KR102136239B1 - Method and apparatus for e-mail service - Google Patents

Abstract

The e-mail service method according to an exemplary embodiment selectively performs whether or not to use an e-mail account by performing user authentication for the e-mail account according to a request for access to the e-mail account, and through the e-mail account When the recipient information of the e-mail is input, creating a recipient access account based on the e-mail recipient information, and when the attachment is registered through the e-mail account, encrypts the link and the attachment to download the e-mail and the attachment. And sending an e-mail containing the encrypted link through the first communication network to the e-mail recipient based on the recipient information, and transmitting information about the recipient access account through a second communication network different from the first communication network. Steps.

Description

E-mail service method and device {METHOD AND APPARATUS FOR E-MAIL SERVICE}

The present invention relates to an electronic mail service method and apparatus, and more particularly, to an electronic mail service method and apparatus that provides a service capable of transmitting electronic mail from a sender to a receiver.

With the development of computing and communication technology, e-mail has established itself as a useful means of information delivery.

Conventionally, when a large amount of attachments are to be transmitted via e-mail, the standard protocol SMTP (Simple Mail Transfer Protocol) cannot send a large amount of e-mails due to the limitation of the transmission capacity. A method of storing, sending an e-mail in the form of a simple link, and downloading a large amount of attachments from a mail server through a link at the receiving side was used.

However, the attachment method using a simple download method has a possibility that an attachment file of another e-mail can be downloaded due to link modulation of the mail server, and there is also a fear of hacking using the vulnerability of the mail server. . In addition, when data is transmitted and received through a commercial mail system, security and safety cannot be guaranteed because sensitive data may exist in the commercial mail server.

In addition, when sending and receiving e-mails containing attachments, even sensitive data that require security, the attachments are transmitted in the original text, making it impossible to control sensitive data, which can lead to unauthorized access, alteration of the original, and misuse. there was.

Republic of Korea Patent Publication No. 10-2008-0091888, published date October 15, 2008.

According to an embodiment, there is provided an e-mail service method and apparatus capable of safely transmitting an e-mail including an attachment by reducing the security vulnerability of the e-mail.

The problem to be solved of the present invention is not limited to those mentioned above, and another problem to be solved that is not mentioned will be clearly understood by a person having ordinary knowledge to which the present invention belongs from the following description.

In one aspect, the e-mail service method includes: selectively performing use of the e-mail account by performing user authentication for the e-mail account according to a request for access to the e-mail account; and Creating a recipient access account based on the recipient information of the e-mail when the recipient information of the e-mail is inputted; and, when an attachment is registered through the e-mail account, the e-mail and the attachment can be downloaded. Encrypting a link and the attachment, and sending an e-mail including the encrypted link to a recipient of an e-mail based on the recipient information through a first communication network, and establishing a second communication network different from the first communication network. And transmitting information about the recipient access account.

In another aspect, the e-mail service device performs user authentication on the e-mail account according to a request for access to the e-mail account, selectively permitting the use of the e-mail account, and electronically through the e-mail account. An account management unit that creates a recipient access account based on the recipient information of the e-mail when the recipient information of the e-mail is input, and a link to download the e-mail and the attachment when an attachment is registered through the e-mail account And an encryption unit for encrypting the attachment, an electronic mail management unit for controlling access to the encrypted e-mail, the encrypted link, and the encrypted attachment, and an e-mail recipient based on the recipient information. And a communication unit for sending an electronic mail including the encrypted link through a communication network, and transmitting information on the recipient access account through a second communication network different from the first communication network.

According to an embodiment of the present invention, after the e-mail service device creates a recipient access account based on the recipient information of the e-mail, the electronic mail service is provided through the generated recipient access account, whereby the attachment file of the e-mail is transmitted. It provides high security that does not leak to third parties except the terminal, the e-mail service device, and the receiving terminal.

In addition, since information on the encrypted e-mail and the recipient access account is provided to the e-mail recipient through different communication networks, in order to hack the e-mail, all different communication networks must be hacked, and security is further improved.

In addition, since links and attachments for downloading e-mails and attachments are encrypted, illegal downloading of attachments through link tampering is blocked.

