KR20010055494A - Method for providing web infoshop service for dedicated internet line users - Google Patents

Abstract

PURPOSE: A method for providing web information shop service for a leased-line Internet user is provided for an Internet user using a LAN to receive a charge easily by demanding a service using a charge by adding to telephone changes. CONSTITUTION: If a user demands a web information shop service, a LAN-WISS detects whether the demand is new(S701). If the demand is new, the answer of the demand is performed to the user. If the user transmits an encryption certification value to the LAN-WISS, the LAN-WISS detects whether the certification value is correct. If the certification value is correct, web information shop service providing is started(S703) by starting a user session(S702). At this time, if an idle time is exceeded, the user session is terminated. If a demand message is received again from the user, a LAN-WISS detects whether the demand message is new(S704). If the demand message is not new, the idle time is updated(S705). At this time, if an idle time is exceeded, the user session is terminated.

Description

How to provide web infoshop service for dedicated internet line users {Method for providing web infoshop service for dedicated internet line users}

The present invention relates to a method for providing a web infoshop service, and more particularly, to a method for providing a web infoshop service for a dedicated line internet user.

Web infoshop service system (related invention: alternative authentication and billing method of web infoshop service system, domestic application 97-59847, US patent 'METHOD OF AUTHENTICATING AND CHARGING A CLIENT USING A WEB INFOSHOP SERVICE SYSTEM') It is a service that provides an advantage to users and operators by providing an alternative authentication and an alternative billing function for a service provided for a fee as a service purpose.

Web information providing service is a kind of web service using HTTP (Hyper Text Transfer Protocol) on the Internet, and aims to provide various information to a large number of users on the Internet.

The paid web information providing service is a part of providing web information for a fee and means a service in which a user pays a certain amount to an information providing service provider in exchange for using the information. The most commonly used form of payment is the monthly payment method using a credit card.

The use of credit cards is a high risk of theft, and the flat fee method is not suitable for users who want to use a small amount of information. Web infoshop services have been developed to improve this.

FIG. 1 is a conceptual diagram illustrating a conventional web infoshop service processing flow. FIG. 1 illustrates a flow chart for LWISS and an information provider (CP) in which a user connects and performs a web infoshop service as well as an open internet connection.

First, in step S101, when the user requests a telephone connection to the WNAS / WISS, in steps S102 and S103, the WNAS / WISS transmits a connection success message and information on a selection menu to the user, and in step S104. In step S105 and step S106, if the user selects a PPP connection, the WNAS / WISS transmits a PPP connection success message and information about an IP address to the user.

Subsequently, when the user launches a web browser in step S107, and performs an HTTP protocol request in step S108, in step S109, the WNAS / WISS determines whether the request is a request for a paid CP, In step S110 and step S111, information on the paid CP is transmitted to the user.

If the user approves the paid information in step S112, the WNAS / WISS adds an authentication value for the corresponding CP in step S113, and then, in step S114, sends the changed request to the information provider, and in step S114, In step S115, if the information provider has a response to the page, in step S116, the WNAS / WISS sends the information provider's response to the user, so that the page is displayed in the user's web browser in step S117. do.

Subsequently, when all of the information desired by the user is displayed in the web browser, the process ends from step S118 to step S121.

However, the system that provides such a web infoshop service is provided only to telephone and ISDN network users for security reasons, and is not yet provided to users of leased lines due to the necessity of maintaining security with a closed network between the service and the web infoshop service system. There is this.

The present invention has been made to solve the problems of the prior art as described above, and an object thereof is to provide a method for providing a web infoshop service for a dedicated line Internet user.

1 is a diagram conceptually showing a conventional web infoshop service processing flow;

2 is a conceptual diagram of a web infoshop service applied to the present invention, which is a view for explaining an alternative charging function,

3 is a view showing the effect on the user of the alternative authentication applied to the present invention,

4 is a view showing a conceptual model of alternative authentication applied to the present invention,

5 is a conceptual diagram of providing a web infoshop service for a LAN user according to an embodiment of the present invention;

6 is a view showing the matters required when applying for LAN-WISS service according to an embodiment of the present invention,

7 is a diagram illustrating a scenario of providing a web infoshop service of a LAN-WISS according to an embodiment of the present invention.

8 is an exemplary view illustrating a user authentication request according to an embodiment of the present invention.

