KR102374193B1 - Method and device of providing log-in service - Google Patents

Abstract

The present invention relates to a login service providing method and login relay device, wherein when a user requests a login to use an online service, the user relays the user's login to an online service provider server and replaces the user's identification information. A method for providing a login service is provided in which a generated user key is provided to the online service provider server so that the online service provider server recognizes the user with the user key and provides an online service.

Description

Method and device of providing log-in service

The present invention relates to a log-in service providing method and a log-in relay device, and more particularly, to replace the user's identification information while relaying the user's log-in to an online operator server when the user requests a log-in to use an online service To provide a user key generated in response to the user to the online service provider server, the online service provider server to recognize the user with the user key to provide an online service to provide an online service.

With the development of ICT technology, the use of the Internet from work to daily life has greatly increased, and it is becoming difficult not only for work but also for daily life without online services using the Internet.

In general, when using an online service provided by an online service provider, the user registers as a member on the online service provider server, is issued an ID corresponding to the user, and sets a password. In addition, as the number of online services that users sign up for increases, it becomes difficult to remember their ID and password to access each online service. There is a problem that

In addition, various personal information about users is required for online business operators to recognize users when registering for membership.

Such leakage of personal information is frequently occurring and is emerging as a social problem. Due to the leakage of personal information, users are not only psychologically damaged but also economically damaged.

In order to solve the various problems described above, as a prior art, a technology for logging in using a phone number as an ID or providing an integrated login service for various online services subscribed by a user has been proposed. Although it supports logging in to various online services, it is still required to input personal information to identify users, and there is a problem that cannot prevent damage caused by personal information leakage.

Patent Publication No. 10-2009-0089616

The present invention aims to solve the problems of the prior art as described above, and to propose a simple login method that allows a user to log in more conveniently when accessing various online services.

In particular, even when the online operator holds the member's personal information or uses the integrated login service, the operator that provides the integrated login service retains the member's personal information, thereby avoiding a problem that may occur due to leakage of personal information. want to solve

In order to achieve the above technical problem, the login service providing method according to the present invention includes a user authentication step in which a login relay device authenticates the access of the user terminal to the online operator server according to a login request from the user terminal to the online operator server ; and the login relay device provides the user key generated in response to the user to the online operator server to replace the identification information of the user who requests login through the user terminal according to the access authentication for the user terminal, , a connection relay step of relaying the connection to the online operator server for the user terminal, wherein the online operator server recognizes the user with the user key and provides an online service.

Preferably, a member registration step of registering the online operator server based on the identification information of the online operator, and registering the user based on the identification information of the user; and by matching the identification information of the user or the user key of the user with the identification information of the online operator or the operator key of the online operator server to generate login information for the user's access to the online operator server. and relaying the access, based on the log-in information, to relay the access to the online service provider server for the user terminal.

Here, the method further includes a key generating step of generating the user key of the user and the business key of the online business server, wherein the log-in information generating step matches the user key with the business key to the online business server of the user You can create login information for

As an embodiment of the key generation step, one general-purpose user key for the user applied to all of a plurality of online operator servers and one general-purpose operator key for the online operator server applied to all of the plurality of users are generated can do.

As another embodiment of the key generation step, each individual user key for the user that is individually applied to each of a plurality of online business servers, and each individual business key for the online business server that is individually applied to each of a plurality of users can create

Furthermore, the method may further include a key generation step of generating a one-time user key for the authenticated user according to the execution of the user authentication step.

Preferably, the user authentication step includes: a login request receiving step of receiving a login request for an online operator server from the user terminal; A login confirmation text transmission step of transmitting a login confirmation text including a login confirmation URL to a user mobile terminal corresponding to a user requesting a login through the user terminal; and receiving a login signal according to the selection of the login confirmation URL from the user mobile terminal, and authenticating the access of the user terminal to the online operator server.

More preferably, according to the execution of the connection relay step, the login completion text transmission step of confirming the connection to the online operator server for the user terminal, and transmitting the login completion text including the logout URL to the user mobile terminal ; and receiving a logout signal according to the selection of the logout URL from the user mobile terminal, and releasing the access of the user terminal to the online service provider server.

Furthermore, a service detail reception step of receiving service details information including the service details provided to the user terminal from the online service provider server and the user key; a user confirmation step of confirming the user based on the user key included in the service detail information; and transmitting service detail confirmation information including the service detail to the user terminal corresponding to the user.

Preferably, the method may further include a cost processing step of receiving service details confirmation from the user terminal and performing cost processing according to the service details.

In addition, the login relay device according to the present invention relays access to the online operator server for the user terminal according to a login request from the user terminal to the online operator server, and identifies the user requesting login through the user terminal In order to replace information, a user key generated corresponding to the user is provided to the online operator server, and the online operator server recognizes the user with the user key and supports providing an online service.

