KR20000064199A - Internet security system for providing notification service of server connection states and sever security to the user at real time and the management method thereof - Google Patents

Abstract

PURPOSE: An internet security system for server access status and server security and an operating method thereof are provide to inform a server access status in real time in order to take follow-up measures and to realize a defense status for a cracking. CONSTITUTION: A user accesses a bank server(20) through an internet network(4) using a user interface(2). The bank server(20) is connected with a plurality of computer terminals(PC1-PC3) through a hub(22) and inter-worked with a database server(10) storing client information. The database server(10) comprises a private information table(12), a hand phone number table(14) and a processing and recording table(16). An ACS(Automatic Calling System) server(30) connected with the bank server(20) matches the ID, password and hand phone number of a user who accesses the bank server(20) and informs the user's mobile communication terminal of server access status.

Description

INTERNET SECURITY SYSTEM FOR PROVIDING NOTIFICATION SERVICE OF SERVER CONNECTION STATES AND SEVER SECURITY TO THE USER AT REAL TIME AND THE MANAGEMENT METHOD THEREOF}

The present invention relates to an internet security system and a method of operating the same, in which a server access status and server security are notified to a user in real time. Internet security system that informs the user in real time whether the server is connected and whether the server is secured so that the user can know whether the server is connected in real time and follow up, and at the same time, the user can directly feel the defense against hacking. It is about how to operate.

With the spread of computers and the increasing number of high-speed network service providers, many people not only exchange information over the Internet, but also use the Internet in various fields such as e-commerce, home banking, and wireless Internet. Therefore, as the information and communication industry develops, the protection and security of personal information is emerging as a key task.

In the past, various security programs have been implemented for the security of personal and company information when providing e-commerce, home banking or other information.

However, the existing security program was not known to the user whether the security program is definitely operating when using the service. In addition, although the existing security program is operating almost perfectly with firewall or 128-bit encryption system, users cannot know the security situation at all, so users cannot know the certainty of security. There was this.

In addition, although there was an existing security system, the existing security system in which the user's ID or password is used has no problem in protecting the user.

The object of the present invention is to provide a real-time notification and follow-up to the server to know the connection status and the server security to the server that was not possible in the conventional Internet security program as described above reliability and reliability of the operation of the security program The present invention provides an internet security system and a method of operating the server, which informs whether the server is connected and whether or not the server is secured.

1 is a schematic system configuration diagram of an internet security system for notifying a user of a server access situation and server security in real time according to the present invention.

2 is a flow chart in the Internet security system according to FIG.

FIG. 3 is a flowchart illustrating details of an operation process of an Internet security system for notifying a user of a server access situation and server security in FIG. 2 in real time.

<Description of the symbols for the main parts of the drawings>

2: user interface

4: internet network

10: database server

20: Head office server (e-commerce, bank or card company server)

30: ACS Server

According to a preferred embodiment of the present invention for achieving the above object, the head office server for checking the server access status through a user interface, such as a computer having a dedicated line or a modem, and works in conjunction with the head office server A process that stores personal information table that stores personal information, name, social security number, address, etc., mobile phone number table that stores user's mobile phone number, and call processing record for service user who responded to server access situation. ACS (Automatic Calling System) that connects the database server including a record table, the ID and password connected to the main office server and the mobile phone number to guide the server access status to the mobile phone terminal of the corresponding user A server comprising: It tells the server access and server security situation, whether it is provided by Internet Security Systems.

In addition, according to the Internet security system operating method for notifying the user of the server connection status and server security according to the present invention, the head office server (e-commerce, bank, card company, etc.) through a user interface, such as a computer with a dedicated line or modem Sending the call number of the customer generated after authentication of the ID and password of the specific person connected to the ACS server, informing the user of the current connection status of the main office server through the user's mobile phone terminal, and the response from the user. In the determining step, if the user presses the user identification signal button in the determination step, the confirmation completion message is output, after which the telephone is disconnected and processes the signal connected with the ID and password as normal, and ends. If the user presses a button confirming that he or she is not himself, Retry the process of outputting and confirming twice or three times and accordingly, the main office server automatically deletes the process currently being processed or automatically deletes the ID and password to prevent the reconnection and stop the process. It is done.

Hereinafter, with reference to the accompanying drawings, the Internet security system and its operating method for notifying the server connection status and server security according to the present invention will be described in detail.

