KR20010076754A - Operation method of symmetric security mail using encryption technology on internet - Google Patents

Abstract

PURPOSE: A method of operating a symmetric security mail using encryption technique in Internet is provided to protect information between web browsers and web severs, and other information between CGI operating in the web severs, Servlet and mail severs. CONSTITUTION: First, a user records to a mail sever as a member, and the user prepares a message for mailing to a destination party by a web browser(S8 step). Then, the user decide to use a security service for sending the prepared mail. If the user wants to use the security service, the user has to select an encryption mail. This mail is transmitted to the mail sever(S12 step), and transmitted it to desired destination parties. Accordingly, a user of the destination party have to input an encryption codes promised each other when the user open the received mail.

Description

Symmetric Secure Mail Operation Method Using Encryption Technology in Internet {.}

An object of the present invention is to enable anyone to easily use the secure mail on the Internet.

General users want to use mail service easily, and security of mail information has also emerged as an important factor due to the recent need for information protection.

To exchange mail, you need mail software, and you need to install the software on your personal computer. However, there are many people who have difficulty in installation and need a mail server and account, so if anyone has a computer connected to the Internet, the Internet mail service, which can be conveniently used through the Internet, is gaining popularity.

The present invention adds a security function to the Internet mail service so that it can be easily exchanged with a secure mail, and has a secure mail system management system in conjunction with a directory system. This allows you to use a secure mail service.

Secure mail technology is a technology that combines information protection technology with mail exchange technology. The information protection technology applied to the present invention is an encryption technology and encrypts specific information so that no one knows its contents.

Existing secure mail technologies include PEM, S / MIME, and PGP, and provide information protection service between end users. These technologies operate based on encryption.

However, they are incompatible with each other in form and system, and they are actually operated, but they are only used by some users with security knowledge because they are not easily accessible to general users due to lack of communication infrastructure. This problem is caused by a lot of difficulties because the security mail software must be installed on the computer you are using and various security options must be set.

CGI (8) is an abbreviation of Common Gateway Interface. It is a technology that performs the desired operation on the server side and delivers the result to web browser dynamically in web service provided by static HTML only.Servlet is similar to CGI of JAVA. to be.

The present invention is to provide a secure mail service on the web of the Internet. To do this, first, information protection must be established between the web browser and the web server, and information protection must be made between the CGI, servlet and mail server running on the web server.

In addition, passwords are shared or recognized between the sender and recipient of the mail, and are not responsible for the service provider.

These are integrated so that general users can easily register and use secure mail.

1 is an overall computer hardware and network diagram for a secure mail system according to the present invention.

2 is a logical system configuration diagram for the secure mail system according to the present invention.

Fig. 3 is a processing diagram of an encrypted mail transmission / reception service of a secure mail system using the Internet of the present invention.

Explanation of symbols on the main parts of the drawings

1: Secure Mail System 6: CGI, Servlet Program

2: mail server 7: web server

3: DBMS 8: Communication channel between web browser and web server

4, 5: Web browser

In the Internet mail system of the present invention, a secure mail system using encryption technology is constructed of four components. Each of the six components is a secure mail system (1), a mail server (2), a DBMS (3), and a web browser (4).

First, the secure mail system 1 is a mail system constructed by the CGI 6 or the Servlet 6 program using the web server 7.

DBMS (3) is used for member and information management, and mail server (2) is used to provide mail exchange service.

In order to use the secure mail system 1, a user of the web browser 4 must first register as a member of the secure mail system 1. When accessing the secure mail system (1) for the first time with a web browser (4), a screen for entering a member ID and password (S2) is displayed. If there is no member ID and password, a subscription application (S4) is performed. At the time of membership registration, various personal information is inputted, and after input, the application button is transmitted to the DBMS (3) and managed.

Once you have successfully registered, you will be able to use secure mail. Secure Mail provides services like regular mail and provides encrypted mail service.

The user of the web browser 4 selects whether to use the mail sending service C2 or the mail viewing service C6. In the case of using the mail sending service, a member first writes a mail through the web browser 4 (S8). The created mail is sent to the web server 7 to decide whether to use a security service. When using the security service, you select the encrypted mail (C5).

Encrypted mail is to encrypt encrypted mail.

The mail thus created is transmitted to the mail server 4 (S12), and the mail server can exchange mail with an external mail server, so that mail can be exchanged not only with internal members of the secure mail system 1, but also with several people. Can be.

The mail sent to the mail server 4 is confirmed by the recipient, and the recipient can check the mail received through the mail viewing service C6.

Received mail requires the recipient to enter a pre-promised password, and only those who type the same password can read it.

The effect of the present invention is to enable secure exchange of e-mail over the web on the Internet. Currently, the issue of protecting personal privacy is important, and the importance of such information protection is increasing because various services are provided on the Internet rather than general information sharing.

However, since the concept of information security is difficult to access easily by general users, it is possible to satisfy these demands by providing a convenient user environment and security environment through the web.

Claims (2)

A first step of generating a password using a private key generated at the time of membership registration and a second step of reading mail using the generated password. How to operate and manage the first and second courses in an integrated manner.