KR20000063739A - System and method for monitoring fraudulent use of id and media for storing program source thereof - Google Patents

Abstract

PURPOSE: A system and a method for detecting an illegal use of an ID and a device that records a program source for the same are provided to block the ID that is registered in a server from the illegal use, by comparing the ID with a serial number of a basic input output system(BIOS) of a notebook computer that uses a variable internet protocol(IP) address rather than a fixed IP address. CONSTITUTION: A communication network(10) establishes an on-line connection between a user terminal and a web site in a main server(20), thereby allowing a user to search and receive desired information. The main server(20) automatically obtains hardware information of a user terminal when the user joins the website as a member, and receives the second password and login data including the first password to form a database. When the user accesses the main server(20), it performs an authentication process based on the login data and captured hardware data. If the main server(20) fails to give a right to access for a user in the authentication process, it performs an additional authentication process using the second password.

Description

SYSTEM AND METHOD FOR MONITORING FRAUDULENT USE OF ID AND MEDIA FOR STORING PROGRAM SOURCE THEREOF}

The present invention relates to an ID theft detection system and method, and a recording medium recording a program source thereof.

More specifically, the present invention relates to an identity theft detection system and method for maintaining security for users who want to perform online access to a specific server through a communication network such as the Internet, and a recording medium recording the program source thereof.

In general, the Internet is an open network that can be used freely by applying a common protocol called TCP / IP (Transmission Control Protocol / Internet Protocol) to the other computer that anyone wants to access anywhere in the world. In addition to the delivery, as well as the development of compression technology and the delivery of multimedia information, various services such as e-mail, file transfer, and the World Wide Web (WWW) can be used.

As the use of the Internet is rapidly increasing in Korea and around the world, it is rapidly increasing in importance as a strategic tool for improving efficiency and productivity in all parts of the existing industry, and new business opportunities are continuously created through the Internet. The number of service providers on the Internet is increasing.

That is, in recent years, as part of the business through the Internet, various contents such as Internet advertising, Internet broadcasting, online games, Internet newspapers / magazines, search services, portal services, electronic commerce, etc. are provided. Sites are growing rapidly.

As described above, PC rooms and Internet cafes, which are places where users can easily view the rapidly increasing sites, are rapidly increasing. The above-mentioned places are exposed to others, and thus, Internet access is attempted at the exposed places. In this case, the user's ID and password may be leaked to others, and the user may access the website online using the leaked user's ID and password, and search for information online or pay for it. When the service is provided, the original user of the stolen ID and password may suffer credit and / or financial loss without their knowledge.

In order to solve the above problems, most systems generally have a firewall. The firewall is an intrusion prevention system that detects and blocks a fixed IP address. If you try to connect to the main office, you may not be allowed to connect to the IP address because the IP address is different. Inevitably, the inconvenience of having to ask for the setting in advance occurred.

In addition, as a conventional authentication service system, there is a system for identifying whether a user is a real user by recognizing fingerprint recognition, iris recognition, or movement of a finger inputted into a keyboard, but there is a problem in that users use it.

For example, an authentication service system that recognizes an input pattern to determine whether a user is a real user has a problem such as a user being caught with a cold or denying a connection even when the biorhythm is slightly changed.

An object of the present invention is to build a DB of the user's desired second password and automatically detected hardware system information in addition to the user information including the login data including the first password when the user joins as a member to solve the above problems When a user attempts to go online, the user reads the information of the system attempting to go online, compares it with the registered hardware system information, and matches it, or even if the hardware system information does not match. An identity theft detection system and method for authenticating information to be provided only when it matches a registered second password, and a recording medium recording the program source.

1 is a view for explaining an identity theft detection system according to the present invention,

2 is a diagram conceptually illustrating a configuration of a main server applied to FIG. 1;

3 is an operation flowchart for explaining a method for detecting identity theft according to the present invention;

4 is a flowchart illustrating an example of a subroutine applied to FIG. 3 in detail.

