KR20010078921A - System and Method of User Identification at P2P service - Google Patents

Abstract

PURPOSE: A method for certifying a user in a pure P2P service and a system for managing thereof are provided to acquire a real name of a user by making ones identity file including simple personal information and connection information and applying the file to a P2P program through a computer or a manager computer in a pure P2P service forming a network using only an IP address using an open-typed network as the Internet. CONSTITUTION: A user DB(121) stores user information such as a name, an address, an age, a school, a password etc. A meeting DB(122) records meeting information such as a meeting name, participators, a password, an operator etc. A cryptogram manufacturing program(123) creates a meeting code key and a group identification key by managing a coded secret sharing directory. A certification program(124) is linked with the user DB(121) by a predetermined period and certifies a validity of an identity information file. An identity information file manufacturing program(125) creates an identity information file by linking with the user DB(121), the meeting DB(122). and the cryptogram manufacturing program(123). A control unit(126) contacts to a P2P program being mounted in a user's terminal and controls each programs and records information inputted/outputted to each DB.

Description

System and Method of User Identification at P2P service}

The present invention relates to a user authentication method and operating system in a pure P2P service based on an open network such as the Internet.

More specifically, in a pure peer-to-peer service such as Gnutella operating with each user's IP address, a P2P service user creates an identity file containing his / her simple information and installs it in a P2P program. And a system for performing the same.

P2P service is receiving the most attention among various internet services that have appeared recently. P2P is short for 'peer to peer', and P2P service is a technology that connects personal computer (PC) and PC directly without a server. It is a service that allows you to directly connect to a computer (PC) to share various information and files.

The two major types of P2P services can be divided into file sharing and instant messaging services.

There are file sharing programs such as Gnutella called Pure P2P, in which a relay server exists and a Napster form called Hybrid P2P does not exist, and all services are provided only by a personal PC. Gnutella is supposed to enter more than one IP by default. When Gnutella sends a connection message to the IP entered, Gnutella responds to the message and forwards the message to another PC he knows, forming a network without the need for a central management server. You can do it.

P2P services were noticed in May 1999 when a site called Napster, USA (www.napster.com) launched a service that allowed individuals to share their own music files (MP3) over the Internet.

Currently, P2P file sharing systems have a lot of technical potential, but they have not been found useful yet, and some users frequently use them for copyright infringement. However, this P2P technology can be used as a web search engine using Gnutella's search function, which is being tried by Kunsilent (www.gonesilent.com), or complicated calculations can be made through CPU sharing at SETI @ home. It suggests the same use method and brightens the future.

The instant messaging service operates in three ways: a central network, a peer-to-peer connection, or a combination of both. In Korea, ICQ, MSN messenger service, UIN messenger and soft messenger are mainly used.

The messenger service supports members' communities by providing an entertainment function as a chat service that supports voice and video in addition to the function of transmitting a simple message in real time. IM, an intermediate form of chat and mail, was initially used to break time among younger teens and office workers, but has recently grown to become a customer service tool for large US companies. According to data released in February 2001 by US market researcher Jupiter Metrics, MSN Messenger has 29.5 million users in 12 countries and 29.9 million and 11 million IM users in AOL and Yahoo, respectively.

P2P messengers such as ICQ operate in a hybrid P2P format where the central server tracks only the IP addresses of people who are currently online and sends messages directly across the entire network.

Since instant messenger is also a kind of P2P solution, a new type of service is emerging through the combination of file sharing program and instant messenger. However, such a service is a hybrid P2P service that a user inquires through a central (relay) server. In the true P2P type of pure P2P service that does not require a relay server, a model combining file sharing program and instant messenger has not appeared. . If the two programs are combined in a pure P2P service, the service operation cost will be reduced because a relay server is not needed.

In the case of hybrid P2P, the user who wants to use the service registers with the server and uses the service, so it is possible to apply various business models such as e-commerce because it is guaranteed, but pure P2P is illegal because it is difficult to secure it. It is likely to be used for a purpose and has limitations in application to various business models.

