KR100947103B1 - Method for providing the servlet and managing the servlet using smart card web server and the smart card thereof - Google Patents

Abstract

Disclosed are a method in which a smart card web server implemented in a smart card mounted in a communication terminal provides a servlet, and a smart card therefor. In the servlet providing method, a smart card web server receives a servlet from a servlet providing server located in an internet network via a communication terminal, stores it in a smart card, and then receives an additional service from the communication terminal. The servlet is provided, but the servlet received from the servlet providing server is not stored in the communication terminal. According to the present invention, since the servlet can be received from the server located in the Internet network without using the memory of the communication terminal, the memory space of the communication terminal can be saved, and even if the user loses the smart card. It has the advantage of protecting your privacy by disabling certain servlets.

Servlets, Smart Cards, SCWS, Value Added Services

Description

How to provide servlet using smart card web server, servlet management method and smart card for the same {Method for providing the servlet and managing the servlet using smart card web server and the smart card about}

The present invention relates to a servlet providing method using a smart card web server, a servlet management method, and a smart card for the same. More particularly, the smart card web server receives a servlet from a servlet providing server located in an internet network to provide a servlet to a user. The present invention relates to a method for managing a servlet by prohibiting the use of a servlet in which a prohibition request is received, and a smart card therefor.

A smart card is a type of integrated circuit (IC) chip card that can store and compute various digital information by embedding a central processing unit and various memory devices.

The smart card receives a command from a device capable of mounting a smart card (for example, a communication terminal), performs a series of operations on the command, and provides only a function of returning the result to the communication terminal. There was no function to actively communicate with external devices or to control the internal configuration of smart cards by itself.

In other words, the smart card does not operate by itself, but is a device that operates by processing and responding to a command of a host application mounted in a communication terminal.

With the development of smart card related technology and expanded service application range, smart card is a multi-purpose combination card. It is possible to execute the program regardless of the card manufacturer, so it is platform independent. It aims to be as open as possible.

Open platforms for representative smart cards include Java Card, MULTOS, Smart Card For Windows (SCFW), and SmartTEC OS.

Since the smart card does not have an independent input unit and an output unit, the smart card may receive a user's command from the communication terminal and transmit a result of performing a task to the communication terminal for output.

In the past, in order to inquire information existing in a smart card, information could be inquired only through an application. That is, in order to inquire information existing in the smart card, there is a hassle of executing a specific application in the communication terminal or the smart card and inquiring the information in the specific application.

In addition, when using the additional service using the information stored in the smart card, there is a problem that if there is no application that can run the additional service to download it and execute the additional service.

In addition, in the case of the loss of the communication terminal equipped with a smart card, in the case of an additional service using the personal information in the smart card, when executed by others, there is a problem that security problems such as privacy protection and personal information leakage.

Therefore, the present invention for solving the above problems is a smart card web server (SCWS: Smart Card Web Server) in the smart card directly receives the servlet from the servlet providing server located in the Internet network and stored in the smart card to the user servlet It is to propose a servlet providing method and a smart card for the same.

In addition, the present invention proposes a method for managing a servlet to prohibit the use of a specific servlet in order to prevent others from executing an additional service that uses personal information in the smart card when the smart card is lost, and a smart card therefor. .

In order to achieve the above objects, according to an aspect of the present invention there is provided a method for providing a servlet by a smart card web server implemented in a smart card mounted on a communication terminal. .

In a method of providing a servlet by a smart card web server implemented in a smart card mounted in a communication terminal according to an embodiment of the present invention, (a) an internet network Receiving the servlet from a servlet providing server located in the server; (b) storing the received servlet inside the smart card; And (c) providing a servlet corresponding to the requested additional service when receiving the additional service from the communication terminal, wherein in step (a), the servlet is provided via the communication terminal. There is provided a servlet providing method, which is received.

In order to achieve the above objects, according to an aspect of the present invention there is provided a method for managing a servlet by a smart card web server implemented in a smart card mounted on a communication terminal. .

In a method for managing a servlet by a smart card web server implemented in a smart card mounted on a communication terminal according to an embodiment of the present invention, a servlet located in an internet network Receiving a request to disable the servlet from a provision server; And deleting or locking a servlet corresponding to the received prohibition request, wherein the prohibition request of the servlet is received via the communication terminal by TCP / IP. Management methods are provided.

In order to achieve the above objects, according to an aspect of the present invention there is provided a smart card (Smart Card) mounted on the communication terminal.

