KR20010036892A - Method for authenticating users using authentication server in internet and method for providing internet service using the same - Google Patents

Abstract

PURPOSE: The method for providing the user authentication service using the authentication server is provided to easily control personal information, and to prevent the personal information from being misappropriated and misused by storing all personal information in a personal information control/authentication server, and by performing an authentication through the server at the time for connecting to an internet service site. CONSTITUTION: A user connects to a specific service site(401). In case that the user is a new member(402), it is required to input an ID and a password registered in a personal information control/authentication server(403). A server of the service site transmits the ID and the password inputted from the user, and requires processing an entry to the site(404). The specific service site receives results of an authentication and a registration from the server(405). In case that the user is an existing member, it is required to input an ID and a password(406). The server of the site requests an authentication of the user to the server using the information inputted from a user computer(407). In case that the server of the site confirms that the user is a proper user(408), it is processed to enable the user to use the site(409).

Description

Method for authenticating users using authentication server in internet and method for providing internet service using the same}

The present invention relates to a user authentication method and an Internet service providing method using the authentication server, and more particularly, by managing and managing personal information and authentication processing in one server through the Internet, e-commerce or other It relates to a method for solving the abuse and misuse concerns and inconveniences caused by registering each time and entering personal information when using the service.

Conventionally, in order for a user to join a specific site and use the specific site, the user has to register by inputting personal information, personal identifier (ID), and password for each site. This conventional configuration is shown in FIG. That is, each Internet service site is provided with a member information management module and a member information database. Each service site receives and manages information about a user. This provides a simple one-click subscription or login function, and there is an inconvenience of having to check or input each time a user moves to another Internet service site, and manages personal information by each Internet service site instead of integrated management. When a user wants to modify personal information, the information contained in each Internet service site must be modified for each service site, and there is a problem with the misuse and misuse of personal information.

The present invention is to solve the problems of the prior art as described above, by storing all personal information only in the personal information management / authentication server and by performing authentication through this authentication server when accessing the Internet service site, management of personal information An object of the present invention is to provide a user authentication method and a service providing method on the Internet, which are easy to use and have no problem of misuse.

1 is a block diagram of an embodiment of a conventional Internet one-click login system.

Figure 2 is an embodiment configuration of a system for authenticating a user on the Internet according to the present invention.

3 is a process flow for authenticating a user in the Internet according to the present invention.

* Explanation of symbols for main parts of the drawings

10: personal information management and authentication server 20: user computer

30: service site 101: personal information database

102: member information management module 103: authentication module

104,203,303: Encryption / Protection Module 105,204,302: Transmission / Reception Module

106,301 Web server 201 Personal information storage unit

202: personal information management module 205; Web browser

304: Membership Information and Session Management Module 305: Merchandise System

A user authentication method according to the present invention for achieving the above object, in the user authentication method on the Internet including a first server for performing management and authentication of personal information, a second server for providing a service and a user computer Registering the information including the user's personal information, a personal identifier, and a password with the first server; A second step of, when the user accesses the second server, the second server obtaining a personal identifier and a password and an address of the first server from the user computer; A third step of requesting authentication of a user from the second server using the obtained information by the second server; And a fourth step of providing a service when the second server receives the authentication result from the first server and confirms that the subscriber is a legitimate subscriber.

In addition, the Internet service providing method according to the present invention, in the service providing method on the Internet comprising a first server for performing management and authentication of personal information, a second server for providing a service and a user computer, A first step of registering information including the user's personal information, a personal identifier, and a password on a server; A second step of confirming whether the user wants a new subscription when the user accesses the second server; A third step of obtaining, by the second server, a personal identifier and a password and an address of the first server from the user computer if a new subscription is desired in the second step; A fourth step of requesting, by the second server, a service subscription process to the first server using the obtained information; A fifth step of checking whether the first server is a legitimate subscriber by using the information transmitted from the second server, and if the legitimate subscriber is a service, processing the service subscription and then transmitting the result to the second server; A sixth step of providing, by the second server, a service according to a service subscription processing result and an authentication result delivered from the first server; A seventh step of acquiring a personal identifier and a password and an address of the first server from the user computer if the second subscriber is an existing subscriber in the second step; An eighth step of requesting, by the second server, the user's authentication to the first server using the obtained information; And a ninth step of providing a service when the second server receives the authentication result from the first server and confirms that the subscriber is a legitimate subscriber.

Hereinafter, an embodiment according to the present invention will be described in detail with reference to FIGS. 2 and 3.

2 is a block diagram of a system for personal information management and authentication in the Internet according to the present invention.

The present invention largely includes a server 10 that performs management and authentication of personal information, a user computer 20, and a general service site 30. The biggest feature of the present invention is that the management and authentication of personal information is not performed at each service site, but at one server, and each service site authenticates the user through the personal information management and authentication server 10. Do this.

To this end, the personal information management and authentication server 10 includes a personal information database 101, a member information management module 102, an authentication module 103, an encryption / decryption module 104, and a data transmission / reception module 105. The user computer 20 includes a personal information storage unit 201, a personal information management module 202, an encryption / decryption module 203, and a data transmission / reception module 204. In addition, the service site 30 includes a data transmission / reception module 302, an encryption / decryption module 303, member information, and a session management module 304.

The personal information provided from the user is stored in the personal information database 101, and the member information management module 102 performs a function of registering / inquiring and managing member information in association with the personal information database 101, and the authentication module ( 103 interoperates with the personal information database 101 and performs a function of identifying a user using the provided personal identifier (ID) and password. The data transmission / reception module 105 is responsible for data transmission / reception with the service site 30 or the user computer 20, and the encryption / decryption module 104 is received via the data transmission / reception module 105. Decodes data and encrypts data to be transmitted through the data transmission / reception module 105. The data transmission / reception module 302 and the encryption / decryption module 303 of the service site 30 are the data transmission / reception module 105 and the encryption / decryption module 104 of the personal information management and authentication server 10 described above. Performs the same function as). Then, the member information and session management module 304 requests the personal information management and authentication server 10 to manage the received member information and the session information received as a result of authentication, and the merchant system 305 utilizes it. To help. In addition, the member information and session management module 304 also performs a function of managing access of the authenticated user.