Therefore, in the pure P2P service that does not require a relay server, a combination of a file sharing program and an instant messenger is required, and the emergence of a pure P2P-based new service that secures the user's real name is required.

The present invention was created to solve the above problems, the user in the pure P2P service that forms a network with only an IP address, such as Gnutella using an open network such as the Internet through the user's own computer or administrator computer Personal identity can be secured by creating an identity file containing simple personal information and access information and applying it to a P2P program. In addition, by using the search function of P2P program such as Gnutella, you can find the person who will deliver the real-time message by using instant messenger, and can access the shared directory encrypted by each group in the user's identity file. Its purpose is to provide a user authentication method and operating system in a pure P2P service based on an open network such as the Internet, which can be used to operate a private shared directory accessible only to people belonging to the same group by granting keys. have.

1 is a flowchart illustrating a process of network formation by Gnutella.

2 is a flowchart illustrating a process of searching by Gnutella.

3 is a block diagram illustrating an embodiment of a P2P service system according to the present invention.

4 is a flowchart illustrating a process of creating a personal information file by a user in a P2P service according to the present invention.

FIG. 5 is a flowchart illustrating a process of searching for a user to whom a user delivers a message using a messenger function using a personal information file in a P2P service according to the present invention.

FIG. 6 is a flowchart illustrating a process in which a user makes a group and shares files and information among the created groups in a P2P service according to the present invention.

7 is a flowchart illustrating an embodiment of delivering a message only to specific people in a P2P service according to the present invention.

These objects, features and advantages of the present invention will be more readily understood by reference to the accompanying drawings and the following detailed description. Hereinafter, with reference to the drawings will be described in detail. However, these drawings are for illustrative purposes only and the present invention is not limited thereto.

First, the network formation process and file search process of Gnutella, which is a typical form of pure P2P, will be described with reference to flowcharts 1 and 2 to help explain the present invention.

First, the network formation process of Gnutella will be described with reference to FIG. 1. (Refer to the October 2000 issue of Program World for more information.)

First, the user tries to access the Gnutella network using the IP address stored in the cache or directly enters the IP address (step 500). The cached IP addresses are those stored by ping / pong the last time. The user checks whether the IP user is using the computer and accessing Gnutella network using the IP address stored in the cache (step 501).

If not, check the other node and if the computer is in use and connected to the Gnutella network, connect to that node (step 502).

After selecting an appropriate TTL value (usually TTL = 5 or 6), the node sends a ping message to the node. Then, the nodes that receive the PING message send a PONG for the PING and the PING message until the TTL = 0. (Step 503) The PONG message contains information such as access information and shared file size of the node.

When the user receives the PONG message sent from other nodes (step 504) and records the information (the information obtained through the PONG) of the nodes connected to the user, the user completes the connection to the Gnutella network (step 505).

If the user maintains the connection, the user receives a PING message sent by another user (step 507). Then, the user checks the GUID, and if the message is not processed once, responds to the received PING and the TTL value of the received PING value. After confirming, the PING is delivered to the connected other node (step 508). When receiving a PONG message from another node, it checks whether it is a PONG for its own PING or a PING sent by another node. If it is a PONG for the PING sent by the user, in step 504, the PONG message is received, and if it is sent by another node, the node is routed to the corresponding node (step 510).

2 illustrates a process in which Gnutella, which forms a network, searches for a specific file.

The user inputs a desired search word to Gnutella and requests a search (step 600). Then, a search message is sent to another node, and the node that receives the search message searches for its own shared directory and requests the search result. It routes to this node and forwards the search message to another node connected to it. In this way, the user receives the search results from the connected nodes (step 601).

If the user receives a search request message from another node, the user checks the GUID, searches his own shared directory, and routes the search result to the corresponding node (step 603). The search request message is delivered to the user (step 604).

When receiving a search result from another node, it checks whether it is a response to a search request sent by the other node (step 605), and receives a search result if the result is a search request (step 601). If not, routing is performed to the node (step 606).