* Description of Signs of Main Parts of Drawings *

20: main server 21: member information DB

22: Information DB 23: Membership Management Module

24: authentication module 25: mail sending module

26: information providing module

In order to achieve the above object, when a user makes an online connection to a website providing information only to a member by using a communication program installed in a user terminal, the user may log in data including the desired first password and user information. To request membership registration, and the website compares the login data including the first password of the user with the login data including the first password already registered, and in the state of approval, the user The information provided by the website can be provided, and afterwards, the authentication process is performed with the login data including the first password for the user who has access to the website online using the login data including the first password. Whether the user is authorized In the system that provides predetermined information, the system automatically extracts the hardware system information of the user terminal at the beginning of the user registration as a member, and additionally inputs a second password in addition to the login data and the user information including the first password. It is established as a database, and afterwards, when the user connects online, the authentication process is performed using the login data including the first password that the user inputs and the captured hardware system information, and the user cannot be authorized in the authentication process. In this case, the server further includes a main server for granting authority to a user by performing an additional authentication procedure using the second password.

In addition, the method of the present invention for achieving the above object, if the user makes an online connection to a website that provides information only to the member by using a communication program installed on the user terminal, the user login with a desired first password Enter the data and the user information to request membership registration, the website is approved by comparing the login data including the first password of the user with the login data including the first password already registered, the approval process In this state, the user can be provided with the information provided by the website, and later authenticates with the login data including the first password to the user who has made online access to the website using the login data including the first password. Perform the procedure to verify that you are an authorized user In the method of operating a system for providing predetermined information after checking, The system automatically extracts the hardware system information of the user terminal at the beginning of the user registration as a member, in addition to the login data and the user information including the first password The second password is additionally input to construct a database, and then, when the user connects online, the authentication process is performed using the login data including the first password to be input and the captured hardware system information. If the authority cannot be granted, a process of granting authority to the user is performed by performing an additional authentication procedure using the second password.

The recording medium which records the program of the present invention for achieving the above object, when the user makes an online connection to a website that provides information only to a member by using a communication program installed in the user terminal, the user enters a desired first password. The registration data is requested by inputting the included login data and user information, and the website compares the login data including the first password of the user with the login data including the first registered password, and approves. In this state, the user can be provided with information provided by the website, and the login data including the first password for the user who has access to the website online by using the login data including the first password later. As authorized by following the authentication process In a recording medium recording a program for operating a system for providing a predetermined information after checking whether the user is an authorized user, the hardware system information of the user terminal is automatically extracted at the beginning of the user subscription as a member, and the first password is extracted. In addition to the login data and user information included, a second password is additionally input to construct a database, and then the authentication process is performed using the login data including the first password entered by the user and the captured hardware system information. And a processor for granting authority to the user by performing an additional authentication procedure using the second password when the user cannot be authorized in the authentication procedure.

The present invention in the following is an identity theft detection system and method for building a security system that wants to provide information only when a user who performs online access to a specific server through a network communication network, such as the Internet is authorized as a registered member The recording medium recording the program source will be described as a preferred embodiment, but the technical idea of the present invention is not limited thereto and can be variously modified and modified by those skilled in the art.

In addition, the preferred embodiment of the present invention includes embodiments such as a computer system and a computer program product programmed to execute the method of the present invention. According to an embodiment of a computer system, a set of instructions for carrying out a method resides in one or more memories (RAM), which sets of other instructions, such as, for example, disk drives, until needed by the computer system. Can be stored as a computer program product.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view for explaining an identity theft detection system according to the present invention.

As shown, the network communication network 10 includes both wired and wireless communication networks such as the Internet and infrastructure, and the above-described network communication network 10 includes a website established by the main server 20 and a user terminal 30. The online connection is made so that the user can search and receive the desired information.

