KR101222471B1 - System and method for certificating identification and password selectively - Google Patents

Abstract

PURPOSE: A selective online authentication system and a method thereof are provided to prevent the leakage of personal information caused by automatic login by increasing variables to be inputted when a part of an ID or a password is consecutively wrongly inputted. CONSTITUTION: An authentication information storage unit(31) stores authentication information including an ID and a password of a user. An input mode selecting unit(33) selects a first input mode for inputting a part or the whole of an ID and a password, a second input mode for inputting parts of the ID and the password, and a third input method for a part of the ID or a part of the password. An input variable generating unit(35) generates an input variable corresponding to the parts of the ID and the password. An information input unit(37) inputs authentication information corresponding to the generated input variable. A comparison determining unit(39) determines identity between the inputted authentication information and pre-stored authentication information. A control unit(43) approves access to a specific domain homepage. [Reference numerals] (31) Authentication information storage unit; (33) Input mode selecting unit; (35) Input variable generating unit; (35a) First variable generating part; (35b) Second variable generating part; (37) Information input unit; (39) Comparison determining unit; (41) Input number determining unit; (43) Control unit

Description

Selective online authentication system and method {System and method for certificating identification and password selectively}

The present invention relates to an optional online authentication system and method, and more particularly, to prevent the leakage of personal information that may occur from an automatic login state by entering only a part of each of the ID and / or password on the Internet or mobile communication network, manual login It relates to an optional online authentication system and method that can prevent the inconvenience of input that can occur from.

In general, the Internet is defined as a collection of networks using the TCP / IP protocol. A user can access various web pages using the Internet, and the web pages have a large number of users according to the contents and the ease of communication with other users. In addition, users share thoughts, information, and collective behaviors through the Internet, tweets, or SNS, etc., and are developing various public influences in all aspects of politics, economy, society, and culture based on the Internet.

However, the user can access a specific web page, for example, a web site of a portal site using the Internet, and receive news, map search and search from the web page. You must log in by entering your password. In addition, the Internet web pages require an increasingly complex ID and password to protect personal information from hacking or identity theft.

This demand arises not only on the online web pages via the World Wide Web but also when the web pages are accessed through a mobile communication network using a smartphone or a tablet PC. However, smart devices such as smartphones have a disadvantage that it is difficult to correctly enter a long and complicated ID and password at once because the input window and the input means are smaller than the keyboard due to the size limitation.

In order to solve this disadvantage, a program for automatic login has been used a lot, and the technology for automatic login is disclosed in Korean Patent Publication No. 10-2011-0022030 (published on March 4, 2011, hereinafter referred to as 'prior document 1') and It is disclosed in Korea Patent Publication No. 10-2009-0070768 (published on July 1, 2009, hereinafter referred to as 'prior document 2').

The prior art document 1 relates to an automatic login method, which includes a process of authenticating to activate a folder in which automatic login data is stored, and a login of the website from the current page when viewing an Internet page through a web browser. Selecting an icon of the corresponding site and using the current page address data as a redirect value, and importing the login data associated with the icon and transmitting the same to the corresponding website to perform an automatic login.

On the other hand, the prior art document 2 relates to an automatic login system and method using a portable terminal, when detecting the automatic login request of the web site requests login information through a mobile server and receives the login information through the mobile server automatically A web server for logging in, and the mobile server for transmitting the login information from the web server to the portable terminal, and transmitting the login information from the portable terminal to the web server, wherein the portable terminal receives the login information. Upon receiving the request, the login information stored in the memory is retrieved and transmitted to the mobile server.

However, the technology disclosed in the prior art documents 1 and 2 has the advantage that it is easy to access the Internet page without pressing the ID and password of the Internet page at all, but when the smart device is exposed or lost to others, personal information is leaked or stolen The disadvantage is that it is very likely to be.

Prior Document 1: Korean Patent Publication No. 10-2011-0022030 (2011.03.04 publication) Prior Document 2: Korean Patent Publication No. 10-2009-0070768 (published Jul. 1, 2009)

An object of the present invention is to solve the problems as described above, when accessing the Internet page with a smart device, such as an online system and method for selectively logging in to the Internet page without pressing all of the ID and / or password To provide.

In addition, an object of the present invention is to enter only a part of each of the ID and / or password, and personal information that may arise from automatic login by increasing the number of input variables that must be entered if a part of each of the ID and / or password successively wrong It is an object of the present invention to provide an optional online authentication system and method that can prevent the possibility of the leakage and theft of the network.

