KR20010079091A - Service Method of Issuing Official Document Using Digital Certificate and System therefor - Google Patents

Abstract

PURPOSE: A service method and system for issuing an official document using a digital certification document is provided to issue a certificate through an institution server being linked with a digital certification document by deciding a genuineness of a user. CONSTITUTION: A certification document issued from a certification institution is installed in a user's terminal(S100). The terminal is connected to the Internet and a homepage of a service server by operating a browser. The browser calls the related information necessary for creating a homepage from a server and constructs a homepage(S200). The service server requests a presentation of a certification document to the terminal(S300). The service server judges a user's genuineness by comparing a personal key with a public key(S400). If a genuine user requests a message, the service server transmits a user's message(S500). The user wanted data are read from a database and the data are transmitted to the service server(S600). A water mark is inserted into the related data and transmitted to the user for a confirmation(S700).

Description

Service method of issuing official document using digital certificate and system therefor}

Field of invention

The present invention relates to a service method and system for issuing an official document using a digital certificate (or digital ID, hereinafter referred to as a certificate). More specifically, the present invention relates to a service method and system configured to determine the authenticity of a user by using a certificate issued by a certification authority, and to request the issuance of an official document requested by the user to an interworking institution server. In addition, the official document provided by the present invention fundamentally blocks forgery of the document through a watermarking technique.

Background of the Invention

A certificate is an electronic certificate that corresponds to a driver's license, national ID card, or membership card. You can present your certificate electronically to verify your identity or to prove your right to access information and services online.

Certificates, also known as digital IDs, group personal information into electronic key pairs that can be used to encrypt and sign digital information. The use of a digital ID can confirm the request of others that they have the authority to use the provided key and prevent the theft of another user's electronic key. Digital IDs are used in conjunction with encryption techniques to provide a more complete security solution and to ensure the identity of all parties involved in a transaction. Digital IDs are issued by a Certificate Authority (CA) and signed with the CA's private key. Digital IDs generally include the following items:

Owner's public key

Owner name

Public Key Expiration Date

Issuer (CA that issued the certificate)

Serial number of the digital ID

Issuer's Digital Signature

Currently the most widely accepted type of certificate is defined by the CCITT X.509 international standard. Therefore, applications that conform to the X.509 specification can read or write certificates.

Certificates use public key cryptography, which uses two related keys, a public key and a private key. In public key cryptography, a public key can be used by anyone who wants to communicate with its owner. The public key can be used to verify messages signed with a secret key or to encrypt messages that are only decrypted with the private key.

In the certificate, the key pair is bound to the username and other identification information. The certificate installed in the browser serves as an electronic certificate that the site can verify. As a result, digital IDs can replace password dialog boxes for information or services that require membership or are restricted to specific users. The digital ID is signed by the issuing authority (Korea Electronic Certification).

In addition, in relation to the present invention, digital watermarking inserts specific data to be claimed, such as copyright information, into multimedia content such as audio, video, image, and text, indistinguishable from the human eye or hearing. It is a technique to do. The data hidden in the original of the specific content so that it can be identified as a watermark is called a watermark, and the form may be an image or text.

The invention using the above-mentioned certificate and watermarking technology, Korean applications No. 2001-30433 and 2001-30433 have been filed by the present applicant, the present invention is an official document implemented on the basis of the technology used in the invention of the application It is related to the method of sending and its system.

An object of the present invention is to provide a present invention configured to easily determine the authenticity of the user by using a digital certificate and to issue a certificate through the interworking server from it.

Another object of the present invention is to provide a method of preventing the problem of modulation in advance by using a watermarking technique in an official document.

It is another object of the present invention to provide an output of the present invention by including an electronically generated seal in a certain area of the output document.

It is another object of the present invention to provide a database for storing a file including a watermark and an electronically generated seal in information transmitted from an institution server.

It is another object of the present invention to provide the present invention in which the information stored in the database is written in a * .pdf file.

The above and other objects of the present invention can be achieved by the present invention described in detail below.

1 is a schematic view showing a system according to an embodiment of the present invention.

2 is a flowchart showing a preferred configuration of an operation sequence according to an embodiment of the present invention.

* Brief description of the major symbols in the drawings *

10: terminal 20: authentication server

30: agency server 40: service server

Summary of the Invention

According to an aspect of the present invention, by receiving a certificate from the certification authority installed in the terminal, and determine whether the authenticity of the certificate, and judges the information on the request for issuance of the official document input from the terminal to connect to the corresponding institution server There is provided a method comprising transmitting the request information, including an electronically generated seal in the official document information transmitted from the institution server, storing the request information in a database, and forming an output window based on the information stored in the database. .

According to another aspect of the present invention, a terminal including a certificate issued by a certification authority, an authentication server for recognizing the authenticity of a user by recognizing a private key included in the certificate, an institution server including information necessary for creating an official document, and Provided is a system comprising a service server that performs a series of operations related to the creation of an official document, and includes a database for storing and storing an electronically generated seal in information required for the official document transmission from the institution server.

Detailed Description of the Invention

As used herein, the term is defined below, except in special cases. In addition, when a new interpretation is required, it means what is generally understood by those skilled in the art.

Electronic document : Information created, sent, received or stored in electronic form by a computer with an information processing capability, such as a computer. The authenticity of an electronic document is determined by the following digital signature.

Digital signature : A signature used to verify that the identity of the person who created the electronic document is true. It is used to ensure that the original content of the electronic document transmitted has not been tampered with.

Process: An application that defines a logical sequence of operations to perform a specific function on a computer or similar device.

Module: Software or hardware for performing a specific function on a network as a separate unit.

