KR20020011608A - Method and System for automatic member subscribing and logining on the Internet site - Google Patents

Abstract

PURPOSE: A method for automatically becoming a member of an Internet site and performing a log-in is provided to authorize a user without performing a log-in by transmitting member information to the sub site. CONSTITUTION: In case that a user of a main site clicks a sub site linking to the main site, an SSO(Single Sign On) module is called(S700). It is judged whether the user performs a log-in to the main site(S710). It is judged whether the user is a member of the sub site(S720). In case that the user isn't the member of the sub site, an SSO membership link is outputted(S730). A log-in screen of the main site is outputted. An ID and a password are inputted from the user(S740). In case that the user is the member, the user automatically performs a log-in to the sub site(S750). In case that the user is the member, agreement provisions of the sub site are outputted(S760). It is judged whether the user agrees to become a member(S770). In case that the user agrees to become the member, an SSO interface module gets member information of the main site(S780). It is judged whether the user is the member of the sub site(S790).

Description

Method and system for automatic member subscribing and logining on the Internet site}

The present invention relates to an authentication technology that allows a main site member to automatically have the same rights as a member of the site without a separate login procedure when the main site member goes to a subsite linked to the site. When you want to sign up for), you can send the member information of the already registered site (main site) to the subsite so that the subsite has the same authority as the main site member without having to log in to the subsite. It relates to a single sign on (hereinafter referred to as SSO) method and a system using the method.

SSO technology is to facilitate authentication between heterogeneous sites, and to simplify the registration and login process at the sub-site when a user of one site (main site) is transferred to another site (sub-site). These conventional SSO techniques are described below with reference to FIGS. 3A and 3B.

Most of the sites on the Internet are operated as a member system, and users have to be inconvenient to enter the same information every time by directly going to the URL of each site in order to register. In more detail, as shown in FIG. 1, which is a conceptual diagram illustrating a method for registering an Internet site member of the first conventional technology, when a member is to be registered, each member (member 1 to member n) is conventionally used. After accessing the site (site 1 to site n) one by one, there was an inconvenience of repeatedly inputting almost the same personal information. In addition, even if the membership for each site, in order to use the services of each site, there was an inconvenience of having to log in again for each site.

In addition, as a second conventional technology for membership, there is a specific site-centered subscription method called a bridge site, which is a kind of bridge site, as shown in FIG. When you sign up, it is a technology that automatically joins all the sites affiliated with this particular site. According to the second conventional technology of the bridge method, the inconvenience of having to repeatedly input member personal information is eliminated, but since membership is automatically registered on all sites affiliated with the bridge site immediately after joining the bridge site, There is a case in which a member is registered to a non-site, and there is a problem in that a user must log in to a subscribed site.

In order to supplement the problems of the first and second prior arts, the member information of the main site that is already subscribed is transferred to the sub site to which the user wishes to subscribe, so that the sub site is automatically registered. A third prior art and a fourth prior art, which will be described later, which automatically log in to a subsite by logging in, have emerged.

As a third conventional technology for membership registration, SSO technology is used. As shown in FIG. 3A, ID matching is performed at a main site by integrating and storing member ID information of sub sites in a main site database. This is commonly referred to as the main site matching technique. According to this main site matching technique, for example, if a member whose member ID is sky in the main site is subscribed to the subsite A with an ID of sky1, the main site database includes 'main site member ID' = 'sky' and 'Sub site member ID' = 'sky1' is stored, so when the user of the main site is transferred to sub site A, the member ID is sky1. According to this conventional SSO method, not only does the user of the main site have to log in before the user goes to the sub site, but also the member IDs of the main site and the sub site are integrated into the main site database. There is a problem that it is not easy to manage.

In addition, as a fourth conventional technology for membership, an SSO technology different from the SSO of the third conventional technology is used. As shown in FIG. 3B, a member ID of a main site is stored in a main site database. The database stores a sub-site member ID in which a specific code is added to the member ID of the main site. For example, if 'member ID of main site' = 'sky', sub-site member ID is assigned as 'sub site member ID' = 'sky @ A'. When entering the sub site directly without going through it, there is a problem that you cannot log in because you do not know your member ID, and even if you are already a member of the sub site before the SSO connection, you need to re-subscribe the SSO separately. there is a problem.

According to these 3rd and 4th prior art SSO schemes, when the information is exchanged between programs of different sites in a technique based on a common gateway interface (CGI), the FORM scheme (POST scheme) or a parameter in a URL is used. This method uses the GET method, and both of these methods risk the user from arbitrarily manipulating the browser's URL to change the value of the parameter. Due to this problem, in the conventional SSO method performed on the Web, the parameter value is manipulated to the intended user even if the parameter value is passed through the POST method as well as not shown in the URL when the user ID is passed. There is a possibility. For example, if you use the GET method to pass parameter values from the SSO startup page on the main page to the subsite, the URL appears to be http://www.A.co.kr/auth.cgi?id=sky. It is possible for the user to change the ID value to id = sky1. In addition, when passing the ID value using the POST method, it is not visible in the URL, but the intended user can change the parameter value as much as there is a security gap.

In order to solve such a conventional Internet site membership and login problem, the first object of the present invention is to unconditionally log in to the main site as shown in FIG. 5B when the user moves from the main site to the sub site through the SSO driving page. It provides a method and system for solving security problems by placing the main site security authentication module in the sub site as shown in FIG. will be.

It is a second object of the present invention to provide a method of using an existing member database of a subsite without building a separate ID matching database as shown in FIGS. 3A and 3B.

