KR101118605B1 - Log-in system and method with strengthened security - Google Patents

Abstract

PURPOSE: A log-in system and method with intensified security are provided to intensify security by performing authentication through a single channel. CONSTITUTION: An access server(200) comprises a database(220) and a main server(210) which store the various information of members. The main server performs web communications between a user client(100) and a certificate server(300). The main server manages the database. The main server includes an OTP(One Time Password) operation expression generator(212) which is arbitrarily generated for OTP calculation. The certificate server includes a database(320) and a main server(310). The database stores matched contents by matching an authentication password, the identification code information of a corresponding affiliate site, and a login ID used at the corresponding affiliate site. The main server performs the management of the database and the web communications between a user client and an access server.

Description

Log-in system and method with strengthened security}

The present invention relates to a security-enhanced login system and method, and more particularly, to log in by a single channel, but is obtained by processing an authentication password that is not directly managed by an access server to which a user wants to log in with an arbitrarily generated formula. The present invention relates to a security-enhanced login system and method for determining whether to allow final login based on a result value.

As is well known, in order to enjoy the service by accessing most online sites, the login ID and login password registered at the time of registration of the site must be entered in the respective input windows. It is determined whether or not to allow login by determining whether or not is identical to that registered at the time of membership registration.

However, according to the conventional login system, the login ID and login password are not only fixed values, but both are managed directly by the site, so that the site is hacked or illegally leaked by the insider. In addition to the primary damage on the site, there was a risk of secondary damage using this information. Moreover, since most users use the same login ID and login password for multiple sites to conveniently manage (log) the login ID and login password, secondary damage can be even more serious, even if only one site has been hacked. . In addition, according to the conventional login system, there is a concern that the login ID and the login password may be illegally leaked easily by keyboard hacking.

Due to this problem, various online sites such as portal sites and game sites have made various efforts to enhance security during the login process. As part of this effort, randomly generated by OTP (One Time Password) generator An authentication method using a one time password has been proposed. However, since the OTP authentication method is strictly a device authentication, not a user authentication, there is a problem that there is no countermeasure when the device is hacked.

On the other hand, a method of inputting two channels, for example, an ID into a PC and a password into a terminal separate from the PC, for example, a mobile communication terminal, has been proposed. A security authentication system is disclosed. According to this prior art, when a user accesses a site through a PC and enters a login ID, the site issues a temporary ID and a temporary password for the login ID and delivers the temporary ID to the PC. If you enter the password and enter the temporary password into the phone terminal through the ARS, the site checks it and decides whether to authenticate. However, according to the above-mentioned prior art, there is a problem that it takes not only troublesome but also takes a long time for authentication because two terminals are used in the authentication process.

The present invention has been made to solve the above-described problem, it is possible to log in by a single channel, the result value obtained by processing an authentication password that is arbitrarily generated by the authentication password that is not directly managed by the access server to the user to log in It is an object of the present invention to provide a login system and method with enhanced security for deciding whether to allow a final login.

According to a first aspect of the present invention for achieving the above object, an access server database for matching and storing a registered login ID and a registered login password of a user client; An OTP expression generator for generating an OTP expression and a user who uses the OTP expression generated by the OTP expression generator when the login ID and login password received from the user client match the registered login ID and the registered login password. It provides to the client, and if the OTP is input from the user client, and transmits the input OTP, the identification code of the access server site, the registered login ID and the OTP calculation to the authentication server, and whether the authentication success received from the authentication server In accordance with the present invention, a security-enhanced login system including an access server having a main server for determining whether to allow login to a user client is provided.

According to a second aspect of the present invention, an OTP input by a user client from an authentication server database and access server for matching and storing a registered login ID of a user client to an access server, an identification code of the access server, and an authentication password of the user client, When the site identification code of the access server, the registered login ID, and the OTP expression are received, the registered login ID is queried from the authentication server database to extract a matching authentication password, and the authentication password is substituted into the OTP expression. A security-enhanced login system including an authentication server having a main server for determining whether the calculated OTP matches the OTP received from the access server and forwards the result to the access server is provided.