In addition, security can be further enhanced by using an e-mail password and a one-time password, and access to attachments can be controlled by setting access rights to attachments.

1 is a configuration diagram of an electronic mail service network including an electronic mail service device according to an embodiment of the present invention.
2 is a block diagram of an electronic mail service device according to an embodiment of the present invention.
3 is a flowchart illustrating a process of providing an electronic mail transmission service by an electronic mail service method according to an embodiment of the present invention.
4 is a flowchart for explaining a process of providing an electronic mail receiving service by an electronic mail service method according to an embodiment of the present invention.

Advantages and features of the present invention, and methods for achieving them will be clarified with reference to embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in various forms, and only the embodiments allow the disclosure of the present invention to be complete, and have ordinary knowledge in the art to which the present invention pertains. It is provided to fully inform the person of the scope of the invention, and the scope of the invention is only defined by the claims.

In describing the embodiments of the present invention, detailed descriptions of known functions or configurations will be omitted except when actually necessary in describing the embodiments of the present invention. In addition, terms to be described later are terms defined in consideration of functions in an embodiment of the present invention, which may vary according to a user's or operator's intention or practice. Therefore, the definition should be made based on the contents throughout this specification.

1 is a configuration diagram of an electronic mail service network including an electronic mail service device according to an embodiment of the present invention.

As shown in FIG. 1, the electronic mail service device 100 according to an embodiment provides an electronic mail service to a transmitting terminal and a receiving terminal using a plurality of communication networks. 1 illustrates the Internet 20 and the mobile communication network 30 as a plurality of communication networks. In addition, FIG. 1 shows an example in which the e-mail terminal #1 (40), which is the transmitting terminal, constitutes the secure communication network 10 together with the e-mail service device 100, and the e-mail terminal #2 (which is the receiving terminal) 50) shows an example connected to the Internet 20, and an example of using a mobile communication terminal 60 through which a recipient of an electronic mail can receive a mobile communication service from the mobile communication network 30 is shown.

2 is a block diagram of an electronic mail service device 100 according to an embodiment of the present invention.

As illustrated in FIG. 2, the electronic mail service device 100 according to an embodiment includes a user interface unit 110, an account management unit 120, an encryption unit 130, an email management unit 140, and a communication unit 150, It includes a security management unit 160. For example, the account management unit 120, the encryption unit 130, the e-mail management unit 140, and the security management unit 160 may be implemented as a processor capable of computing operations such as a central processing unit (CPU).

The user interface 110 provides an interface environment in which an operator or an administrator of the e-mail service device 100 can set various functions of the e-mail service device 100 or input necessary information.

The account management unit 120 selectively permits the use of the e-mail account by performing user authentication for the e-mail account according to a request to access the e-mail account from the sending terminal connected through the communication unit 150 and When the recipient information of the e-mail is input through the e-mail account, a recipient access account and a one-time password are generated based on the recipient information of the e-mail. Then, the account management unit 120 checks the information on the recipient access account received from the recipient terminal when a download is requested for an encrypted attachment through a link encrypted by the recipient terminal of the e-mail, the recipient access account Whether or not to use can be selectively allowed. In addition, when the password for viewing the e-mail is set by the e-mail management unit 140, the account management unit 120 matches the password for viewing the encrypted e-mail among the information on the recipient access account received from the receiving terminal. If the information is included, the recipient's access account can be used. Here, the information on the recipient access account may include identification information on the recipient access account, a one-time password, an IP (Internet Protocol) address of the receiving terminal, and a media access control (MAC) address of the receiving terminal.

The encryption unit 130 encrypts the link and the attachment to download the e-mail and the attachment when the attachment is registered through the e-mail account.

