KR101918553B1 - Agent authentication method and apparatus - Google Patents

Abstract

The present invention provides a method for authenticating an agent and a device thereof, which can use a public certificate to legitimacy of proxy action. The method for authenticating an agent comprises the following steps of: generating a credit certificate based on the public certificate received from an agent registration application terminal and receiving agent delegation information including an agent identifier, proxy delegation content and a proxy validate period related to a determined agent; verifying a validity related to the credit certificate and storing the agent delegation information in an agent delegation database together with the credit certificate; receiving application agent information including an application agent identifier, application proxy content and an application time related to an application agent from an agent authentication application terminal when the agent authentication application terminal receives a proxy behavior application from the application agent; searching for the agent identifier from the agent delegation database based on the application agent identifier; determining whether the application proxy content belongs to the proxy delegation content and whether the application time is within the proxy validate period; and providing the credit certificate and the application proxy content to the proxy authentication application terminal if the determination is successfully performed.

Description

[0001] AGENT AUTHENTICATION METHOD AND APPARATUS [0002]

The present invention relates to a proxy authentication technology, and more particularly, to a proxy authentication method and apparatus capable of confirming the legitimacy of a proxy action and performing proxy work through prior authorization of an agent by a party.

The current authorized certificate is used to certify that the act is by me prior to my specific action. For example, an authorized certificate can be used to authenticate a person before the transfer of the bank, and if the authentication is successful, the transfer of the bank can be performed. That is, a public certificate can be used to authenticate the identity of a person and is not used to authenticate an agent's actions.

FIG. 1 is a diagram illustrating an agent system for a proxy to conduct a proxy action at a bank. FIG.

Referring to FIG. 1, an agent system 100 includes a principal 110, a registry 140, a bank 130, and an agent 140.

The applicant 110 is a person who is a person to conduct a legal act and can directly delegate a specific legal act to the proxy 140. If necessary, a personal seal certificate or a corporation seal certificate (hereinafter referred to as a seal seal) Certificate) to the agent 140.

The registry office 140 may correspond to an institution issuing a seal certificate, and the bank 130 may correspond to a legal act. The agent 140 can visit the bank 130 with the seal certificate paid by the principal 110 to represent a specific legal act on the principal 110. [

Here, the agent system 100 may include a visit to the registry 140 and a problem with authority abuse by the agent 140.

As a conventional technique related thereto, Korean Patent Laid-Open Publication No. 10-2006-0108861 proposes authentication and settlement of a proxy by a series of methods such as requesting a proxy to settle a payment. Korean Patent Registration No. 10-1013935 relates to a contract authentication system for extracting individual contractor information upon receipt of a contract authentication application from an applicant and issuing an authentication code by performing user authentication and a contract authentication method thereof.

More specifically, Korean Patent Laid-Open No. 10-2006-0108861 relates to a bill payment authentication method by an agent, comprising: receiving an inquiry from a customer for purchase from an Internet server; The Internet server informing the payment method through the agent of the customer; Receiving a payment from the customer through the agent; Receiving identification information of the customer, identification information of the agent, and a telephone number of the agent from the customer; Connecting the telephone with the agent by the Internet server; Confirming that the telephone connected to the agent is the same as the telephone number of the agent; Recording voice information about the intention of the agent to pay for the purchase; And a step of delivering the payment intention to the customer.

Korean Patent Registration No. 10-1013935 discloses a system and method for transmitting a contract authentication request including at least one contractor information from an applicant on a wired / Means for requesting authentication of the individual contractor information extracted from the contract authentication application and transmitting the authentication result; Means for generating a unique authentication code and storing the unique authentication code in the DB if the authentication result of all the individual contractors is successful; Means for responding to the applicant the authorization code of the individual contractor; And a contract authentication server including means for SMS transmission of the authentication code using the mobile telephone number of the individual contractor extracted from the contract authentication application.

