KR20020003759A - Assurance Processing Method using Communication Network - Google Patents

Abstract

PURPOSE: A method for processing authentication using a communication network is provided to perform safely an authentication operation by using a communication system. CONSTITUTION: An official authentication center(10) has an authentication service server and a directory server in order to execute as proxy for an authentication operation according to a user s request. A banking agency system(20) is installed on a bank or a credit card company. A government and public agency system(30) is a server group for processing official endorsement and certification of contents. An enterprise terminal(40) includes a client PC(Personal Computer), a card leader, ad a printer installed in a member store of a credit card chain store association and a shopping mall center. A manager system(60) receives the user s request from the server groups, reports a processed result, and stores and manages all contents of business.

Description

Authentication processing method using communication network {Assurance Processing Method using Communication Network}

The present invention relates to an authentication processing method using a communication network, and more particularly, to make a financial settlement using an IC card with a built-in certificate or to acquire information, online transactions, and administrative services on-line of wired and wireless communication. When you receive services in the fields of tax, procurement, medical, etc., you can complete the certification regardless of the place and time according to the prescribed procedures, and establish a communication network that improves the stability of mutual transactions, the satisfaction of information sharing, and the convenience of daily life. It relates to an authentication processing method used.

All services in wired / wireless communication and cyber space are based on non-face-to-face transactions until now. In the age when most of the work is done online, the appearance or minimal identity of the other party cannot be confirmed and documents and data are available even when using the Internet. It is difficult to check the authenticity of the product.

In order for an e-commerce or internet business to become active, it is necessary to pretend not only to forgery and alteration of data, but also to prevent identity fraud and illegal activities. As the most efficient way to solve this problem, a public key based system has been introduced to perform security and authentication processing simultaneously, and various authentication application services using the public key based are being activated.

Companies and card and data users are uncomfortable due to the absence of operators who can provide real-time security and authentication services online using wired and wireless communications.The distrust of financial services and authentication services and the time allocated to financial services There is a factor of waste.

Therefore, by more effectively activating government-approved officials, the electronic signature and electronic commerce can be connected to wired / wireless communication anytime, anywhere in a safe and reliable environment for users to quickly and accurately obtain information, data, financial transactions, and administrative services. There is a need for a business model that provides secure, on-line, real-time, tax, procurement and healthcare services.

Accordingly, the present invention is to use the IC card with a built-in certificate when you want to make a financial settlement or receive information such as information acquisition, financial transactions, administrative services, tax, procurement, medical services, etc. on-line of wired and wireless communication. It is an object of the present invention to provide an authentication processing method using a communication network that improves the stability of mutual transactions, the satisfaction of sharing information, and the convenience of daily life by having a complete authentication regardless of a place and time according to a predetermined procedure.

1 is a block diagram showing the overall configuration of a system to which the present invention is applied;

2 is an exemplary view showing a flow of operations for the implementation of the present invention;

Figure 3 is an exemplary view showing the flow of operation according to a modification of the present invention.

Explanation of symbols on the main parts of the drawings

10: accredited certification body system 20: financial institution system

30: Government and public institution system 40: Enterprise terminal equipment

50: wireless communication system 60: operator system

In order to achieve the above object, the present invention is connected to a plurality of groups such as an accredited certification authority system 10, a financial institution system 20, a government and public institution system 30, a corporate terminal device 40, and relays each other. In the method for processing the requested authentication of the client-user: Through the operator system 60 having a service server, a time management server, a payment server, etc., all the usage history is stored in the DB, stored, managed, etc. At the same time, when the user requests the authentication-related work, the billed settlement is billed to the user.

As another feature of the present invention, the time management server of the operator system 60, when a plurality of requests for processing of the authentication work occurs in the accredited certification authority system 10, and integrates them and the accredited certification authority system 10 mutually Allow authentication to be handled crosswise.

As another feature of the present invention, the operator system 60 outputs a certificate marked with watermarking to prevent forgery and tampering to the client-user's printer and charges an additional service fee for it.

As another feature of the present invention, the operator system 60 further includes or is associated with a notarization management system including a notary server, a notary database, and the like. Notarized by the notary system of notary public, legal advisory, notary public corporation, etc.

