KR102643163B1 - Service providing server that can collect and provide personal site use history information on the website through third-party authentication and operating method thereof - Google Patents

Abstract

The present invention proposes a service providing server and its operation method that can collect and provide an individual's site usage history information on a website through third-party agency authentication, thereby providing an individual's site usage history information on a specific website. We can provide support to enable collection.

Description

A service provision server that can collect and provide personal site usage history information on a website through third-party agency authentication and its operating method {SERVICE PROVIDING SERVER THAT CAN COLLECT AND PROVIDE PERSONAL SITE USE HISTORY INFORMATION ON THE WEBSITE THROUGH THIRD -PARTY AUTHENTICATION AND OPERATING METHOD THEREOF}

The present invention relates to a service providing server that can collect and provide information on an individual's site usage history for a website through third-party proxy authentication and a method of operating the same.

Recently, interest in integrated information management services that collect and provide information on an individual's site usage history from different websites is growing. As a type of such service, in the financial sector, there is great interest in a service called 'My Data', which collects site usage history information such as an individual's credit card payment history or account transfer history scattered across various websites and provides it to the individual. It is being released as it receives.

In addition, recently, as disclosed in Korean Patent No. 10-2153405, a service that processes the product sales payment claim of a product seller registered in a specific online shopping mall has also appeared. This pre-calculation processing service requires the operator providing the service to access the relevant online shopping mall and check the product sales receivables of the product seller registered in the online shopping mall. This pre-calculation processing service includes the specific items mentioned above. It can be seen that the website includes a service that collects information on an individual's site usage history.

In this way, in order to collect site usage history information on a specific website and operate a service provided to the user, the service operator must access the website on behalf of the user, and then use the website for the user from the website. Because history information must be received, third-party authentication needs to be carried out to confirm that the service operator is the one authorized to access the website on behalf of the user.

For example, in order for a service operator to obtain site usage history information of a specific individual from a specific online shopping mall site, it is necessary to check whether the service operator is the service operator that properly secures the login authentication information for the online shopping mall site of the individual. Third party proxy certification must be performed. If proper third-party authentication is not performed, there is a risk that personal information may be exposed indiscriminately.

Therefore, research is needed on service technology that can collect and provide information on an individual's site usage history for a specific website through appropriate third-party agency authentication.

The present invention seeks to present a service technology that can collect an individual's site usage history information for a specific website through appropriate third-party agency authentication.

According to an embodiment of the present invention, the service providing server, which can collect and provide information on an individual's site usage history for a website through third-party proxy authentication, consents to third-party proxy authentication for a pre-set website. When a command to collect site usage history information of the first user for the website during a first period is received from a first user terminal owned by the first user among a plurality of users designated as people who have completed After performing user authentication on whether the first user is a user who has consented to third-party authentication, the first user logs in to the website using the first user terminal. When first login authentication information for logging in to the website of the first user is received from the authentication information request unit, the first user terminal, requesting transmission of authentication information, it is sent to the site operation server for the website. After completing third-party proxy authentication for the website of the first user by connecting and transmitting the first login authentication information to the site operation server, From the history information request unit and the site operation server that collects information on the site usage history of the website during the first period and requests a response, to the website during the first period of the first user. As information about the site usage history, when the first site usage history information is collected and returned, it includes a history information transmission unit that transmits the first site usage history information to the first user terminal.

In addition, the method of operating a service providing server that can collect and provide information on an individual's site use history for a website through third-party proxy authentication according to an embodiment of the present invention is for a preset website, a third party Among the plurality of users designated as persons who have completed consent to proxy authentication, the first user's site use history information for the website during the first period is obtained from the first user terminal owned by the first user. When a collection command is received, user authentication is performed to determine whether the first user is a user who has consented to third-party proxy authentication, and then the first user terminal is used to log in to the website. Requesting to transmit login authentication information of a first user, when first login authentication information for logging in to the website of the first user is received from the first user terminal, site operation for the website After completing third-party proxy authentication for the website of the first user by connecting to the server and transmitting the first login authentication information to the site operation server, to the site operation server, the first user requesting a response by collecting information about the site usage history of the website during the first period, and receiving information about the website of the first user during the first period from the site operation server. As information on site usage history, when first site usage history information is collected and returned, the method includes transmitting the first site usage history information to the first user terminal.

The present invention proposes a service providing server and its operation method that can collect and provide an individual's site usage history information on a website through third-party agency authentication, thereby providing an individual's site usage history information on a specific website. We can provide support to enable collection.

Figure 1 is a diagram illustrating the structure of a service providing server that can collect and provide information on an individual's site usage history for a website through third-party proxy authentication according to an embodiment of the present invention.
Figure 2 is a flowchart showing the operation method of a service providing server that can collect and provide information on an individual's site usage history for a website through third-party proxy authentication according to an embodiment of the present invention.

Hereinafter, embodiments according to the present invention will be described in detail with reference to the attached drawings. This description is not intended to limit the present invention to specific embodiments, but should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention. In describing each drawing, similar reference numerals are used for similar components, and unless otherwise defined, all terms used in this specification, including technical or scientific terms, are within the scope of common knowledge in the technical field to which the present invention pertains. It has the same meaning as generally understood by those who have it.

In this document, when a part "includes" a certain component, this means that it may further include other components rather than excluding other components, unless specifically stated to the contrary. Additionally, in various embodiments of the present invention, each component, functional block, or means may be composed of one or more subcomponents, and the electrical, electronic, and mechanical functions performed by each component may be electronic. It may be implemented with various known elements or mechanical elements such as circuits, integrated circuits, and ASICs (Application Specific Integrated Circuits), and may be implemented separately or by integrating two or more into one.