Korean Patent Publication No. 10-2006-0108861 (published on October 18, 2006) Korean Patent Registration No. 10-1013935 (registered on February 21, 2011)

One embodiment of the present invention is to provide a proxy authentication method and apparatus capable of supporting the legitimacy check of proxy action and the execution of proxy work through prior authorization of the agent by the party.

One embodiment of the present invention is to provide a proxy authentication method and apparatus that can utilize an authorized certificate for the legitimacy of a proxy act.

One embodiment of the present invention is a proxy authentication method and apparatus capable of verifying the legitimacy of a proxy action without generating a public certificate by generating a public certificate for validity period limitation or an authorized certificate for use number limitation through an operation on a public certificate as a credit certificate .

Among the embodiments, the agent authentication method includes the steps of (a) generating a credit certificate based on the public certificate received from the agent registration application terminal, and transmitting the agent delegation information including the agent identifier, the proxy assignment contents, Receiving; (b) verifying the validity of the credit certificate and storing the proxy delegation information together with the proxy delegation database; (c) receiving, from the agent authentication application terminal, the agent agent information including the agent agent identifier, the agent agent content, and the application time point when the agent authentication application terminal receives the proxy agent application from the agent agent application terminal; (d) retrieving the agent identifier from the agent delegation database based on the application agent identifier; (e) determining whether the application proxy content belongs to the proxy proxy content and whether the application time point is within the proxy validity period; And (f) if the determination is successful, providing the proxy certificate request terminal with the credit certificate and the proxy certificate content.

In one embodiment, the step (a) includes receiving an authorized certificate for validity period limitation or an authorized number of use number limitation based on the selection of the agent registration application terminal, and generating the certificate using the credit certificate.

In one embodiment, the step (a) includes the step of copying and manipulating the authorized certificate through the agent registration processing program installed in the agent registration application terminal to generate the valid period certificate for the validity period or the authorized period certificate for the use period .

In one embodiment, the step (a) includes receiving biometric information of the representative through the agent registration processing program installed in the agent registration application terminal and receiving the agent identifier.

In one embodiment, the step (b) includes: obtaining a series of verification codes generated by a proxy registration processing program installed in the proxy registration application terminal and included in the credit certificate, and generating a verification hash function And verifying the validity of the credit certificate.

In one embodiment, the step (c) includes the step of acquiring the biometric information of the application agent through the agent authentication processing program installed in the agent authentication application terminal and receiving the application agent identifier.

In one embodiment, the method further comprises the step of (g) providing the proxy agent content to the agent registration application terminal, and then causing the agent authentication application terminal to perform the application proxy content based on the credit certificate.

In one embodiment, the step (g) is a step of delaying the execution of the application proxy content until the time for canceling the application proxy action canceled on the basis of the gravity of the proxy proxy contents set by the agent authentication application terminal .

The disclosed technique may have the following effects. It is to be understood, however, that the scope of the disclosed technology is not to be construed as limited thereby, as it is not meant to imply that a particular embodiment should include all of the following effects or only the following effects.

The agent authentication method and apparatus according to an embodiment of the present invention can support the legitimacy check of agency activity and the execution of agency work through the prior authorization of the agent by the party.

The agent authentication method and apparatus according to an embodiment of the present invention can utilize an authorized certificate for the legitimacy of proxy act.

The agent authentication method and apparatus according to an embodiment of the present invention can generate an authentication certificate for validity period limitation or an authorized certificate for use number limitation using an operation on an authorized certificate so as to verify the legitimacy of the proxy act without leakage of the authorized certificate have.

FIG. 1 is a diagram illustrating an agent system for a proxy to conduct a proxy action at a bank. FIG.
2 is a diagram illustrating a representative authentication system according to an embodiment of the present invention.
3 is a view showing the agent authentication server shown in Fig.
FIG. 4 is a flowchart illustrating a proxy authentication process by the proxy authentication system shown in FIG. 2. FIG.

The description of the present invention is merely an example for structural or functional explanation, and the scope of the present invention should not be construed as being limited by the embodiments described in the text. That is, the embodiments are to be construed as being variously embodied and having various forms, so that the scope of the present invention should be understood to include equivalents capable of realizing technical ideas. Also, the purpose or effect of the present invention should not be construed as limiting the scope of the present invention, since it does not mean that a specific embodiment should include all or only such effect.