According to the present invention for achieving the above object, a method for providing a web infoshop service, comprising: a first step of a LAN user transmitting an initial user authentication request message to a LAN-WISS to use a web infoshop service; A second step of checking whether the encrypted authentication value is correct by receiving a user authentication request message in the first step; And a third step of providing paid information provided by the information provider (CP) after performing user authentication if the encrypted authentication value is correct as a result of the checking in the second step. This is provided.

In addition, a first step of transmitting, to a computer, an initial user authentication request message to a LAN-WISS for a LAN user to use a web infoshop service; A second step of checking whether the encrypted authentication value is correct by receiving a user authentication request message in the first step; And if the encrypted authentication value is correct as a result of the checking in the second step, after the user authentication is performed, a computer recording a program capable of executing the step including the third step of providing the paid information provided by the information provider (CP). A recording medium that can be read by is provided.

In the following, with reference to the accompanying drawings, a preferred embodiment according to the present invention will be described in detail.

2 is a conceptual diagram of a web infoshop service applied to the present invention, and is a diagram for explaining an alternative charging function. The alternative billing function is a function to relieve the burden on the information provider by providing a fee charged by each paid information provider to the user in place of the web infoshop service system.

3 is a view showing the effect on the user of the alternative authentication applied to the present invention, the alternative authentication function, the web infoshop service system replaces the authentication that the user previously provided to each information provider, so that the user each information It eliminates the inconvenience of maintaining each certificate for the provider.

4 is a view showing a conceptual model of the alternative authentication applied to the present invention, the web infoshop service system is largely composed of a client (Client), WNAS / WISS and CPs (Server).

First, when the user dials to the WNAS / WISS at 01440, the WNAS / WISS sends a selection menu to the user with a connection success message, and when the user selects a PPP connection, the WNAS / WISS Sends an IP address and the like to the user.

It may be a closed network between the user and the web infoshop service system, or an open network between the web infoshop service system and the paid CP. On the other hand, the reason why the network should be closed between the user and the system is to distinguish the user because the user's telephone number is used. In addition, authentication and billing of the user are charged to the user's telephone number. The user does not feel that they are authentic, but the telephone number of the user collected by the system is used as the authentication value. Therefore, only a closed network such as a telephone network or an ISDN network can be used between the user and the system to prevent fraudulent use by external users.

5 is a conceptual diagram of providing a web infoshop service for a LAN user according to an embodiment of the present invention, since the alternative authentication of the web infoshop service in the mass communication processing system uses a media called a telephone network between the user and the web infoshop service system. Unlawful use is impossible unless an illegal user steals and uses a registered user's phone. In other words, security is guaranteed between the user and the web infoshop system, and security is guaranteed by the basic authentication method of HTTP 1.0 between the web infoshop system and the CP.

In order to provide a web infoshop service on a dedicated Internet line, the existing basic authentication method of HTTP 1.0 is identical between the web infoshop system and the CP. Instead, the security must be guaranteed in a special way between the user and the web infoshop system. This means that Internet users must meet the security requirements through a special authentication process when they want to use the web infoshop system. In other words, in order to prevent fraudulent users, before using the web infoshop system, there should be a procedure for confirming the user name and password and ending the procedure to reduce the possibility of fraudulent user intervention.

In order to use web infoshop service through LAN-LAN Web Infoshop Service System, user must authenticate. User authentication is performed using the authentication value assigned to each user through the user registration process.

The subject of user authentication is the user who first connected to the system. The user's connection state is checked by idle time. Idle time can be arbitrarily assigned by the user from 1 to 30 minutes. If there is no other request during the idle time after the user's request, the user's connection is terminated. If the user wants to use it again after the connection is terminated, new user authentication must be performed. If the user wants to log out at random, it provides a way to support the function.

The user's authentication is encrypted in the browser using an appropriate encryption scheme. A Java applet is used for this purpose, and the encrypted user's authentication value is passed to the LAN-WISS and decrypted to check whether it is a valid authentication value.

For reference, there are various encryption methods such as RSA and DES. RSA encryption uses two keys used for encryption and decryption. It uses two keys, a public key published externally and a private key managed internally. In the browser, the user authentication value is encrypted using the public key. In LAN-WISS, the user authentication value encrypted using the secret key is decrypted.

Unless a user deliberately exposes his or her authentication value, the authentication value is stored securely and can be transmitted securely.

FIG. 6 is a diagram illustrating matters required when applying for a LAN-WISS service according to an embodiment of the present invention. In order to prevent the use of illegal users in a LAN-WISS, a user must perform appropriate user authentication. For user authentication, definition of user registration process and service usage procedure of registered user is required.

