KR101437455B1 - Virtual bidding system and method for providing virtual bidding service based on cloud - Google Patents

Abstract

Disclosed are a cloud-based virtual bidding system and a method for providing a virtual bidding service. According to an embodiment of the present invention, the virtual bidding system includes: a user terminal which performs bidding to an electronic bidding system; and a virtual bidding place which virtualizes an application program. The system enables a user to enter the virtual bidding place through Internet and to perform bidding, thereby protecting bidding information which is important in an electronic bidding process and guaranteeing a safe transaction.

Description

Technical Field [0001] The present invention relates to a virtual bidding system and a virtual bidding service providing method,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic commerce technology, and more particularly to a bid technology using an electronic communication network.

The initial electronic bidding, which is generally used for electronic procurement, has developed in computer bidding using a computer system that can perform relatively fast computation and automatic processing than manual bidding. Due to the development of the Internet environment, it is possible to connect to a remote site by a web-based system to handle main tasks such as electronic commerce and bidding. Various attempts for security have been proposed. For example, a security program is installed on a user's PC for secure bidding for an unspecified number of users, or forgery of transmission channels is blocked by encrypting a transmission channel, and a security device such as a firewall is installed in the electronic bidding system, I tried to solve the problem.

Especially, centralized e-bidding system that requires fairness and high safety is centered on Web-based system, and it prevents attacks from outside such as firewall, intrusion detection, intrusion prevention, and risk detection, and distributes certificates for user identification , Encryption of important bidding information, and so on.

In order to implement the existing e-bidding system, first, the development of e-bidding-related server, database, etc., and connection of the e-bidding system to the Internet will be prioritized. Also, by accessing the web service, a user PC such as a bidder, an owner, etc. operates the Internet web browser to access the provided address.

Bidding, etc. are commerce transactions related to property and profits. The authentication method for identification of the principal and the like and the encrypted certificate are distributed, and the server side and the user PC mutually decrypt and authenticate them. Further, , And prevention of non-repudiation of transaction duties. It is necessary to take into consideration the development of safer and more stable service because the unspecified majority can access and conduct the transaction such as bidding.

However, when such an electronic bidding service is constructed, a vulnerability attack due to the connection to the electronic bidding system continues on the Internet, and web codes (scripts and applets, etc.) transmitted from the server to the user PC are partially exposed, There is a risk of hacking the electronic bidding system for a long time by storing various data related to the electronic bidding, and there is a risk of tampering with the user's main bidding service by processing the user PC, . In addition, there is a problem that it takes a lot of cost and efforts to develop an electronic bidding system so as to operate normally in various user PC environments.

According to one embodiment, a cloud-based virtual bidding system and a virtual bidding service providing method for securely providing an electronic bidding service are proposed.

A cloud-based virtual bidding system according to an embodiment includes a user terminal provided to a user for an electronic bidding, a virtualization server for virtualizing an application program through a virtual bidding field generated and providing an electronic bidding service through a virtualized application program A virtualization server, and an electronic bidding server that generates a virtual bidding field when a user terminal accesses the web and manages the created virtual bidding field.

A cloud-based virtual bidding service providing method according to another embodiment includes a bidding field initialization step of setting a virtualized bidding environment and creating a virtual bidding field based on an established virtual bidding environment, An assignment step of authenticating a user and a terminal according to a connection request of the user terminal and assigning a virtual bidding field if the authentication is successful; and, when the user terminal enters the assigned virtual bidding field, And a service providing step of providing an electronic bidding service using the virtualized application program.

According to one embodiment, a virtual bidding field for virtualizing a user terminal and an application program for performing an electronic bidding in an electronic bidding system is provided so that a user enters a virtual bidding field via the Internet to perform a bid service, Protect important bidding information and ensure secure transactions.

Particularly, as the user terminal performs the electronic bidding in the virtual bidding site provided by the virtualization server, it can block access to the electronic bidding system through hacking, data leakage, and forgery of important tasks of the user terminal which is relatively vulnerable to security . Furthermore, a virtual bidding environment optimized for the electronic bidding system can be created to provide a stable service even in a different environment of the user terminal.

Furthermore, when the use of the virtual bidding field is terminated, a strong security environment can be established by using a conversation technique of discarding the virtual bidding field. Also, if the virtual bidding field detects an external hacking or an abnormal phenomenon through the monitoring of the virtual bidding field, the security of the electronic bidding can be guaranteed by closing the virtual bidding field.

Further, secure e-bidding can be ensured by performing communication isolation, system isolation, execution isolation, and data and resource isolation through a virtual bid environment for security within the virtual bidding field.