Meanwhile, the meaning of the terms described in the present application should be understood as follows.

The terms "first "," second ", and the like are intended to distinguish one element from another, and the scope of the right should not be limited by these terms. For example, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component.

It is to be understood that when an element is referred to as being "connected" to another element, it may be directly connected to the other element, but there may be other elements in between. On the other hand, when an element is referred to as being "directly connected" to another element, it should be understood that there are no other elements in between. On the other hand, other expressions that describe the relationship between components, such as "between" and "between" or "neighboring to" and "directly adjacent to" should be interpreted as well.

It is to be understood that the singular " include " or "have" are to be construed as including the stated feature, number, step, operation, It is to be understood that the combination is intended to specify that it does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

In each step, the identification code (e.g., a, b, c, etc.) is used for convenience of explanation, the identification code does not describe the order of each step, Unless otherwise stated, it may occur differently from the stated order. That is, each step may occur in the same order as described, may be performed substantially concurrently, or may be performed in reverse order.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Commonly used predefined terms should be interpreted to be consistent with the meanings in the context of the related art and can not be interpreted as having ideal or overly formal meaning unless explicitly defined in the present application.

2 is a diagram illustrating a representative authentication system according to an embodiment of the present invention.

Referring to FIG. 2, the agent authentication system 200 includes a proxy authentication server 210, a proxy delegation database 220, a proxy registration application terminal 230, and a proxy authentication application terminal 240.

The agent authentication server 210 is a computing device that authenticates an agent and proxy work when an agent according to an agent application performs work. The agent authentication server 210 can work with the agent delegation database 220. The agent authentication server 210 may be connected to the agent registration application terminal 230 and the agent authentication application terminal 240 via a network. In one embodiment, the proxy authentication server 210 may correspond to a Trusted Third Party (TTP).

The proxy delegation database 220 may store the credit certificate and proxy delegation information associated with the proxy application by the proxy registration application terminal 230 and may store the application proxy information associated with the proxy proxy application 230 by the proxy authentication application terminal 230 . In one embodiment, the agent delegation information may include a proxy identifier, an agent delegation content, and a proxy validity period. In one embodiment, the application agent information may include an application agent identifier, an application agent content, and an application time point.

The proxy registration application terminal 230 is a computing device that registers a proxy according to a proxy application. The proxy registration application terminal 230 interfaces with the proxy authentication server 210 to transmit the generated credit certificate and proxy delegation information to the proxy authentication server 210 . Also, the agent registration application terminal 230 can receive such contents from the agent authentication server 210 at the time when the proxy agent application is actually generated by the agent.

The agent authentication application terminal 240 is a computing device that performs an authentication application of an agent in response to an agent action request of an agent, and can provide application agent information to the agent authentication server 210 in association with the agent authentication server 210 . In addition, the agent authentication application terminal 240 can provide the agent authentication server 210 with an authorization for the proxy agent application when the proxy agent application is completed by the agent.

The proxy registration application terminal 230 or the proxy authentication application terminal 240 may be implemented by a smart phone, a notebook computer, a computer, or the like, and may be implemented by various other devices.

3 is a view showing the agent authentication server shown in Fig.

3, the proxy authentication server 210 includes a proxy registration unit 310, a proxy authentication unit 320, a DB interlock unit 330, a proxy verification unit 340, and a control unit 350.

The proxy registration unit 310 receives the credit certificate and proxy delegation information from the proxy registration application terminal 230. Here, the proxy delegation information may include a proxy identifier, an agent delegation content, and a proxy validity period regarding the agent. For example, the agent identifier may correspond to the biometric information of the agent. In addition, the proxy registration unit 310 can receive the credit certificate through the proxy registration application terminal 230.

Hereinafter, a process of generating a credit certificate by the proxy registration unit 310 will be described.