1 is a schematic system configuration diagram of an internet security system for notifying a user of a server connection status and server security in real time according to an embodiment of the present invention. As shown in FIG. A computer equipped with modem equipment is used to access an electronic commerce, card company or bank server 20 via the Internet network 4. The server 20 is connected to a plurality of computer terminals (PC1, PC2, PC3 .....) via a hub (Hub) 22, the database server 10 that stores information about the user, that is the customer Works with The database server 10 is a personal identification information table 32 for storing a user's personal information indicating a server connection status, namely, name, social security number, address, and other information, and a mobile phone number table storing a user's mobile phone number. 34 and a processing record table 16 for storing call processing records for service users who have responded to the server access situation.

In the above, the bank server 20 may be linked with a separate database server 10, or may use a local database embedded therein.

On the other hand, in the above system, the user sends data to the ACS server 30 after connecting to the server of each company (e-commerce, bank, card company, etc.), name (10 bytes) + resident registration number (13 bytes) + mobile number (11 bytes). ) + Home number (11 bytes). The entire packet is 45 bytes. In the above, the total packet may be 45 to 70 bytes, but is not limited thereto.

The ACS server 30 is connected to the bank server 20 to match the ID and password to access the bank server 20 and the mobile phone number to guide the server access situation to the mobile phone terminal of the user.

Similar to the bank server 20, the ACS server 30 may be linked to a separate database server 10 or may use a local database embedded therein.

In addition, the ACS server 30 receives an input from the user after the call (Yes ("1", No ("2") ")) to each company (bank, card company, etc.) main The packet is sent to the server, but the entire packet is 1 byte, but may be about 1 to 10 bytes of the packet, but is not limited thereto.

FIG. 2 is a flow chart of the Internet security system according to FIG. 1, in which a user (client 1 ... n) is connected to a server (e-commerce) via an interface 2 such as a computer with a dedicated line or modem equipment. , Bank, card company, etc.) (20) is connected to the ID (ID) and password (PASSWORD) (S1). Thereafter, the server 20 transmits the call number of the customer generated after authentication of the ID and password in the database server 10 to the ACS server 30 (S2). Thereafter, the ACS server 30 informs the user (Client) of the access situation through the user's mobile terminal (8) (S3). The user (Client) responds to the signal transmitted from the server (30). For example, pressing 1 or 2 on the keypad of the mobile phone terminal 8 answers (S4).

After that, if the user is himself, press "1" (S5). For this reason, a signal confirming the identity to the server 30 is responded (S6). This process, for example, causes the message "User Verification Completed. Thank you" to be output through the handset and the call is subsequently disconnected. Thereafter, the head office server 20 processes the signal connected with the corresponding ID and password as normal (S7) and terminates.

On the other hand, if you are not yourself, press "2" (S8), and accordingly the ACS server 30 outputs a predetermined voice. For example, "Are you not really yourself?" do. This process is retried two to three times (S9), the acknowledgment response signal output from the user is again output to the server 30 to confirm the response (S10). Thereafter, the server 20 automatically deletes the process being processed or automatically deletes the ID and password to prevent reconnection (S11).

On the other hand, the connection status processing step in the ACS server 30 will be described in detail with reference to FIG.

The ACS server 30 outputs a voice to the user's mobile terminal 8, for example, outputs a message, "Hello, you are connected to the oooo bank. If you are the user, press 1 or 2" (S20). ). After that, when the user presses the number 1 through his mobile terminal 8, a voice of "user confirmation is completed. Thank you" is output (S21) and the normal process is performed. In addition, if the user presses the number 2 through his mobile terminal 8, a voice message is outputted, "If you press the wrong number 1, if you are not really, please press 2", and then press 1 " "I will connect." After the call is disconnected and proceeds to the normal processing process, when the number 2 is pressed, the processing process is deleted, the password is changed or deleted, and the process ends (S22).

In addition, when the user presses a number other than 1 and 2 through his mobile terminal 8, "The service number is incorrect. Please try again." The call is repeated two to three times after the call is disconnected (S23).

In addition, if the user answers the call but does not answer, the voice message "The input timed out. Please try again." Is repeated 2 to 3 times and the call is disconnected (S24).