A smart card mounted on a communication terminal according to an embodiment of the present invention, the smart card comprising: an interface unit for receiving a servlet from a servlet providing server located in an internet network; A servlet storage unit for storing the received servlet; And a smart card web server controlling to provide the communication terminal with a servlet corresponding to the requested additional service when the request for the execution of the additional service is received from the communication terminal, wherein the servlet includes: A smart card is provided which is received via the communication terminal.

In order to achieve the above object, according to an aspect of the present invention, there is provided a servlet providing server located in an internet network for transmitting a servlet to a smart card web server implemented in a smart card.

A servlet providing server located in an internet network for transmitting a servlet to a smart card web server implemented in a smart card according to an embodiment of the present invention, the servlet transmission request from the communication terminal A servlet transceiver for receiving a signal and transmitting the servlet to the communication terminal; A database for storing the servlet; And a control unit which controls to transmit the servlet corresponding to the received transmission request to the communication terminal so that the communication can be delivered to the smart card web server via the communication terminal.

As described above, the present invention receives a servlet directly from a servlet providing server located on the Internet in a smart card equipped with a smart card web server, and stores the servlet in the smart card, so that the additional service can be executed without an application. There is an advantage.

In addition, the present invention has the advantage that the smart card can actively manage the servlet without the control of the communication terminal can save the memory space of the communication terminal.

In addition, even if the smart card is lost, by remotely prohibiting the use of a specific servlet of the smart card, there is an advantage that can solve security problems such as privacy protection and personal information leakage caused by the execution of others.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

The terms first, second, A, B, etc. may be used to describe various components, but the components are not limited by the terms, but merely for distinguishing one component from other components. Only used as For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component. The term and / or includes a combination of a plurality of related items or any item of a plurality of related items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter, with reference to the accompanying drawings, it will be described in detail an embodiment of the present invention. Hereinafter, the same reference numerals are used for the same components in the drawings, and duplicate descriptions of the same components are omitted.

1 is an overall configuration diagram showing an entire system for storing a servlet in a smart card in a servlet providing server located in an internet network according to the present invention.

The overall system shown in FIG. 1 shows an example in which information exchange between the smart card 100 and the communication terminal 150 is performed by a bearer independent protocol (BIP).

The entire system according to the present invention may include a smart card 100, a communication terminal 150, a servlet providing server 170 and a servlet generating server 190.

A servlet refers to a small program running on a server.

In the present invention, the servlet may be stored in the smart card 100 as a kind of application for performing an additional service that can be supported by the communication terminal.

The servlet also corresponds one-to-one with additional services that can be supported by the communication terminal.

That is, an application for performing the first additional service is servlet A, an application for performing the second additional service is servlet B, etc., and one servlet is for performing one additional service.

The smart card 100 according to the present invention includes a smart card web server 230 to enable the smart card 100 to perform an active operation under the control of the smart card web server 230.

The communication terminal 150 according to the present invention is sufficient as long as it is a terminal on which the smart card 100 can be mounted. For example, the type of communication terminal 150 may be used as long as it is a terminal capable of communicating with other terminals such as a mobile phone, a PDA, and a PMP.

The servlet providing server 170 is a kind of server located on the Internet network, and stores numerous servlets and transmits the stored servlets to the smart card 100 through the communication terminal 150 so that the user can perform various additional services. do.

The servlet providing server 170 may be located in the internet network as a server that performs a function of providing a servlet by the smart card 100. If the servlet providing server 170 is a device capable of directly communicating with the smart card 100 using the communication terminal 150 as a gateway, the type thereof is irrelevant.

The servlet generation server 190 generates a servlet and performs a function of providing the servlet providing server 170, and performs a function of a service provider.

The exchange of information between the smart card 100 and the communication terminal 150 according to the present invention can be performed by the BIP or TCP / IP protocol.

First, a case in which information exchange is performed by BIP as shown in FIG. 1 will be described.

The BIP uses the packet network supported by the communication terminal 150 and the network (GPRS / UMTS packet bearer, Bluetooth, IrDA, etc.) to enable data communication between the external node and the smart card 100 mounted on the communication terminal 150. Protocol.

In order to perform data communication using the BIP, the communication terminal 150, the smart card 100, and the external node must all support the BIP.

Nodes supporting BIP should support CAT_TP (Card Application Toolkit_Transport Protocol) transport layer function, which includes connection management, reliable communication, flow control, and data segment management. (data segmentation management).