Preferably, a member management unit that registers the user based on the identification information of the user, and registers the online business server server based on the identification information of the online business operator; a key generator for generating a user key corresponding to the user and a business key corresponding to the online operator server; a login information management unit that matches the identification information of the user or the user key of the user with the identification information of the online operator or the operator key of the online operator server to generate login information for the user's access to the online operator server; and an access relay unit that receives a login request to the online operator server from the user terminal, authenticates the user terminal's access to the online operator server, and relays the access to the online operator server for the user terminal can do.

Here, the key generator may selectively generate a general-purpose user key, individual user key, or one-time user key for the user, and selectively generate a general-purpose business key, individual business key or one-time business key for the online business server server. there is.

Preferably, the access relay unit may have a login API interworking with the login information management unit, and may provide the login API to the online operator server.

Furthermore, the access relay unit transmits a login confirmation text including a login confirmation URL to the user mobile terminal corresponding to the user requesting login through the user terminal, and login according to the selection of the login confirmation URL from the user mobile terminal By receiving the signal, it is possible to authenticate the access of the user terminal to the online operator server.

Further, the access relay unit confirms the connection to the online operator server for the user terminal, and transmits a log-in completion text including a log-out URL to the user mobile terminal, and the log-out from the user mobile terminal By receiving a logout signal according to the selection of the URL, the user terminal may release the connection to the online service provider server.

Preferably, the service details information including the service details provided to the user terminal and the user key are received from the online operator server, the user is identified based on the user key included in the service details information, and the It may further include a service detail processing unit that performs cost processing according to the service details.

Also, the log-in relay device according to the present invention may be a server in which a computer program for performing each step of the log-in service providing method according to the present invention is recorded.

According to the present invention as described above, it is possible to provide a simple login service in which a user can log in more conveniently when accessing various online services.

In particular, according to the present invention, since the online service provider can provide the online service without any personal information about the user using the online service, the online service provider cannot know who the user using the online service is. Even if the operator's server is hacked by a hacker, there is no personal information leakage problem because there is no information about the user at all.

In addition, even if the login relay device is hacked or login information is leaked, the security of the user's use of the online service can be further strengthened because the user cannot be identified simply with the user key.

1 shows a schematic configuration diagram of a login service system according to the present invention,
2 shows a conceptual diagram of a login service according to the present invention,
3 shows a configuration diagram of an embodiment of a login relay device according to the present invention,
4 shows a flowchart of an embodiment of a method for providing a login service according to the present invention;
5 is a flowchart showing an embodiment of a key generation process in a method for providing a login service according to the present invention;
Figure 6 shows an implementation of the embodiment of Figure 5,
7 is a flowchart of another embodiment of a key generation process in a method for providing a login service according to the present invention;
Figure 8 shows an implementation of the embodiment of Figure 7,
9 is a flowchart of another embodiment of a key generation process in a method for providing a login service according to the present invention;
Figure 10 shows an implementation of the embodiment of Figure 9,
11 shows an implementation example of remote log-in and log-out in the log-in service providing method according to the present invention;
12 is a flowchart illustrating an embodiment of a service detail processing process in a method for providing a login service according to the present invention.

In order to explain the present invention, the operational advantages of the present invention, and the objects achieved by the practice of the present invention, preferred embodiments of the present invention will be exemplified below and will be described with reference to them.

First, the terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention, and the singular expression may include a plural expression unless the context clearly indicates otherwise. In addition, in this application, terms such as "comprise" or "have" are intended to designate that a feature, number, step, operation, component, part, or a combination thereof described in the specification exists, but one or more other It should be understood that this does not preclude the possibility of addition or presence of features or numbers, steps, operations, components, parts, or combinations thereof.

In describing the present invention, if it is determined that a detailed description of a related known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

According to the present invention, when a user uses an online service, the user logs in through a user key that replaces the user's personal information, and the user who uses the online service is recognized as the user key by providing the user key corresponding to the user to the online operator. , we would like to propose a login service method that does not require personal information when using online services.

1 shows a schematic configuration diagram of a login service system according to the present invention.

The log-in service system according to the present invention includes, centered on the log-in relay device 100, user terminals 10a and 10b possessed by a user using an online service and an online operator server 50a, 50b of an online operator that provides an online service. may include, and if necessary, may additionally include an additional service server 200 for authenticating a user or performing additional services such as cost processing for an online service used by the user.

The login relay device 100 receives identification information for identifying the user from the user, and in this case, the identification information may include only minimum information such as a phone number. Then, the login relay device 100 generates a user key corresponding to the user, and when the user requests a login to the online business server 50a, 50b to which the user has subscribed, the user is checked and the user terminals 10a, 10b ) relays the connection to the online business server (50a, 50b), and provides the user key of the user logging in to the online business server (50a, 50b), so that the online business server (50a, 50b) selects the user with the user key Recognize and support to provide online services.

The user terminals 10a and 10b are communication terminals possessed by the user, and generally popular communication terminals such as PC, notebook, tablet, and smart phone may be applied. A separate communication terminal optimized to use the service may be applied.

