of notifying the non-member user terminal of a login authentication result according to the comparison result of the fourth function A computer-readable recording medium having recorded thereon a program for realizing this. In smart card-based non-member electronic authentication service system having a processor, A first function of the authentication server authenticating the smart card of the non-member user in accordance with an authentication request of the website, when a non-member login request is not registered as a member of any website; And According to the authentication result of the first function, the authentication information (meta ID and encrypted temporary password) of the effective user is transmitted to the corresponding website and the user's electronic wallet program, respectively, to authenticate the non-member user on the corresponding website. 2nd function A computer-readable recording medium having recorded thereon a program for realizing this.

Images