In addition, an object of the present invention is to select only a part of each of the ID and / or password by the selective online authentication that can reduce the mistakes of input that can occur from entering the entire ID and password even if the size of the smart device input means is small It is to provide a system and method.

In order to achieve the above object, an optional online authentication system according to an embodiment of the present invention selects an authentication information storage unit for storing authentication information including a user ID and a password, and a first input method for inputting all of an ID and a password. Or an input method selection unit for selecting a second input method for inputting a part of an ID and a part of a password, or selecting a third input method for inputting a part of an ID or a part of a password, wherein the second input method is selected An input variable generator for generating an input variable corresponding to a part of the ID and a part of the password, and generating an input variable corresponding to a part of the ID or a part of the password when the third input method is selected; Information input unit for inputting the authentication information corresponding to the, the input authentication information is stored in the authentication information When it is determined that the authentication information input from the information input unit is the same as the authentication information previously stored in the authentication information storage unit according to the comparison determination unit determining whether the same as the authentication information previously stored in the unit and the comparison determination unit, And a control unit for approving access to the domain homepage.

In addition, according to the selective online authentication system according to an embodiment of the present invention, the input variable generating unit is a first variable generating unit for generating at least one portion selected from the ID and password and at least one selected from the ID and password Although generating a part as an input variable, characterized in that it comprises a second variable generator for generating an input variable different from the first variable generator.

In addition, according to the selective online authentication system according to an embodiment of the present invention, the number of input variables in the second variable generator is greater than the number of input variables in the first variable generator.

In addition, according to the selective online authentication system according to an embodiment of the present invention, it characterized in that it further comprises an input frequency determination unit for counting a continuous wrong number of authentication information input to the information input unit.

In addition, according to the selective online authentication system according to an embodiment of the present invention, the control unit determines that the input authentication information is different from the authentication information previously stored in the authentication information storage unit according to the determination of the comparison determination unit. It characterized in that for controlling the input variable generation unit to deny the access of, and to generate a new input variable.

In addition, the selective online authentication method according to an embodiment of the present invention in order to achieve the above object iii) preparing access to the homepage of a specific domain that is already registered, ii) using the input method selection unit to complete all of the ID and password Selecting a first input method for inputting, selecting a second input method for inputting a part of the ID and a part of the password, or selecting a third input method for inputting a part of the ID or a part of the password, i) When the second input method or the third input method is selected in step ii), generating a first input variable corresponding to a part of at least one authentication information selected from an ID and a password in a first selection input window; i) Inputting authentication information corresponding to the first input variable into the first selection input window; i) input authentication corresponding to the first input variable; Determining whether the information is the same as the authentication information previously stored in the server of the homepage; and iii) if the input authentication information corresponding to the first input variable is the same as the authentication information previously stored in the server, access to the homepage is made. Authorizing.

In addition, according to the selective online authentication method according to an embodiment of the present invention, if the input authentication information corresponding to the first input variable in step iii) is different from the authentication information previously stored in the server, the first input Generating a second input variable different from the variable in the second selection input window; i) determining whether the input authentication information corresponding to the second input variable is the same as the authentication information previously stored in the server of the homepage; And (iii) authorizing access to the homepage when the input authentication information corresponding to the second input variable is the same as the authentication information previously stored in the server.

In addition, according to the selective online authentication method according to an embodiment of the present invention, when the authentication information corresponding to the second input variable in step iii) is different from the authentication information previously stored in the server, the homepage is accessed. Rejection, characterized in that proceeds to the step of entering all of the ID and password.

As described above, according to the selective online authentication system and method according to the present invention, when accessing an Internet page with a smart device or the like, it is possible to log in to the Internet page without pressing all the ID and / or password.

In addition, according to the optional online authentication system and method according to the present invention, by inputting only a part of each of the ID and / or password, and automatically increasing the number of variables that must be entered when a part of each of the ID and / or password successively wrong It is also possible to block the possibility of the leakage and theft of personal information that may occur from login.

In addition, according to the selective online authentication system and method according to the present invention, by inputting only a part of each of the ID and / or password, even if the size of the smart device input means is small, it is possible to reduce the mistakes of input.