In one embodiment, the proxy registration unit 310 can receive the authentication certificate from the proxy registration application terminal 230 as it is and generate a credit certificate. Such a credit certificate may have the advantage of using the public key certificate as it is, but it may include disadvantages due to leakage of the public key certificate. In another embodiment, the proxy registration unit 310 may receive a certificate for validity period limitation or an authorized number for use number limitation based on the selection of the proxy registration application terminal 230, and generate the certificate as a credit certificate. Such a credit certificate may have drawbacks due to modification of the authorized certificate, but may include an advantage of preventing leakage of the authorized certificate. On the other hand, the validity certificate for validity period limitation or the authorized use certificate for use number limitation can be generated through a proxy registration processing program installed in the proxy registration application terminal 230.

In addition, the proxy registration unit 310 can verify the validity of the credit certificate. In one embodiment, the proxy registrar 310 may obtain a set of verification codes and verify the validity of the credit certificate through a verification hash function on the set of verification codes. Here, a series of verification codes can be generated by a proxy registration processing program installed in the proxy registration application terminal 230 and included in the credit certificate. For example, a series of verification codes may be generated such as the CVV number of a credit card. Here, the hash function is a function that maps data of an arbitrary length to data of a fixed length. The value obtained by the hash function is called a hash value. If the two hash values are different, the validity of the credit certificate can be verified by using a property that the original data for the hash value is different. Specifically, if the hash value of the verification code included in the credit certificate is not a hash value for a valid verification code, the validity of the credit certificate may be denied.

The proxy authentication unit 320 can receive the application agent information from the agent authentication application terminal 240. [ Here, the application agent information may include the application agent identifier, the application agent content and the application time point on the application agent. For example, the identifier of the applicant agent may correspond to the biometric information of the applicant agent.

The DB interworking unit 330 may store the credit certificate and the proxy delegation information together in the agent delegation database 220 during the agent registration process. The DB interworking unit 330 may search the proxy delegation database 220 for the proxy identifier and provide the search result to the proxy verification unit 340 in the proxy action process. The DB interworking unit 330 may store the application agent information after completing the surrogate action, and may store the number of usable times when the number of times of use of the credit certificate is determined.

The proxy verification unit 340 may search the proxy delegation database 220 for a proxy identifier, and upon receiving the search result, determine whether the proxy proxy content belongs to the proxy proxy content and whether or not the application time point is within the proxy validity period. The proxy verification unit 340 may provide the proxy certificate application terminal 240 with the credit certificate and the application proxy contents when the determination is successfully performed.

The proxy verification unit 340 may provide the application proxy contents to the proxy registration application terminal and allow the agent authentication application terminal to perform the application proxy contents based on the credit certificate. The proxy verification unit 340 may delay the execution of the application proxy contents until the time for canceling the application proxy proxy action variable based on the significance of the proxy proxy content set by the proxy authentication application terminal has elapsed. In one embodiment, the significance of the proxy delegation content can be determined by the proxy registration application terminal 230. In another embodiment, the significance of the proxy delegation content can be determined by the proxy authentication application terminal 240. [ In another embodiment, the significance of the proxy delegation content can be automatically calculated through the following equation.

[Mathematical Expression]

W = F (v, x1, x2, x3)

W is the significance of the proxy delegation contents

v is the number of cases where the application for proxy has been carried out and the transfer of property has been carried out,

x1 is the degree to which the person is allowed to perform the delegation by taking into consideration the age of the person and the age of the person who is restricted by the civil law (the smaller the value of x1, the greater the possibility of the delegation.

x2 is the degree to which the proxy can be made effective by taking into account the age of the agent and whether it is restricted by the civil law (the smaller the value of x2, the greater the likelihood of the proxy act.

x3 is the degree to which the agent is expected to engage in legal acts contrary to his interests, taking into account the agent's credit rating and the ratio of liabilities to the agent's assets

F (v, x1, x2, x3) is the degree of validity (x1), agency effectiveness (x2) Function that classifies and obtains all the combined values

For example, if vowel (v) is 5 grade, delegation activity validity degree (x1) is 7 grade, proxy activity validity degree (x2) is 8 grade, (W) is 25, so the cancellation time for the application is 25 hours.