The e-mail management unit 140 controls access to the encrypted e-mail, the encrypted link, and the encrypted attachment. In addition, when the use of the recipient access account is permitted by the account management unit 120, the electronic mail management unit 140 may provide a download service for the encrypted attachment. In addition, the electronic mail management unit 140 may receive a password from a transmission-side terminal connected through the communication unit 150 and set a password for viewing the encrypted electronic mail. In addition, the e-mail management unit 140 sends an e-mail including an encrypted link through the communication unit 150 and the first communication network to the e-mail recipient based on the recipient information of the e-mail, and the communication unit 150 and the second Transmit information about the recipient access account through the communication network. For example, the e-mail management unit 140 may send an e-mail containing an encrypted link to the e-mail account included in the recipient information of the e-mail, and transmit information about the recipient access account to the phone number included in the recipient information. Can be. Also, the electronic mail management unit 140 may install a specific program on the receiving terminal when a specific program capable of decrypting an encrypted attachment is not installed on the receiving terminal. Then, the e-mail management unit 140 may receive a log file for access control of the attachment file performed by a specific program from the receiving terminal based on the access authority for the attachment set by the security management unit 160. .

The security management unit 160 sets access rights to the attachment when the attachment is registered through an e-mail account. For example, the security management unit 160 may receive information on an access permission range for an attachment file from a transmitting terminal, and control access to an attachment of an email recipient based on information on the access permission range. have.

3 is a flowchart illustrating a process of providing an electronic mail transmission service by an electronic mail service method according to an embodiment of the present invention.

As shown in FIG. 3, the e-mail sending service according to the e-mail service method according to an embodiment performs user authentication for the e-mail account according to a request for access to the e-mail account to selectively use the e-mail account It includes the step of allowing (S301 to S303).

Then, in the e-mail transmission service according to the e-mail service method according to an embodiment, when recipient information of an e-mail is input through an e-mail account, generating a recipient access account based on the recipient information of the e-mail (S304, S305) ).

In addition, in the e-mail transmission service according to the e-mail service method according to an embodiment, when an attachment is registered through an e-mail account, information on the access allowance for the attachment is received and information on the entered access allowance is received. Further comprising the steps of setting the access rights to the attachment of the e-mail recipient on the basis (S306 to S308).

Then, the e-mail transmission service according to the e-mail service method according to an embodiment further includes receiving and setting a password for viewing the encrypted e-mail (S309, S310).

In addition, the e-mail transmission service according to the e-mail service method according to an embodiment further includes a step (S311) of encrypting the e-mail and a link to download the attachment and the attachment.

In addition, the e-mail transmission service according to the e-mail service method according to an embodiment sends an e-mail including an encrypted link through the first communication network to the e-mail recipient based on the recipient information of the e-mail, and the first communication network And further comprising the step of transmitting information about the recipient access account through a second communication network (S312, S313).

4 is a flowchart for explaining a process of providing an electronic mail receiving service by an electronic mail service method according to an embodiment of the present invention.

As shown in FIG. 4, the electronic mail receiving service according to the electronic mail service method according to an embodiment is received from the receiving terminal when a download for an encrypted attachment is requested through a link encrypted by the receiving terminal of the electronic mail And checking the information on the recipient access account to be used, and selectively permitting the use of the recipient access account (S401 to S405).

And, in the e-mail receiving service according to the e-mail service method according to an embodiment, when the use of the recipient access account is permitted, the receiving terminal is installed when a specific program capable of decrypting the encrypted attachment is not installed in the receiving terminal. Further comprising the steps of installing a specific program (S406 to S408).

In addition, the electronic mail receiving service according to the electronic mail service method according to an embodiment further includes providing a download service for the encrypted attachment (S409).

In addition, the e-mail receiving service according to the e-mail service method according to an embodiment receives a log file for access control of attachments performed by a specific program based on access rights set for attachments of the e-mail. It further includes the step of receiving from (S410).

Hereinafter, an e-mail service method using an e-mail service device according to an embodiment of the present invention will be described in more detail with reference to FIGS. 1 to 4.

First, the sender of the e-mail connects to the e-mail service device 100 using the e-mail terminal #1 (40), and then requests access to his/her e-mail account (S301).

Then, the account management unit 120 selectively authenticates the use of the e-mail account by performing user authentication for the e-mail account (S302, S303). For example, the account management unit 120 may perform user authentication in a manner that confirms whether identification information such as a pre-registered user ID and password are correctly input by the electronic mail terminal #1 40.