The online operator servers 50a and 50b are devices that provide online services of online operators to users, and various devices such as servers and PCs owned by the online operators may be applied. It can also be a web page operator server that operates web pages on behalf of the users.

In the present invention, the online service is a concept that encompasses various services made through online, and may include various services that can be provided in the user's work or daily life, such as online shopping, online contents, and online documents, for example.

The user terminals 10a and 10b, the login relay device 100 and the online operator servers 50a and 50b may be connected to each other through various networks, where the network may include a wired/wireless Internet network, and furthermore, a limited area. However, it may include a virtual private network or intranet that only a limited number of people can access.

In addition, the login service system may include an additional service server 200 , and the login relay device 100 may authenticate the login for the user by itself, but depending on the situation, the login relay device 100 is an authentication server. By interworking with the additional service server 200 such as, the user's confirmation may be provided from the additional service server 200 such as an authentication server to allow the user's login.

Furthermore, in the present invention, the online operator servers 50a and 50b do not receive any personal information about the user, but only recognize the user with the user key corresponding to the user and provide an online service. When cost processing is requested, the online service provider servers 50a and 50b transmit the online service details provided to the corresponding user to the login relay device 100 to request cost processing. Then, the login relay device 100 checks the user corresponding to the user key and charges the user a fee. At this time, the login relay device 100 may perform the cost processing process by itself, but preferably, the login relay device The cost processing for the online service used by the user may be performed by requesting the charge to be charged to the additional service server 200 such as the payment server.

2 is a conceptual diagram of a login service according to the present invention.

In the present invention, the online service of the corresponding online operator can be provided to the user by performing the user's login service in a situation where the user's personal information is not provided to the online operator. Introduces the concept of user key.

That is, in the present invention, the login relay device 100 receives only minimal identification information such as a phone number for a user, generates a user key corresponding thereto, and relays the connection to the online operator server 50 for the user terminal 10 . and supports the online operator server 50 to recognize the user through the user key.

Looking at this in more detail, the login relay device 100 generates a user key 310 corresponding to the user with minimal identification information such as a phone number for the user, and based on the identification information selectively required for the online operator to generate a business key 350 corresponding to the online business server.

At this time, the user key 310 and the business key 350 generated by the login relay device 100 may be a general-purpose key that is applied in all cases, and there is an individual key that is limitedly applied only between a specific user and a specific online business server. Or it may be a one-time key that is limitedly applied only when a specific user logs in to a specific online operator server.

And the login relay device 100, by matching the user key of the user and the business key of the online business server, the user and the user log in to generate the log-in information 300 that can check the online business server receiving the online service, Upon a login request from the user terminal 10 , the user and the user check the online operator server to log in based on the retained login information 300 , and establish a connection so that the user terminal 10 can log in to the online operator server 50 . can be relayed. In addition, the login relay device 100 supports the online operator server 50 to recognize the user as the user key by providing the user key for the user to the online operator server 50 .

As described above, in the present invention, since the online service provider can provide the online service without having any personal information about the user using the online service, the online service provider cannot know who the user using the online service is, and the online operator Even if the server is hacked by a hacker, there is no personal information leakage problem because there is no information about the user.

Looking more closely at the login relay device for providing the login service according to the present invention, Fig. 3 shows a configuration diagram of an embodiment of the login relay device according to the present invention.

The login relay device 100 according to the present invention may include a member management unit 110, a key generation unit 130, a login information management unit 150, and an access relay unit 170, and if necessary, a service history processing unit ( 190) may be further included.

The member management unit 110 registers the user as a member based on the user's identification information, and registers the online business server server based on the identification information of the online business operator, wherein the user's identification information is a telephone number that can determine the user Only minimal information such as a number may be included.

The key generation unit 130 generates a user key corresponding to the user and a business key corresponding to the online operator server. It is also possible to generate an individual user key or an individual business key that is limitedly applied only between business servers, or it is possible to generate a one-time user key or a one-time business key that is limitedly applied only when a specific user logs in to a specific online business server.

The login information management unit 150 matches the identification information of the user or the user key of the user with the identification information of the online operator or the operator key of the online operator server to generate login information for the user's access to the online operator server. For example, login information may be created by matching the identification information of the user with the identification information of the online operator or the business key of the online operator server, or the login information may be created by matching the identification information of the online operator or the operator key of the online operator server to the user's user key Information may also be generated, and the combination of generating login information may be adjusted depending on whether the generated key is a general-purpose key, an individual key, or a one-time key.

The access relay unit 170 receives a login request to the online operator server from the user terminal, authenticates the user terminal's access to the online operator server, and relays the connection to the online operator server for the user terminal.

Preferably, the access relay unit 170 has a login API for providing the login service of the online operator server, and may provide it to the online operator server. By providing , the login service can be performed according to the login API provided when the user accesses the online service provider server.