The main server 20 automatically extracts hardware system information of the user terminal at the beginning of the user's registration as a member, and additionally inputs a second password in addition to the login data and the user information including the first password and builds it into a database. After that, when the user connects online, the authentication process is performed using the login data including the first password to be input and the captured hardware system information, and if the user cannot be authorized in the authentication process, the second password is used. Authorize the user by performing additional authentication procedure using.

When the user terminal 30 makes an online connection to the main server 20 through the network communication network 10 and then joins the membership, the user terminal 30 receives the first password according to a request of the main server 20 for preventing ID theft. Offline status that can be provided if a second password, social security number, e-mail address, or other user's identity is stolen in addition to the login data included, if a message about the status of the connection is to be provided in a manner other than the above-mentioned e-mail. Enter the address or number of the mobile communication terminal.

FIG. 2 is a diagram conceptually illustrating a configuration of a main server applied to FIG. 1.

As illustrated, the member information DB 21 stores at least one member information including login data including a first password, user information, hardware system information, and a second password.

The information DB 22 is constructed of information to be provided to the user.

The member management module 23 provides a web page for registration and / or correction so that a user can register as a member and / or modify user information already registered, and the member information described above with the member information input from the user described above. It stores in the DB 21 or updates already registered member information with the modified information.

When the user wants to register as a member, the member management module 23 receives the hardware system information captured by the authentication program transmitted to the user terminal by the authentication module and the user information input by the user.

In addition, the member management module 23 described above captures the hardware system information of the user terminal by transmitting an authentication program to the user terminal when a request for re-registration of the hardware system information is input after the second password is input from the user. The hardware system information already registered in the member information DB 21 is updated with the captured hardware system information.

As described above, the hardware system information captured by the authentication program transmitted to the user terminal 30 is encrypted together with the user information by the authentication program described above, and then capsule information is generated and transmitted to the main server 20.

When the user attempts to connect online, the authentication module 24 transmits an initial web page and an authentication program for inputting login data including a first password to the user terminal to capture hardware system information, and capture the captured hardware. Receives the login data including the enemy system information and the first password in the capsule state and determines whether it matches the login system data including the hardware system information and the first password stored in the member information DB, and if so, receive the information to the user. Grant permission to do so.

In addition, when the hardware system information captured from the user terminal 30 does not match with the hardware system information already registered, the authentication module 24 transmits a message so that the user can input a second password, The authority to receive information is granted only when the second password input in accordance with the message and the second password already registered in the member information DB 21 match.

The authentication module 24 may inform the user when the current hardware system information of the user terminal does not match the already registered hardware system information.

If the mail sending module 25 is not authorized to receive the information by the authentication module 24, the mail sending module 25 generates and sends a connection status message indicating that the user is connected by another person.

As described above, the aforementioned connection status message sent from the main server 20 is provided to the user through electronic mail, mail, and / or a mobile communication terminal.

On the other hand, the hardware system information captured by the authentication program transmitted from the main server 20 to the user terminal 30 of the hardware including the BIOS serial number, CPU ID, MAC address (LAN card adderss), HDD serial number One.

The information providing module 26 provides a main web page so that a user authorized by the authentication module 24 can receive desired information, and searches for information constructed in the information DB according to a user's request. To provide.

The operation of the ID theft detecting system according to the present invention configured as described above will be described in more detail with reference to the accompanying drawings.

3 is a flowchart illustrating a method for detecting identity theft according to the present invention, and FIG. 4 is a flowchart illustrating a subroutine applied to FIG. 3 in detail.

First, when a user makes an online communication connection to the main server 20 using a communication program installed in the user terminal 30 (S110), the member management module 23 of the main server 20 may use the user terminal 30. In step S120, an initial web page having a login data input window including the first password is transmitted.

The user inputs the user's ID and the first password's login data into a login data input window including the first password of the initial web page output on the screen of the user terminal 30 (S130), and then selects a login button. Thus, the above-described ID and the first password are transmitted to the main server 20.