In order to perform packet communication using the BIP, a BIP channel is generated between the smart card 100 and the communication terminal 150, and a CAT_TP link is formed between the smart card 100 and the remote node. do.

The communication terminal 150 according to an embodiment of the present invention may deliver the servlet received from the servlet providing server 170 located in the internet network to the smart card 100 by BIP.

That is, the delivery of the servlet from the communication terminal 150 to the smart card 100 may be performed by BIP commands.

The communication terminal 150 only serves as a gateway for transmitting the servlet transmitted to the servlet providing server 170 located in the Internet network to the smart card 100.

The communication terminal 150 may be equipped with a smart card 100, the information can be exchanged by the smart card 100 and the BIP as described above. In addition, the communication terminal 150 may perform data communication with the servlet providing server 170 located in the Internet network through TCP / IP.

The communication terminal 150 according to the present invention may include a configuration capable of transmitting a protocol to convert the servlet from the servlet providing server 170 to the smart card 100.

When the protocol for exchanging information between the communication terminal 150 and the smart card 100 is BIP, and the protocol for exchanging information with the servlet providing server 170 located in the communication terminal 150 and the Internet network is TCP / IP. As shown in FIG. 1, the communication terminal 150 may include a BIP gateway and a TCP / IP protocol stack for exchanging information between the smart card 100 and the servlet providing server 170.

This is because the communication terminal 150 receives the servlet by the servlet providing server 170 and the TCP / IP method, changes it to the BIP method, and delivers the servlet to the smart card 100.

Hereinafter, a case in which information exchange between the smart card 100 and the communication terminal 150 according to another embodiment of the present invention is performed by TCP / IP will be described.

In order for the smart card 100 to directly exchange information by TCP / IP, the TCP / IP protocol stack should be included in the smart card 100.

When performed by the BIP as shown in FIG. 1, the communication terminal 150 should include a configuration for protocol conversion for communication between the smart card 100 and the servlet providing server 170, but the smart card 100 ) Exchanges information by TCP / IP directly, there is no need for protocol conversion.

In this case, the communication terminal 150 is located between the smart card 100 and the servlet providing server 170 to perform only a role of an information transmitter.

A process of transmitting the servlet from the servlet providing server 170 to the smart card 100 via the communication terminal 150 will be described in more detail with reference to FIG. 4.

2 is a block diagram showing the configuration of a smart card equipped with a smart card web server (SCWS) according to an embodiment of the present invention.

Referring to FIG. 2, the smart card 100 includes an interface unit 210, a servlet storage unit 220, and a smart card web server (SCWS) 230.

The interface unit 210 receives the servlet received from the servlet providing server 170 from the communication terminal 150.

In particular, when the interface unit 210 exchanges information with the communication terminal 150 by the BIP, a BIP channel for communication with the communication terminal 150 may be set under the control of the smart card web server 230. .

The smart card web server 230 is a system located inside the smart card 100 and is a system that is in charge of a function capable of controlling the smart card 100 without controlling the communication terminal 150. The smart card web server 230 may be referred to as a kind of HTTP server implemented in the smart card 100.

The smart card web server 230 is a system capable of performing the role of a web server having a processor and a memory and may be utilized as a dual system capable of performing both a server and a client.

That is, the smart card web server 230 may serve as a server that actively performs work in response to a request of the communication terminal 150 in relation to the communication terminal 150, and may be a server located on the Internet network. In the present invention, the servlet providing server 170 may serve as a client for requesting the servlet providing.

In addition, the smart card web server 230 receives a power supply from an external device such as the communication terminal 150, and is a device that actively performs a specific task, not a device that performs a dependent role in performing a specific task. Im already defined in the standard.

For example, the smart card web server 230 is a system in charge of smart card information, smart card life cycle, application protocol data unit (APDU) generation, subscriber management, and the like. Is a system that can request to open a BIP channel.

In addition, the smart card web server 230 according to another embodiment of the present invention can control to communicate directly with the server located in the Internet network. In this case, the smart card 100 may be assigned an IP and directly exchange information with the servlet providing server 170 by TCP / IP.

The smart card web server 230 controls to store the servlet received from the servlet providing server 170 in the smart card 100 (for example, the servlet storage 220).

In particular, the smart card web server 230 may control to store the received servlet in the servlet storage unit 220 only when authentication is successful by performing authentication on the received servlet. The authentication of the smart card web server 230 may be performed by determining whether the received servlet is received through a correct path, or is received from an authorized person.