The control unit 350 controls the overall operation of the agent authentication server 210 and performs a control flow or data flow between the agent registration unit 310, the proxy authentication unit 320, the DB interlock unit 330, and the proxy verification unit 340 Can be controlled

FIG. 4 is a flowchart illustrating a proxy authentication process by the proxy authentication system shown in FIG. 2. FIG.

Referring to FIG. 4, the agent authentication server 210 generates a credit certificate based on the public certificate received from the agent registration application terminal 230 and receives the determined agent delegation information (step S410).

In one embodiment, the agent authentication server 210 can receive the public certificate through the agent registration application terminal 230, and can generate a credit certificate by copying the public certificate. Such a credit certificate may have the advantage of using the public key certificate as it is, but it may include disadvantages caused by leakage of the public key certificate.

In another embodiment, the agent authentication server 210 may receive a public key certificate for validity period limitation or a public key certificate for use limitation based on the selection of the agent registration application terminal 230, and generate the public key certificate as a credit certificate. Such a credit certificate may have drawbacks due to modification of the authorized certificate, but may include an advantage of preventing leakage of the authorized certificate. On the other hand, the validity certificate for validity period limitation or the authorized use certificate for use number limitation can be generated through a proxy registration processing program installed in the proxy registration application terminal 230.

The agent authentication server 210 can receive the proxy identifier through the proxy registration application terminal 230 and the proxy registration application terminal 230 can receive the proxy identifier through the proxy registration processing program installed in the proxy registration application terminal 230. [ Lt; / RTI >

The proxy authentication server 210 may validate the credit certificate and store the proxy delegation information together with the proxy delegation database 220 (step S420).

In one embodiment, the proxy authentication server 210 may obtain a set of verification codes and verify the validity of the credit certificate through a verification hash function on the set of verification codes. Here, a series of verification codes can be generated by a proxy registration processing program installed in the proxy registration application terminal 230 and included in the credit certificate. For example, a series of verification codes may be generated such as the CVV number of a credit card.

When the proxy authentication server 240 receives the proxy proxy application request from the proxy proxy server 240, the proxy authentication server 210 receives the proxy proxy identifier, the proxy proxy content, and the application time point from the proxy authentication application terminal 240 (Step S430).

The proxy authentication server 210 searches the proxy delegation database 220 for the proxy identifier based on the application proxy identifier (step S440). The proxy authentication server 210 determines whether the application proxy content belongs to the proxy proxy content and whether the application time point is within the proxy validity period (step S450). If the determination is successful, the proxy authentication server 210 may provide the proxy certificate application terminal 240 with the credit certificate and the proxy proxy contents (step S460).

In one embodiment, the proxy authentication server 210 provides the proxy proxy content to the proxy registration application terminal 230, and then causes the proxy proxy application terminal 240 to perform the proxy proxy content based on the credit certificate (Steps S470 and S490).

In one embodiment, the agent authentication server 210 delays the execution of the application proxy content until the eligibility of the proxy proxy action cancelable time, which is variable based on the importance of the proxy proxy content set by the proxy authentication application terminal 240, (Steps S470, S480, and S490).

In one embodiment, the significance of the proxy delegation content can be determined by the proxy registration application terminal 230. In another embodiment, the significance of the proxy delegation content can be determined by the proxy authentication application terminal 240. [ In another embodiment, the significance of the proxy delegation content can be automatically calculated through the following equation.