The personal information storage unit 201 of the user computer 20 includes information related to the use of the Internet, for example, a list of Internet sites, a classification of Internet sites, comments on Internet sites, and information provided by the Internet sites. Stored. This acts as a local cache function of the information stored in the personal information management and authentication server 10. In order to maintain and update this information, the personal information management module 202 transmits data to the personal information management and authentication server 10 through the data transmission / reception module 204 and receives and manages the processing result. Here, the encryption / decryption module 203 encrypts / decrypts data transmitted / received through the data transmission / reception module.

3 is a flowchart of service subscription and authentication processing in the Internet according to the present invention.

First, Internet users must register their personal information and personal identifiers (ID) and passwords to be used in future service sites in the personal information management and authentication server 10.

When the user is registered in the personal information management and authentication server 10 in this way, when the user accesses a specific service site (401), the process varies depending on whether the user is a new subscriber or an existing subscriber. If the user is a new subscriber (402), the user is required to enter a personal identifier (ID) and password registered in the personal information management and authentication server (403). When the user inputs and transmits a personal identifier (ID) and a password, personal information management and address (IP address) information of the authentication server are transmitted from the user computer to the service site. The server of the service site transfers the identifier (ID) and password entered by the user to the personal information management and authentication server having the IP address transferred from the user computer, and requests authentication and subscription processing of the service site (404). The personal information management and authentication server performs authentication processing of the user using information transmitted from the service site and at the same time handles the subscription to a specific service site. The result is then forwarded to the requested service site. Here, subscription to a specific service site is made by registering personal information management and list information of each individual subscription service site in the authentication server. The specific service site receives the authentication result and registration result requested from the personal information management and authentication server, and processes the service so that the user can use the service if the user is a valid subscriber and registration is completed.

On the other hand, if the existing subscriber is not a new subscriber (402), it is required to enter the personal identifier (ID) and password (406). Similarly, when a user enters and transmits a personal identifier and password, the user computer transmits the personal information management and the authentication server's IP address together. The specific service site server uses the information input from the user computer to request user authentication with the personal information management and authentication server (407). The personal information management and authentication server uses the information of the user requested from the specific service site server to confirm whether the user is a legitimate subscriber subscribed to the specific service site. As a result of the verification, the personal information management and authentication server transmits the authentication verification result and the session key to the corresponding Internet service site server. If a specific service site server is confirmed as a valid subscriber from the authentication server (408), the service is processed to use. The specific service site server manages the user's access by using the personal information management and session key delivered from the authentication server, and personal information when detailed information about the user is required, for example, an address or telephone number for delivery. It can be requested by management and authentication server.

On the other hand, if the user wants to change the personal information stored in the personal information management and authentication server, he accesses the personal information management and authentication server, and changes his personal information to process the changed information in all Internet service sites. do. That is, the user only needs to change the information of the personal information management and authentication server that manages his personal information without having to access all the Internet service sites and change the personal information.

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes can be made in the art without departing from the technical spirit of the present invention. It will be apparent to those of ordinary knowledge.

According to the present invention as described above, Internet users can increase the convenience of using Internet service sites, reduce the risk of personal information leakage and misuse, and provide various functions related to member management to Internet service site operators. By doing so, it can ultimately activate e-commerce or business using the Internet.

Claims (6)

A user authentication method on the Internet including a first server for managing and authenticating personal information, a second server for providing a service, and a user computer, A first step of registering information including the user's personal information, a personal identifier, and a password with the first server; A second step of, when the user accesses the second server, the second server obtaining a personal identifier and a password and an address of the first server from the user computer; A third step of requesting authentication of a user from the second server using the obtained information by the second server; And A fourth step of providing a service when the second server receives the authentication result from the first server and confirms that the subscriber is a legitimate subscriber; User authentication method on the Internet comprising a. The method of claim 1, And data transmitted between the first server, the second server, and the user computers are encrypted. In the service providing method on the Internet comprising a first server for managing and authentication of personal information, a second server for providing a service and a user computer, A first step of registering information including the user's personal information, a personal identifier, and a password with the first server; A second step of confirming whether the user wants a new subscription when the user accesses the second server; A third step of obtaining, by the second server, a personal identifier and a password and an address of the first server from the user computer if a new subscription is desired in the second step; A fourth step of requesting, by the second server, a service subscription process to the first server using the obtained information; A fifth step of checking whether the first server is a legitimate subscriber by using the information transmitted from the second server, and if the legitimate subscriber is a service, processing the service subscription and then transmitting the result to the second server; A sixth step of providing, by the second server, a service according to a service subscription processing result and an authentication result delivered from the first server; A seventh step of acquiring a personal identifier and a password and an address of the first server from the user computer if the second subscriber is an existing subscriber in the second step; An eighth step of requesting, by the second server, the user's authentication to the first server using the obtained information; And A ninth step of providing a service when the second server receives the authentication result from the first server and confirms that the subscriber is a legitimate subscriber; Service providing method on the Internet, characterized in that it comprises a. The method of claim 3, wherein And requesting, by the second server, part of the user's information to the first server for delivery service. The method of claim 3, wherein The service subscription processing of the fifth step is performed by adding the address of the second server to the list of service subscription sites in the personal information. The method according to any one of claims 3 to 5, And data transmitted between the first server, the second server, and the user computers are encrypted.