In the second aspect described above, an access server database for matching and storing a registered login ID and a registered login password of a user client; An OTP expression generator for generating an OTP expression and a user who uses the OTP expression generated by the OTP expression generator when the login ID and login password received from the user client match the registered login ID and the registered login password. If the OTP is input from the user client, the inputted OTP, the identification code of the site of the access server, the registered login ID and the OTP calculation expression are transmitted to the authentication server, and the authentication success received from the authentication server is provided. The apparatus may further include an access server including a main server that determines whether to log in to a user client according to whether or not.
In the aforementioned second aspect, the access server stores OTP operation difficulty information set in at least two levels in the access server database by matching the registered login ID and generates the OTP equation by reflecting the operation difficulty information. can do.

delete

According to a third aspect of the present invention, an access server database for matching and storing a registered login ID and a registered login password of a user client, and a login ID and a login password input from a user client match the registered login ID and the registered login password. In the case of doing so, the identification code of the site of the access server and the registered login ID is transmitted to the authentication server, and the access server having a main server that determines whether to allow the login to the user client according to the authentication success received from the authentication server. An enhanced security login system is provided.

According to a fourth aspect of the present invention, an authentication server database for matching and storing a registered login ID of a user client to an access server, an identification code of the access server, and an authentication password of the user client; When the OTP expression generator for generating an OTP expression and the access server's site identification code and the registered login ID are received from the access server, the OTP expression generated by the OTP expression generator is transmitted to the user client. And a main server for determining whether or not the OTP calculated by substituting the authentication password into the OTP calculation equation when the OTP is input from the client matches the OTP input from the user client, and transferring the result to the access server. A security-enhanced login system is provided that includes an authentication server.

In the above-described fourth feature, an access server database for matching and storing a registered login ID and a registered login password of a user client, and a login ID and a login password received from a user client are identical to the registered login ID and the registered login password. In this case, the identification server of the site of the access server and the registered login ID are transmitted to the authentication server, and the access server further includes a main server that determines whether to allow the login to the user client according to the success or failure of the authentication received from the authentication server. It may include.

According to the fourth feature, the authentication server stores OTP calculation difficulty information set in at least two levels in the authentication server database by matching the registered login ID, and generates the OTP calculation expression by reflecting the calculation difficulty information. can do.

According to a fifth aspect of the present invention, when the login ID and the login password inputted from the user client are performed by the access server connected to the user client and the authentication server through a wired or wireless network, the registration login ID and the registration login password match. (A) generating and providing an OTP expression to a user client; (B) requesting authentication by transmitting the input OTP, the identification code of the site of the access server, the registered login ID, and the OTP expression to the authentication server when the OTP is input from the user client, and from the authentication server. Provided is a security-enhanced login method comprising the step (c) of determining whether to allow a login to a user client according to the received authentication success.

In the aforementioned fifth feature, the OTP calculation formula generated in step (a) may be generated by reflecting OTP calculation difficulty information set from at least two or more levels set by the user client at the time of membership registration. The method may further include transmitting an authentication password input by the user client to the authentication server before step (a).

According to a sixth aspect of the present invention, when the login ID and the login password input from the user client are performed by the access server connected to the user client and the authentication server through a wired or wireless network, the registration login ID and the registration login password are the same. (E) determining whether to allow the login to the user client according to the step (d) of requesting authentication by providing the identification code of the site of the access server and the registered login ID to the authentication server and the authentication success received from the authentication server. Provided is a security enhanced login method comprising the steps.

In the above sixth aspect, the method may further include transmitting an authentication password input by the user client to the authentication server before step (d).

According to a seventh aspect of the present invention, an OTP input by a user client from an access server, a site identification code of a connection server, a registered login ID, and an OTP operation are performed by an authentication server connected to a user client and an access server through a wired or wireless network. (F) extracting a matching authentication password by querying the registered login ID in the authentication server database when the expression is received, and the OTP calculated by substituting the authentication password into the OTP expression and the OTP received from the access server. And (g) delivering the result to the access server after determining whether the s match, and providing a security-enhanced login method.

According to the seventh feature, the method may further include receiving and storing the site identification code, the registered login ID, and the authentication password of the access server from the access server before the step (f), and matching and storing them in the authentication server database. Can be.

According to an eighth aspect of the present invention, an OTP calculation expression is generated when a user ID and an authentication server connected to an access server through a wired / wireless network are received from the access server. (H) delivering to the user client; (I) extracting a matching authentication password by querying the registered login id from the authentication server database when the user receives the OTP from the user client, and from the OTP and the user client calculated by substituting the authentication password into the OTP equation. It is provided with a security-enhanced login method comprising the step (j) of determining whether the input OTP is matched and then transmitting the result to the access server.