1 is a configuration diagram of a cloud-based virtual bidding system according to an embodiment of the present invention;
FIG. 2 is a flowchart illustrating a method of providing a cloud-based virtual bidding service according to an embodiment of the present invention;
FIG. 3 is an exemplary view for explaining a virtual bid field monitoring process of an electronic bidding server according to an embodiment of the present invention;
4 is an exemplary view for explaining a process in which an electronic bidding server according to an embodiment of the present invention closes and retrieves a virtual bidding field according to a monitoring result,
5 is a diagram illustrating a state in which a virtual bidding field in a virtualization server according to an embodiment of the present invention is securely processed by a virtual bidding environment;
6 is an exemplary diagram illustrating a secure communication process between a user terminal and a virtualization server according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. In addition, the terms described below are defined in consideration of the functions of the present invention, which may vary depending on the intention of the user, the operator, or the custom. Therefore, the definition should be based on the contents throughout this specification.

1 is a configuration diagram of a cloud-based virtual bidding system according to an embodiment of the present invention.

Referring to FIG. 1, the virtual bidding system includes a user terminal 1, a virtualization server 3, and an electronic bidding server 4. The user terminal 1 may be, for example, the client terminal 10 for the client 12 or the bidder terminal 20 for the bidder 22.

The electronic bidding server 4 provides a web page for electronic bidding to the user terminal 1 connected via the web, and performs an electronic bidding service. For example, the e-bidding server 4 provides a 'country marketplace' web page for performing e-bidding services of the state electronic procurement. Through the 'Nara marketplace', the entire process of procurement can be processed online. At this time, the client 12 is a national institution, the bidder 22 becomes a corporation, and the electronic bidding is a government-to-business (G2B) transaction.

The electronic bidding server 4 includes an owner business processing unit 40 and a bidder business processing unit 42 for processing an electronic bidding process between the client 12 and the bidder 22, And a management unit 44.

When the client 12 accesses the electronic bidding server 4 via the web using the client terminal 10, the client boss processing unit 40 of the electronic bidding server 4 sends a successful bidder who should not be disclosed other than the authorized user Process the task of deciding. At this time, the prospective price and the preliminary price necessary for determining the successful bidder for the electronic bidding are generated and stored. Since the bidder 22 who submits the amount most similar to this amount is determined to be the successful bidder, it is not disclosed to the bidder 22 and the bidder 22 is managed so as not to be changed until the bidding is completed. In addition, the client's business processing unit 40 processes the wicket service, and the wicket service is a task of determining the final successful bidder by summing the amount submitted by the bidder 22 and other criteria, Keep it safe. Then, it is disclosed to the client 12 only at the time of opening of the ticket gate.

The bidder business processing unit 42 processes the bidder related business when the bidder 22 participates in the bid announced by the client 12 through the bidder terminal 20. [ The bidder 22 taps the price proposal and the related statement. At this time, the bidders' task processing unit 42 receives and stores the sealed bidding information from the bidders 22.

Fairness and confidentiality are necessary for the processing of the client business processing unit 40 and the bidder business processing unit 42 in the electronic bidding server 4. [ As shown in FIG. 1, the present invention connects the client business process unit 40 and the bidder business process unit 42 with the virtual bidding field 30 of the virtualization server 3. At this time, the owner business processing unit 40 and the bidder business processing unit 42 of the e-bidding server 4 are connected only by the virtualization server 3 and can process the business exclusively.

Internally, the virtual bidding field 30 is created through the virtual bidding environment 32 of the virtualization server 3, and the bidding field management unit 44 of the electronic bidding server 4 creates the virtual bidding environment 32, Generation, assignment, collection, and closing of the chapter 30 are controlled. The virtual bidding fields 30 may be a plurality of virtual bidding fields.

The virtualization server 3 virtualizes the user terminal 1 and the application program through the virtual bidding field 30. [ That is, in the virtualization server 3, a desktop virtualization technology for virtually creating the user terminal 1 on the virtualization server 3 and processing the work, and a virtualization server 3 for distributing application programs, Application virtualization technology is applied.

The virtualization server 3 according to an embodiment assures security against information security. Desktop virtualization, on the other hand, has the advantage of being able to block the leakage of data stored in distributed PCs and to ensure a high level of security in a centralized form. However, if the centralized system is illegally acquired, There is a security risk that data leakage and damage occur. The present invention considers the security of information security to prevent such security risks. The design considering the stability of information security of the virtualization server 3 will be described later in detail with reference to FIG. According to the above-described features, it is possible to provide secure electronic bidding by blocking hacking, data leakage, forgery and falsification of important business through security vulnerability of the user terminal.