Furthermore, the access relay unit 170 transmits a login confirmation text including a login confirmation URL to the user mobile terminal corresponding to the user requesting login through the user terminal, and login according to the selection of the login confirmation URL from the user mobile terminal A remote login function that receives a signal and authenticates the user terminal's access to the online service provider server may be provided.

In addition, the access relay unit 170 confirms the connection to the online operator server for the user terminal, transmits a log-in completion text including the log-out URL to the user mobile terminal, and to the selection of the log-out URL from the user mobile terminal A remote logout function for receiving a logout signal and releasing the connection to the online service provider server of the user terminal may be provided.

The service detail processing unit 190 configured additionally receives service detail information including the service details provided to the user terminal from the online operator server and the user key, and identifies the user based on the user key included in the service detail information, and confirms Expenses are processed according to the service details for the registered users. To this end, the service history processing unit 190 interworks with the additional service server 200 such as a payment server to request the additional service server 200 to charge the user with the cost processing for the online service used by the user. may be

Such a login relay device 100 may be implemented as one device including each configuration, or each configuration may be configured as each individual device or individual module and selectively combined, and the login relay device 100 may be implemented as a group of respective components. Furthermore, a kind of server capable of performing a storage function and a calculation function is applied as the login relay device 100, and a computer program performing each step of the login service providing method according to the present invention, which will be described later, may be recorded in the recommendation service device. there is.

The present invention provides a method for providing a login service implemented through the login service system and the login relay device described above. Hereinafter, a method for providing a login service according to the present invention will be described through examples.

4 is a flowchart illustrating an embodiment of a method for providing a login service according to the present invention.

When the login relay device 100 receives a login request for the online operator server 50 from the user terminal 10 (S210), the login relay device 100 connects the user who requested the login and the online operator server to which the user will log in. to authenticate the connection of the user terminal 10 to the online operator server 50 (S230). And in order to replace the identification information of the user who requests login through the user terminal 10, the user key generated in response to the user is extracted (S230).

The login relay device 100 relays the connection to the online operator server 50 for the user terminal 10 according to the login authentication for the user (S310), and provides the extracted user key to the online operator server 50 do.

Here, the login relay device 100 may provide a login API to the online operator server 50 , and a login service may be provided to the user terminal 10 through the login API provided to the online operator server 50 .

When the connection between the user terminal 10 and the online operator server 50 is relayed, the online operator server 50 recognizes the user with the provided user key (S410) and provides the online service to the user terminal 10 (S430). .

As described above, in the present invention, a user key corresponding to a user logging in while providing a login service to an online operator server for a user through the login relay device 100 in a state where personal information related to the user is not retained on the online operator server is provided as an online service provider server, so that the online service provider server can provide online services by recognizing the user with the user key.

Hereinafter, each process of the method for providing a login service according to the present invention will be described in more detail through examples.

5 is a flowchart illustrating an embodiment of a key generation process in a method for providing a login service according to the present invention.

The login relay device 100 receives a registration request (S111) from the online operator server 50 and registers the online operator server (S112). can be provided together. The identification information of the online operator may include only the access address of the server of the online operator, but if necessary, various information related to the online operator may be included incidentally.

When the online operator server 50 is registered, the login relay device 100 generates a general-purpose operator key corresponding to the online operator server 50 (S113), wherein the general-purpose operator key is the online operator server 50 to access. It becomes a key that can be universally applied to all users, regardless of who the user is.

In addition, the login relay device 100 registers a user according to the registration request (S114) from the user terminal 10 (S115), and when the user is registered, the user's identification information is provided, and at this time, the user's identification information confirms the user Only the minimum possible information may be included, for example, the user's phone number may be included in the user's identification information.

And the login relay device 100 generates (116) a general-purpose user key corresponding to the user. Similar to the general-purpose business key, the general-purpose user key can be universally applied to all online business servers regardless of which online business server it is. become the height

In the embodiment of FIG. 5, the registration process of the user and the process of generating the general-purpose user key are performed after the registration process of the online business server and the process of generating the general-purpose business key, but this is one embodiment, and Relationships can be selectively changed as needed.

In the state where the login relay device 100 holds the general-purpose business key for the online business operator server and the general-purpose user key for the user, the user terminal 10 requests a subscription for the online service provided by the online business server 50 (S121) ), the login relay device 100 checks the user requesting subscription to the online service and the online operator server that provides the online service (S122), and a universal user key corresponding to the user and a universal user key corresponding to the online operator server By matching the business key, login information for accessing the online business server for the user is generated (S123).

When a login request from the user terminal 10 is requested based on the login information generated in this way, the login relay device 100 may check the user terminal 10 and the online operator server 50 to induce mutual connection, and login By extracting the universal user key included in the information and providing it to the online business server 50, the online business server 50 recognizes the user with the universal user key and provides an online service even when it does not hold information about the user. can do.