Meanwhile, the blocks in the attached block diagram or the steps in the flow chart are computer program instructions that are mounted on the processor or memory of equipment capable of data processing, such as general-purpose computers, special-purpose computers, portable laptop computers, and network computers, and perform designated functions. It can be interpreted to mean. Because these computer program instructions can be stored in a memory provided in a computer device or in a computer-readable memory, the functions described in the blocks of a block diagram or the steps of a flow diagram can be produced as a manufactured product containing instruction means to perform them. It could be. In addition, each block or each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing specified logical function(s). Additionally, it should be noted that in some alternative embodiments, it is possible for functions mentioned in blocks or steps to be executed in a different order. For example, two blocks or steps shown in succession may be performed substantially simultaneously or in reverse order, and in some cases, some blocks or steps may be omitted.

Figure 1 is a diagram illustrating the structure of a service providing server that can collect and provide information on an individual's site usage history for a website through third-party proxy authentication according to an embodiment of the present invention.

Referring to FIG. 1, the service providing server 110 according to the present invention includes an authentication information request unit 111, a history information request unit 112, and a history information transmission unit 113.

The authentication information request unit 111 is a first user terminal 101 owned by the first user 10 among a plurality of users designated as people who have completed consent to third-party proxy authentication for a preset website. ), when an order to collect the site usage history information of the first user for the website during the first period is received, whether the first user 10 is a user who has completed consent to third-party proxy authentication After performing user authentication, a request is made to the first user terminal 101 to transmit the login authentication information of the first user 10 for logging in to the website.

Here, the preset website refers to a site that provides certain web services such as an online shopping mall site, a banking site, an online game service provider site, a portal site, etc., and login authentication information refers to an ID for logging into the website. This refers to certain member authentication information such as and password.

At this time, according to an embodiment of the present invention, when a command to collect the site usage history information of the first user 10 is received from the first user terminal 101, the authentication information request unit 111 1 A specific configuration for performing user authentication on whether the user 10 is the user who has consented to third-party authentication, including an authentication number storage unit 120, an authentication event generation unit 121, and a verification number. It may include a generation unit 122, a feedback request unit 123, a square root operation unit 124, and an authentication completion processing unit 125.

The authentication number storage unit 120 stores a pre-issued authentication number of k (k is a natural number of 3 or more) digits for each of the plurality of users. At this time, the authentication number for each of the plurality of users is also pre-stored in each user's user terminal.

For example, when k is '5', the authentication number storage unit 120 may store a pre-issued 5-digit authentication number for each of the plurality of users, as shown in Table 1 below.

multiple users Certification Number user 1 13568 user 2 23156 ... ...

When the authentication event generator 121 receives a command to collect site usage history information of the first user 10 for the website during the first period from the first user terminal 101, the first user terminal 101 An authentication event is generated to proceed with user authentication to determine whether the user 10 is the user who has consented to third-party proxy authentication.

When the authentication event occurs, the verification number generator 122 extracts the first authentication number for the first user 10 from the authentication number storage unit 120 and sets the Hamming weight t (t is 2 or more, After randomly generating a k-bit random code (which is a natural number less than k), among the k-digit numbers constituting the first authentication number, the same position as the point where the code '1' is located in the random code Generate a first verification number of t digits consisting of numbers located in .

For example, assuming that k is '5', t is '3', the first user 10 is 'User 1' (10) in Table 1, and the first period is 'November 1, 2021 ~ If 'November 30, 2021', the authentication event generation unit 121 receives 'November 1, 2021 to November 30, 2021' for the above website from the first user terminal 101. When an order to collect information on the site usage history of User 1' (10) is received, authentication is performed to proceed with user authentication to determine whether 'User 1' (10) is a user who has consented to third-party proxy authentication. Events can be generated.

Then, the verification number generator 122 extracts '13568', the first authentication number for 'User 1' (10), from the authentication number storage unit 120 as shown in Table 1, and the Hamming weight is '3'. After randomly generating a 5-bit random code such as '01011', among the 5 digits that make up the first authentication number '13568', '1' in the random code '01011' A 3-digit first verification number consisting of '3', '6', and '8', which are numbers located in the same position as the code, can be generated, such as '368'.

The feedback request unit 123 transmits the random code to the first user terminal 101 and requests transmission of a feedback matrix generated based on the random code and the first authentication number.

At this time, according to an embodiment of the present invention, when the random code is received from the service providing server 110 and a request to transmit the feedback matrix is received, the first user terminal 101 Among the k-digit numbers constituting the first authentication number pre-stored in After generating the first verification number of t digits consisting of, a column vector having as components the t numbers constituting the first verification number and a row vector having as components the t numbers constituting the first verification number By calculating matrix multiplication, a first feedback matrix of size t x t can be generated and transmitted to the service providing server 110.

In relation to this, as in the above-described example, the first authentication number is '13568' and the random code is '01011', and the random code is '01011' by the feedback request unit 123 to the first user terminal 101. Let's assume that '01011' has been transmitted.

Then, the first user terminal 101 selects the number received from the service providing server 110 among the 5-digit numbers constituting '13568', which is the first authentication number pre-stored in the first user terminal 101. In the random code '01011', the 3-digit first verification number consisting of '3', '6', and '8', which are numbers located in the same position as the code '1', is '368' and can be created together.

Then, the first user terminal 101 is a column vector having as components the three numbers constituting the first verification number '368', '368'. By calculating the matrix product between ' and '[3 6 8]', a row vector whose components are the three numbers constituting the verification number '368', the first feedback matrix of size 3 x 3 is ' ', the first feedback matrix can be transmitted to the service providing server 110.

When the first feedback matrix is received from the first user terminal 101 in response to a transmission request for the feedback matrix, the square root calculation unit 124 calculates the first of the t ² components constituting the first feedback matrix. After extracting t diagonal components corresponding to the main diagonal of the feedback matrix, the square root of each of the t diagonal components is calculated.

And, when the authentication completion processing unit 125 confirms that the square root of each of the t diagonal components matches each of the t numbers constituting the first verification number, the first user 10 The authentication process is completed as the user who has consented to third-party authentication.