There are two ways to register a user: off-line by phone or mail, or by applying directly on a web browser. The method of applying by phone or mail has certain advantages because it can verify the identity of the user, but it is not immediately immediate, and it may take a day or two for granting the user authentication value. There is this.

On-line application method is a method that user inputs values required for application on browser and sends them on-line. For this method to be applied, complete security of on-line delivery must be guaranteed. Direct application on the web is possible only by using a method that guarantees safety to prevent illegal users from intercepting the applicant's application ID. Many CP vendors now receive ID applications directly from users using SSL-enabled servers. Although the security key of SSL available in Korea is 40 bits in length, it cannot be said to guarantee perfect security, but it seems to be able to maintain some security.

LAN-WISS does not matter which method you use, and the limitation is that the user requires user credentials to use the Web InfoShop service.

Since the user needs to confirm the user in order to apply for the service, input of the user's name, telephone number, social security number, user ID, and password is required. Charges for the use of the service shall be charged in addition to the charge of the user's telephone number or a telephone number specially designated by the user. The telephone number designated by the user for billing is confirmed after use and finally used as the billing telephone number.

FIG. 7 is a diagram illustrating a scenario of providing a web infoshop service of a LAN-WISS according to an embodiment of the present invention. When a user wants to use the web infoshop service, the user designates a web infoshop service providing server as a proxy.

LAN-WISS requires initial user authentication in order to use the Web Infoshop service. When the user first uses or the idle time has passed, a procedure for checking whether the user is a registered user is necessary. Confirmation is by entering the user ID and password. LAN-WISS continuously checks the Idle Time for connected users to determine if the user is no longer in use. By default, the idle time is 5 minutes, and the user can decide between 1 and 30 minutes.

In more detail, first, when a user requests a web infoshop service, in step S701, the LAN-WISS determines whether the request is new, and if it is a new request, performs an answer to the user, If the user transmits an encrypted authentication value to the LAN-WISS, in step S702, the LAN-WISS starts providing a web infoshop service by starting a user session if the authentication value is correct. At this time, if the Idle Time is checked and the Idle Time is exceeded, the user session is terminated.

Subsequently, when the request message is received again from the user, in step S704, it is determined whether the request message is new, and if it is not a new message, in step S705, the idle time is updated, and whether the idle time is again exceeded. If it is determined, and skips, the user session is terminated.

8 is an exemplary diagram illustrating a user authentication request according to an exemplary embodiment of the present invention, and shows a user of the last logout time and the reason for logging out. There are two reasons for logout: regular logout by user and logout after idle time. The user enters the user name and password assigned to the user to perform user authentication. The idle time is set at 5 minutes by default and can be changed from 1 minute to 30 minutes by user.

In addition, the URL for logging out of the user is displayed, and the user who wants to log out can refer to the Logout URL. The phone number and URL for user registration are displayed.

The present invention as described above is recorded on a computer-readable recording medium, and can be processed by a computer.

As described in detail above, the present invention provides a web infoshop service providing method for a dedicated line internet user, and has the following effects.

First, Internet users using LANs can use the web infoshop service (using a paid CP).

Second, since the billing of the service usage is billed together with the charge of the telephone number designated by the user, billing is easy to recover.

Third, it is possible to use without authentication for the paid CP which is a characteristic of the web infoshop service, and the user only needs to remember one password used by the user.

Fourth, the user's authentication value is securely managed by using the high security function.

Fifth, the use of session function can prevent illegal use as much as possible.

The technical spirit of the present invention has been described above with reference to the accompanying drawings, which describes exemplary embodiments of the present invention by way of example and does not limit the present invention. In addition, it is obvious that any person skilled in the art may make various modifications and imitations without departing from the scope of the technical idea of the present invention.

Claims (2)

In the web infoshop service providing method, A first step in which the LAN user sends an initial user authentication request message to the LAN-WISS to use the web infoshop service; A second step of checking whether the encrypted authentication value is correct by receiving a user authentication request message in the first step; And a third step of providing a web information provided by an information provider (CP) after performing user authentication if the encrypted authentication value is correct as a result of the checking in the second step. . On your computer, A first step in which the LAN user sends an initial user authentication request message to the LAN-WISS to use the web infoshop service; A second step of checking whether the encrypted authentication value is correct by receiving a user authentication request message in the first step; And if the encrypted authentication value is correct as a result of the checking in the second step, after the user authentication is performed, a computer recording a program capable of executing the step including the third step of providing the paid information provided by the information provider (CP). Recordable media that can be read by