In this way, when a user makes an electronic commerce transaction through a personal computer (PDA), a card terminal, or a PC on the Internet, the card merchant, shopping mall company, BTC, BTB, BTG, administrative business, financial business, tax When connected to wired or wireless communication through business or procurement, medical service, education, etc., user information is provided to the point-of-management server through the communication service provider and communication program, and certified by an accredited certification body. After receiving the payment from the user, the result of the processing is notified to the user to be authenticated, thereby achieving the purpose of achieving a sound e-commerce by maintaining legal validity from a credible certification body.

In another aspect, the user accesses the point-of-management server through government and public authorities when he or she wants to process a notary, content certificate, IRS tax invoice, PPS, trade, or other civil affairs or other affairs with other government agencies. Therefore, the stability of the authentication service can be improved by requesting certification from an accredited certification authority or receiving payment from a financial institution to perform user history management through time management or watermarking technology.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing the overall configuration of a system to which the present invention is applied.

In general, the most commonly used card payment system in a wired communication network is a card payment method used by a card company or a bank. And even today, wireless carriers use PCS phones, international mobile telecommunications (IMT) 2000, personal digital assistants (PDAs), wireless internet, content verification, PC security, secure e-mail, virtual private network, secure intranet extranet, ERP, Providing certification services to government civil affairs such as groupware, EDI, cyber trading banking, security payments, e-commerce, administrative business, financial business, tax, procurement, medical care, education, etc. is not commercialized. As a result, the user's convenience and its utility do not satisfy the satisfaction of the customer or the company in a restricted environment such as time and place.

Considering this point, the present invention is not limited to time and environment to implement general security and authentication services provided by wired / wireless communication and wired / wireless Internet, and is a mobile terminal PCS phone or IMT 2000, personal digital assistant (PDA), PC This system entails a system that quickly processes security and authentication for electronic commerce and other data and data using wired and wireless communication networks through other terminal devices such as the Internet and the Internet.

As shown in FIG. 1, a user who wants to use electronic commerce and electronic signature processes other authentication tasks such as user registration, user password transmission, user request result reception through various tools such as PDA, IC card, PC, Internet, etc. Will be required. The accredited certification authority system 10 includes an authentication service server, a directory server, and the like, and receives a request or a request from a user to perform an authentication task. The financial institution system 20 refers to a server group provided in a bank company, a card company, and the like, and the government and public institution system 30 refers to a server group that processes notarization and content verification. The accredited certification authority system 10 supports the encryption and authentication problems based on the generation and distribution of revocation lists from the directory server and public key, and the financial institution system 20 processes the financial settlement or payment with the authenticated information. do. The corporate terminal device 40 refers to a client PC, a card reader, a printer, or the like provided to a card affiliate store or a shopping mall company.

At this time, the operator system 60 of the present invention includes a service server, a time management server, a payment server, etc., receives a user's request from the plurality of server groups, and notifies the processing result of the requested task, Store and manage all histories related to the above. The operator system 60 is connected to the accredited certification authority system 10, the financial institution system 20, the government and public institution system 30, the corporate terminal device 40, and the like through the Internet and a dedicated network.

When the operator system 60 of the present invention wants to obtain mutual authentication from each of several authorized certification authorities through the server, the certification authority is distinguished from the user's request information, and the certification authority is obtained and the authentication service is promptly provided to the user. to provide. In order to rule out financial accidents, data security, and other legal problems, it is possible to efficiently manage the authentication process with each institution and to perform all the history management related to the user's transaction or use, and to maintain high security. Communication infrastructure is absolutely required.

Meanwhile, the wireless communication system 50 is an example of the CDMA scheme, but is not limited thereto. Unexplained code BTC stands for business-to-user (customer), BTB stands for business-to-business, and BTG stands for business-to-government processing system.

2 is an exemplary diagram illustrating a flow of operations for implementation of the present invention.

In FIG. 2, the service utilization path and the authentication processing path by the client-user are shown centering on the business process flow.

Client-user can access PC security, secure mail, virtual private network, secure intranet extranet, ERP, groupware, EDI, cyber trading banking by using various media (PDA, mobile communication, wired communication, Internet, PC). , Access to all service utilization channels such as security payment, e-commerce, taxation, trade, education, administration, medical care, procurement, and finance, and if you want to use certification services in this process, It goes through the authentication process path.