In relation to this, as in the above-described example, from the first user terminal 101, ' When it is said that the first feedback matrix 'is received by the service providing server 110, the square root calculation unit 124 corresponds to the main diagonal of the first feedback matrix among the nine components constituting the first feedback matrix. After extracting the three diagonal components '9', '36', and '64', the square roots of '3', '6', and '8' for each of the three diagonal components can be calculated.

Then, the authentication completion processing unit 125 checks whether the square root of each of the three diagonal components matches each of the three numbers constituting the first verification number '368', and then If it is confirmed that the first user 10 is a user who has consented to third-party proxy authentication, the authentication process can be completed.

In this way, when the authentication process is completed as if the first user 10 is a user who has completed consent to third-party proxy authentication, the authentication information request unit 111 is sent to the first user terminal 101, and the website It may be requested to transmit login authentication information of the first user 10 for logging in.

When first login authentication information for logging in to the website of the first user 10 is received from the first user terminal 101, the history information request unit 112 is a site operation server for the website. After completing third-party proxy authentication for the website of the first user 10 by connecting to (102) and transmitting the first login authentication information to the site operation server 102, the site operation server At (102), a request is made to collect information about the site usage history of the first user 10 for the website during the first period and to reply.

At this time, according to an embodiment of the present invention, the history information request unit 112 includes a validation instruction unit 114, a secondary authentication request unit 115, an authentication number request unit 116, and an authentication number transmission unit 117. , It may include a proxy authentication completion unit 118 and a response request unit 119.

When the first login authentication information is received from the first user terminal 101, the validation instruction unit 114 connects to the site operation server 102 and sends the first login authentication information to the site operation server 102. While transmitting, a validation command instructing to verify the validity of the first login authentication information is transmitted.

At this time, when the first login authentication information is received from the service providing server 110 and the validity verification command is received, the site operation server 102 responds to the validity verification command to check members registered with the website. It is possible to check whether the first login authentication information is stored in the member database where member information is stored. Then, when the site operation server 102 confirms that the first login authentication information is stored in the member database, it generates a validation completion message indicating that the validity of the first login authentication information has been verified. It can be transmitted to the service provision server 110.

In this way, the site operation server 102, in response to the validation command, checks whether the first login authentication information is stored in the member database where member information for members registered with the website is stored. Accordingly, when a validation completion message for the first login authentication information is received from the site operation server 102 to the service providing server 110, the secondary authentication request unit 115 sends the first login authentication message to the site operation server 102. 1 A secondary authentication command is transmitted to perform secondary authentication for the user 10.

At this time, when the site operation server 102 receives the secondary authentication proceeding command from the service providing server 110, the site operation server 102 performs secondary authentication for the first user 10 in response to the secondary authentication proceeding command. After generating a first one-time authentication number for the first user 10 from the member database and confirming the mobile phone number for the first user 10, a text message containing the first one-time authentication number is sent to the recipient using the mobile phone number. At the same time, the service providing server 110 may be requested to reply with the first one-time authentication number.

In this way, the site operation server 102, in response to the secondary authentication command, generates the first one-time authentication number for secondary authentication of the first user 10 and transmits the text message. At the same time, as the authentication number reply command is transmitted to the service providing server 110, when the authentication number reply command is received from the site operation server 102 to the service providing server 110, the authentication number request unit 116 ) transmits the authentication number reply command to the first user terminal 101.

As a result, the first user terminal 101 can receive the authentication number reply command transmitted from the service providing server 110, and the mobile phone 11 owned by the first user 10 can receive the site operation server ( A text message containing the first one-time authentication number sent by 102) may be received. Then, the first user 10 checks the text message received on the mobile phone 11, checks the first one-time authentication number included in the text message, and then sends the first one-time authentication number to the first user terminal 101. When the first one-time authentication number is input by the first user 10, the first user terminal 101 can transmit the first one-time authentication number to the service providing server 110.

In this way, after the authentication number reply command is transmitted from the service providing server 110 to the first user terminal 101, the first user 10 includes the mobile phone number in the text message received as the recipient. As the first one-time authentication number is input on the first user terminal 101, when the first one-time authentication number is returned to the service providing server 110 from the first user terminal 101, the authentication number The transmission unit 117 transmits the first one-time authentication number to the site operation server 102.

At this time, when the site operation server 102 receives the first one-time authentication number from the service provision server 110, the first one-time authentication number received from the service provision server 110 is the first user 10. It is possible to check whether it matches the first one-time authentication number generated to proceed with secondary authentication, and if both one-time authentication numbers are confirmed to match each other, secondary authentication for the first user 10 A completion message can be generated and transmitted to the service providing server 110.

In this way, the first one-time authentication number transmitted from the site operation server 102 to the site operation server 102 is the first one-time authentication generated to perform secondary authentication for the first user 10. As it is confirmed that the number matches, when the secondary authentication completion message for the first user 10 is received from the site operation server 102 to the service provision server 110, the proxy authentication completion unit 118 It is confirmed that the third-party proxy authentication of the first user 10 for the website has been completed.

And, when it is confirmed that the third-party proxy authentication for the website of the first user 10 has been completed, the reply request unit 119 sends the first user 10 to the site operation server 102. We request that you collect information about the site usage history of the above-mentioned website during the first period and respond.

In this way, a request is made to the site operation server 102 through the history information request unit 112 to collect and reply to the site usage history of the website during the first period of the first user 10. If so, the site operation server 102 may collect information about the site use history of the first user 10 for the website during the first period and transmit it to the service provision server 110.

As a result, the first site usage history information is collected from the site operation server 102 as information on the site usage history of the first user 10 for the website during the first period, and is collected from the site operation server 102 to the service providing server. When the response to 110 is received, the history information transmission unit 113 transmits the first site use history information to the first user terminal 101.

At this time, according to an embodiment of the present invention, the history information transmission unit 113 includes a hash function storage unit 126, an encryption event generation unit 127, a first polynomial generator 128, and a second polynomial generator ( 129), a seed code generator 130, a hash value generator 131, and a data transmission unit 132.