The series of processes shown in FIG. 5 may be performed through the login API by the login relay device 100 providing the login API to the online operator server 50, where the login API is the login API of the login relay device 100. It is meant to encompass APIs having various functions for performing various processes, such as a process of registering as a member in the login relay device 100 in conjunction with each component, and a process of a user signing up for an online service.

As an example of providing a login service with a general key in the present invention, FIG. 6 shows an implementation example of the embodiment of FIG. 5 .

6(a) is an example of login information centered on a user. Through the process of FIG. 5, the login relay device 100 provides a universal user key 420 corresponding to the user and a plurality of online business servers. (50a, 50b, ... 50n) In the state that the general-purpose business key (430a, 430b, ... 430n) corresponding to each is generated, the user is a plurality of online business server servers (50a, 50b, ... 50n) When subscribing to the online service provided by each, the login relay device 100 matches the user's general user key 420 with the respective general business keys 430a, 430b, ... 430n to provide the login information 410 create

That is, by matching the general-purpose user key 420 and one general-purpose business key 430a, login information for the user to access one online business server 50a is generated, and similarly, the general-purpose user key 420 and the other one are generated. By matching the general-purpose business key 430b of , login information for the user to access another online business server 50b is generated.

6 (b) is an example of login information centered on the online service provider server. Through the process of FIG. 5, the login relay device 100 provides a general-purpose user key 460a corresponding to each of a plurality of users; 460b, ... 460n) and a general-purpose business key 470 corresponding to the online business server 50 are generated, and when each of a plurality of users subscribes to the online service provided by the online business server 50, login The relay device 100 generates the log-in information 450 by matching the general-purpose operator key 470 to the general-purpose user keys 460a, 460b, ... 460n of each of a plurality of users.

That is, by matching the general-purpose business key 470 and one general-purpose user key 460a, log-in information for one user to access the online business server 50 is generated, and similarly, the general-purpose business key 470 and the other one are generated. By matching the universal user key 460b of , login information for another user to access the online operator server 50 is generated.

As described above, in the present invention, one general-purpose user key corresponding to a user corresponds to a business key corresponding to a plurality of online business servers, respectively, to generate login information, and based on this, by providing a login service, the user provides specific personal information You can sign up for an online service without having to do it, and you can also simply log in to receive the online service.

7 is a flowchart illustrating another embodiment of a key generation process in a method for providing a login service according to the present invention.

The login relay device 100 registers the online operator server according to the registration request (S131) from the online operator server 50 (S132), and registers the user according to the registration request (S133) from the user terminal 10 (S134).

At this time, as in the embodiment of FIG. 5 , identification information on the online operator may be provided together when the online operator server 50 is registered, and identification information of the user may be provided when the user is registered.

In the embodiment of FIG. 7 , the precedence relationship between the registration process of the online business server and the user registration process may be selectively changed as needed.

When the login relay device 100 receives a subscription request (S141) for the online service provided by the online operator server 50 from the user terminal 10 in a state in which the online operator server and the user are registered, the login relay device 100 confirms the user requesting subscription to the online service and the online operator server that provides the online service (S142), and generates an individual user key corresponding to the user and an individual operator key corresponding to the online operator server (S143).

In this case, the individual user key generated by the login relay device 100 corresponds to a specific user and is applied only to a specific online service provider server and is not applied to other online service provider servers. In addition, an individual business key is an individual key that corresponds to a specific online business server and is applied only to a specific user and not to other users.

In this way, an individual user key for a user and an individual operator key for an online operator server are generated, and log-in information for accessing a specific online operator server for a specific user is generated by matching them (S144).

And when a login request from the user terminal 10 is requested based on the generated login information, the login relay device 100 checks the user terminal 10 and the online operator server 50 to relay the interconnection, and the login information By extracting the individual user key included in the , and providing it to the online business server 50, the online business server 50 can recognize the corresponding user with the individual user key and provide an online service.

The series of processes shown in FIG. 7 may be performed through the log-in API by providing the log-in relay device 100 to the online operator server 50 as in FIG. 5 above.

As an example of providing a login service with an individual key in the present invention, FIG. 8 shows an implementation example of the embodiment of FIG. 7 .

8 (a) is an example of login information centered on the user. Through the process of FIG. 7 , the login relay device 100 receives the specific online operator servers 50a, 50b, and . When receiving a request for online service subscription for ..50n), individual user keys 520a, 520b, ... 520n that are individually applied to specific online operator servers 50a, 50b,... and a specific online business server (50a, 50b, ... 50n) to generate individual business keys (530a, 530b, ... 520n) and individual business keys (530a, 530b, ... 530n) are matched to generate login information 510 .

That is, in response to a subscription request for an online service provided by one specific online service provider server 50a from the user terminal 10 , the login relay device 100 corresponds to a specific user and operates only in one specific online service provider server 50a. Generates an individual user key 520a to be applied, and also generates an individual business key 530a applied only to the specific user by corresponding to one specific online business server 50a, and the individual user key 520a and the individual business operator By matching the key 530a, login information is generated.