1 is a diagram schematically illustrating a selective online authentication system according to an embodiment of the present invention.
2 is a block diagram illustrating an optional online authentication system according to an embodiment of the present invention.
3A and 3B are diagrams for describing an information input unit of a selective online authentication system according to an embodiment of the present invention.
4 is a flowchart illustrating a selective online authentication method according to an embodiment of the present invention.

These and other objects and novel features of the present invention will become more apparent from the description of the present specification and the accompanying drawings.

Hereinafter, the configuration of the selective online authentication system according to an embodiment of the present invention will be described in detail with reference to FIGS. 1 to 3B.

1 is a view for schematically illustrating an optional online authentication system according to an embodiment of the present invention, Figure 2 is a block diagram illustrating a selective online authentication system according to an embodiment of the present invention, Figures 3a and 3b FIG. 4 is a diagram illustrating an information input unit of an optional online authentication system according to an exemplary embodiment of the present invention.

Referring to FIG. 1, an optional online authentication system according to an embodiment of the present invention includes a user terminal 11, an internet network 17, and a portal service system 21.

The user terminal 11 is a terminal connected to the portal service system 21 through the Internet network 17 and receiving various Internet services such as data search, email transmission, reception, homepage management, group service, chat and games. The user terminal 11 includes all kinds of devices that can be connected to the Internet network 17 by wire / wireless, such as a home PC, a PDA, a smart device 15, and a tablet PC. Accordingly, the user terminal 11 may be directly connected to the Internet network 17 or may be connected to the Internet network 17 via the mobile communication network 19.

The portal service system 21 is a system that operates a portal site and provides various Internet services including a search service. The portal service system 21 includes a web server 23, a portal site operation database 25, and an affiliated site operation system (not shown). Include. The web server 23 operates and manages a portal site, and provides various Internet services such as search, e-mail transmission, homepage management, community service, chat, and game using various additional service servers (not shown) in the system. Server.

The portal site operation database 25 stores subscriber information and data for various additional services provided by the portal site. The portal site operation database 25 stores an optional login allowable site list previously set by a user and an ID and password for each of the affiliated sites. In this case, the selective login allowed site means a site where only a part of ID and password for authentication can be input or only a part of ID or password can be used for login.

2 to 3B, the selective online authentication system according to an embodiment of the present invention is provided to the web server 23 of the portal service system 21 or the mobile communication network 19 when the Internet network 17 is directly used. In the case of connecting to the Internet network 17 by using a) may be provided in the form of an application program, for example, an application.

The authentication system includes an authentication information storage unit 31, an input method selection unit 33, an input variable generator 35, an information input unit 37, a comparison determination unit 39, an input frequency determination unit 41, and a control unit. (43). When the authentication system is provided in the form of an application of a smart device, the authentication system may determine whether the ID and / or password input by the user are correct using a login authentication program installed in the smart device.

The authentication information storage unit 31 is provided in the portal site operation database 25 or in the login authentication program of the smart device is provided with the user's authentication information, for example, ID, password, social security number, residential address, email address, telephone Store your number and other personal information.

The input method selection unit 33 selects a first input method for inputting all of an ID and a password when the user accesses and logs in to a homepage of a specific domain, or a second input method for inputting a part of each of an ID and a password. Or to select a third input method of inputting a part of ID or password. When the user selects the first input method, the user can log in by inputting both the ID and password previously stored in the authentication information storage unit 31 of the portal site homepage to log in to the homepage of a specific domain, for example, the portal site. have.

When the user selects the second input method, the authentication information of the user is stored in advance in the authentication information storage unit 31 of the homepage, and only a part of each of the ID and password is inputted into the information input unit 37 of the homepage. You can log in to the homepage of a specific domain. For example, if the ID previously inputted to a specific homepage is 14 digits of identification and the password is 7 digits of ABCDEFG, the user selects only a part of the 14 digit ID and a part of the 7 digit password by selecting the second input method. Can be entered.

When the user selects the third input method, the user may log in to a specific homepage by inputting only a part of the 14-digit ID or a part of the 7-digit password. In this case, the input variable generation unit 35 randomly extracts a part of the ID and password previously stored in the authentication information storage unit 31 under the control of the control unit 43 and inputs the user to the information input unit 37. Set variables to be done. In this case, the information input unit 37 may include a first input unit 37a for inputting a part of the ID and a second input unit 37b for inputting a password.