3 is a diagram illustrating the overall configuration of a P2P system according to the present invention, including a user terminal 100, a P2P program 110, an administrator server 120, an internet access network 130, and a website 160. Is done. At this time, the role of the manager server is a different concept from the intermediary server in the hybrid P2P. The manager server in the present invention serves to provide the users with an identity file containing the user's personal information. Don't get involved For example, if the relay server in the existing hybrid P2P acts as a real estate agent, the manager server of the present invention will be seen as acting as an institution for issuing identity verification for real estate transactions.

P2P system based on an open network such as the Internet according to the present invention, the terminal 100, the P2P program 110, the administrator server 120 installed in the terminal, the open network 130 connecting the terminal and the server In the operating system using),

The administrator server 120 may include general information inputted by users (name, address, age, hobby, hometown, school of origin, access information, password for opening an identity file, identification period information of an identity file, group identification information, etc.). User DB 121 storing the same personal information); A meeting DB 122 that records information on meetings for public and private meetings in which the users participate (meeting name, participating users, encryption key, information on meeting sysop, whether publicly disclosed, etc.); A cryptographic production program 123 for operating a private encrypted shared directory that can be accessed only by the users who participated in the meeting for each meeting to generate a meeting encryption key for accessing the encrypted private shared directory to those who participate in the meeting; An authentication program 124 for authenticating the validity of the identity information file in association with the authentication period information of the user DB 121 at a predetermined time period; An identity information file production program 125 for creating an identity information file in association with a user DB 121, a meeting DB 122, and a password production program by a control unit; It is characterized in that it has a control unit 126 for recording the information input and output to each DB while controlling each program while in contact with the P2P program installed in the user terminal.

The terminal 100 is connected to an open network such as the Internet, and refers to a device such as a computer, a dedicated terminal, or a mobile phone having a P2P program 110 installed thereon.

The P2P program 110 installed in the terminal is a pure P2P program and has basic functions that file sharing programs such as Gnutella and Freenet and instant messenger programs have. And the new function by the present invention is as follows.

1) After the user installs the P2P program in his terminal 100, the user receives the identification information file sent from the control unit 126 and stores it in the program, and there is a request for searching for the identification information file from another user's P2P program. When it comes, it delivers a search request message to other users connected to it, searches its identity file, and if there is a result corresponding to the search, it responds to the search result and access information.

2) Another function is to access another user's encrypted private shared directory or download the encrypted file when the user is registered as a member of the same group as other users in the meeting DB 122 of the administrator server 120. There is also a function that allows a user to access a private shared directory to retrieve a desired file or information or to decrypt an encrypted file by using a meeting encryption key included in the identity file. Private shared directories are encrypted shared directories where only designated people can share files.

3) The user can encrypt the message file using the encryption key or group identification code of the P2P program's identity information file, or create the message file by entering the group identification code and deliver it to other unspecified users. At this time, the P2P program of the other user who receives the message compares the encryption key or identification code of the received message with the encryption key or group identification code entered in his or her identity file, and receives the message if the message is related to the user. It delivers to people, but it does not receive messages if they are irrelevant, but only to other users directly connected to it. At this time, if the user selects the person to receive the message based on the personal information of the identity file, the P2P program may directly identify the group identification code.

The identity file is encrypted with a password designated by the user and includes information inputted by the user by accessing the administrator server 120 (simple personal information and access information of the individual), a meeting encryption key, a group identification key, and the like. And when the user sends the schedule information from the manager server 120 is made in the manager server 120 and delivered to the user's P2P program, the P2P program is used after receiving and storing. If the user wants to use the identity file, the user inputs a predetermined password, and the personal information file opens to the P2P program so that other users can retrieve the user's simple personal information. At this time, the user can limit the level of disclosure of his personal information. The meeting encryption key and the group identification key included in the identification file can be used. If the user closes the identification file, the identification information file cannot be searched by other users and the encryption key and identification key cannot be used. In addition, the identification information file has a validity period, so that it must be authenticated from the authentication program 124 in the manager server 120 at regular intervals so that it can be used continuously.