In the eighth feature, the authentication server receives the server identification code, the registered login ID, the authentication password, and OTP operation difficulty information set from at least two levels from the access server before step (h). The method may further include matching and storing the database in a database, and the OTP equation generated in the step (h) may be generated by reflecting the difficulty level information.

According to the security-enhanced login system and method of the present invention, by performing authentication for login by OTP arbitrarily generated by the authentication password, not only the security can be further enhanced compared to the existing login method, but also for generating such OTP. By creating an expression based on the difficulty level set by the user, it is convenient for the individual user.

In addition, by performing authentication for login using an authentication password not directly managed by the access server, this can be performed through a single channel, thereby providing convenience to the user while enhancing security.

1 is a sequence chart for explaining a member registration process in a security-enhanced login system according to an embodiment of the present invention.
2 is a sequence chart for explaining a login process in the system shown in FIG.
3A and 3B are exemplary screens of an OTP equation, respectively.
4 is a sequence chart illustrating a member registration process in a security-enhanced login system according to another embodiment of the present invention.
FIG. 5 is a sequence chart for explaining a login process in the system shown in FIG. 4; FIG.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the security system and method of the enhanced security of the present invention.

1 is a sequence chart for explaining a member registration process in a security-enhanced login system according to an embodiment of the present invention. As shown in FIG. 1, the security-enhanced login system of the present invention is a server such as an online site, for example, various portal sites or game sites that require login prior to providing a service. 200 is a mobile terminal of a user through a wired / wireless network, such as a desktop computer, a notebook computer, a smart phone or a smart pad equipped with Internet communication function (hereinafter collectively referred to as' User client) and an authentication server 300 that performs additional authentication during the login process.

In the above-described configuration, the access server 200 stores member information, for example, a member's various information including a member ID (hereinafter referred to as a 'login ID') and a registration password (hereinafter referred to as a 'login password'). The main server 210 may perform a web communication between the database 220, the user client 100, and the authentication server 300, and manage the database 220. . The main server 210 is also provided with an OTP equation generator 212 that is arbitrarily generated for OTP calculation as described below.

On the other hand, the authentication server 300 is a database 320 and the user client 100 and the access server (matching and storing the authentication password registered by the user, the identification code information of the associated site and the login ID used in the oil-refining site, etc.) It may include a main server 310 to perform a function such as performing a web communication between the 200 and manage a database.

Looking at the procedure in which the user client 100 joins the access server 200 as a member through the above-described login system, first, in steps S10 and S12, the user client 100 accesses the site of the access server 200 and logs in. You can register as a member by setting ID and login password and entering other personal information.

Then, the access server 200 registers as a member by matching and storing the login ID and the login password set by the user in the database 220 (step S14).

Next, the access server 200 performs a step S16 to ask the user client 100 whether to go through an additional authentication procedure in the login process, when the user client 100 requests the additional authentication procedure to go through. In step S18, after confirming this, an additional authentication information input window is transmitted to the user client 100 in step S20. On the other hand, if the user client 100 does not request to go through the additional authentication process, the program is considered to perform authentication based only on the login ID and the login password.

Meanwhile, the additional authentication information input window includes an authentication password input window for additional authentication and an operation difficulty information input window (or a setting button) for an expression used for an OTP operation.

Here, the authentication password may be composed of digits, letters, symbols, or a combination thereof of multiple digits, and the operation difficulty is two levels, for example, "up" and "low", or "up", "medium". And "lower", three levels or more may be used, and the use of numbers or letters constituting the authentication password may be limited according to the operation difficulty set. For example, if the operation difficulty is "low", only numbers can be used as the authentication password, and if it is more than that, the number can be used in combination with numbers, letters and symbols.

Furthermore, when the difficulty level is set to a relatively low level, the OTP expression generator 212 generates an expression by using "+" (addition) or "-" (subtraction) or a combination thereof in generating the OTP expression. If the difficulty of the operation is relatively high, the limit is generated by using "+" (addition), "-" (subtraction) as well as "*" (multiplication) or "÷" (division). Can be added. In addition, when the operation difficulty is set to a relatively low level, when the OTP expression generator 212 generates the OTP expression, the result value of the operation does not increase or decrease the number of digits, for example, the authentication password of the corresponding digit. If it is "5", both addition and subtraction are possible, but up to 4 or up to 4, and if the digit authentication password is "9", only subtraction is allowed but up to 8 is determined. Can be done.