The hash function storage unit 126 stores preset hash functions for each of the plurality of users. At this time, the hash function for each of the plurality of users is also pre-stored in each user's user terminal.

When the first site usage history information is collected and returned from the site operation server 102, the encryption event generator 127 encrypts the first site usage history information and transmits it to the first user terminal 101. Generates an encryption event.

When the encryption event occurs, the first polynomial generator 128 extracts the first authentication number for the first user 10 from the authentication number storage unit 120, and generates 2 with the highest degree k-1. A first polynomial is generated by designating each coefficient of the true polynomial as the result of performing a modulo-2 operation on each of the k numbers constituting the first authentication number.

Here, the modulo-2 operation refers to an operation that performs division by dividing the dividend by 2 and calculates the remainder.

The second polynomial generator 129 generates a second polynomial by randomly designating each coefficient of a binary polynomial whose highest degree is n (n is a natural number).

The seed code generator 130 multiplies the first polynomial and the second polynomial to generate an operation polynomial, which is a binary polynomial whose highest degree is k-1+n, and then converts each coefficient of the operation polynomial into a bit string. Generate a seed code of k+n bits with .

When the seed code is generated, the hash value generator 131 extracts the first hash function for the first user 10 from the hash function storage unit 126 and then adds the seed code to the first hash function. By applying it as an input, a first hash value is generated.

When the first hash value is generated, the data transmission unit 132 encrypts data about the first site use history information with the first hash value to generate first encrypted data, and then generates first encrypted data, and then sends the first user terminal 101 ), while transmitting the first encrypted data, the second polynomial is transmitted as clue information for decrypting the first encrypted data.

Hereinafter, the encryption event generator 127, the first polynomial generator 128, the second polynomial generator 129, the seed code generator 130, the hash value generator 131, and the data transmission unit 132. )'s operation will be explained in detail using an example.

First, let us assume that the coefficient of each binary polynomial used in the present invention is a concept that includes the coefficient of the zeroth order term.

In this situation, k is '5', n is '2', the first authentication number for the first user 10 is '13568', and the first site usage history is received from the site operation server 102. If the information is collected and returned to the service provision server 110, the encryption event generator 127 may generate an encryption event to encrypt the first site use history information and transmit it to the first user terminal 101. there is.

Then, the first polynomial generator 128 extracts '13568', which is the first authentication number for the first user 10, from the authentication number storage unit 120, and generates a binary polynomial with the highest degree of 4. The first polynomial can be generated by designating each coefficient as the result of performing modulo-2 operation on each of the five numbers constituting the first authentication number '13568'.

In relation to this, 5 constituting the first authentication number '13568'. The numbers are '1, 3, 5, 6, 8', and when modulo-2 operation is performed on each of '1, 3, 5, 6, 8', the result is '1, 1, 1, 0. , 0', the first polynomial generator 128 designates each coefficient of the binary polynomial with the highest degree as '1, 1, 1, 0, 0', making the first polynomial ' It can be created like this:

In addition, the second polynomial generator 129 randomly designates each coefficient of the binary polynomial whose highest degree is 2, thereby creating the second polynomial as ' It can be created like this:

Then, the seed code generator 130 generates the first polynomial ' ' and the second polynomial ' ' can be multiplied together to create an arithmetic polynomial, which is a binary polynomial whose highest degree is 6.

Here, when generating the operation polynomial, the seed code generator 130 must subtract each coefficient of the operation polynomial to a binary value, so the polynomial generated by multiplying the first polynomial and the second polynomial For each coefficient, the resulting value when modulo-2 operation is performed can be calculated as each coefficient of the operation polynomial.

Ultimately, the seed code generator 130 converts the operation polynomial into ' It can be created like this:

Then, the seed code generator 130 generates a 7-bit seed code, such as '1100100', with each coefficient of the operation polynomial '1, 1, 0, 0, 1, 0, 0' as a bit string. After extracting the first hash function for the first user 10 from the hash function storage unit 126, and applying the seed code '1100100' as an input to the first hash function, the first hash value is generated. can be created.

Then, the data transmission unit 132 encrypts the data about the first site usage history information with the first hash value to generate first encrypted data, and then sends the first encrypted data to the first user terminal 101. While transmitting data, the second polynomial ' ' can be transmitted as clue information for decrypting the first encrypted data.

At this time, according to an embodiment of the present invention, when the first encryption data and the second polynomial are received from the service providing server 110, the first user terminal 101 stores them in the first user terminal 101. By decrypting the first encrypted data based on the first authentication number, the first hash function, and the second polynomial received from the service providing server 110, the first site usage history information is restored. can do.

Specifically, when the first user terminal 101 receives the first encrypted data and the second polynomial from the service providing server 110, each coefficient of the binary polynomial with the highest degree k-1 is sent to the first user. The first polynomial is generated by specifying the result value when modulo-2 operation is performed on each of the k numbers constituting the first authentication number stored in the terminal 101, and the first By multiplying the polynomial and the second polynomial received from the service providing server 110 to generate the operation polynomial, which is a binary polynomial whose highest degree is k-1+n, each coefficient of the operation polynomial is a bit string. After generating the seed code of k+n bits, the seed code is applied as an input to the first hash function stored in the first user terminal 101 to generate the first hash value, and the first hash value is generated. By decrypting the first encrypted data based on the hash value, the first site use history information can be restored.

In relation to this, as in the above-described example, k is '5', n is '2', the first authentication number for the first user 10 is '13568', and is received at the first user terminal 101. The second polynomial is ' 'In the assumed situation, the process of the first user terminal 101 decrypting the first encrypted data will be described as an example as follows.

First, the first user terminal 101 converts each coefficient of a binary polynomial with the highest degree of 4 into '1, 3', which constitutes '13568', which is the first authentication number stored in the first user terminal 101. , 5, 6, 8', respectively, by specifying the result value '1, 1, 1, 0, 0', which is the result of performing the modulo-2 operation, to obtain the first polynomial ' ' can be created.

