KR102153793B1 - Method and system for providing automatic inquiry service of user id - Google Patents

Abstract

Provides a method and system for providing an automatic ID inquiry service using a terminal-side agent installed in a user terminal to perform an automatic ID inquiry service, and an authentication server that performs authentication for the automatic ID inquiry service. . According to the method and system for providing an automatic user ID inquiry service according to an embodiment of the present invention, the user ID of the online service to which the user wants to access can be automatically inquired without using the user's personal information. In addition to providing the convenience of inquiry, there is an effect of solving the risk of leakage of personal information of the user.

Description

User ID automatic inquiry service provision method and system {METHOD AND SYSTEM FOR PROVIDING AUTOMATIC INQUIRY SERVICE OF USER ID}

The present invention relates to a personal account management solution, and more particularly, to a method and system for providing an automatic user ID inquiry service.

While individuals use online services in their daily lives, they create and register IDs every time, but it is becoming increasingly difficult to remember which ID they registered. In order to find an ID, it is searched every time, but in the ID search service, the user must directly input his/her related information to be able to search, and if his/her information is incorrectly entered at the time of registration, there is no way to find the ID.

In addition, with the advancement of online services, each person is retained while forcing each generation rule (e.g., ID with number when creating ID, email format ID, ID within 8 characters, ID with 6 or more characters, etc.) The number of accounts with 3~4 is increasing.

In addition, in most cases, users do not even remember whether they have subscribed to numerous online services, but it is becoming more and more difficult to remember which account they have registered in the meantime.

In order to solve the above inconvenience, personal account management solutions that store and manage the user's ID and password have been developed, but the account information of the user is stored on the smartphone, so in the event of an accident, all account information of the user is stored. There is a problem that can be leaked. That is, in the prior art, when member information is leaked, there is a risk that tens of thousands of account information are leaked.

An object of the present invention is to provide a method and system for providing an automatic user ID inquiry service capable of automatically inquiring a user ID of an online service to which a corresponding user intends to access without using personal information of a user.

According to an aspect of the present invention, an automatic ID inquiry service is provided by using a terminal-side agent installed in a user terminal to perform an automatic ID inquiry service, and an authentication server that performs authentication for an automatic ID inquiry service. A method and a system thereof are provided.

According to the method and system for providing an automatic user ID inquiry service according to an embodiment of the present invention, the user ID of the online service to which the user wants to access can be automatically inquired without using the user's personal information. In addition to providing the convenience of inquiry, there is an effect of solving the risk of leakage of personal information of the user.

1 is a diagram showing an overall flow of a system for providing an automatic user ID inquiry service and a method for providing an automatic inquiry service according thereto according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a specific system procedure for the method of providing an automatic user ID inquiry service of FIG. 1.
3 is a reference diagram illustrating an ID automatic inquiry screen in an ID automatic inquiry service agent installed in a user terminal according to an embodiment of the present invention.

Since the present invention can apply various transformations and have various embodiments, specific embodiments are illustrated in the drawings and will be described in detail in the detailed description. However, this is not intended to limit the present invention to a specific embodiment, it is to be understood to include all conversions, equivalents, and substitutes included in the spirit and scope of the present invention.

In describing the present invention, when it is determined that a detailed description of a related known technology may unnecessarily obscure the subject matter of the present invention, a detailed description thereof will be omitted. In addition, numbers (eg, first, second, etc.) used in the description of the present specification are merely identification symbols for distinguishing one component from another component.

In addition, throughout the specification, when one component is referred to as "connected" or "connected" to another component, the one component may be directly connected or directly connected to the other component, but specially It should be understood that as long as there is no opposing substrate, it may be connected or may be connected via another component in the middle.

In addition, throughout the specification, when a certain part "includes" a certain component, it means that other components may be further included rather than excluding other components unless otherwise stated. In addition, terms such as "unit" and "module" described in the specification mean a unit that processes at least one function or operation, which means that it can be implemented as one or more hardware or software, or a combination of hardware and software. .

1 is a diagram showing an overall flow of a system for providing an automatic user ID inquiry service and a method for providing an automatic inquiry service according thereto, and FIG. 2 is a diagram illustrating the method for providing an automatic user ID inquiry service in FIG. FIG. 3 is a diagram illustrating a specific system procedure, and FIG. 3 is a reference diagram illustrating an ID automatic inquiry screen in an ID automatic inquiry service agent installed in a user terminal according to an embodiment of the present invention. In particular, FIG. 3 illustrates an ID automatic inquiry screen on a mobile app installed on a user's mobile device such as a smart phone as an ID automatic inquiry service agent. Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

In FIGS. 1 and 2, a mobile device such as a smartphone owned by a user is exemplified as a user terminal, but the present invention is not limited thereto, and various user terminals such as a desktop PC and a notebook may all correspond to this. In addition, in Figs. 1 and 2, a'Provision' server and a'Cell' server are separately shown as a server serving as an authentication server, but this is an authentication agent for providing an automatic ID inquiry service according to an embodiment of the present invention. It is assumed that a server to be actually performed (ie, a cell server) and a server to assist its search (ie, a provision server) are separated, and the authentication server may be integrated into one. In addition, although only one service server is shown in FIGS. 1 and 2 for convenience of illustration, a number of service servers to which an automatic ID search service according to an embodiment of the present invention will be used may exist.