Next, the sender of the e-mail should input the recipient information of the e-mail using the e-mail terminal #1 (40) when use of his/her e-mail account is allowed (S304). For example, the recipient information of the e-mail may include the recipient's e-mail account, the recipient's phone number (eg, mobile communication phone number), the IP address of the receiving terminal, and the MAC address of the receiving terminal.

Then, the account management unit 120 generates a recipient access account based on the recipient information of the e-mail received from the e-mail terminal #1 40 through the communication unit 150 (S305). For example, the account manager 120 may generate a new web-based virtual private network (VPN) access account and generate a one-time password.

Then, the sender of the e-mail registers the attachment of the e-mail using the e-mail terminal #1 (40) (S306) or inputs information about the access permission range for the attachment and the password for viewing the e-mail. It can be (S309). Then, the security management unit 160 sets the access authority for the attachment of the e-mail recipient based on the information on the access allowance for the attachment (S308), and the e-mail management unit 140 sets the communication unit 150 The password received from the electronic mail terminal #1 (40) connected through is set as a password for viewing the encrypted electronic mail (S310).

Thereafter, the encryption unit 130 encrypts the e-mail requested by the e-mail terminal #1 (40) and a link to download the attachment and the attachment (S311). As such, encrypting the e-mail can protect the e-mail from leaking attachments through sniffing attacks and tampering with e-mail through spoofing attacks. In addition, the encryption of the link can prevent a download attack that can be caused by estimating the link of the attachment file of another e-mail after checking the directory structure of the server through the link.

Next, the e-mail management unit 140 sends an e-mail including the encrypted link through the communication unit 150 and the first communication network to the e-mail recipient based on the recipient information of the e-mail (S312), and the communication unit 150 ) And the second communication network to transmit information about the recipient access account (S313). For example, the e-mail management unit 140 may send an e-mail containing an encrypted link to the e-mail account included in the recipient information of the e-mail through the Internet 20, and transmit information about the recipient access account to the mobile communication network ( 30) can be transmitted to the phone number of the mobile communication terminal 60 included in the recipient information.

The recipient of the e-mail receives the e-mail including the encrypted link in step S311, and receives information about the recipient access account generated in step S305 through the first communication network. For example, the recipient of the e-mail can receive the e-mail including the encrypted link through the e-mail terminal #2 50, and can receive information about the recipient access account through the mobile communication terminal 60. .

Then, the recipient of the e-mail can view the e-mail received through the e-mail terminal #2 (50), and then request to download the encrypted attachment through the encrypted link included in the e-mail (S401). At this time, information about the recipient access account received through the mobile communication terminal 60 is input according to the guidance of the electronic mail service apparatus 100 (S402).

Then, the account management unit 120 selectively checks the information on the recipient access account received from the e-mail terminal #2 (50) and selectively allows the use of the recipient access account. That is, when information matching the information on the recipient access account transmitted in step S313 is received from the electronic mail terminal #2 (50), use of the corresponding recipient access account is allowed (S403). Here, the account management unit 120 may check the identification information and the one-time password for the recipient access account generated in step S305, the IP address of the receiving terminal input in step S304, and the MAC address of the receiving terminal.

In addition, in step S310, when the password for viewing the e-mail is set by the e-mail management unit 140 in step S310, the encrypted electronic of the information on the recipient access account received from the e-mail terminal #2 (50). When information matching the password for viewing the mail is included, the use of the recipient access account may be allowed (S404, S405). The password for viewing the e-mail used here may not be transmitted to the e-mail recipient by the e-mail service device 100, but may be transmitted to the e-mail recipient through an unknown path by the e-mail sender. For example, the sender of the e-mail can transmit a password for reading the e-mail by directly nurturing it using a landline phone or the like.

Next, the e-mail management unit 140 confirms whether a specific program capable of decrypting the encrypted attachment is installed in the e-mail terminal #2 (50) when the use of the recipient access account is finally permitted (S406). ), when a specific program is not installed, a specific program is installed in the e-mail terminal #2 (50) (S407, S408).