Then, the first user terminal 101 uses the first polynomial ' ' and the second polynomial ' The above operation polynomial, which is a binary polynomial whose highest degree is 6 by multiplying ' with each other, is ' It can be created like this:

After that, the first user terminal 101 generates a 7-bit seed code such as '1100100' with each coefficient of the operation polynomial '1, 1, 0, 0, 1, 0, 0' as a bit string. Then, the seed code '1100100' is applied as an input to the first hash function stored in the first user terminal 101 to generate the first hash value, and then generate the first hash value based on the first hash value. By performing decryption on the first encrypted data, the first site use history information can be restored.

Through this, the first user 10 can check the first site usage history information using the first user terminal 101.

Figure 2 is a flowchart showing the operation method of a service providing server that can collect and provide information on an individual's site usage history for a website through third-party proxy authentication according to an embodiment of the present invention.

In step S210, from the first user terminal owned by the first user among the plurality of users designated as people who have completed consent to third-party proxy authentication for the preset website, When an order to collect the first user's site usage history information for the website is received, user authentication is performed to determine whether the first user is a user who has consented to third-party proxy authentication, and then the first user is 1. Request to transmit the first user's login authentication information to the user terminal to log in to the website.

In step S220, when first login authentication information for logging in to the website of the first user is received from the first user terminal, the site operation server for the website is connected to the site operation server. After completing third-party proxy authentication for the website of the first user by transmitting the first login authentication information, to the site operation server, the website for the first period of the first user We request that you collect information about your site usage history and respond to us.

In step S230, when the first site usage history information is collected and returned from the site operation server as information about the first user's site usage history for the website during the first period, the first user Site usage history information is transmitted to the first user terminal.

At this time, according to one embodiment of the present invention, in step S220, when the first login authentication information is received from the first user terminal, the site operation server is accessed, and the first login is performed with the site operation server. transmitting a validation command instructing to verify the validity of the first login authentication information while transmitting authentication information, wherein the site operation server, in response to the validation command, selects members registered with the website; By checking whether the first login authentication information is stored in the member database where member information is stored, when a validation completion message for the first login authentication information is received from the site operation server, the site operation Transmitting a secondary authentication command to a server to perform secondary authentication for the first user, wherein the site operation server performs secondary authentication for the first user in response to the secondary authentication command. Generate a first one-time authentication number to proceed, confirm the mobile phone number for the first user from the member database, and send a text message containing the first one-time authentication number to the recipient using the mobile phone number. At the same time, as the authentication number reply command requesting to reply the first one-time authentication number is transmitted to the service providing server, when the authentication number reply command is received from the site operation server, the authentication number reply command is sent to the service providing server. Transmitting to a first user terminal, after the authentication number reply command is transmitted to the first user terminal, the first user uses the mobile phone number as the recipient to receive the first disposable text message included in the text message. Upon inputting an authentication number on the first user terminal, when the first one-time authentication number is returned from the first user terminal, transmitting the first one-time authentication number to the site operation server, the site As the operation server confirms that the first one-time authentication number transmitted to the site operation server matches the first one-time authentication number generated to perform secondary authentication for the first user, the site When a secondary authentication completion message for the first user is received from the operation server, confirming that third-party proxy authentication for the website of the first user has been completed and When it is confirmed that third-party proxy authentication is complete, requesting the site operation server to collect information about the site usage history of the first user for the website during the first period and send a reply. can do.

In addition, according to an embodiment of the present invention, in step S210, a pre-issued k (k is a natural number of 3 or more) digit authentication number for each of the plurality of users (authentication for each of the plurality of users) maintaining an authentication number storage unit in which (the number is also pre-stored in the user terminal of each user) stored, from the first user terminal, the first user's use of the website for the first period of time; When a command to collect history information is received, generating an authentication event to proceed with user authentication as to whether the first user is a user who has consented to third-party proxy authentication; when the authentication event occurs, After extracting the first authentication number for the first user from the authentication number storage unit and randomly generating a k-bit random code with a Hamming weight t (t is a natural number greater than or equal to 2 and less than k), the Among the k-digit numbers constituting the first authentication number, generating a t-digit first verification number consisting of numbers located in the same position as the point where the code '1' is located in the random code, Requesting transmission of a feedback matrix generated based on the random code and the first authentication number while transmitting the random code to a first user terminal, requesting transmission of the feedback matrix from the first user terminal Correspondingly, a first feedback matrix (the first feedback matrix is provided by the first user terminal, among the k-digit numbers constituting the first authentication number pre-stored in the first user terminal, the service providing server After generating the first verification number of t digits consisting of numbers located in the same position as the point where the code of '1' is located in the random code received from, t numbers constituting the first verification number When a matrix of the size of txt (generated by calculating a matrix product between a column vector having elements as components and a row vector having t numbers constituting the first verification number as elements) is received, constituting the first feedback matrix After extracting t diagonal components corresponding to the main diagonal of the first feedback matrix among t ² components, calculating a square root for each of the t diagonal components and calculating a square root for each of the t diagonal components. If it is confirmed that each of the t numbers constituting the first verification number matches, completing the authentication process as if the first user is a user who has completed consent to third-party proxy authentication. You can.