On the other hand, when the computation difficulty is set to a relatively high level, the OTP equation may be determined to allow the OTP equation generator 212 to generate a digit rounding up or down in generating the OTP equation. For example, the OTP expression can be determined so that the authentication password of the corresponding digit can add, subtract, or multiply or divide the number up to nine. In this case, it is decided to take the result value in units without ignoring the rounding or the rounding. Can be. For example, if the authentication password of the corresponding digit is "7" and the calculation formula is set to * 5, the result is "35", but the first digit 3 is discarded and only the last digit 5 is set as the OTP of the corresponding digit.

Although the difficulty of the operation has been described above, the OTP expression may be configured in various ways, such as replacing specific digits constituting the authentication password or replacing a random digit password with a specific number or letter. Furthermore, before setting the user's desired difficulty level, it may be desirable to notify the user client 100 of the limits or possible ranges according to the difficulty level in the form of a help or an example. The reason why the user client can directly set the operation difficulty is to generate an OTP expression in consideration of individual differences of users.

1 again, in step S22, after access server 200 receives additional authentication information from the user client 100, only the operation difficulty information of the received additional authentication information is matched to the login ID of the corresponding user client 100. And store it in the database 220 (step S24), and again in step S26, the authentication password received from the user client 100 is a login ID of the corresponding user client 100 and a unique identification code of his site (can be determined in advance). By transmitting to the authentication server 300, and does not directly manage the authentication password in the subsequent login process. Next, the authentication server 300 performs a step S28 to match the site identification code and the login ID in the corresponding site and the authentication password received from the access server 300 to store in the database 320.

FIG. 2 is a sequence chart for explaining a login process through the system shown in FIG. 1. As shown in FIG. 2, first, in step S50, the user client 100 accesses the site of the access server 200, and then requests a login to the access server 200 by inputting a login ID and a login password in step S52. Done.

Then, the access server 200 checks in the database 220 the login ID and login password input by the user client 100 in step S54 and checks whether both the corresponding login ID and the login password match, and according to the result, the registered member. It is judged whether or not it is recognized (step S56).

As a result of the determination in step S56, if the non-subscribed member proceeds to step S57, the login is rejected, whereas if the subscribing member proceeds to step S58, the corresponding member is the user client 100 requesting further authentication in the login process. Judge. As a result of the determination in step S58, if the member is a user client 100 that has not requested additional authentication, the process proceeds to step S59 and immediately allows login, whereas if additional authentication is requested, steps S60 and S62 are performed. By generating an OTP equation suitable for the operation difficulty information set by the user client 100 to transmit to the user client 100.

3A and 3B are exemplary screens of an OTP equation, respectively. First, the example illustrated in FIG. 3A may correspond to an OTP equation when the computation difficulty set by the user client 100 is relatively low. When the authentication password has a total of eight digits, the example set by the user client 100 may be set. The OTP expression is configured to add 3 to the third digit from the highest digit of the authentication password and subtract one from the sixth digit. Therefore, if the authentication password set by the user client 100 during the membership registration process is, for example, "2/4/3/6/4/5/7/1", the final result value, that is, OTP is "2/4 /". 6 (= 3 + 3) / 6/4/5/6 (= 7-1) / 1.

Next, the embodiment of FIG. 3B may correspond to, for example, an OTP equation when the calculation difficulty set by the user client 100 is relatively high. When the authentication password has a total of 8 digits, the user client 100 may be used. The OTP expression is configured to multiply the 2nd digit from the most significant digit of the authentication password set by 3 and move forward by the second character (or number) in the 5th digit. Therefore, if the authentication password set by the user client 100 is, for example, "2/4/3/6 / l / u / c / k", the final result value, that is, OTP is "2/2 (4 * 3 = Take only the last digit at 12) / 3/6 / j / u / c / k ".

2 again, in step S64, the user client 100 transmits the input OTP, which is calculated by the user's brain action, to the access server 200, and the access server 200, in step S66, identifies an identification code of its own site, The ID of the corresponding user client 100, the OTP equation used, and the input OTP are transmitted to the authentication server 300 to request authentication.