For example, if the ID and password previously inputted on a specific homepage are 14 digits of identification and 7 digits of ABCDEFG, respectively, the input variable generating unit 35 is the second d, the third e, and 14 of the 14-digit IDs. The n th may be selected as an input variable, and the first A and the fifth E may be selected as input variables among the passwords. The user inputs the letters d, e, and f corresponding to the second, third, and 14th characters of the 14-digit ID into the first input unit 37a, respectively, and corresponds to the first and fifth of the passwords. It is possible to log in to a specific homepage by inputting letters A and E into the second input unit 37b, respectively.

In this case, the input variable generator 35 generates an input variable of the ID and password by using the first variable generator 35a which generates a part of the 14-digit ID and the seven-digit password as the input variable. In addition, the input variable generator 35 includes a second variable generator 35b for generating an input variable different from the first variable generator 35a. The first variable generator 35a generates a part of an ID and password as an input variable at the first login, and the second variable generator 35b generates a part of the ID and password at a second login after the first login fails. Create as an input variable. Preferably, the number of input variables in the second variable generator 35b is larger than the number of input variables in the first variable generator 35a. In addition, the input variable generator 35 includes a third variable generator (not shown) capable of generating a larger number of input variables than the second variable generator 35b according to the characteristics or the operator of the webpage. can do.

Therefore, when the user accesses the Internet page with a smart device, the user can log in to the Internet page without pressing all of the ID and / or password, and the size of the smart device input means by inputting only a part of each of the ID and / or password. Even if is small, the mistake of input can be reduced.

The comparison determination unit 39 determines whether an input variable input by the user to the first input unit 37a and the second input unit 37b is the same as the ID and password previously stored in the authentication information storage unit 31. . In this case, the control unit 43 inputs the input variable inputted by the comparison determination unit 39 into the first selection input window, that is, the first input unit 37a and the second input unit 37b which should be input at the first login. If it is determined that the same as the ID and password previously stored in the storage unit 31, the login of the specific homepage is approved.

However, if it is determined that the input variable input in the first selection input window is not the same as the ID and password previously stored in the authentication information storage unit 31, the control unit 43 rejects the login of a specific homepage, and the input variable The generation unit 35 is controlled to generate a new input variable.

If the first login fails, the user inputs an input variable into the second selection input window, that is, the first input unit 37a and the second input unit 37b to be input at the second login. In this case, the input variable to be input in the second selection input window is more than the number of input variables to be input in the first selection input window. In other words, if the user continuously inputs a part of the ID and password incorrectly, it means that the number of input of the ID and password to be input next increases according to the wrong number of times.

For example, if it is determined by the comparison determining unit 39 that the first login, that is, three of the 14-digit ID in the first selection input window, and two of the password input is wrong by the comparison determination unit 39, The control unit 43 controls input variable generator 35 to input four variables among 14-digit IDs and input three variables among passwords in the second selection input window according to the determination of the input frequency determining unit 41. can do.

If the user fails to log in twice consecutively, the controller 43 may enhance security to input all of the ID and password, but may generate a third selection input window to input the input variables. Since the generation flow of the third selection input window is the same as the generation flow of the first and second selection input windows, detailed description thereof will be omitted.

Accordingly, the selective online authentication system according to an embodiment of the present invention automatically inputs only a part of each of the ID and / or password, and increases the number of input variables that must be input when a part of each of the ID and / or password is continuously wrong. Blocks the possibility of personal information leakage and theft from login.

Next, the selective online authentication method according to an embodiment of the present invention will be described in detail with reference to FIGS. 3 and 4.

4 is a flowchart illustrating a selective online authentication method according to an embodiment of the present invention.

3 and 4, an optional online authentication method according to an embodiment of the present invention includes preparing to access a homepage of a specific domain that has been previously registered (S410). The homepage access refers to logging in to a homepage. After the step S410, it is determined whether the homepage is a previously registered homepage (S415), and if it is determined that the homepage is a previously registered homepage, the ID and / or password using the input method selection unit 33 It is determined whether to selectively input each part (S420).

In other words, the user selects a first input method for inputting all of the ID and password by using the input method selector 33, or selects a second input method for inputting a part of each of the ID and password, A third input method of inputting a part of the password may be selected. When the user selects the first input method, the user can log in to a specific homepage by inputting both the ID and the password.

In contrast, when the user selects the second input method or the third input method, a first selection input window for inputting a part of each of the ID and / or the password as an input variable is generated (S425). In step 1430, input variables are input into the selection input window.