At this time, according to one embodiment of the present invention, in step S230, a preset hash function for each of the plurality of users (the hash function for each of the plurality of users is also pre-stored in the user terminal of each user) ) Maintaining a hash function storage unit where the first site usage history information is stored, when the first site usage history information is collected and returned from the site operation server, encrypting the first site usage history information and transmitting it to the first user terminal. Generating an encryption event for, when the encryption event occurs, extracting the first authentication number for the first user from the authentication number storage unit, and calculating each coefficient of a binary polynomial whose highest degree is k-1. , generating a first polynomial by specifying the result value when performing modulo-2 operation on each of the k numbers constituting the first authentication number, the highest degree being n (n is a natural number) generating a second polynomial by randomly specifying each coefficient of the binary polynomial, multiplying the first polynomial and the second polynomial to create an operation polynomial that is a binary polynomial whose highest degree is k-1+n. After generating, generating a seed code of k+n bits having each coefficient of the operation polynomial as a bit string; when the seed code is generated, a first hash function for the first user is generated from the hash function storage unit. After extracting, generating a first hash value by applying the seed code as an input to the first hash function, and when the first hash value is generated, data about the first site usage history information is stored in the first hash function. 1 After encrypting with a hash value to generate first encrypted data, transmitting the first encrypted data to the first user terminal and transmitting the second polynomial as clue information for decrypting the first encrypted data May include steps.

At this time, when the first encryption data and the second polynomial are received from the service providing server, the first user terminal receives the first authentication number, the first hash function, and the service stored in the first user terminal. By performing decryption on the first encrypted data based on the second polynomial received from the providing server, the first site use history information can be restored.

At this time, according to one embodiment of the present invention, when the first user terminal receives the first encrypted data and the second polynomial from the service providing server, each coefficient of the binary polynomial whose highest degree is k-1 , Generating the first polynomial by designating it as the result value of performing modulo-2 operation on each of the k numbers constituting the first authentication number stored in the first user terminal, and By multiplying the first polynomial and the second polynomial received from the service providing server to generate the operation polynomial, which is a binary polynomial whose highest degree is k-1+n, each coefficient of the operation polynomial is a bit string. After generating the seed code of k+n bits, the seed code is applied as an input to the first hash function stored in the first user terminal to generate the first hash value, and the first hash value is generated. By performing decryption on the first encrypted data based on , the first site use history information can be restored.

Above, the operation method of the service providing server according to an embodiment of the present invention has been described with reference to FIG. 2. Here, the operation method of the service providing server according to an embodiment of the present invention may correspond to the configuration of the operation of the service providing server 110 described using FIG. 1, so a more detailed description thereof will be omitted. .

The operating method of the service providing server according to an embodiment of the present invention may be implemented as a computer program stored in a storage medium to be executed through combination with a computer.

Additionally, the operating method of the service providing server according to an embodiment of the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc., singly or in combination. Program instructions recorded on the medium may be specially designed and constructed for the present invention or may be known and usable by those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -Includes optical media (magneto-optical media) and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, etc. Examples of program instructions include machine language code, such as that produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc.

As described above, the present invention has been described with specific details such as specific components and limited embodiments and drawings, but this is only provided to facilitate a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , those skilled in the art can make various modifications and variations from this description.

Accordingly, the spirit of the present invention should not be limited to the described embodiments, and the scope of the patent claims described below as well as all modifications that are equivalent or equivalent to the scope of this patent claim shall fall within the scope of the spirit of the present invention. .

110: Service provision server
111: Authentication information request unit 112: History information request unit
113: history information transmission unit 114: validation instruction unit
115: Secondary authentication request unit 116: Authentication number request unit
117: Authentication number transmission unit 118: Agency authentication completion unit
119: Reply request unit 120: Authentication number storage unit
121: Authentication event generation unit 122: Verification number generation unit
123: Feedback request unit 124: Square root operation unit
125: Authentication completion processing unit 126: Hash function storage unit
127: Encryption event generation unit 128: First polynomial generation unit
129: second polynomial generator 130: seed code generator
131: Hash value generation unit 132: Data transmission unit
101: first user terminal
102: Site operation server
10: First user
11: mobile phone

Claims (12)