For stability against information security, the virtualization server 3 executes the application program and processes the information in the independent virtual bidding environment 32. [ At this time, the virtual bidding environment 32 may include a virtual file system, a virtual registry, and the like. This virtual bidding environment 32 is securely protected from external access by the protection function of the virtual bidding environment 32. [ Reading and writing of a file or registry key by the execution of the virtualized application is performed within the virtual file system or virtual registry of the virtual bidding environment 32, respectively. These virtual file systems and virtual registries are isolated from host systems and host registries in the host environment. For example, the virtual bidding environment 32 is blocked from accessing an external application program, such as a host application program. Virtualized applications may include a variety of software such as virtualized web browsers, utilities, media players, security tools, and the like.

2 is a flowchart illustrating a method of providing a cloud-based virtual bidding service according to an embodiment of the present invention.

Referring to FIG. 2, the virtual bidding site creates an optimized bidding environment through a bid initialization step (201). Actually, an operating system (O / S) and a virtual bidding environment are configured to process the O / S image loading 209. In the bidding field initialization step 201, when a secure virtual bidding environment is created for security within a virtual bidding field such as communication isolation, system isolation, execution isolation, data and resource isolation, the process enters a queue preparation step 202.

The queue preparing step 202 is a step of waiting for the user to quickly assign a virtual bidding field. In the queue preparing step 202, a plurality of virtual bidding fields in which the initialized settings are maintained are generated and exist.

Next, the preparation preparation step 203 is a preparatory step specialized for the bidding-related client business and the bidding business. In this state, after the authentication 204 is performed by the user's connection request 210, the virtual bid field assignment step 205 is developed. At this time, various identification and authentication techniques such as ID / Password, encryption certificate, session of electronic bidding system, and One-Time Password (OTP) can be used in the authentication step 204.

In the authentication step 204, if it is not a normal connection request 210 or an authorized user, the process branches to a bid closing step 213, and the virtual bidding field is initialized and returned to the queue preparing step 202. In the authentication step 204, the normal bid request 210 and the authorized bidder are assigned 205 and provided to the user.

The virtual bidding field allocated to the user is entered 206 in accordance with the user's entry request 211 and after the entry of the user the business bidding 207 corresponding to the purpose such as opening preparation 203 and assignment 205 is performed And provides a virtual bidding environment for processing. In the business process step (207), the client business includes creating a preliminary price for the base price registration and the calculation of the planned price, and a ticket business for determining the winning bidder who views the price and specification after the companies have completed the tentative bid. The bidders' tasks also include bidding services that include bidding prices and statements and secure submissions.

In the job termination step 208, it is determined whether or not the job termination is accomplished in the job termination step 207 according to the user's completion intention, data processing status, business time, etc., and notifies the user of termination of the job when the purpose is completed. Accordingly, upon termination of the user connection, the bidding field closing step 213 is advanced to return to the above-described queue preparation 202 state.

3 is an exemplary diagram for explaining a virtual bidding field 30 monitoring process of the electronic bidding server 4 according to an embodiment of the present invention.

3, the virtual bidding field 30 is operated in the virtualization server 3, and the virtual bidding field 30 is used for inputting a basic amount of money, preparation of a preliminary price, And the electronic bidding server 4 collects the result of the business execution through the virtual bidding field 30 of the virtualization server 3. [ The client business processing unit 40 may collect the bid information from the virtualization server 3. [

The bidding field management unit 44 of the e-bidding server 4 checks whether the virtualization server 3 is normal or not and monitors the virtual bidding field 30 for processing the e-bidding service to ensure a normal environment. Monitoring can be done periodically.

4 is an exemplary diagram for explaining the process of closing and retrieving the virtual bidding field 30 according to the result of the virtual bidding field 30 monitoring by the electronic bidding server 4 according to the embodiment of the present invention.

4, the bidding field management unit 44 of the e-bidding server 4 monitors the virtualization server 3 and determines whether or not the virtual bidding environment in which the virtualization server 3 is mutually defined by hacking, The virtualization server 3 sends a message to the virtualization server 3 requesting the virtual bidder closure and recovery procedure, and the virtualization server 3 disconnects and closes the connection to the virtual bidding field 30, (44) retrieves the closed virtual bidding fields.

FIG. 5 is an exemplary view showing a state in which virtual bidding fields 30-1 and 30-2 in the virtualization server 3 according to an embodiment of the present invention are securely processed by the virtual bidding environment 32. FIG.