In addition, if the message is broken in the middle of the message (the customer misses or opens and closes the flip), for example, when the telephone message comes to sleep on the service user's mobile terminal 8 (in case of cracker intrusion), or the customer This is a case where the user is cut off on the way when this is bothersome. At this time, the ASC server 30 records and stores "no response" in the processing record database 16, and the telephone is disconnected after repeating two to three times.

In addition, if the user puts the mobile phone terminal 8 elsewhere or is lost, i.e., is absent, the user is recorded and stored as "missing" in the processing record database 16 and the call is disconnected after repeating two or three times. .

In addition, if the user is busy, the call waiting function is performed.

As described above, according to the Internet security system and its operating method for notifying the user of the server connection status and server security in real time according to the present invention, the cracker or hacker to the e-commerce, card company or bank server that requires Internet security The ACS server always checks the server access status even if invading through a specific person's ID and password. Whenever there is an access signal connecting with the ID and password, the user's mobile terminal number matching the ID and password is checked. By verifying the user's identity by calling and normal processing, there is an effect that can safely protect personal information and personal property.

Internet security system that informs the server connection status and server security according to the present invention in real time as described above can be applied to any place where the ID and password are used, in particular can be applied to e-commerce, bank phone banking services. In addition, this system can be applied to public institutions that frequently use personal information such as government offices, city halls, and county offices to obtain information security and personal information leakage prevention effects. In addition, it can be applied to school facilities such as universities and research institutes, and the security can be applied by applying this system even when e-commerce is carried out by securities companies, private families, and companies that trade stocks.

In addition, it is a useful invention having the effect of coping with the risk inadvertently because it can quickly know the status of their ID and password.

In addition, preferred embodiments of the present invention are disclosed for the purpose of illustration, those skilled in the art will be able to make various modifications, changes, additions, etc. within the spirit and scope of the present invention, such modifications and modifications belong to the scope of the claims You will have to look.

Claims (5)

Head office server that checks the server access status through a user interface such as a computer with a dedicated line or a modem, It works in conjunction with the headquarters server, personal identification information table that stores personal information, name, social security number, address, etc., mobile phone number table that stores the user's mobile phone number and service users coping with the server access situation A database server comprising a processing history table storing call processing records for the service; The server access situation and server security, characterized in that it is connected to the main office server and matching the ID and password to access the main office server and the mobile phone number to guide the server access situation to the mobile phone terminal of the user Internet security system that informs users in real time. The method of claim 1, In the above system, after the user connects to the main server of each company (e-commerce, bank, card company, etc.), the data sent to the ACS server is a name (10 bytes) + resident registration number (13 bytes) + mobile number (11 bytes) + home number. (11 bytes), the total packet is 45 bytes, and the input received from the user after the call from the ACS server (Yes (if you press "1", No (if you press "2")) ) Is sent to the main server of each company (bank, card company, etc.), and the entire packet is 1 byte. The method of claim 2, After the user accesses the main server of each company (e-commerce, bank, card company, etc.), the data sent to the ACS server is 45 to 70 bytes, and the input received from the user after the call (for example, pressing "1" In this case, the total packet sent to the main server of each company (bank, card company, etc.) is 1 to 10 bytes. Internet security system that informs you in real time. Transmitting the call number of the customer generated after authentication of the ID and password of a specific person connected to the main office server (e-commerce, bank, card company, etc.) through a user interface such as a computer with a dedicated line or a modem; Informing the user of the current headquarters server connection status through the user's mobile terminal; Determining the response signal from the user, In the determining step, if the user presses the identification signal button, the confirmation completion message is output, and after that, the call is disconnected, and the signal connected with the corresponding ID and password is processed normally and finished. If the user presses a button to confirm that he is not himself, the process of outputting and verifying the identity again is retried twice or three times. Accordingly, the head office server automatically deletes the process currently being processed or the ID. And Internet security system operating method for notifying the user in real time whether the server connection status and server security, characterized in that the process of automatically deleting the password to prevent reconnection to proceed. The method of claim 4, wherein In the judging step, if the message is disconnected in the middle of the message, it is recorded and stored as "no answer" in the processing record database. If the user puts the mobile terminal elsewhere or is lost, that is, the processing record database is absent. The server is disconnected and stored as "missing", and the call is disconnected after repeating the process 2 to 3 times. If the user is busy, the server access status and server security are performed. How to operate the Internet security system to notify the user in real time.