In the service provision server that can collect and provide information on an individual's website usage history through third-party agency authentication,
From a first user terminal owned by a first user among a plurality of users designated as persons who have completed consent to third-party proxy authentication for a preset website, information about the website for a first period of time is received. When an order to collect the first user's site usage history information is received, user authentication is performed to determine whether the first user is a user who has consented to third-party proxy authentication, and then, to the first user terminal, an authentication information request unit requesting to transmit login authentication information of the first user for logging in to the website;
When first login authentication information for logging in to the website of the first user is received from the first user terminal, the site operation server for the website is accessed, and the first login is performed to the site operation server. After completing third-party proxy authentication for the website of the first user by transmitting authentication information, to the site operation server, the first user's use of the website during the first period of time A history information request unit that collects information about history and requests a response; and
From the site operation server, when the first site usage history information is collected and returned as information about the first user's site usage history of the website during the first period, the first site usage history information is collected. History information transmission unit transmitting to the first user terminal
Including,
The history information request section
When the first login authentication information is received from the first user terminal, it connects to the site operation server and verifies the validity of the first login authentication information while transmitting the first login authentication information to the site operation server. a validation instruction unit that transmits a validation command instructing to do something;
As the site operation server, in response to the validation command, checks whether the first login authentication information is stored in a member database that stores member information about members registered with the website, the site When a validation completion message for the first login authentication information is received from the operation server, a secondary authentication request unit transmits a secondary authentication command to proceed with secondary authentication for the first user to the site operation server. ;
The site operation server generates a first one-time authentication number for performing secondary authentication for the first user in response to the secondary authentication command, and generates a mobile phone number for the first user from the member database. After confirming, a text message containing the first one-time authentication number is sent to the mobile phone number as the recipient, and at the same time, an authentication number reply command is sent requesting the service providing server to reply with the first one-time authentication number. Upon transmission, when the authentication number reply command is received from the site operation server, an authentication number request unit transmits the authentication number reply command to the first user terminal;
After the authentication number reply command is transmitted to the first user terminal, the first user sends the first one-time authentication number included in the text message received with the mobile phone number as the recipient to the first user terminal. When the first one-time authentication number is returned from the first user terminal upon input on the site, an authentication number transmission unit that transmits the first one-time authentication number to the site operation server;
As the site operation server confirms that the first one-time authentication number transmitted to the site operation server matches the first one-time authentication number generated to perform secondary authentication for the first user, When a secondary authentication completion message for the first user is received from the site operation server, a proxy authentication completion unit confirms that third-party proxy authentication for the website of the first user has been completed; and
When it is confirmed that the first user's third-party proxy authentication for the website has been completed, information about the first user's site usage history for the website during the first period is sent to the site operation server. Reply request section requesting collection and response
A service providing server including. delete According to paragraph 1,
The authentication information request unit
A pre-issued authentication number of k (k is a natural number of 3 or more) digits for each of the plurality of users - the authentication number for each of the plurality of users is also pre-stored in each user's user terminal - is stored. Authentication number storage unit;
When an order to collect the first user's site usage history information for the website during the first period is received from the first user terminal, the first user has completed consent to third-party proxy authentication. an authentication event generation unit that generates an authentication event to proceed with user authentication as to whether the is correct;
When the authentication event occurs, the first authentication number for the first user is extracted from the authentication number storage unit, and a k-bit random code with a Hamming weight t (t is a natural number greater than or equal to 2 and less than k) is generated. After randomly generating, first verification of t digits consisting of numbers located in the same position as the point where the code '1' is located in the random code among the k digits constituting the first authentication number. a verification number generator that generates a number;
a feedback request unit that transmits the random code to the first user terminal and requests transmission of a feedback matrix generated based on the random code and the first authentication number;
From the first user terminal, a first feedback matrix in response to a request for transmission of the feedback matrix - the first feedback matrix is, the first user terminal, the first authentication number pre-stored in the first user terminal Among the k-digit numbers constituting the , generate the t-digit first verification number consisting of numbers located in the same position as the point where the code '1' is located in the random code received from the service providing server. Then, a matrix of the size of txt is generated by calculating a matrix product between a column vector having as components the t numbers constituting the first verification number and a row vector having as components the t numbers constituting the first verification number. When - is received, among the t ² components constituting the first feedback matrix, t diagonal components corresponding to the main diagonal of the first feedback matrix are extracted, and then each of the t diagonal components A square root operation unit that calculates the square root for; and
If the square root of each of the t diagonal components is confirmed to match each of the t numbers constituting the first verification number, it is confirmed that the first user is a user who has consented to third-party proxy authentication. Authentication completion processing unit that completes authentication processing with
A service providing server including. According to paragraph 3,
The history information transmission unit
a hash function storage unit storing a preset hash function for each of the plurality of users - the hash function for each of the plurality of users is also pre-stored in each user's user terminal;
When the first site usage history information is collected and returned from the site operation server, an encryption event generator generates an encryption event to encrypt the first site usage history information and transmit it to the first user terminal;
When the encryption event occurs, the first authentication number for the first user is extracted from the authentication number storage unit, and each coefficient of a binary polynomial with the highest degree k-1 constitutes the first authentication number. a first polynomial generator that generates a first polynomial by specifying a result value of performing a modulo-2 operation on each of the k numbers;
a second polynomial generator that generates a second polynomial by randomly specifying each coefficient of a binary polynomial whose highest degree is n (n is a natural number);
After multiplying the first polynomial and the second polynomial to generate an operation polynomial, which is a binary polynomial with the highest degree of k-1+n, a k+n bit seed having each coefficient of the operation polynomial as a bit string (seed) A seed code generator that generates a code;
When the seed code is generated, the first hash function for the first user is extracted from the hash function storage unit, and then the seed code is applied as an input to the first hash function, thereby generating a first hash value. value generation unit; and
When the first hash value is generated, data about the first site usage history information is encrypted with the first hash value to generate first encrypted data, and then the first encrypted data is sent to the first user terminal. While transmitting, a data transmission unit that transmits the second polynomial as clue information for decrypting the first encrypted data
Including,
The first user terminal is
When the first encryption data and the second polynomial are received from the service providing server, the first authentication number and the first hash function stored in the first user terminal and the second received from the service providing server A service providing server that restores the first site use history information by decrypting the first encrypted data based on a polynomial. According to clause 4,
The first user terminal is
When the first encryption data and the second polynomial are received from the service providing server, each coefficient of the binary polynomial with the highest degree k-1 constitutes the first authentication number stored in the first user terminal. The first polynomial is generated by specifying the result value when modulo-2 operation is performed on each of the k numbers, and the first polynomial and the second polynomial received from the service providing server are connected to each other. By generating the operation polynomial, which is a binary polynomial whose highest degree is k-1+n by multiplying, the seed code of k+n bits having each coefficient of the operation polynomial as a bit string is generated, and then the first user By applying the seed code as an input to the first hash function stored in the terminal to generate the first hash value, and decrypting the first encrypted data based on the first hash value, 1 A service providing server characterized by restoring site usage history information. In the method of operating a service providing server that can collect and provide information on an individual's site usage history for a website through third-party authentication,