In addition, when the smart card web server 230 is requested to perform an additional service from the communication terminal 150, the smart card web server 230 may control to select and provide a servlet corresponding to the requested additional service in the servlet storage unit 220.

As described with reference to FIG. 1, in order to perform the additional service, a servlet capable of performing the additional service must be provided. Therefore, it is determined whether the servlet corresponding to the requested additional service is stored in the servlet storage unit 220.

If the servlet corresponding to the requested additional service is not stored in the servlet storage unit 220, the smart card web server 230 may request the servlet providing server 170 to transmit the servlet. In this case, the smart card web server 230 may determine the transmission of the servlet by itself without controlling the communication terminal 150.

When the smart card web server 230 receives the servlet prohibition request from the servlet providing server 170, the smart card web server 230 deletes or locks the servlet corresponding to the received prohibition request. Can be controlled.

A representative example of receiving a servlet ban request is when a user loses the smart card 100. When other users utilize the user's personal information stored in the smart card 100 to utilize additional services such as financial services, a great damage may occur.

In order to prevent this, the user who has lost the smart card 100 may request the servlet providing server 170 to delete or lock a specific servlet. The servlet providing server 170 which has received the request for prohibiting the use of the servlet transmits a request for prohibiting the use of a specific servlet to the lost smart card 100.

The smart card 100 receiving the request for prohibiting the use of a specific servlet from the servlet providing server 170 causes the other servlet to be deleted or locked under the control of the smart card web server 230 so that others can add additional services corresponding to the servlet. Can be disabled.

The servlet storage unit 220 performs a database function to store the servlet received from the servlet providing server 170.

Due to the recent development of technology, it is possible to increase the capacity of a smart card. As a result, the types of servlets that can be stored in the servlet storage unit 220 become very diverse, and the amount that can be stored is also very large.

As described above, one servlet stored in the servlet storage 220 corresponds to an additional service.

In FIG. 2, the smart card web server 230 and the interface unit 210 are illustrated as separate components, but it is obvious that the smart card web server 230 and the interface unit 210 may be implemented by one circuit. In addition, it is apparent that the smart card web server 230 may include volatile memory such as flash memory.

In addition, although not shown in FIG. 2, when the smart card 100 exchanges information with the communication terminal 150 through TCP / IP, a TCP / IP protocol stack for this purpose should be included in the smart card 100. Do.

So far, the configuration of the smart card 100 according to the embodiment of the present invention has been described with reference to FIG. 2. Hereinafter, the configuration of the servlet providing server 170 will be described with reference to FIG. 3.

3 is a block diagram showing the configuration of a servlet providing server according to an embodiment of the present invention.

Referring to FIG. 3, the servlet providing server 170 may include a servlet transceiver 310, a database 320, a servlet input unit 330, a controller 340, and the like.

The servlet providing server 170 is located in the internet network.

The servlet transceiver 310 receives a servlet transmission request from the communication terminal 150 and performs a function of transmitting the servlet requested for transmission.

The servlet transmitted from the servlet transceiver 310 to the communication terminal 150 is transferred to the smart card web server 230. That is, the communication terminal 150 serves as a communication gateway between the servlet providing server 170 and the smart card web server 230, and is located in a predetermined storage area (for example, a memory) of the communication terminal 150. The servlet is not stored, and only the protocol is converted (when information is exchanged by the BIP between the smart card 100 and the communication terminal 150) and transmitted to the smart card web server 230.

The servlet may be transmitted from the servlet providing server 170 to the communication terminal 150 through TCP / IP, and the process of transferring the transmitted servlet to the smart card web server 230 may be performed by the communication terminal 150. It can be performed by the same as described above.

The database 320 stores a plurality of servlets.

The servlet input unit 330 is connected to the servlet generation server 190 by wire or wirelessly to receive the servlet generated by the servlet generation server 190.

The servlet input unit 330 receives a servlet generated for executing a new additional service in the servlet generation server 190 or receives an updated version of the servlet previously stored in the database 320 from the servlet generation server 190. Do this.

The servlet transceiver 310 and the servlet input unit 330 are the same in that they perform a function for communicating with the outside of the servlet providing server 170, but the servlet transceiver 310 communicates with the communication terminal 150, and the servlet input unit 330 has a difference in communication with the servlet generation server 190.

The controller 340 may control each component (eg, the servlet transceiver 310, the database 320, the servlet input unit 330, etc.) of the servlet providing apparatus 170.