[Mathematical Expression]

W = F (v, x1, x2, x3)

W is the significance of the proxy delegation contents

v is the number of cases where the application for proxy has been carried out and the transfer of property has been carried out,

x1 is the degree to which the person is allowed to perform the delegation by taking into consideration the age of the person and the age of the person who is restricted by the civil law (the smaller the value of x1, the greater the possibility of the delegation.

x2 is the degree to which the proxy can be made effective by taking into account the age of the agent and whether it is restricted by the civil law (the smaller the value of x2, the greater the likelihood of the proxy act.

x3 is the degree to which the agent is expected to engage in legal acts contrary to his interests, taking into account the agent's credit rating and the ratio of liabilities to the agent's assets

F (v, x1, x2, x3) is the degree of validity (x1), agency effectiveness (x2) Function that classifies and obtains all the combined values

For example, if vowel (v) is 5 grade, delegation activity validity degree (x1) is 7 grade, proxy activity validity degree (x2) is 8 grade, (W) is 25, so the cancellation time for the application is 25 hours.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

100: Agent system 110:
120: Agent 130: Bank
140: Registrar
200: Agent authentication system
210: Agent authentication server 220: Agent delegation database
230: Agent registration application terminal 240: Agent authentication application terminal
250: Agent
310: Agent registration unit 320: Agent authentication unit
330: DB interlocking unit 340: Agent confirmation unit
350:
400: Agent Certification Process

Claims (8)

A proxy authentication method performed by a proxy authentication server,
(a) generating a credit certificate based on the public certificate received from the agent registration application terminal, and receiving agent delegation information including a proxy identifier, a proxy assignment content, and a proxy validity period for the determined proxy;
(b) verifying the validity of the credit certificate and storing the proxy delegation information together with the proxy delegation database;
(c) receiving, from the agent authentication application terminal, the agent agent information including the agent agent identifier, the agent agent content, and the application time point when the agent authentication application terminal receives the proxy agent application from the agent agent application terminal;
(d) retrieving the agent identifier from the agent delegation database based on the application agent identifier;
(e) determining whether the application proxy content belongs to the proxy proxy content and whether the application time point is within the proxy validity period;
(f) providing the proxy certificate application terminal with the credit certificate and the application proxy content if the determination is successfully performed; And
(g) providing the proxy agent content to the agent registration application terminal and allowing the agent certificate application terminal to perform the application proxy content based on the credit certificate,
The step (g)
And delaying the execution of the application proxy content until the eligibility of the proxy proxy act cancelable on the basis of the gravity of the proxy proxy application set by the proxy authentication application terminal or the proxy registration application terminal has elapsed,
Wherein the significance of the proxy delegation content is automatically calculated through the following equation.
[Mathematical Expression]
W = F (v, x1, x2, x3)
W is the significance of the proxy delegation contents
v is the number of cases where the application for proxy has been carried out and the transfer of property has been carried out,
x1 is the degree to which the person is allowed to perform the delegation by taking into consideration the age of the person and the age of the person who is restricted by the civil law (the smaller the value of x1, the greater the possibility of the delegation.
x2 is the degree to which the proxy can be made effective by taking into account the age of the agent and whether it is restricted by the civil law (the smaller the value of x2, the greater the likelihood of the proxy act.
x3 is the degree to which the agent is expected to engage in legal acts contrary to his interests, taking into account the agent's credit rating and the ratio of liabilities to the agent's assets
F (v, x1, x2, x3) is the degree of validity (x1), agency effectiveness (x2) Function that classifies and obtains all the combined values
The method of claim 1, wherein step (a)
And receiving the authorized certificate for the validity period limitation or the authorized number of use limit based on the selection of the agent registration application terminal, and generating the authorized certificate as the credit certificate.
3. The method of claim 2, wherein step (a)
Further comprising the step of copying and manipulating the authorized certificate through a proxy registration processing program installed in the proxy registration application terminal to generate the validity period certificate for limited use or the authorized use certificate for limited use.
The method of claim 1, wherein step (a)
And acquiring the biometric information of the agent through the agent registration processing program installed in the agent registration application terminal and receiving the agent identifier.
2. The method of claim 1, wherein step (b)
Obtaining a series of verification codes generated by a proxy registration processing program installed in the agent registration application terminal and included in the credit certificate and validating the credit certificate through a verification hash function on the series of verification codes And a proxy authentication method.
2. The method of claim 1, wherein step (c)
And acquiring biometric information of the application agent through an agent authentication processing program installed in the agent authentication application terminal and receiving the application agent identifier.
delete delete

Images