5, the virtual bidding fields 30-1 and 30-2 are composed of an operating system, a bid processing module such as a web browser, and an access program for accessing the electronic bidding system 3, . The secured state is communication isolation, system isolation, execution isolation, data and resource isolation. Security processing of the virtual bidding fields 30-1 and 30-2 may be performed through a virtual bidding environment for creating and retrieving virtual bidding fields 30-1 and 30-2.

In the security processing, the communication isolation allows a communication environment such as a protocol and an access port to be connected to an external user PC to allow only a minimum connection for business processing (bidder work and client service) of the virtualization server 3, , And other internal system communications.

System isolation is a system in which individual virtual bidding fields (eg, 30-1) are systematically separated from other virtual bidding fields (eg, 30-2) and virtual space. In the case of desktop virtualization, Devices, and application virtualization uses a separate system of internally processed programs based on user accounts.

Execution isolation ensures that the same execution process does not affect the performance of individual operations in several virtual bidding fields, and blocks the execution of processes other than those executed for the purpose of the virtual bidding field. If the unauthorized program infiltrating the virtual bidding fields 30-1 and 30-2 is blocked, the virtual bidding field is analyzed, or misuse or leakage is prevented.

Lastly, data and resource sequencing is the isolation of the space used to store the resources used by the operating system, access programs, and processing programs in the virtual bidding fields 30-1 and 30-2, and data sharing between individual virtual bidding fields And to make the allocated resources behave as if they were monopolized.

6 is an exemplary diagram illustrating a secure communication process between the user terminal 1 and the virtualization server 3 according to an embodiment of the present invention.

6, when the user requests the virtualization server 3 to perform authentication and bid processing using the remote connection means 301 of the user terminal 1, Only the compressed screen 306 is provided on the screen. The user terminal 1 blocks and extracts data other than the input permitted through the input filter 304 on the user terminal 1 to the user input through the user input device 402 such as a keyboard, , Storage, and outflow.

The encrypted data 302 is transmitted between the remote connection means 301 and the virtualization server 3 through the Internet and the virtualization server 3 also receives a number and coordinate input The input of the device is prevented from being transmitted to the virtual bidding field 30 other than the numerical value and the permitted input value such as the coordinates of the device. In addition to the screen information in the virtual bidding field, transmission to the outside is blocked, thereby ensuring safe data transmission / reception. To this end, the server side input filter 307 operates between the plaintext 303 and the encrypted data 302.

The embodiments of the present invention have been described above. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

The present invention is applied to a 'country marketplace' system that performs a national electronic procurement business, thereby realizing a safe bidding work environment, and a virtual bidding field for virtualizing PCs and application programs dedicated to electronic bidding in an electronic bidding system, To enter the virtual bidding field to perform the bid service.

1: User terminal 3: Virtualization server
4: Electronic bidding server 12: Client
22: Bidder 30: Virtual Bidding Sheet
32: virtual bidding environment 40:
42: bidder business processing unit 44: bidding management unit

Claims (11)

A user terminal provided to the user for electronic bidding;
A virtualization server for providing a virtual bidding field generated in a virtual manner and isolating each virtual bidding field and its resources and communication through a virtual bidding environment to secure a virtual bidding field; And
When the user terminal accesses the web server, a virtual bidding field is created in the virtualization server, and the generated virtual bidding field is monitored. If an external hacking or an abnormal phenomenon is found in the virtual bidding field, An electronic bidding server for closing and retrieving the electronic bidding server; / RTI >
Wherein the user terminal filters the input through the input interface so as to filter out and remove the input other than the permitted input using the input filter, and the virtualization server transmits only the input necessary for the electronic bidding Wherein the input filter of the virtualization server operates between the plaintext and the encrypted data. ≪ RTI ID = 0.0 > 11. < / RTI > The virtualization server according to claim 1,
An operating system, a web browser for displaying virtualized screen information, and a dedicated program connected to the electronic bidding server. delete The method of claim 1, wherein the virtual bidding environment comprises:
Wherein the communication environment to be connected to the user terminal comprises: communication isolation for allowing communication for performing bidding tasks of the electronic bidding server and blocking other communication; system isolation for separating different virtual bidding fields; Execution Isolation that blocks the execution of other processes besides the e-bidding process without affecting the execution of the individual actions of the bidding section; Blocks data sharing between the virtual bidding chapters; Based virtual bidding system characterized in that it performs resource and data isolation to isolate a resource and a space for storing data. delete delete delete delete delete delete delete

Images