The following describes a method of encrypting and decrypting an identity file with a password and determining the validity period of the identity file. A specific example of how to encrypt a personal information file and how a user decrypts it is as follows. When the user receives the encrypted identity file from the administrator server 120 and inputs a password string (password) created when creating the identity file, the input password string is processed to make a comparison code and compare the information stored in the identity file. After comparing with the code, if it is correct, it decrypts the document encrypted with decryption code. At this time, even if another user knows the decryption code, if they don't know the comparison code, they will receive a message saying that the password is wrong. If only the comparison code is known, the wrong information will be solved when the user decrypts the document encrypted with the decryption code.

More details about the decryption code and the comparison code are as follows: The decryption code is the code that decrypts the document. This decryption code is generated by multiple operations with the ASCII code or the combination code when the encryption string is input. The decryption code is generated for a while when encrypting or decrypting the file by entering the encryption string. The comparison code is used to compare whether the input cipher string is the same as the cipher string of the document. It does not participate in the decryption of the document itself. The comparison code is generated by mixing arithmetic operations and bitwise operations with ASCII code or combinatorial Hangul code of the input password string when storing the password in the document and storing it in the identity file. And when you open a password document, compare the result of the calculation by receiving the password string with the comparison code stored in the identity file, and if it is the same, go to the task of unpacking the document using the decryption code and if the password is wrong Will print a message.

In order to determine the validity period of the personal information file, the password string (password) of the user who opens the identification file is valid only when a new code is received after a certain period of time from the administrator server 120 by specifying the validity period of the comparison code or the decryption code. It can be implemented in a way.

The profile file contains the group's meeting encryption key and the user's brief profile. This meeting encryption key is used to access an encrypted shared directory where only certain groups are allowed to access it, or to encrypt the file so that only certain groups can use it in an unencrypted shared directory. Say. At this time, each user's P2P program has a private secret key. The group encryption key contained in the personal information file is encrypted with the private secret key. When the user opens the personal information file, the private secret key decrypts the group encryption key. This encryption method can be implemented with encryption techniques such as public key and private key techniques, which are well known techniques.

In the above, the group identification code is a code that is inserted into a file using a P2P program when the user creates a message file when the user sends a message file to a specific group. It can be divided into public meetings. The group identification code sent only to private meetings is provided when creating an identity verification file upon joining the membership, and the identification code for the public meeting is provided to the identity verification file for all users at once or downloaded from the administrator server 120. .

The information transmitted from the user and the manager server 120 is encrypted and transmitted by the method of symmetric key or asymmetric key. The user will process the received information using the private secret key.

In order to describe the method and the operating system of the present invention in detail, each embodiment is shown in FIGS. 4, 5, 6 and 7.

4 shows that a user creates and uses a personal information file. FIG. 5 shows a process of finding a user to send and receive a message using a messenger function using the personal information file. FIG. 6 shows that a user creates a group. The created group shows a process of sharing files and information, and FIG. 7 shows an embodiment in which information is delivered only to specific people. In the following description, the basic principles of network formation, message delivery, and file retrieval using P2P programs will be described with reference to FIGS. 1 and 2.

First, a process of creating a personal information file by the user will be described with reference to FIG. 4.

A user who installs the P2P program 110 in his terminal accesses the manager server 120. The administrator server inputs the ID of the user who is connected to the user identification information, and inputs the password if there is a password (step 301). Then, the user identification information is transmitted to the server 110 through the Internet network 120, the administrator server 120 checks the contents registered in the user DB 121 and checks whether or not the registered member (step 302),

If it is registered, the control unit 126 confirms to the user as to whether to change the personal information (step 303). If the user wants to change the personal information, the user information is changed (step 304). If the user does not want to change his / her personal information or if the change is completed, the controller 126 asks whether to join or leave the new group (step 306). If there is a change, the change is requested and the change is recorded in the meeting DB 122. (Step 307)