If it is determined by the comparison determination unit 39 that the first selected input ID and password are the same as the authentication information previously stored in the authentication information storage unit 31 (S435), the controller 43 considers that the login is successful. Approve the access to the homepage (S460). However, if it is determined by the comparison determining unit 39 that the first selected input ID and password are not the same as the authentication information previously stored in the authentication information storage unit 31, the control unit 43 determines the number of times of input. In operation S440, the third variable generation unit 35b of the input variable generation unit 35 is controlled to generate a second input input window to input a new input variable. When the user inputs an input variable in the second selection input window (S445), the comparison determining unit 39 may input the input variable input in the second selection input window into the authentication information previously stored in the authentication information storage unit 31. It is determined again whether the same (S450).

In step S450, if the input variable input in the second selection input window is the same as the authentication information previously stored in the authentication information storage unit 31, access to the homepage is approved (S460), but the control unit 43 inputs the input variable. If the variable is different from the previously stored authentication information, access to the homepage is denied, and the process proceeds to the step of inputting all of the ID and password (S455).

Although the present invention has been described in detail with reference to the above embodiments, it is needless to say that the present invention is not limited to the above-described embodiments, and various modifications may be made without departing from the spirit of the present invention.

11: user terminal 17: Internet network
21: portal service system 31: authentication information storage unit
33: input method selector 35: input variable generator
35a: first variable generator 35b: second variable generator
37: information input unit 37a: first input unit
37b: second input unit 39: comparison determining unit
41: input frequency determination unit 43: control unit

Claims (8)

An authentication information storage unit for storing authentication information including a user ID and a password;
Select a first input method for inputting all of the ID and password, select a second input method for inputting part of the ID and a part of the password, or select a third input method for inputting part of the ID or part of the password An input method selection unit for performing;
Create an input variable corresponding to a part of the ID and a part of the password when the second input method is selected, and generate an input variable corresponding to a part of the ID or a part of the password when the third input method is selected. part;
An information input unit for inputting authentication information corresponding to the generated input variable;
A comparison determination unit that determines whether the input authentication information is identical to the authentication information previously stored in the authentication information storage unit; And
And a controller for approving access to a specific domain homepage when it is determined that the authentication information input from the information input unit is the same as the authentication information previously stored in the authentication information storage unit. The method of claim 1, wherein the input variable generating unit
A first variable generator configured to generate at least one selected from among an ID and a password as an input variable; And
And a second variable generation unit generating at least one selected from an ID and a password as an input variable, and generating an input variable different from the first variable generation unit. The method of claim 2,
And the number of input variables in the second variable generator is greater than the number of input variables in the first variable generator. The method of claim 1,
And an input frequency determination unit for counting consecutive wrong numbers of authentication information input to the information input unit. The method of claim 1,
If it is determined that the input authentication information is different from the authentication information previously stored in the authentication information storage unit, the control unit rejects access to the homepage and generates the input variable so as to generate a new input variable. Online authentication system, characterized in that for controlling the wealth. Iii) preparing to access a homepage of a specific registered domain;
Ii) selecting a first input method for inputting all of the ID and password using the input method selection unit, selecting a second input method for inputting a part of the ID and a part of the password, or selecting a part of the ID or a part of the password Selecting a third input method to input;
I) If the second input method is selected in step ii), the first input variable corresponding to a part of the ID or a part of the password is selected; Generating in a selection input window;
Inputting authentication information corresponding to the first input variable into the first selection input window;
Determining whether the input authentication information corresponding to the first input variable is the same as the authentication information previously stored in the server of the home page; And
And iii) authorizing access to the home page if the input authentication information corresponding to the first input variable is the same as the authentication information previously stored in the server. The method according to claim 6,
Iii) If the input authentication information corresponding to the first input variable in step iii) is different from the authentication information previously stored in the server, a second input variable different from the first input variable is generated in the second selection input window. Doing;
Determining whether the input authentication information corresponding to the second input variable is the same as the authentication information previously stored in the server of the home page; And
And iii) authorizing access to the home page if the input authentication information corresponding to the second input variable is the same as the authentication information previously stored in the server. The method of claim 7, wherein
Iii) If the input authentication information corresponding to the second input variable in step iii) is different from the authentication information previously stored in the server, the step of denying access to the homepage and entering all of the ID and password Online authentication method characterized in that.

Images