The method for providing an automatic ID inquiry service according to an embodiment of the present invention includes a terminal-side agent installed in a user terminal (refer to the'mobile 100' of FIGS. 1 and 2) to perform an automatic ID inquiry service. , An authentication server (see'Provision' server and'Cell' server 300 in Figs. 1 and 2), and at least one service server that provides online services (Fig. 1 and It is executed in a system including the'service server 200' of FIG. 2). In this case, the terminal-side agent may be an agent program running in a PC environment, or, if installed in a mobile terminal, may be a predetermined application program (App) implemented in a mobile environment. Hereinafter, for convenience of description, it is assumed that the user terminal is a mobile device, and the terminal-side agent is a mobile app (hereinafter, an ID automatic inquiry app).

In addition, in the method for providing an ID automatic inquiry service according to an embodiment of the present invention, in performing communication between the service server and the authentication server, an authentication ID is generated in advance for each user ID of each user held by the service server. If the authentication server queries the service server or the service server queries the authentication server, the user ID is not exposed on the network, and an environment where the user ID is used for authentication is configured. Run under Hereinafter, a method for providing an automatic ID inquiry service according to an embodiment of the present invention will be described in detail.

1 and 2, when a user requests a list of online service sites to which the user has subscribed while the automatic ID search app is running, the automatic ID search app requests a list of these sites and retrieves a list of the sites. Receive (see reference numerals 1 and 2 in FIG. 1). In this case, the ID automatic inquiry app may also receive information about an authentication server (ie, Cell) that performs authentication for the ID automatic inquiry service of the corresponding sites.

Thereafter, if the user wants to check the account ID information (i.e., user ID) for logging in to a specific online service from the list of sites displayed through the app screen of the automatic ID inquiry app (refer to the example drawing in Fig. 3A) ( For example, if there is a selection of the'Find ID' button in Fig. (A)), the automatic ID inquiry app transmits a message requesting the provision of an ID for temporary authentication to the authentication server (see drawing number 3 in Fig. 1). ).

In this case, the ID automatic inquiry app may include unique identification information for identifying a corresponding user or user terminal in the temporary authentication ID grant request message and transmit it to the authentication server. 2, the unique identification information is exemplified as a mobile serial (m_serial), but identifies the user itself who wants to query the user ID or identifies the terminal used by the user (or an app installed on the terminal). Of course, any unique identification information that can identify) can be used.

Accordingly, the authentication server may generate a one-time temporary authentication ID in response to a temporary authentication ID grant request message including the unique identification information (m_serial in this example) and transmit it to the ID automatic inquiry app (Fig. 1). Refer to the drawing number 4)

When the temporary authentication ID is received as described above, the ID automatic inquiry app generates the ID authentication value based on the authentication value generation information shared with each other in the relationship with the corresponding authentication server (reference numerals 5 and 6 in FIG. 1 Reference). In the drawings attached to the present specification, a case in which an OTP (one time password) is generated as an ID authentication value is illustrated, but various values other than the ID authentication value may be used.

When the ID authentication value is generated, the ID automatic inquiry app generates a user ID request message including the temporary authentication ID received from the authentication server and the generated ID authentication value, and transmits it to the service server of the online service site (Fig. 1, reference numeral 7). Accordingly, the service server includes the temporary authentication ID and the ID authentication value received through the user ID request message in a message regarding a verification request and transmits it to the authentication server (see reference numeral 8 in FIG. 1). .

In this case, the authentication server generates a verification authentication value for verification of the ID authentication value based on the authentication value generation information shared with each other as described above, in response to the verification request from the service server, and the The ID authentication value is verified using the verification authentication value. If the ID authentication value and the verification authentication value match according to the verification result as described above, the actual authentication that is mapped to the unique identification information related to the issuance of the corresponding temporary authentication ID (that is, the temporary OID in FIG. 1) The ID (i.e., the OID of FIG. 1) is transmitted to the corresponding service server (see reference numeral 9 of FIG. 1). That is, the authentication server may transmit information guiding the verification result of the ID authentication value to the service server so that the service server may determine whether to transmit the user ID to the ID automatic inquiry app. To this end, the authentication server may pre-store a table or DB (database) in which the actual authentication ID to be used for user ID search for each of the aforementioned unique identification information is mapped and registered. In addition, at this time, the one-time temporary authentication ID used in the above process may be deleted.