Meanwhile, the member management module 23 of the main server 30 determines whether the login button is selected by the user (S140), and as a result of the determination, the login button is selected by the user, and the first password is received from the user terminal 30. When the login data including the data is transmitted, the login data including the first password described above is compared with the login data including the first password stored in the member information DB 21 to determine whether the login data including the matching first password exists. The check determines whether the user is a registered user (S150).

If the log-in button is not selected as a result of the above-described determination of step S140, it is determined whether the end button is selected (S280), and if the end button is selected, the online connection is terminated, otherwise the standby state is maintained. .

As a result of the above-described determination of step S150, when the user who has made an online connection is a registered user, the member management module 23 of the main server 20 transmits the authentication program to the user terminal 30 by the authentication module 24. Support as possible.

As described above, the authentication program transmitted to the user terminal 30 reads the hardware system information of the user terminal 30, encrypts the user information together, generates capsule information by encapsulating it, and generates the generated capsule information as main. The server 20 transmits the data to the server 20 (S160 to S180).

Then, the authentication module 24 of the main server 20 detects the hardware system information of the user terminal 30 from the above-mentioned caption information, and stores the detected hardware system information in the hardware information stored in the member information DB 21. Compare with the system information (S190).

As a result of the comparison of the above-described step S190, when the hardware system information transmitted from the user terminal 30 and the hardware system information stored in the member information DB 21 match, the authentication module 24 of the main server 20 The user terminal has an information providing web page for providing information constructed in the information DB 22 through the information providing module 26 by authorizing the user who has made an online connection to search or download information. It transmits to 30 so that the user can use it (S200).

On the other hand, when the comparison result of the above-described process S190, the hardware system information transmitted from the user terminal 30 and the hardware system information registered in the member information DB 21 does not match, the authentication module 24 is the user terminal A message to induce a second password entry at 30, for example 'your hardware system information is not registered information. A web page having a second password input window and a message such as 'Enter a second password that you set' is transmitted (S210).

When the user inputs the second password in response to the above-described message, the authentication module 24 of the main server 20 receives the above-described second password and reads the second password of the user stored in the member information DB 21. In operation S220, the second password received from the user terminal 30 is compared with the second password stored in the member information DB 21.

As a result of the comparison of the above-described S220 process, when the second password transmitted from the user terminal 30 and the second password stored in the member information DB 21 match, the authentication module 24 causes the mail sending module 25 to execute. Sends a message to the user's e-mail address, such as "Hardware system information is connected to the other user's terminal * year * month * day" (S230), so that the user can know, and at the same time the user The information providing web page is transmitted to the terminal 30 so that the user can search for information and download the information (S240).

On the other hand, as a result of the comparison of the above-described step S220, when the second password transmitted from the user terminal 30 does not match the second password registered in the member information DB 21, the authentication module 24 of the main server 20 ) "You are not a registered user and cannot receive information." An access denied message such as the like is transmitted on the screen of the user terminal 30 (S250).

At the same time, a message is sent to the user's e-mail address "Another person attempted to access * year * month * day using your ID and password" (S260).

Of course, S220 which is the process of checking the above-mentioned second password transmits a message and an input window to the user terminal 30 so that the user's social security number can be input instead, and the social security number input by the user is stored in the member information DB ( 21) can be replaced with the process of comparing with the social security number stored in the above. Also, as described above, a message informing that the communication connection has been attempted using the ID and password of a predetermined user of another person is transmitted to an address in an offline state other than the above-described method It may be transmitted to a mobile communication terminal such as a page or a mobile phone possessed by the user.

On the other hand, if the user has made an initial connection in the above-described step S120 or S150 or the user who has made an online connection is not a registered user, the user may request membership registration, and at this time, the member management module of the main server 20 23, as shown in FIG. 4, the web page for membership registration is transmitted to the user terminal 30 (S271).