From a first user terminal owned by a first user among a plurality of users designated as persons who have completed consent to third-party proxy authentication for a preset website, information about the website for a first period of time is received. When an order to collect the first user's site usage history information is received, user authentication is performed to determine whether the first user is a user who has consented to third-party proxy authentication, and then, to the first user terminal, requesting to transmit login authentication information of the first user for logging into the website;
When first login authentication information for logging in to the website of the first user is received from the first user terminal, the site operation server for the website is accessed, and the first login is performed to the site operation server. After completing third-party proxy authentication for the website of the first user by transmitting authentication information, to the site operation server, the first user's use of the website during the first period of time Collecting information about history and requesting a response; and
From the site operation server, when the first site usage history information is collected and returned as information about the first user's site usage history of the website during the first period, the first site usage history information is collected. Transmitting to the first user terminal
Including,
The step of collecting information about the site usage history and requesting a response is
When the first login authentication information is received from the first user terminal, it connects to the site operation server and verifies the validity of the first login authentication information while transmitting the first login authentication information to the site operation server. transmitting a validation command instructing to do;
As the site operation server, in response to the validation command, checks whether the first login authentication information is stored in a member database that stores member information about members registered with the website, the site Upon receiving a validation completion message for the first login authentication information from the operation server, transmitting a secondary authentication command to perform secondary authentication for the first user to the site operation server;
The site operation server generates a first one-time authentication number for performing secondary authentication for the first user in response to the secondary authentication command, and generates a mobile phone number for the first user from the member database. After confirming, a text message containing the first one-time authentication number is sent to the mobile phone number as the recipient, and at the same time, an authentication number reply command is sent requesting the service providing server to reply with the first one-time authentication number. When transmitting, when the authentication number reply command is received from the site operation server, transmitting the authentication number reply command to the first user terminal;
After the authentication number reply command is transmitted to the first user terminal, the first user sends the first one-time authentication number included in the text message received with the mobile phone number as the recipient to the first user terminal. Upon inputting the first user terminal, when the first one-time authentication number is returned, transmitting the first one-time authentication number to the site operation server;
As the site operation server confirms that the first one-time authentication number transmitted to the site operation server matches the first one-time authentication number generated to perform secondary authentication for the first user, Upon receiving a secondary authentication completion message for the first user from the site operation server, confirming that third-party proxy authentication of the first user for the website has been completed; and
When it is confirmed that the first user's third-party proxy authentication for the website has been completed, information about the first user's site usage history for the website during the first period is sent to the site operation server. Steps to request collection and response
A method of operating a service providing server including. delete According to clause 6,
The step of requesting to transmit the login authentication information is
A pre-issued authentication number of k (k is a natural number of 3 or more) digits for each of the plurality of users - the authentication number for each of the plurality of users is also pre-stored in each user's user terminal - is stored. maintaining an authentication number storage unit;
When an order to collect the first user's site usage history information for the website during the first period is received from the first user terminal, the first user has completed consent to third-party proxy authentication. Generating an authentication event to proceed with user authentication as to whether is correct;
When the authentication event occurs, the first authentication number for the first user is extracted from the authentication number storage unit, and a k-bit random code with a Hamming weight t (t is a natural number greater than or equal to 2 and less than k) is generated. After randomly generating, first verification of t digits consisting of numbers located in the same position as the point where the code '1' is located in the random code among the k digits constituting the first authentication number. generating a number;
transmitting the random code to the first user terminal and requesting transmission of a feedback matrix generated based on the random code and the first authentication number;
From the first user terminal, a first feedback matrix in response to a request for transmission of the feedback matrix - the first feedback matrix is, the first user terminal, the first authentication number pre-stored in the first user terminal Among the k-digit numbers constituting the , generate the t-digit first verification number consisting of numbers located in the same position as the point where the code '1' is located in the random code received from the service providing server. Then, a matrix of the size of txt is generated by calculating a matrix product between a column vector having as components the t numbers constituting the first verification number and a row vector having as components the t numbers constituting the first verification number. When - is received, among the t ² components constituting the first feedback matrix, t diagonal components corresponding to the main diagonal of the first feedback matrix are extracted, and then each of the t diagonal components calculating the square root for; and
If the square root of each of the t diagonal components is confirmed to match each of the t numbers constituting the first verification number, it is confirmed that the first user is a user who has consented to third-party proxy authentication. Steps to complete the authentication process with
A method of operating a service providing server including. According to clause 8,
The step of transmitting the first site usage history information to the first user terminal is
maintaining a hash function storage unit storing a preset hash function for each of the plurality of users - the hash function for each of the plurality of users is also pre-stored in the user terminal of each user;
When the first site usage history information is collected and returned from the site operation server, generating an encryption event to encrypt the first site usage history information and transmit it to the first user terminal;
When the encryption event occurs, the first authentication number for the first user is extracted from the authentication number storage unit, and each coefficient of a binary polynomial with the highest degree k-1 constitutes the first authentication number. generating a first polynomial by specifying the result value when performing a modulo-2 operation on each of the k numbers;
Generating a second polynomial by randomly specifying each coefficient of a binary polynomial whose highest degree is n (n is a natural number);
After multiplying the first polynomial and the second polynomial to generate an operation polynomial, which is a binary polynomial with the highest degree of k-1+n, a k+n bit seed having each coefficient of the operation polynomial as a bit string (seed) A step of generating code;
When the seed code is generated, extracting a first hash function for the first user from the hash function storage unit and then applying the seed code as an input to the first hash function to generate a first hash value. ; and
When the first hash value is generated, data about the first site usage history information is encrypted with the first hash value to generate first encrypted data, and then the first encrypted data is sent to the first user terminal. While transmitting, transmitting the second polynomial as clue information for decrypting the first encrypted data.
Including,
The first user terminal is
When the first encryption data and the second polynomial are received from the service providing server, the first authentication number and the first hash function stored in the first user terminal and the second received from the service providing server A method of operating a service providing server, characterized in that the first site usage history information is restored by decrypting the first encrypted data based on a polynomial. According to clause 9,
The first user terminal is
When the first encryption data and the second polynomial are received from the service providing server, each coefficient of the binary polynomial with the highest degree k-1 constitutes the first authentication number stored in the first user terminal. The first polynomial is generated by specifying the result value when modulo-2 operation is performed on each of the k numbers, and the first polynomial and the second polynomial received from the service providing server are connected to each other. By generating the operation polynomial, which is a binary polynomial whose highest degree is k-1+n by multiplying, the seed code of k+n bits having each coefficient of the operation polynomial as a bit string is generated, and then the first user By applying the seed code as an input to the first hash function stored in the terminal to generate the first hash value, and decrypting the first encrypted data based on the first hash value, 1 A method of operating a service providing server characterized by restoring site usage history information. A computer-readable recording medium recording a computer program for executing the method of any one of claims 6, 8, 9, or 10 through combination with a computer. A computer program stored in a storage medium for executing the method of any one of paragraphs 6, 8, 9, or 10 through combination with a computer.

Images