Then, the e-mail management unit 140 provides a download service for the encrypted attachment (S409). At this time, it is possible to provide a reading service for the encrypted e-mail together.

Here, a specific program installed in the e-mail terminal #2 (50) decrypts the encrypted attachment and the encrypted e-mail so that the recipient of the e-mail can check or view the e-mail and attachments. At this time, the specific program installed in the e-mail terminal #2 (50) controls the access of the attachment file based on the access authority for the attachment set by the security management unit 160, and after generating the log file for access control Send to the e-mail service device 100. For example, a specific program installed in the e-mail terminal #2 (50) can control the number of times of viewing and output of attachments to the e-mail.

Then, the email management unit 140 receives and stores a log file for access control of the attachment from the email terminal #2 50, and the log file for access control of the collected attachment is the copyright of the attachment. It may be used for the purpose of managing (S410).

As described so far, according to an embodiment of the present invention, the electronic mail service device generates a recipient access account based on recipient information of the e-mail, and then services the e-mail through the generated recipient access account. It provides high security that does not leak attachment files to third parties except the sending terminal, the e-mail service device, and the receiving terminal.

In addition, since information on the encrypted e-mail and the recipient access account is provided to the e-mail recipient through different communication networks, in order to hack the e-mail, all different communication networks must be hacked, and security is further improved.

In addition, since links and attachments for downloading e-mails and attachments are encrypted, illegal downloading of attachments through link tampering is blocked.

In addition, security can be further enhanced by using an e-mail password and a one-time password, and access to attachments can be controlled by setting access rights to attachments.

The combination of each block in the block diagram and each step of the flow chart attached to the present invention may be performed by computer program instructions. These computer program instructions may be mounted on a processor of a general purpose computer, special purpose computer, or other programmable data processing equipment, so that instructions executed through a processor of a computer or other programmable data processing equipment may be used in each block or flowchart of the block diagram. In each step, means are created to perform the functions described. These computer program instructions can also be stored on a computer-readable or computer-readable recording medium that can be oriented to a computer or other programmable data processing equipment to implement a function in a particular way, so that it is computer- or computer-readable. It is also possible for the instructions stored in the recording medium to produce an article of manufacture containing instructions means for performing the functions described in each block or flowchart step of the block diagram. Computer program instructions can also be mounted on a computer or other programmable data processing equipment, so a series of operational steps are performed on a computer or other programmable data processing equipment to create a process that is executed by the computer to generate a computer or other programmable data. It is also possible for instructions to perform processing equipment to provide steps for performing the functions described in each block of the block diagram and in each step of the flowchart.

Further, each block or each step can represent a module, segment, or portion of code that includes one or more executable instructions for executing the specified logical function(s). It should also be noted that in some alternative embodiments it is possible that the functions mentioned in blocks or steps occur out of order. For example, two blocks or steps shown in succession may in fact be executed substantially simultaneously, or it is also possible that the blocks or steps are sometimes performed in reverse order depending on the corresponding function.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and variations without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical spirit of the present invention, but to explain, and the scope of the technical spirit of the present invention is not limited by these embodiments. The scope of protection of the present invention should be interpreted by the following claims, and all technical spirits within the scope equivalent thereto should be interpreted as being included in the scope of the present invention.

100: e-mail service device 110: user interface unit
120: account management unit 130: encryption unit
140: e-mail management unit 150: communication unit
160: security management department

Claims (21)