Message: A computer-based record of digital representations of information.

Hereinafter, with reference to the accompanying drawings will be described in detail the contents of the present invention. The accompanying drawings illustrate a preferred embodiment of the present invention, but are not intended to be limited thereto. When determined by a person of ordinary skill in the art, modification or processing belong to the scope of the present invention. The fact is so obvious.

1 is a schematic view showing a system according to an embodiment of the present invention. In connection with the system of the present invention, the authentication server 20 for issuing a certificate to the terminal (10-n), the Internet, the user including a certificate issued by an authorized certification authority, and determine the authenticity of the user through the certificate It includes a server 30, and a service server 40 that operates in the relevant government office or similar place handling the issuance of the official document requested by the user.

The service server 40 is a server operated by the operator to determine the authenticity of the user and process the message. The authenticity is determined from the certificate installed in the user's terminal. The certificate is issued by an authorized institution, for example, the Korea Electronic Certification, the Financial Services Agency, etc., and is mounted on the user's terminal. In addition, the service server 40 processes a user's command, includes a series of processes for the operation of the server 40, and includes a module for interworking with the institution server 30 and the authentication server 20.

Preferably, the database of the service server 40 electronically stores the seal of the organization used in the output of the official document. The seal is created and used by a particular process.

The institution server 30 refers to a server operated by a specific organization that issues an official document. For example, when a user requests a transcript or a graduation certificate, the institution server corresponds to a corresponding school or resident registration. do. In addition, the institution server 30 preferably manages the information requested by the user in a database.

The authentication server 20 is a server operated by an authorized organization that guarantees the user's identity. Currently, the certified certification bodies provided by the Republic of Korea include Korea Information Authentication, Korea Financial Securities Institute, Korea Securities Computerization, etc. The authentication server 20 determines the authenticity of the user from the certificate installed on the user's terminal.

Referring to Fig. 1, the contracting party runs the browser through predetermined connection means implemented in the terminals 10-1, 10-2 ... 10-n, and is connected to the service server 20 through the Internet. At this time, the service server 20 requests the submission of a petition for authentication of the terminal, that is, the user, and transmits it to the authentication server 20 to determine authenticity.

The message transmitted through the browser is transmitted to the corresponding institution, that is, the institution server through the service server 20, and selects the requested official document and transmits the information to the service server. The service server 20 creates a * .pdf file by adding watermarking and stamping to the information and stores the file in a database.

2 is a flow chart illustrating a preferred operational sequence constructed in accordance with one embodiment of the present invention. Referring to Figs. 1 and 2, the preferred configuration of the present invention will always include a certificate. The certificate is an electronic certificate of a user, which can present the certificate electronically to prove the identity of the user or to verify the right to access information and services online. The certificate is issued by the certification authority, and is installed in the user's terminal (S100).

Then, the terminal 10 connects to the Internet through a predetermined connection means, and drives a browser to access the home page of the service server 40. At this time, the browser determines the location where the server 40 exists on the Internet through IP (internet protocol), and calls the relevant information necessary for generating the home page from the server 40 to configure the home page (S200). ).

The service server 40 determines items input from the terminal through the homepage, and performs a step of authenticating the user in advance. The service server 40 requests the terminal to submit a certificate, and if there is no submission of the certificate, terminates all steps (S300). If a certificate is submitted from the terminal, the authenticity of the certificate is determined by transmitting to the authority (certification server) that issued the certificate. The authenticity is determined differently according to the type of certificate, but in general, in the structure of the private key-public key, the authenticity of the user is determined by combining the private key and the corresponding public key included in the certificate (S400). . The determination result of the authentication server is returned to the service server 40, and the service server 40 determines whether or not it is a stakeholder for the public document requested therefrom. In the case of a request of a true party, the user's message is transmitted to the corresponding institution, that is, the institution server 30 (S500). After determining the information requested by the user from the message transmitted from the operator server 40 and reading the related data from the database, the related data is returned to the service server 40 (S600).

After that, a watermark, which is hidden data, is inserted in the related data so that the original data can be checked. At this time, the process mounted on the service server 40 is driven. In addition, the related data includes an electronically created seal, generates a * .pdf file and stores it in a database, and forms an output window based on the * .pdf file through the browser of the terminal and transmits it to the user (S700). .

According to the present invention, the authenticity of the user is determined through the certificate, and the user can conveniently receive the desired official document. Furthermore, the official document can solve the risk of tampering through the watermark technology.

Simple modifications and variations of the present invention can be readily used by those skilled in the art, and all such variations or modifications can be considered to be included within the scope of the present invention.

Claims (6)

Receive the certificate from the certification authority and install it in the terminal; Determine authenticity of the certificate; Determining information on a request for issuance of an official document inputted from the terminal, connecting to a corresponding institution server, and transmitting the request information; An electronically generated seal is included in the official document information transmitted from the institution server and stored in a database; And Forming an output window based on the information stored in the database; Service method for issuing an official document, characterized in that consisting of steps. The method of claim 1, wherein the information stored in the database includes a watermark. The method of claim 1, wherein the information stored in the database is written in a * .pdf file. A terminal including a certificate issued by a certification authority; An authentication server that recognizes a user's authenticity by recognizing a private key included in the certificate; An institution server including information necessary for preparing an official document; And A service server including a database which performs a series of operations related to the creation of an official document and includes an electronically-generated seal in information necessary for creating an official document transmitted from the institution server; System comprising a. 5. The system of claim 4, wherein the information stored in the database includes a watermark. 4. The service method of claim 3, wherein the information stored in the database is written in a * .pdf file.