Then, the authentication server 300 performs step S68 and substitutes the authentication password set and registered by the user client 100 to the OTP calculation received from the access server 200 to calculate the OTP, and again, steps S70 and S72. After performing the check whether the calculated OTP matches the OTP received from the access server 200 in step S66 performs authentication and transmits the result to the access server 200.

Thereafter, the access server 200 determines whether the authentication succeeds according to the authentication result received from the authentication server 300 in step S72 (step S74). If it is confirmed, after notifying the user client 100, the login is rejected (step S78).

4 is a sequence chart illustrating a member registration process in a security-enhanced login system according to another embodiment of the present invention. The same reference numerals are given to the same components as those of the embodiment of FIG. 1, and detailed descriptions thereof are omitted. . In the present embodiment, unlike the embodiment shown in FIG. 1, the OTP calculation generator 312 is not provided in the main server 210 'of the access server 200', and the main server of the authentication server 300 '( 310 ′), the authentication server 300 ′ directly generates an OTP calculation equation and transmits the generated OTP equation to the user client 100 in the login procedure of FIG. 5. And, due to this difference in configuration, the access server 200, unlike the embodiment of FIG. 1, authenticates the entire additional authentication information input by the user client 100 in step S26 'together with its own site identification code and login ID. As a result, the authentication server 300 matches the site identification code, the login ID, the authentication password, and the operation difficulty information with each other in step S28 ', and stores them in the database 320.

5 is a sequence chart for explaining a login process in the system shown in FIG. 4, the same components as in the embodiment of FIG. 2 are assigned the same reference numerals, and detailed description thereof will be omitted. In the present embodiment, unlike the embodiment shown in FIG. 2, the authentication server 300 ′ directly generates an OTP calculation expression and transmits the generated OTP expression to the user client 100. Specifically, if it is determined in step S58 that the corresponding member is the user client 100 who has requested additional authentication in the login process, the access server 200 displays its own site identification code and the login ID of the corresponding member in step S80. The authentication server 300 transmits a request for authentication.

In response, the authentication server 300 queries the database 320 by the login ID of the member, checks the operation difficulty set by the member, and generates a suitable OTP expression. In step S84, the OTP expression is generated. Send to the user client 100.

Next, in step S86, the user client 100 transmits the input OTP computed and input by the brain action of the user to the authentication server 300 ', and the authentication server 300' then performs step S88 to the user client 100 The OTP is calculated by substituting the authentication password registered and registered into the OTP calculation expression generated by itself, and again performing steps S90 and S92 to determine whether the calculated OTP matches the OTP received from the user client 100 in step S86. After confirming and performing authentication, the result is transmitted to the access server 200 '.

Steps S94, S96, and S98 are the same as those of steps S74, S76, and S78 in Fig. 2, and thus detailed description thereof is omitted.

The login system and method with enhanced security of the present invention are not limited to the above-described embodiments, and various modifications can be made within the scope of the technical idea of the present invention.

100: user client, 200, 200 ': access server,
210, 310: main server, 212, 312: OPT expression generator,
220, 320: database

Claims (17)