If it is not registered in the user DB 121 of the manager server 120, the control unit 126 requests the personal information input. Then, the user enters personal information. (Step 308) In this case, the management server access password, name, specialty, name, address, gender, social security number, personal information file password, etc. are input (step 308). The input information is recorded in the user DB 121 (step 309). When the input of the personal information is completed, the user selects a group to which he / she wants to participate. The administrator server categorizes several user groups according to various topics such as hobbies, specialties, schools, occupations, and salable items. The user selects a meeting that he / she wants to join among various meetings and applies for subscription. (Step 310) If the meeting representative permits to join after applying for subscription, the control unit sends the information registered by the user to the meeting DB 121. (Step 311)

When the user changes the sacred information or participation meeting or completes a new sign-up, the controller 126 uses the information input to the user DB 121 and the meeting DB 122 to produce the password production program 123 and the personal information file. Instructs program 125 to create a user profile file. In the user profile information file, information about a group identification code and a meeting encryption key created based on the information of the meeting DB 122 in the personal information and the password production program 125 entered by the user in the user DB 121 is recorded and completed. The personal information file is encrypted with the personal information file password entered when the user registers the personal information (step 312).

The controller 126 transmits the completed personal information file to the P2P program 110 in the user terminal 100 through the Internet network. At this time, the information transmitted between the manager server 126 and the user terminal is encrypted and transmitted. (Step 313)

The P2P program of the user who receives the personal information file installs the personal information file. The installed personal information file is encrypted so that its contents are unknown until the user enters and opens a password (step 314).

When the installation is complete, the user who wants to use the personal information file inputs the personal information file password registered in advance in the administrator server 120. When the user enters the password, the file is opened (step 315).

When a user opens a network with other users, when the user's profile file is opened, other users can retrieve the user's personal information contained in the personal information file and access to private directories of users who join the same group as the user. It is possible to send a memo or a specific file only to the desired group by using the group identification code (step 316).

When the user completes the use of the personal information file, the user closes the P2P program after closing the file and completes the use. At this time, even if the personal information file is closed, the P2P program can be used continuously. (Step 317) And the validity period of the personal information file is determined and the authentication information 124 receives authentication information every certain period of time to open the personal information file. You can also make it valid.

Referring to Figure 5 will be described a process for a user to find a user to send and receive messages through a messenger using the personal information file.

After the user operates the P2P program, the network is formed (steps 401 and 402). The process of forming the network is described in detail with reference to FIG.

When the network is completed, the personal information file opens the personal information file using the password (step 403). At this time, the password is checked (step 404). If the password is matched, the personal information file is opened. It is required to re-enter (step 405).

When the personal information file is opened, the user searches for the user he / she wants to find (step 406). For example, search for the name and the region (address) where he / she lives, such as "Park Joon-sang, Daejeon," or "Bowling," 20 You can search for keywords such as hobbies and age.

When a search message is sent to another user (step 407), the other user's P2P program checks the TTL and forwards the message to the other user after receiving the search message, and confirms that the information in his / her personal information file matches the information requested for the search. After confirming and matching, the search result and terminal access information (IP, port number, etc.) are sent to the user. The search results will send the user's brief personal information (name, age, gender, etc.). For example, if the user used the search keyword "Kim Sang-jun, Seoul", the search results are simple informa- tion personal information specified by other users, such as "Name: Kim Sang-joon, Address: Seongpa-gu, Seoul, Age: 30, Hobby: Bowling". Is transmitted to the user. (Step 408) Refer to FIG. 2 for a process of searching using a P2P program.

If the user who received the search result does not have the desired search result, the user searches for the user using another search term and selects the desired user from the search result if there is a desired search result (steps 409 and 410).

After selecting access information of the selected user, a message is created using a messenger program (step 412), and the message is transmitted to the selected user. When a reply message is sent from the user who sent the message, the user may chat or continue to send and receive messages in real time, and use various messenger services using the messenger program (step 413). After closing, the P2P program is terminated and the use is completed.

Referring to FIG. 6, a process in which a user creates a group and shares files and information between the created groups will be described in detail.

After the user operates the P2P program, the network is formed (steps 701 and 702). The process of forming the network is described in detail with reference to FIG.

When the network is formed, the personal information file is opened using the password of the personal information file (step 703). At this time, the personal information file is checked for the password (step 704). If the personal information file is matched, the personal information file is opened. It is required to re-enter (step 705).