The controller 340 may analyze the servlet transmission request received by the servlet transceiver 340 to read the requested servlet from the database 320 and transmit the received servlet to the communication terminal 150 from the servlet transceiver 340. .

In addition, the controller 340 may control the servlet input unit 330 to store the received servlet in the database 320 when the servlet generation server 190 receives a new servlet.

Hereinafter, a process of providing a servlet by a smart card web server implemented in a smart card will be described with reference to FIG. 4.

4 is a flowchart illustrating a process of providing a servlet by a smart card web server implemented in a smart card according to an embodiment of the present invention.

Although not shown in FIG. 4, the servlet providing server 170 located in the Internet network may receive a new servlet from the servlet generation server 190 and store the servlet or the updated servlet according to an update request of the previously stored servlet. .

First, the servlet providing server 170 receives a request for providing a new servlet from the communication terminal 150. A new servlet refers to a servlet requested from a user to use a new additional service in addition to the existing additional service.

When the servlet providing server 170 receives a new servlet request, the servlet providing server 170 transmits the servlet to the smart card web server 230 via the communication terminal 150.

In the present specification, via the communication terminal 150 means that a servlet is not stored in a predetermined storage area (for example, a memory) of the communication terminal 150, and only a protocol is converted (the communication terminal 150 and the smart card 100). Information exchange is performed by the BIP) and transmitted to the smart card web server 230.

The servlet may be transmitted from the servlet providing server 170 to the communication terminal 150 through TCP / IP, and the process of transferring the transmitted servlet to the smart card web server 230 may be performed by the communication terminal 150. And TCP / IP, as described above.

That is, when information is transferred by the BIP between the communication terminal 150 and the smart card web server 230, the communication terminal 150 communicates between the servlet providing server 170 and the smart card web server 230. It just does the job of converting the protocol to make it possible. The servlet received from the servlet providing server 170 is transferred to the smart card web server 230 through a protocol conversion process in the communication terminal 150.

On the other hand, when information is transmitted by TCP / IP between the communication terminal 150 and the smart card web server 230 according to another embodiment of the present invention, the communication terminal 150 may be connected to the smart card web server 230. It merely serves as an intermediate forwarder for exchanging information between the advertisement providing server 170.

The smart card web server 230 controls to store the servlet received from the servlet providing server 170 in the servlet storage 220.

Subsequently, when the smart card web server 230 receives the additional service request from the communication terminal 150, the smart card web server 230 selects a servlet corresponding to the requested additional service from the servlet storage unit 220 to communicate. Provided to the terminal 150.

The smart card web server 230 is a system having a function of controlling the configuration of the smart card 100 by itself without being controlled by the communication terminal 150 as described above.

As described above, in the case of providing a servlet using a smart card implemented with a smart card web server, the memory of the communication terminal can be saved because the memory of the communication terminal 150 is not used.

Hereinafter, a method of managing a servlet by the smart card web server 230 according to another embodiment of the present invention will be described.

5 is a flowchart illustrating a process of managing a servlet by a smart card web server according to an embodiment of the present invention.

FIG. 5 illustrates a process in which the smart card web server 230 manages the servlet so that when the user loses the smart card 100, another person may not obtain an unfair advantage using the lost smart card.

When the user loses the smart card 100, the user may make a request for prohibiting the use of a specific servlet stored in the lost smart card to the servlet providing server 170. If a particular servlet is a private supplementary service, such as financial services, there may be a need for further bans.

When the servlet providing server 170 receives a request for prohibiting the use of a specific servlet from the user, the servlet providing server 170 transmits a specific servlet use prohibition request to the smart card web server 230 (step S510).

The smart card web server 230 checks whether the received prohibition request is from a legitimate user, deletes the servlet from the servlet storage unit 220, or locks the servlet if the request is from a legitimate user. Can be controlled (step S520).

Locking is to prohibit access to the servlet. The locking may be implemented as if the servlet is actually stored but not stored, or it may be implemented to output an error message when the servlet access request is made.

That is, before step S520, the user authentication step of determining whether the servlet use prohibition request is from a legitimate user may be performed.

For convenience of understanding and explanation of the present invention, for example, the user was using an additional service of mobile banking using the smart card 100, and assumes that the servlet that performs the mobile banking service is Servlet A.

If the user loses the smart card 100, the user may request the servlet providing server 170 to delete the servlet A.