Of course, the client-user also has a method of processing authentication without going directly to the time management server, but the present invention relates to a method of storing and managing the generated history management for all information in the DB through the time management server and processing authentication . However, in addition to the basic method of processing authentication through the viewpoint management server of the operator system 60 in the utilization route provided as various Internet services, as shown, from a predetermined registrar in the certification processing route without passing through the viewpoint management server. User registration, certificate generation, revocation, renewal, replacement request and the user can receive and process the results can be implemented.

When the certification authority system 10 receives a request from the consumer, the authentication service server grants client authentication and authorization, performs authentication and data encryption, and distributes a certificate generation, revocation, renewal, and replacement list from the directory server. The authentication service server and management server transmit and manage user account information for all services and manage public key (PKI) -based systems and mutual user information.

In the operator system 60 including an authentication service server, a time management server, and a payment server, the time management server receives the information requested from the wireless communication system 50, the government and the public institution system 30, and the like. To be notified of the authentication result, and according to the result, the requested amount is received from the financial institution system 20 through the financial institution network, and the result is returned to the government and public institution system 30 or the corporate terminal device 40. Through the process of notifying the requesting user through the process and managing the processing time.

In this way, card merchants and companies that want to move from off-line to online, and content verification, PC security, secure email, virtual private network (VPN), secure intranet extranet, ERP, groupware, EDI, By providing fast and accurate authentication services to users who use services such as cyber trading banking, security payments, e-commerce, and government civil affairs, it contributes to the activation of e-commerce or Internet business based on it.

At this time, the operator system 60 of the present invention outputs the certificate in which the watermarking for preventing forgery and tampering is displayed to the client-user's printer and charges an additional service fee thereof. A separate printer is provided for watermarking to prevent forgery and tampering, which is advantageous in the form of high resolution and color printing. Other methods may be used instead of watermarking to increase the reliability of the certificate, and in some cases, it may be necessary to mail the certificate directly.

3 is an exemplary diagram showing a flow of operation according to a modification of the present invention.

As a variant of the present invention, the operator system 60 further comprises or is associated with a notarization management system including a notary server, a notary database, and the like. The notary server is a notary for a certificate from an accredited certification authority system 10. Notarized by a notary system such as legal counsel, legal advisory, notary legal corporation, etc., it manages the timing of the details and charges. Such a certificate for notarization includes certificates for various contracts, transactions, proof of contents, bidding contents, guarantee work, patents, civil litigation, hang-up work, etc. between BTB, BTC, BTG, and CTC issued from the accredited certification authority system 10. This may be included. The processing history is stored and managed in the DB at each time point, and the user is charged by processing the billing for the usage history.

At this time, the user can output the notarization to a printer. The use of a watermarking technique or a timestamp technique is the same as described above in order to improve the reliability of the notarization.

According to the above configuration and operation, the present invention intends to make a financial settlement using an IC card with a built-in certificate or obtain information, finance transactions, administrative services, taxation, procurement, medical care, etc. on-line of wired / wireless communication. When the service is received, the certification is performed regardless of the place and time according to a predetermined procedure, thereby improving the stability of mutual transactions, the satisfaction of sharing information, and the convenience of daily life.

It is apparent to those skilled in the art that the present invention is not limited to the described embodiments, and that various modifications and variations can be made without departing from the spirit and scope of the present invention. Therefore, such modifications or variations will have to belong to the claims of the present invention.

Claims (4)

The client-user requested authentication is handled by interworking with a plurality of groups such as an accredited certification authority system 10, a financial institution system 20, a government and public institution system 30, a corporate terminal device 40, and relaying each other. In the way: Through the operator system 60 having a service server, a time management server, a payment server, etc., all user history is registered, inquired, deleted, updated, and stored in the DB, and at the same time, when a user requests an authentication-related task, Authentication processing method using a communication network, characterized in that for billing the user to process the payment. The method of claim 1, The time management server of the operator system 60 integrates the processing of a plurality of authentication tasks in the accredited certification authority system 10 so that authentication can be handled alternately between the accredited certification authority systems 10. Authentication processing method using a communication network, characterized in that. The method of claim 1, The operator system (60) is a method for authentication processing using a communication network, characterized in that for outputting a certificate indicating the watermark for preventing forgery and tampering to the printer of the client-user and charging the additional service fee for this. The method of claim 1, The operator system 60 further includes or is connected to a notary management system including a notary server, a notary database, and the like. The notary server is a notary public, legal advisory, notary public corporation, etc. Authentication processing method using a communication network, characterized in that notarized by the notarization system such as notary processing, and manages the timing of the details and billing.