A step of selectively allowing the use of the e-mail account by performing user authentication for the e-mail account according to a request for access to the e-mail account;
When recipient information of the e-mail is input through the e-mail account, generating a recipient access account based on the recipient information of the e-mail,
Encrypting the email and a link to download the attachment and the attachment when the attachment is registered through the email account;
On the basis of the recipient information, an electronic mail including the encrypted link is sent to an electronic mail recipient through a first communication network, and information about the recipient access account is transmitted through a second communication network different from the first communication network. Including steps,
The e-mail containing the encrypted link is sent to the e-mail account included in the recipient information, and the information on the recipient access account is transmitted to the phone number included in the recipient information.
Email service method. delete According to claim 1,
When the attachment is registered through the e-mail account, further comprising the step of setting the access authority for the attachment
Email service method. The method of claim 3,
In the setting of the access permission, the access permission for the attachment file is received and information on the access permission range is set, and the access permission for the attachment of the e-mail recipient is set based on the information on the access permission range.
Email service method. According to claim 1,
When the download of the encrypted attachment is requested through the encrypted link by the receiving terminal of the electronic mail, check the information on the recipient access account received from the receiving terminal, and use the recipient access account Optionally allowing or not,
When the use of the recipient access account is allowed, further comprising providing a download service for the encrypted attachment.
Email service method. The method of claim 5,
The recipient access account information includes identification information and a one-time password for the recipient access account.
Email service method. The method of claim 5,
The information on the recipient access account includes the IP address and MAC address of the receiving terminal
Email service method. The method of claim 5,
Further comprising the step of setting a password for viewing the encrypted e-mail,
The step of selectively allowing the use of the recipient access account may include, when information corresponding to a password for viewing the encrypted e-mail is included among information on the recipient access account received from the receiving terminal. Allow access to access accounts
Email service method. The method of claim 5,
The providing of the download service may further include installing the specific program on the receiving terminal when a specific program capable of decrypting the encrypted attachment is not installed on the receiving terminal.
Email service method. The method of claim 9,
Setting access rights to the attachment when the attachment is registered through the e-mail account;
Further comprising the step of receiving a log file for access control of the attachment file performed by the specific program on the basis of the set access authority from the receiving terminal.
Email service method. Claim 1 and claims 3 to 10 of any one of the e-mail service method for the processor to perform
A computer-readable recording medium storing a computer program. According to a request for access to an e-mail account, user authentication for the e-mail account is performed to selectively allow use of the e-mail account, and when the recipient information of the e-mail is input through the e-mail account, the e-mail An account management unit that creates a recipient access account based on the recipient information of the mail;
When the attachment is registered through the e-mail account, the link to download the e-mail and the attachment, and an encryption unit for encrypting the attachment,
An electronic mail management unit controlling access to the encrypted e-mail, the encrypted link, and the encrypted attachment;
On the basis of the recipient information, an electronic mail including the encrypted link is sent to an electronic mail recipient through a first communication network, and information about the recipient access account is transmitted through a second communication network different from the first communication network. Communication section,
The communication unit transmits an email containing the encrypted link to an email account included in the recipient information, and transmits information about the recipient access account to a phone number included in the recipient information.
E-mail service device. delete The method of claim 12,
When the attachment is registered through the e-mail account, further comprising a security management unit for setting access rights to the attachment
E-mail service device. The method of claim 14,
The security management unit receives information on the access permission range for the attachment, and sets access rights to the attachment of the e-mail recipient based on the information on the access permission range.
E-mail service device. The method of claim 12,
The account management unit checks the information on the recipient access account received from the receiving terminal when the download of the encrypted attachment is requested through the encrypted link by the receiving terminal of the e-mail, and Optionally allow or disable the recipient access account,
When the use of the recipient access account is permitted, the electronic mail management unit provides a download service for the encrypted attachment.
E-mail service device. The method of claim 16,
The recipient access account information includes identification information and a one-time password for the recipient access account.
E-mail service device. The method of claim 16,
The information on the recipient access account includes the IP address and MAC address of the receiving terminal
E-mail service device. The method of claim 16,
The electronic mail management unit sets a password for viewing the encrypted electronic mail,
The account management unit allows the use of the recipient access account when information corresponding to a password for viewing the encrypted e-mail is included among information on the recipient access account received from the receiving terminal.
E-mail service device. The method of claim 16,
The electronic mail management unit installs the specific program on the receiving terminal when a specific program capable of decrypting the encrypted attachment is not installed on the receiving terminal.
E-mail service device. The method of claim 20,
When the attachment is registered through the e-mail account, further comprising a security management unit for setting access rights to the attachment,
The electronic mail management unit receives a log file for access control of the attachment file performed by the specific program based on the set access authority from the receiving terminal.
E-mail service device.

Images