When the personal information file is opened, the user searches another user's shared directory as to which user has the file to be searched (step 706). After the search, the user accesses another user's terminal having the desired file. Step) At this time, if you know the access information of another user who has the file in advance, you can access the other user without searching the file.

If the file you are looking for is in another user's private public directory, the private public directory will require a meeting encryption key to access the user (step 708) and the user will be able to interact with the other user in the meeting DB 122 on the administrator server 120. If they belong to the same meeting, the user's identity file will have a meeting encryption key to access the private shared directory, allowing them to decrypt and access the private shared directory (steps 709 and 711). If it belongs, it cannot be accessed because there is no encryption key corresponding to the personal information file (steps 709 and 712). At this time, only a user belonging to the same group can download the file by encrypting a specific file in a shared directory that anyone can access. After receiving, decrypt the encrypted file using the meeting encryption key in the ID file. It can be used.

When the user imports a desired file from another user's private shared directory belonging to the same meeting (step 714), the user ends the P2P program and closes the personal information file.

An embodiment of a process of delivering specified information only to specific people will be described with reference to FIG. 7.

After the user operates the P2P program, the network is formed (steps 801 and 802). The process of forming the network is described in detail with reference to FIG.

When the network is formed, the personal information file is opened using the password of the personal information file (step 803). At this time, the personal information file is checked (step 804). If the password is matched, the personal information file is opened. It is required to re-enter (step 805).

The user selects a specific group to send a message to (step 806) and selects a specific group and then writes a message to send (step 807). When selecting a specific group, the user can be divided into a private meeting, a public meeting, and personal information classification. Private meetings are users who are joined to the same meeting when they create an identity file on the manager server 120, and when they join, they are given a group identification code corresponding to the meeting and a message file when they send a message to the same meeting. The P2P program uses the P2P program to insert the group identification code from the identity file into the message. Public groups may be selected, in which case the group identification codes of the published groups may be common to all users' identity files or may be retrieved from the server if necessary. Alternatively, the user can send a message based on the personal information contained in the identity file. For example, if you want to deliver a message only to users who are hobby bowling, enter the bowling user identification code into the message using a P2P program, and the information is received only by the user who is hobby bowling. This identification code can be obtained from the administrator server.

After selecting a group to send a message in the same manner as described above (step 808), the identification file is sent to the users connected to the network (step 809).

The user's P2P program receiving the message file (step 810) checks whether the identification code in the message file matches the identification code in his or her identity information file (step 811). If the message is delivered to the user (step 812) and does not match, the message is not received (step 813), the TTL is checked and the message is forwarded to another user (step 814). Can be. After receiving the message, the P2P program will be closed and completed after closing the personal information file. (815 steps)

As described above, according to the present invention, a user authentication method and an operating system in a pure P2P service using an open network such as the Internet, a user creates an identity file containing his / her simple personal information and access information through his / her administrator server, By applying it, it is possible to secure individual's real name, and by searching the identity file, you can find the person who will deliver the real-time message by using instant messenger, and in the user's identity file, the encryption key that can access the encrypted shared directory for each group It can be used to run private shared directories that only people in the same group can access. In addition, messages can only be sent to designated users, allowing pure P2P to be used for e-commerce.

Claims (9)