An access server database for matching and storing a registered login ID and a registered login password of a user client;
An OTP expression generator for generating OTP expressions, and
If the login ID and login password inputted from the user client match the registered login ID and the registered login password, the OTP expression generated by the OTP expression generator is provided to the user client, and the OTP is input from the user client. In the case of the authentication, the input OTP, the identification code of the access server site, the registered login ID, and the OTP arithmetic expression are transmitted to an authentication server. Security-enhanced login system comprising a connection server having a main server. An authentication server database for matching and storing a registered login ID of a user client to an access server, an identification code of the access server, and an authentication password of the user client;
When receiving the OTP input by the user client, the site identification code of the access server, the registered login ID and the OTP calculation expression from the access server, the registered login ID is queried from the authentication server database to extract a matching authentication password, Security authentication including a main server for determining whether or not the OTP calculated by substituting the authentication password into the OTP calculation equation and the OTP received from the access server and transmitting the result to the access server. Enhanced login system. The method of claim 2,
An access server database for matching and storing a registered login ID and a registered login password of a user client; An OTP expression generator for generating an OTP expression and a user who uses the OTP expression generated by the OTP expression generator when the login ID and login password received from the user client match the registered login ID and the registered login password. If the OTP is input from the user client, the inputted OTP, the identification code of the site of the access server, the registered login ID and the OTP calculation expression are transmitted to the authentication server, and the authentication success received from the authentication server is provided. And a connection server having a main server for determining whether to log in to a user client according to whether or not. The method of claim 3, wherein
The access server stores OTP operation difficulty information set in at least two levels in the access server database by matching the registered login ID,
And the OTP calculation expression is generated by reflecting the operation difficulty information. An access server database for matching and storing a registered login ID and a registered login password of a user client;
When the login ID and login password inputted from the user client match the registered login ID and the registered login password, the identification code of the site of the access server and the registered login ID are transmitted to the authentication server, and the authentication received from the authentication server A security-enhanced login system comprising an access server with a main server that determines whether to allow login to a user client upon success or failure. An authentication server database for matching and storing a registered login ID of a user client to an access server, an identification code of the access server, and an authentication password of the user client;
An OTP expression generator for generating OTP expressions, and
When the site identification code and the registered login ID of the access server are received from the access server, the OTP expression generated by the OTP expression generator is transmitted to the user client, and when the OTP is input from the user client, the authentication password. Security server comprising an authentication server having a main server for determining whether or not the OTP calculated by substituting into the OTP calculation equation and the OTP received from the user client and transmitting the result to the access server is enhanced. Login system. The method according to claim 6,
Access server database for matching and storing the registered login ID and the registered login password of the user client and identifying the site of the access server when the login ID and the login password input from the user client match the registered login ID and the registered login password. Security code, characterized in that it further comprises a connection server having a main server for transmitting the code and the registered login ID to the authentication server, and determines whether to allow the login to the user client according to the authentication success received from the authentication server. Login system. The method according to claim 6 or 7,
The authentication server stores OTP calculation difficulty information set from at least two levels in the authentication server database in accordance with the registered login ID, and generates the OTP calculation expression by reflecting the calculation difficulty information. Login system. Performed by a user server and an access server connected via a wired or wireless network with an authentication server,
(A) generating and providing an OTP expression to the user client when the login ID and the login password inputted from the user client match the registered login ID and the registered login password;
(B) requesting authentication by transmitting the input OTP, the identification code of the site of the access server, the registered login ID, and the OTP expression to an authentication server when the OTP is input from the user client;
And (c) determining whether to allow the login to the user client according to whether or not authentication succeeded from the authentication server. The method of claim 9,
The OTP calculation formula generated in the step (a) is generated by reflecting the OTP operation difficulty information set from at least two or more levels set by the user client at the time of membership registration. The method according to claim 9 or 10,
And transmitting the authentication password entered by the user client to the authentication server before step (a). Performed by a user server and an access server connected via a wired or wireless network with an authentication server,
(D) requesting authentication by providing the identification code of the site of the access server and the registered login ID to the authentication server when the login ID and the login password inputted from the user client match the registered login ID and the registered login password;
And (e) determining whether to allow the login to the user client according to the authentication success received from the authentication server. The method of claim 12,
And (d) transferring the authentication password input by the user client to the authentication server before step (d). Performed by an authentication server connected through a wired or wireless network with user clients and access servers,
(F) retrieving a matching authentication password by querying the registered login ID from the authentication server database when the OTP, the site identification code of the access server, the registered login ID, and the OTP calculation expression are received from the access server. Steps and
Determining whether the OTP calculated by substituting the authentication password into the OTP equation matches the OTP received from the access server, and transmitting the result to the access server. Way. The method of claim 14,
And receiving and storing the site identification code, the registered login ID, and the authentication password of the access server from the access server before matching with the authentication server database. Login method. Performed by an authentication server connected through a wired or wireless network with user clients and access servers,
(H) generating an OTP expression when the site identification code and the registered login ID of the access server are received from the access server and transmitting the generated OTP expression to the user client;
(I) extracting a matching authentication password by querying the registered login id in the authentication server database when receiving an OTP from a user client; and
(J) determining whether or not the OTP calculated by substituting the authentication password into the OTP equation matches the OTP received from the user client and forwarding the result to the access server. Login method. 17. The method of claim 16,
And receiving and storing the site identification code of the access server, the registered login ID, the authentication password, and OTP operation difficulty information set from at least two levels before matching (h) to the authentication server database. More equipped,
The OTP calculation formula generated in the step (h) is generated by reflecting the operation difficulty information security-enhanced login method.

Images