The user is required to use the ID, login data consisting of the first password, social security number, e-mail address, number of the mobile communication terminal, and ID through the membership web page displayed on the screen of the user terminal 30. 2 After entering the password, select the registration button (S272) (S273).

When the user selects the registration button as described above, the member management module 23 receives the information input through the above-described member registration web page, detects the ID among the transmitted information, and provides the member information DB 21. Compare with ID registered in.

As a result of the comparison, if there is no matching ID, the member management module 23 of the main server 20 registers the information transmitted from the user terminal 30 to the member information DB 21 (S274), and the ID set by the user. And password will be issued.

If the user does not select the registration button in the above-described S273 process, it is determined whether the previous screen button is selected (S275), and as a result of the determination, if the previous screen button is selected, the screen is returned to the previous screen, otherwise the standby state is maintained. do.

On the other hand, the identity theft detection system implemented by the present invention, if the hardware system information is changed by changing or upgrading the system currently used by the user, the connection by the authentication module 24 of the main server 20 is lost. Rejected, the second password input request message is transmitted, in order to solve the inconvenience, the main server 20 provides the user with a web page further equipped with a PC re-registration menu item.

As described above, when the user inputs the login data including the first password and selects the PC re-registration menu item described above, the main server 20 transmits the authentication program to the user terminal 30, and the user terminal 30 After capturing the hardware system information of), generating the captured hardware system information and the above-described user information as capsule information, and transmitting it to the main server 20, the member management module 23 detects the hardware system information. Using the detected hardware system information, the hardware system information stored in the member information DB 21 is updated.

As described above, the present invention provides an effect that the ID of the user who is initially registered in the server implemented by the present invention can be blocked by others so that others cannot steal.

The present invention provides an application method such as comparing a notebook PC BIOS serial number of a sales / marketing employee using a floating IP address (such as dial-up networking) with an employee ID and password, compared to a conventional firewall detecting a fixed IP address. As a result, the utilization of external access work is very suitable.

Although described above with reference to a preferred embodiment of the present invention, those skilled in the art will be variously modified and changed within the scope of the invention without departing from the spirit and scope of the invention described in the claims below It will be appreciated.

Claims (28)