P2P system based on an open network such as the Internet according to the present invention, the terminal 100, the P2P program 110, the administrator server 120 installed in the terminal, the open network 130 connecting the terminal and the server In the operating system using), The administrator server 120 may include general information inputted by users (name, address, age, hobby, hometown, school of origin, access information, password for opening an identity file, identification period information of an identity file, group identification information, etc.). User DB 121 storing the same personal information); A meeting DB 122 that records information about meetings, such as public and private meetings in which users participate, such as meeting names, participating users, encryption keys, and information about meetings and sessions; Cryptographic program that allows participants in a meeting to operate an encrypted private shared directory for each meeting, creating a meeting encryption key that allows participants to access the encrypted private shared directory and a group identification key to identify the meeting. (123); An authentication program 124 for authenticating the validity of the identification information file in association with the user DB 121 at a predetermined time period; An identity information file production program 125 for creating an identity information file by interworking with a user DB 121, a meeting DB 122, and a password production program by a control unit; User authentication and operating system in a pure P2P service, characterized in that it has a control unit 126 to record the information input and output to each DB while controlling each program while contacting the P2P program installed in the user's terminal. The P2P program 110 installed in the terminal is a pure P2P program, which has a network forming function such as Gnutella and a file sharing function, and a function of delivering an instant messenger such as ICQ, and has a function for carrying out the present invention. User authentication and operating system in P2P service. The P2P program is a P2P program installed in the terminal 100, when the user applies for the identity information file through the registration process in the administrator server 120 receives the identity information file sent from the control unit 126 within the program When a user connects to a P2P network and opens an identity file, when a request for retrieval of the identity file is received from another user's P2P program, the user sends a search request message to other users connected to him / her. User authentication and operating system in a pure P2P service, characterized in that it has a function to respond to the search results and access information if there is a result corresponding to the search after searching the file. The P2P program of claim 2, wherein the P2P program having the identity authentication file is connected to another user after the network is formed, the user tries to access another user's encrypted private shared directory or downloads the encrypted file. If it is registered as belonging to the same group as other users in the meeting DB 122 of 120, the meeting encryption key contained in the identity file decrypts the directory or file so that the user can obtain the desired file or information from the private shared directory. User authentication and operating system in a pure P2P service, characterized in that it has the ability to use the file coming or encrypted. The P2P program of claim 2, wherein the P2P program having the identity file includes a group identification code in the message file when the message file is created using a group identification code that can identify a meeting to which the users included in the identity file belong. You can create a message and send it to other, unspecified users. At this time, the P2P program of the other user who receives the message receives the message if it is related to him by comparing the identification code included in the received message with the group identification code entered in his or her identity file, and then sends it to other users directly connected to the user. User authentication and operating system in pure P2P service that delivers the message, but if it is irrelevant, it has the function to deliver the message only to the desired user group by delivering it to other users directly connected to it without receiving it. . According to claim 1 or 2, wherein the identity information file, when the user registers the schedule information in the administrator server 120, the administrator server 120 to create an identity information file encrypted with the password specified by the user Internet network It is delivered to the user's P2P program through the P2P program is received and stored and used, the personal information file and the information entered by the user connected to the administrator server 120 (simple personal information and access information) and meetings User authentication and operating system in a pure P2P service, characterized in that it includes an encryption key, a group identification key. Method for creating a user authentication file in a pure P2P service based on an open network such as the Internet according to the present invention, A user connecting to an administrator server; Registering a user's personal information in an administrator server; The control unit registers the user's personal information in the user DB; Selecting a meeting that the user wants to join; If the user selects a meeting, the selected information is registered in the meeting DB; Creating a personal information file by an encryption program and a personal information file production program; Delivering, by the administrator server, the user's personal information file to the user's P2P program; Applying the personal information file by a P2P program receiving the personal information file; A user authentication method in a pure P2P service, characterized in that the user has a step of opening the personal information file using the password of the identity file. The method for searching for a user in a pure P2P service based on an open network such as the Internet according to the present invention, A user forming a network using a P2P program; A user inputting a password to open the identity file; Inputting information to be searched by a user into a P2P program; Receiving a search result and access information; Selecting a user to which the user connects or delivers a message; A user authentication method in a pure P2P service, characterized in that a user writes a message and delivers the message to a selected user. In a pure P2P service based on an open network such as the Internet according to the present invention, a method of transmitting a message only to a specific user is provided. A user forming a network using a P2P program; A user inputting a password to open the identity file; Selecting a meeting to which the user wants to send a message; Inserting a group identification code corresponding to a meeting to be received by the user after writing the message with the P2P program; Transmitting a message to another user directly connected to the user; The P2P program of the other user who receives the message transmits the message to another user after checking the TTL and compares it with the group identification code registered in his or her personal information file, and if there is a match, receives the message. User authentication method in pure P2P service.