In response to a subscription request for an online service provided by another specific online service provider server 50b from the user terminal 10, the login relay device 100 again corresponds to a specific user and another specific online service provider server 50b. Generates an individual user key 520b that is applied only to, and generates an individual operator key 530b that is applied only to the user by corresponding to the other specific online operator server 50b, and separates the individual user key 520b and the individual operator By matching the key 530b, login information is generated.

In this process, for each online operator server (50a, 50b, ... 50n), each individual user key corresponding to the user and an individual operator key corresponding to the corresponding online operator server are generated and matched to obtain login information is created

That is, login information is generated by generating an individual user key applied to each online service server subscribed to one user and matching it with the operator key of the corresponding online service server.

8 (b) is an example of log-in information centered on the online business server server. Through the process of FIG. 7, the log-in relay device 100 is individually applied to each user. Generates individual business keys (570a, 570b, ... 570n) of the and correspondingly generates individual user keys (560a, 560b, ... 560n) corresponding to each user, respectively, for individual use of each user The log-in information 550 is generated by matching the respective individual business keys 570a, 570b, ... 570n of the online business server 50 to the jockeys 560a, 560b, ... 560n.

That is, log-in information is generated by generating an individual business key applied to each of a plurality of users for one online business server and matching it with the individual user key of the corresponding user.

As described above, in the present invention, by generating an individual user key for a user that is applied differently to each of a plurality of online service provider servers to which the user subscribes and generating login information based on this, the user's use information for the online service can be more reliably be able to protect

9 is a flowchart of another embodiment of a key generation process in a method for providing a login service according to the present invention.

The login relay device 100 registers the online operator server according to the registration request (S151) from the online operator server 50 (S152), and registers the user according to the registration request (S153) from the user terminal 10 (S154).

At this time, as in the embodiment of FIG. 5 or FIG. 7 , when registering the online business server 50 , identification information on the online business may be provided together, and when the user is registered, the identification information of the user may be provided, and also online The relationship between the registration process of the operator server and the registration process of the user may be selectively changed if necessary.

When the online operator server and the user are registered, the login relay device 100 receives a subscription request (S161) for the online service provided by the online operator server 50 from the user terminal 10, the login relay device 100 ) checks the user requesting subscription for the online service and the online service provider server that provides the online service (S162), and creates login information by matching the user's identification information with the identification information of the online service provider server (S163).

At this time, as shown in FIG. 5 above, login information may be generated by matching the general-purpose user key and the general-purpose operator key, and as shown in FIG. 7 , login information is generated by matching the individual user key and the individual operator key as shown in FIG. In addition, it is also possible to create login information by matching an individual user key and a general-purpose operator key or by matching a general-purpose user key and an individual operator key.

And when receiving a login request from the user terminal 10, the login relay device 100 checks and authenticates the user (S240). The user may be authenticated by interworking with the additional service server 200 that performs user authentication.

When the user is confirmed, the login relay device 100 generates a one-time user key of the user that is applied only to the online operator server 50 from which the user has requested a login and a one-time operator key of the online operator server that is applied only to the user who has requested a login (S260) )do.

And the login relay device 100 relays the access of the user terminal 10 to the online operator server 50 (S320) and provides the generated one-time user key to the online operator server 50 (S340). In this case, a one-time business key corresponding to the online business server 50 may also be provided. Then, the online operator server 50 may provide an online service by recognizing the corresponding user with the provided one-time user key.

As an example of providing a login service with a one-time key in the present invention, FIG. 10 shows an implementation example of the embodiment of FIG. 9 .

Online operator server 50 for the user terminal 10 based on the user's identification information, general-purpose user key or individual user key and online operator server identification information, general-purpose operator key or individual operator key combination and matched login information When access authentication is made, the login relay device 100 generates a one-time user key corresponding to the user and a one-time operator key corresponding to the online operator server prior to relaying the connection between the user terminal 10 and the online operator server 50 . and matching them to create connection information. In addition, the login relay device 100 provides the access information to the online operator server 50 while relaying the access to the online operator server 50 for the user terminal 10 . The online operator server 50 recognizes the corresponding user through the one-time user key included in the access information provided from the login relay device 100 .

This process is repeatedly performed every time you log in. For example, as shown in FIG. 10 , the login relay device 100 relays the one-time login to the online operator server 50 for the user terminal 10 while performing a one-time login. A one-time user key 620a and a one-time business key 630a are generated and matched to provide access information 610a to the online operator server 50, and after logout, the online operator server from the user terminal 10 again ( 50) according to the two-time login request, the login relay device 100 generates and matches the one-time user key 620b and the one-time operator key 630b for the two-time login while relaying the two-time log-in, access information 610b) is provided to the online operator server 50 .