When the user makes an online connection to a website providing information only to a member by using a communication program installed in the user terminal, the user inputs login data and user information including a desired first password and requests membership registration. The site approves the login data including the user's first password by comparing the login data including the registered first password with the user. In the approval process, the user can receive the information provided by the website. In the future, the authentication process is performed using the login data including the first password to the user who has access to the website online using the login data including the first password, and then checks whether the user is authorized. In a system for providing information, The system automatically extracts the hardware system information of the user terminal at the initial stage of the user registration as a member, additionally inputs the second password in addition to the login data and the user information including the first password, and builds it into a database. When connecting, the authentication process is performed using the login data including the first password to be input and the captured hardware system information. If the user cannot be authorized in the authentication process, the additional authentication process is performed using the second password. Identity theft detection system, characterized in that it comprises a main server to give the user the authority to perform. The method of claim 1, wherein the main server, A member information DB for storing at least one member information including login data including a first password, user information, hardware system information, and a second password; Providing a web page for membership registration and / or correction so that the user can register as a member and / or modify user information already registered, and store the member information input from the user in the member information DB or already registered A member management module for updating the updated member information with the modified information; When the user attempts to access the online, the initial web page and the authentication program for inputting the login data including the first password to the user terminal are transmitted to the user terminal to capture hardware system information, and the captured hardware system After receiving the login data including the information and the first password in a capsule state, it is determined whether the hardware system information stored in the member information DB and the login data including the first password match. Identity theft detection system comprising an authentication module for granting authority. The method of claim 2, wherein the member management module, If the user wants to register as a member, the identity theft detection system characterized in that the system receives the hardware system information captured by the authentication program transmitted to the user terminal by the authentication module and the user information input by the user. According to claim 1 or 3, wherein the captured hardware system information and user information, Identity theft detection system, characterized in that the encapsulated by the authentication program and transmitted to the main server. The method of claim 2, wherein the authentication module, If the hardware system information captured from the user terminal does not match the already registered hardware system information, a message is transmitted to the user so that a second password can be input, and the second password and the already inputted password are entered according to the message. Identity theft detection system, characterized in that to grant the right to receive information only when the registered second password matches. The method of claim 5, wherein the second password, Identity theft detection system, characterized in that it can be replaced by the user's social security number. The method of claim 5, wherein the authentication module, The identity theft detection system, characterized in that to support the user if the current hardware system information of the user terminal and the registered hardware system information does not match. The method of claim 1 or 7, wherein the main server, If the user is not authorized to receive the information by the authentication module, identity theft detection characterized in that it further comprises a mail sending module for generating and sending a connection status message to inform the user that access by other people system. The system of claim 8, wherein the access status message sent from the main server is provided to a user through electronic mail, mail, and / or a mobile communication terminal. The method of claim 1, wherein the hardware system information, An identity theft detection system which is one of all hardware including BIOS serial number, CPU ID, MAC address, HDD serial number. The method of claim 1 or 7, wherein the main server, An information DB constructed of information to be provided to a user; And It provides a main web page so that the user authorized by the authentication module can receive the desired information, and further includes an information providing module for searching the information built in the information DB according to the user's request and provide the information to the user ID theft detection system, characterized in that. The method of claim 2, wherein the member management module, If there is a request for re-registration of the hardware system information after the second password is input from the user, the authentication program is transmitted to the user terminal to capture the hardware system information of the user terminal, and the hardware that has already registered the hardware system information. Identity theft detection system, characterized in that for updating with the system information. When the user makes an online connection to a website providing information only to a member by using a communication program installed in the user terminal, the user inputs login data and user information including a desired first password and requests membership registration. The site approves the login data including the user's first password by comparing the login data including the registered first password with the user. In the approval process, the user can receive the information provided by the website. In addition, after performing an authentication procedure with the login data including the first password, the user who has made online access to the website using the login data including the first password later checks whether the user is authorized. Operating systems that provide information In the method, The system automatically extracts the hardware system information of the user terminal at the initial stage of the user registration as a member, additionally inputs the second password in addition to the login data and the user information including the first password, and builds it into a database. When connecting, the authentication process is performed using the login data including the first password to be input and the captured hardware system information. If the user cannot be authorized in the authentication process, the additional authentication process is performed using the second password. Identity theft detection method comprising the process of granting the user authority by performing. The method of claim 13, wherein the identity theft detection method comprises: (1) The main server transmits an initial web page for inputting login data including a first password to a user terminal that has made an online connection, and uses the login data including the first password entered through the initial web page. Determining whether the user is a registered user; (2) In the case of a registered user, the main server transmits an authentication program to the user terminal, and