Accordingly, when the actual authentication ID is received from the authentication server, the service server extracts the user ID mapped to the received actual authentication ID, and uses the extracted user ID as a response to the previous request. (See reference numeral 10 in Fig. 1). To this end, the service server may store a table or DB in which an actual authentication ID and a user ID are mapped and registered.

According to the above-described method, as in the app screen of Fig. 3B, it is possible to easily check the user ID of the corresponding site that the user wants to search. In the case of (B) of FIG. 3, some characters of the user ID are exemplified in a case in which some characters of the user ID are hidden, but it is not necessary to be the same, and of course, all IDs may be displayed.

In addition, although only the automatic inquiry method of the user ID is mainly described in this specification, a technology for automatically inputting the searched user ID may be additionally added. For example, assuming that a separate program such as a browser extension is installed, technologies such as automatically receiving the ID retrieved by the mobile app from the PC through short-range wireless communication technology such as Bluetooth and automatically entering the ID field are further developed. It could also be applied. This can be operated when the program running on the PC is driven to the top and there is an ID field.

According to the above-described method for providing an automatic ID inquiry service, the authentication server only stores the unique identification information, which is terminal-side information, and the actual authentication ID mapped thereto, but the user ID itself is unknown, and the service server Only the actual authentication ID mapped thereto is stored, but the terminal-side unique identification information itself cannot be known, whereas the user terminal side does not know the actual authentication ID at all. Therefore, even if any one of the user terminal, the service server, and the authentication server is hacked, it is impossible to steal all of the unique identification information, the user ID, and the actual authentication ID, which are information associated with them, It works.

The above-described method for providing an automatic user ID inquiry service according to an embodiment of the present invention may be implemented as a computer-readable code in a computer-readable recording medium. Computer-readable recording media include all types of recording media in which data that can be decoded by a computer system are stored. For example, there may be read only memory (ROM), random access memory (RAM), magnetic tape, magnetic disk, flash memory, optical data storage device, and the like. In addition, the computer-readable recording medium can be distributed to a computer system connected through a computer communication network, and stored and executed as code that can be read in a distributed manner.

The above has been described with reference to the embodiments of the present invention, but those of ordinary skill in the relevant technical field variously modify the present invention within the scope not departing from the spirit and scope of the present invention described in the following claims. And it will be easily understood that it can be changed.

Claims (6)

In a method of providing an automatic ID inquiry service using a terminal-side agent installed in a user terminal to perform an automatic ID inquiry service, and an authentication server performing authentication for an automatic ID inquiry service,
(a) As the user selection regarding the online service to be accessed is received, the terminal-side agent sends unique identification information composed of a mobile serial that can identify the user terminal in a message regarding a request for an ID for temporary authentication. Included and transmitted to the authentication server, and the authentication server generates a one-time temporary authentication ID in response to the temporary authentication ID request message including the unique identification information and transmits it to the terminal-side agent, and the terminal-side agent Receiving the temporary authentication ID from the authentication server;
(b) the terminal-side agent generates an ID authentication value based on authentication value generation information shared with each other in a relationship with the authentication server, and stores the received temporary authentication ID and the generated ID authentication value on-line. Transmitting to a service server providing a service to request a user ID used to log in to an account of the online service;
(c) In response to a verification request from the service server that is requested to transmit a user ID from the terminal-side agent, the authentication server verifies the ID authentication value based on the mutually shared authentication value generation information. Generating an authentication value for use and verifying the ID authentication value using the authentication value for verification;
(d) When the authentication server verifies the ID authentication value and the ID authentication value and the verification authentication value match, the actual authentication ID corresponding to the temporary authentication ID is transmitted to the service server. (E) when the actual authentication ID is received from the authentication server, the service server extracts the user ID mapped to the received actual authentication ID and transmits it to the terminal-side agent, and the terminal side Displaying, by an agent, the user ID for each online service in a list or automatically entering the ID field;
ID automatic search service providing method comprising a.
delete The method of claim 1,
In step (c),
The service server includes the temporary authentication ID and the ID authentication value received from the terminal-side agent requesting the transmission of the user ID in a message related to the verification request and transmits it to the authentication server, How to provide automatic ID search service.
delete The method of claim 1,
The authentication server stores a table or DB (database) in which the actual authentication ID to be used for user ID search for each unique identification information is mapped and registered, and
The service server, characterized in that for storing a table or DB in which the actual authentication ID and the user ID are mapped and registered with each other. delete

Images