The method for requesting the user to delete the servlet A by the servlet providing server 170 may request the deletion by the servlet providing server 170 through the call center, or the servlet providing server only when the user authentication is successful even when using another terminal. The 170 may be implemented in various ways such as recognizing that the request is a legitimate deletion.

The servlet providing server 170 transmits a servlet A delete request message to the smart card web server 230 of the lost smart card 170 according to the delete request.

The smart card web server 230 receiving the deletion request message may determine whether the request is a deletion by a legitimate user, and control to delete the servlet A stored in the servlet storage 220 when the request is a legitimate user.

As such, when managing a servlet using a smart card that implements a smart card web server, even if the smart card is lost, the use of another servlet can be blocked at the source, thereby preventing the security of personal information and privacy of personal information. This has the advantage of being solved.

Although described above with reference to a preferred embodiment of the present invention, those skilled in the art that various modifications of the present invention without departing from the spirit and scope of the invention described in the claims below And can be changed.

1 is an overall configuration diagram showing an entire system for storing a servlet in a smart card in a servlet providing server located in an internet network according to the present invention.

2 is a block diagram showing the configuration of a smart card equipped with a smart card web server (SCWS) according to an embodiment of the present invention.

Figure 3 is a block diagram showing the configuration of a servlet providing server according to an embodiment of the present invention.

4 is a flowchart illustrating a process of providing a servlet by a smart card web server implemented in a smart card according to an embodiment of the present invention.

5 is a flowchart illustrating a process of managing a servlet by a smart card web server according to an embodiment of the present invention.

Claims (13)

In a method for providing a servlet by a smart card web server implemented in a smart card mounted on a communication terminal, (a) receiving the servlet from a servlet providing server located in an internet network; (b) storing the received servlet inside the smart card; And (c) if the communication terminal is requested to perform an additional service, providing a servlet corresponding to the requested additional service, In the step (a) the servlet, Servlet providing method characterized in that it is received via the communication terminal. The method of claim 1, Step (b) is, And performing authentication on the received servlet, and storing the received servlet in the smart card when the authentication is successful. The method of claim 1, The servlet, The servlet providing method characterized in that it corresponds to an additional service supported by the communication terminal. The method of claim 1, Receiving a servlet via the communication terminal, Servlet providing method characterized in that performed by any one of the bearer independent protocol (BIP) and TCP / IP. In a method for managing a servlet by a smart card web server implemented in a smart card mounted on a communication terminal, Receiving a request for prohibiting the use of the servlet from a servlet providing server located in an internet network; And Deleting or locking the servlet corresponding to the received prohibition request; The request for prohibiting the use of the servlet is Servlet management method characterized in that it is received via the communication terminal by TCP / IP. In the smart card mounted on the communication terminal, An interface unit for receiving a servlet from a servlet providing server located in an internet network; A servlet storage unit for storing the received servlet; And If the communication terminal is requested to perform the additional service, including a smart card web server (Smart Card Web Server) for controlling to provide a servlet corresponding to the requested additional service to the communication terminal, The servlet, Smart card, characterized in that received via the communication terminal. The method of claim 6, The smart card web server, And performing authentication on the received servlet so as to store the received servlet in the servlet storage when the authentication is successful. The method of claim 6, The interface unit, A smart card, characterized in that receiving the servlet by either Bearer Independent Protocol (BIP) or TCP / IP. The method of claim 6, The smart card web server, When receiving a servlet prohibition request from the servlet providing server, smart card, characterized in that for controlling to delete or lock the servlet corresponding to the received prohibition request. A servlet providing server located in an internet network for transmitting a servlet to a smart card web server implemented in a smart card, A servlet transceiver for receiving a servlet transmission request from a communication terminal and transmitting the servlet to the communication terminal; A database for storing the servlet; And And a control unit for controlling to transmit a servlet corresponding to the received transmission request to the communication terminal so that the communication can be delivered to the smart card web server via the communication terminal. The method of claim 10, The transceiver unit, The servlet providing server, wherein the servlet is transmitted to the communication terminal by TCP / IP. The method of claim 10, Further comprising a servlet input unit for receiving the servlet from the servlet generation server for generating the servlet, The servlet provided by the servlet input unit is stored in the database under the control of the controller. The method of claim 10, The control unit, When the request for prohibiting the use of the servlet is requested, the servlet providing server, wherein the request for prohibiting the use of the requested servlet is transmitted to the smart card web server.

Images