the authentication program transmitted to the user terminal captures hardware system information of the user terminal, and inputs the hardware system information and input by the user. Generating encrypted capsule information using the login data including the first password and transmitting the encrypted capsule information to the main server; (3) the main server reading hardware system information from the capsule information and comparing the hardware system information with the hardware system information stored in the DB together with the login data including the first password; And (4) When the currently read hardware system information matches the hardware system information registered in the DB, the process of transmitting a web page for providing information so that the user can be authorized or retrieved and provided. ID theft detection method, characterized in that made. The method of claim 14, wherein the comparison result of the process (3), (3-1) if the hardware system information read from the user terminal does not match the hardware system information registered in the DB, transmitting a message for inputting a second password set by the user to the user terminal; (3-2) when the user inputs the second password according to the message, comparing the input second password with a second password registered in the DB and comparing the same; And (3-3) If the second password read from the user terminal and the second password registered in the DB is the same, the process of transmitting a web page for providing information so that the user can be searched for information or provided with the authority. ID theft detection method characterized in that it further comprises. 16. The method of claim 15, wherein if the second password read from the user terminal in step (3-3) and the second password registered in the DB do not match, an online access state is transmitted after transmitting an access disable message to the user terminal. ID theft detection method further comprising the step of terminating. 17. The method of claim 15 or 16, further comprising the step of sending a connection status message indicating that the user is connected by someone other than the user when the hardware system information does not match or the second password does not match. ID theft detection method characterized in that. 17. The method of claim 15 or 16, wherein the connection status message sent from the main server is provided to a user through e-mail, mail, and / or a mobile communication terminal. The method of claim 13, wherein the hardware system information, ID theft detection method characterized by one of all hardware including BIOS serial number, CPU ID, MAC address, HDD serial number. The method of claim 13 or 15, wherein the second password, ID theft detection method characterized in that the user's social security number can be replaced. When the user makes an online connection to a website providing information only to a member by using a communication program installed in the user terminal, the user inputs login data and user information including a desired first password and requests membership registration. The site approves the login data including the user's first password by comparing the login data including the registered first password with the user. In the approval process, the user can receive the information provided by the website. In addition, after performing an authentication procedure with the login data including the first password, the user who has made online access to the website using the login data including the first password later checks whether the user is authorized. Operating systems that provide information In the recording medium recording the program, The system automatically extracts the hardware system information of the user terminal at the initial stage of the user registration as a member, additionally inputs the second password in addition to the login data and the user information including the first password, and builds it into a database. When connecting, the authentication process is performed using the login data including the first password to be input and the captured hardware system information. If the user cannot be authorized in the authentication process, the additional authentication process is performed using the second password. Recording medium recording the identity theft detection program, characterized in that it comprises a processor for granting authority to the user. The recording medium of claim 21, wherein the recording medium recording the ID theft detecting program is: (A) Sending an initial web page for inputting login data including a first password to a user terminal that has made an online connection, and registering a user using login data including a first password entered through the initial web page. A processor for determining recognition; (B) In the case of a registered user, the authentication program is transmitted to the user terminal, and the encrypted capsule information is generated from the login data including the hardware system information captured by the authentication program and the first password input by the user. A processor receiving the; (C) a processor that reads the hardware system information from the received capsule information, and reads the hardware system information and the hardware system information stored in the DB and compares the two information with each other; And (D) If the hardware system information currently read and the hardware system information registered in the DB is identical, the processor for transmitting a web page for providing information so that the user can be authorized or searched for information. Recording medium recording the identity theft detection program, characterized in that made. The method of claim 22, wherein the comparison result of the (C) processor, (C-1) a processor for transmitting a message for inputting a second password set by a user to the user terminal when the hardware system information read from the user terminal does not match the hardware system information registered in the DB; (C-2) when the user inputs a second password according to the message, a processor for comparing the inputted second password with a second password registered in the DB to compare with each other; And (C-3) a processor for transmitting a web page for providing information so that a user can be retrieved or provided by granting authority to the user when the second password read from the user terminal and the second password registered in the DB match. Recording medium recording the identity theft detection program further comprises a. 24. The method of claim 23, wherein if the second password read from the user terminal in the (C-3) processor and the second password registered in the DB do not match, an access access message is sent to the user terminal and the online connection state is displayed. The recording medium recording the identity theft detection program, characterized in that it further comprises a processor for terminating. 25. The method of claim 23 or 24, further comprising a processor for sending a connection status message informing that the connection is made by someone other than the user when the hardware system information does not match or the second password does not match. Recording medium recording the identity theft detection program, characterized in that. 25. The method of claim 23 or 24, wherein the connection status message sent from the main server is provided to the user through e-mail, mail, and / or a mobile communication terminal. The method of claim 21, wherein the hardware system information, ID theft detection method characterized by one of all hardware including BIOS serial number, CPU ID, MAC address, HDD serial number. The method of claim 21 or 23, wherein the second password, Record medium recording the identity theft detection program, characterized in that the user's social security number can be replaced.