That is, by creating a new one-time user key every time you log in and delivering it to the online operator server 50, even if the one-time user key is leaked, it is impossible to distinguish whose user key it is, so the information protection for the user's online service use is further strengthened can be

Furthermore, in the present invention, since the login service is provided only with the minimum identification information for the user, remote login and remote logout functions are provided in order to prevent the case where another person steals simple identification information and uses the login service. shows an implementation example of remote log-in and log-out in the log-in service providing method according to the present invention.

11 (a), the user receives the login service screen 710 provided from the login relay device through the user terminal, and inputs a phone number corresponding to the previously registered identification information on the login service screen 710 (715) to request a login to the online service server. The login service screen 710 as shown in (a) of FIG. 11 may be implemented by the login relay device providing the login API to the corresponding online operator server.

In response to the login request from the user terminal, the login relay device compares the input phone number and identification information to authenticate the user. The login confirmation text 720 including the login confirmation URL 725 is transmitted to the corresponding user mobile terminal. In this case, the authentication text 721 may be inserted into the login confirmation text 720 so as to check whether the user is logged in or not.

And when the login relay device receives a login signal according to the selection of the login confirmation URL from the user mobile terminal, it provides a login service screen 730 to the user terminal as shown in FIG. Confirmation of the transmitted login confirmation text 731 is requested. In this case, the login service screen 730 may be configured to input the login confirmation text transmitted to the user mobile terminal.

When the user's final confirmation is made, the login relay device relays the connection to the corresponding online operator server for the user terminal.

Furthermore, when the user terminal is connected to the corresponding online operator server, the login relay device uses the user mobile terminal as shown in FIG. In this case, the log-in completion text may include a log-out URL 745 capable of releasing the connection to the corresponding online operator server of the user terminal.

If the user confirms the log-in completion text and selects the log-out URL 745 to cancel the connection to the corresponding online operator server of the user terminal, the login relay device responds to the selection of the log-out URL from the user mobile terminal. Upon receiving the logout signal, the user terminal releases the access to the online service provider server.

As described above, in the present invention, by providing remote log-in and remote log-out functions through the user's mobile terminal, it overcomes the problem that it is difficult to accurately identify the user because the login service is performed with minimal identification information about the user, and This will prevent you from logging in.

Furthermore, since the online service provider server does not provide any personal information about the user, it is difficult for the online service provider server to handle the cost for the online service provided to the user by itself. You can receive the online server details provided to the user and handle the cost on your behalf.

In this regard, FIG. 12 is a flowchart illustrating an embodiment of a service detail processing process in a method for providing a login service according to the present invention.

Log-in to the online operator server 50 for the user terminal 10 is performed through the login service providing method according to the present invention as described above, and the online operator server 50 provides the online service to the user terminal 10 (S430) In accordance with the online service provision, the online service provider server 50 responds to the service details provided to the user terminal 10 with the user key transmitted from the login relay device 100 to generate service details information, and uses it to generate service details ( 100) (S470).

The login relay device 100 extracts the user key and the business key from the service details information transmitted from the online business server 50 (S530), and checks the online business server corresponding to the user and business key corresponding to the user key (S530) to determine which user has received which online service from which online operator.

And provides service history information used by the user to the user terminal 10 of the user (S550), where the user terminal 10 is a user corresponding to the phone number when the identification information for the user includes a phone number It may be a mobile terminal.

When the corresponding user checks the details of the online service used by the user and approves it (S570), the login relay device 100 charges the user the cost incurred according to the service details. At this time, the login relay device 100 may charge a fee to the user's mobile terminal corresponding to the phone number included in the identification information because it does not hold financial information for the user, or an additional service server such as a separate payment server By requesting the cost processing for the corresponding user, the cost may be processed through the additional service server.

As described above, according to the present invention, a simple login service that allows users to log in more conveniently when accessing various online services is provided, and at the same time, an online operator does not retain any personal information about users using the online service. Since online services can be provided in the state of being, online operators cannot know who users are using online services, and even if the online operator servers or login relay devices are hacked by hackers, there is no information about users. The personal information leakage problem itself will not occur. In addition, even if the login relay device is hacked or login information is leaked, the security of the user's use of the online service can be further strengthened because the user cannot be identified simply with the user key.

The above description is merely illustrative of the technical spirit of the present invention, and various modifications and variations will be possible without departing from the essential characteristics of the present invention by those skilled in the art to which the present invention pertains. Therefore, the embodiments described in the present invention are not intended to limit the technical spirit of the present invention, but to explain, and the technical spirit of the present invention is not limited by these embodiments. The protection scope of the present invention should be construed by the following claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present invention.

10, 10a, 10b,...10n: user terminal,
50, 50a, 50b,...50n: Online operator server,
100: login relay device,
110: member management department;
130: key generation unit;
150: login information management unit;
170: access relay unit;
190: service details processing unit,
200: additional service server.

Claims (18)

a member registration step in which the login relay device registers the online business server server based on identification information of the online business operator and registers the user based on the user's identification information;
a key generation step of generating, by the login relay device, a user key for replacing identification information of a user requesting login through a user terminal, and a business key corresponding to the online business server;
a log-in information generating step in which the login relay device matches the user key of the user with the business key of the online business operator server, and generates log-in information for the user's access to the online business server server;
a user authentication step of authenticating, by the login relay device, the access of the user terminal to the online service provider server when receiving a login request for the online service provider server from the user terminal; and
When the access to the user terminal is authenticated, the login relay device provides the user key to the online operator server, and relays the access to the online operator server for the user terminal based on the log-in information. A method for providing a login service, comprising the steps of. delete delete The method of claim 1,
The key generation step is
A method for providing a login service, characterized in that generating one universal user key for the user applied to all of a plurality of online business servers and one universal business key for the online business server applied to all of a plurality of users. The method of claim 1,
The key generation step is
A method for providing a login service, comprising generating each individual user key for the user individually applied to each of a plurality of online business servers and each individual business key for the online business server individually applied to each of a plurality of users . a member registration step in which the login relay device registers the online business server server based on identification information of the online business operator and registers the user based on the user's identification information;
a log-in information generating step of matching, by a log-in relay device, the identification information of the user with the identification information of the online business operator, and generating log-in information for the user's access to the online business server;
a user authentication step of authenticating, by the login relay device, the access of the user terminal to the online service provider server when receiving a login request for the online service provider server from the user terminal;
a key generation step in which the login relay device generates a one-time user key for the authenticated user according to the execution of the user authentication step; and
and a connection relay step in which the login relay device provides the user key generated in response to the user to the online operator server, and relays the connection to the online operator server for the user terminal based on the login information A method of providing a login service, characterized in that The method of claim 1,
The user authentication step is
a log-in request receiving step of receiving a log-in request for an online service provider server from the user terminal;
A login confirmation text transmission step of transmitting a login confirmation text including a login confirmation URL to a user mobile terminal corresponding to a user requesting a login through the user terminal; and
and receiving a login signal according to the selection of the login confirmation URL from the user mobile terminal, and authenticating the access of the user terminal to the online service provider server. 8. The method of claim 7,
a login completion text transmission step of confirming the connection to the online operator server for the user terminal according to the execution of the connection relay step, and transmitting a login completion text including a logout URL to the user mobile terminal; and
and a logout step of receiving a logout signal according to the selection of the logout URL from the user mobile terminal, and releasing the connection to the online service provider server of the user terminal. The method of claim 1,
a service detail reception step of receiving service detail information including service details provided to the user terminal from the online operator server and the user key;
a user confirmation step of confirming the user based on the user key included in the service detail information; and
The method of providing a login service, characterized in that it further comprises the step of transmitting the service details confirmation information including the service details to the user terminal corresponding to the user. 10. The method of claim 9,
and receiving a service detail confirmation from the user terminal and performing cost processing according to the service details. a member management unit for registering the user based on the user's identification information, and registering the online business server server based on the identification information of the online business operator;
a key generator for generating a user key for replacing identification information of a user requesting login through a user terminal and a business key corresponding to the online business server;
a login information management unit that matches the user key of the user with the business key of the online business operator server, and generates login information for the user's access to the online business server server;
Upon receiving a login request to the online operator server from the user terminal, the user terminal authenticates the access of the user terminal to the online operator server based on the login information, and relays the connection to the online operator server for the user terminal, , Login relay device comprising a connection relay that provides the user key to the online operator server. delete 12. The method of claim 11,
The key generator,
Selectively generate a general-purpose user key, individual user key, or one-time user key for the user;
A login relay device, characterized in that selectively generating a general-purpose business key, individual business key, or one-time business key for the online business server server. 12. The method of claim 11,
The connection relay unit,
A login relay device having a login API interworking with the login information management unit, and providing the login API to the online operator server. 12. The method of claim 11,
The connection relay unit,
Transmitting a login confirmation text including a login confirmation URL to a user mobile terminal corresponding to a user requesting login through the user terminal, and receiving a login signal according to the selection of the login confirmation URL from the user mobile terminal, Login relay device, characterized in that for authenticating the access of the user terminal to the operator server. 16. The method of claim 15,
The connection relay unit,
Confirms the connection to the online operator server for the user terminal, transmits a log-in completion text including a log-out URL to the user mobile terminal, and a log-out signal according to the selection of the log-out URL from the user mobile terminal Log in relay device, characterized in that by receiving the user terminal to release the connection to the online operator server. 12. The method of claim 11,
Receives service history information including the service details and the user key from the online operator server to the user terminal, identifies the user based on the user key included in the service history information, and provides information on the service details for the user Login relay device, characterized in that it further comprises a service history processing unit for performing cost processing according to the. A login relay device in which a computer program for performing each step of the method for providing a login service according to any one of claims 1 to 10 is recorded.

Images