The third object of the present invention is that when a member who subscribes to a subsite prior to connecting to the SSO system wants to register through SSO, by matching the main site ID to an existing member database in the subsite, the original member who has already subscribed to the subsite It provides a way to use SSO service by ID.

A fourth object of the present invention is to provide a method for allowing a SSO subscribed user to log in to a subsite with an SSO subscription ID and password when directly entering the subsite URL without going through an SSO connection.

In addition, the fifth object of the present invention is that whenever the membership information is passed to the sub-site, sub-site subscription information (e.g., sub-site unique number, main site ID, subscription date information, etc.) of the main site member is stored in the main site log database ( log database) to be used as statistics.

In addition, a sixth object of the present invention is to solve the security problem by locating the main site ID authentication module in the subsite to compensate for the loophole of the conventional ID manipulation.

1 is a conceptual diagram showing a method for registering an Internet site in the prior art.

2 is a conceptual diagram of a specific site-oriented automatic subscription method called a bridge site of the prior art.

3A illustrates a prior art main site ID matching technique, and FIG. 3B illustrates a prior art subsite ID matching technique.

4 is a diagram illustrating a sub-site ID matching technique using the SSO method of the present invention.

Fig. 5A is a conceptual diagram showing a prior art internet site joining method, and Fig. 5B is a conceptual diagram showing internet site joining using the SSO method of the present invention.

Figure 6A is a graph of the number of logins when using a service after joining a general site of the prior art, Figure 6B is a graph of the number of logins associated with the site connected to the SSO system of the present invention.

7 is a flowchart illustrating an automatic subscription and login operation using the SSO method of the present invention.

Fig. 8 is a diagram showing a screen in which a link from a main site to a sub site is expressed.

9 is a screen showing a sub-site main screen (shown on the left) and an example of automatic subscription using the SSO of the present invention.

10 is a flow diagram illustrating a method for authenticating the SSO interface of the present invention.

FIG. 11 is a diagram illustrating a log database processing of a main site when subscribing to a subsite using the SSO method of the present invention. FIG.

<Explanation of symbols for the main parts of the drawings>

500: main site

510: subsite

1100: Main site member database

1110: main site SSO subscription log database

The method of the present invention for achieving the above object,

In the method of automatic internet site registration and automatic login

Iii) receiving a sub-site linked to the main site from a user of the main site;

Ii) determining whether a user of the main site has logged in to the main site;

I) Determining whether or not the subsite is a member—wherein if the determination result of step ii) is yes, then step iv) is entered immediately; if the determination result of step ii) is no, then the SSO membership link Is displayed on the screen and the main site login screen is displayed to receive the member ID and password from the user, and then enters step 단계) ―,

Iii) if the determination result of step iii) is YES, perform subsite login;

If the determination result of step iii) is no

a) print out the terms and conditions of subsite membership agreement;

b) If you do not agree with the displayed terms of membership, terminate your membership,

If you agree, take the membership information of the main site and pass it to the subsite subscribing CGI. It is determined whether or not the member is already subscribed to the subsite before the SSO connection. Matching the ID to the subsite, and if no, subsite join processing and matching of the main site ID and the subsite ID to the subsite

Including,

The subsite database is characterized by including both the main site ID and the subsite ID.

In addition, in the method of the present invention, it is preferable that the main site security authentication module is placed in the subsite so that the main site member authentication is possible even after the user moves to the subsite.

In addition, the method of the present invention, it is preferred that the main site further comprises an SSO subscription log database.

The system of the present invention,

In the automatic website registration and automatic login system,

Including CPU, network interface and storage devices,

The storage device

Iii) Click on the sub site linked to the main site from the user of the main site,

Ii) determine whether a user of the main site has logged in to the main site,

I) Determining whether or not it is a sub-site member, where if the determination result of ii) is 'yes', go directly to step i), and if the determination result of ii) is no, output the SSO membership link on the screen. And prints the main site login screen, enters the member ID and password from the user, and enters 으로) ―,

Vi) if the determination result of vi) is YES, perform subsite login;

If the result of the judgment in iii) is no

a) print out the terms and conditions of subsite membership agreement;

b) If you do not agree with the displayed terms of membership, terminate your membership,

If you agree, take the membership information of the main site and pass it to the subsite subscribing CGI. It is determined whether or not the member is already subscribed to the subsite before the SSO connection. Match ID to subsite; if No, process subsite subscription and match main site ID and subsite ID to subsite

Contains program code to

The CPU performs an operation according to the program code,

The subsite database is characterized by including both the main site ID and the subsite ID.

Here, since the CPU, the network interface and the storage device are known in the art, detailed descriptions of the functions and operation relations are omitted.

In addition, the system of the present invention preferably includes a main site security authentication module in the subsite so that the main site member authentication is possible even after the user moves to the subsite.

In addition, the system of the present invention preferably the main site further comprises an SSO subscription log database.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

First, the present invention will be described in detail with reference to FIG. 4, which illustrates a subsite ID matching scheme using the SSO method of the present invention.

The database of the main site stores the SSO related information of the connected subsites, such as the unique number for each subsite assigned to the connection and the absolute location (URL) (not shown) of the programs that allow automatic login and auto subscription for each subsite. At the subsite, install the SSO interface module distributed at the main site, and notify the main site to store the location of the installed SSO interface module in the main site's database. Based on the member ID database of the main site stored at the time of membership registration, for example, when the user logs in to the main site with sky (S400) and then goes to the linked subsite A, the SSO interface of the main site receives the ID information of sky. It passes to the SSO interface module of the sub site (S410). The SSO interface module of subsite A searches the subsite A's database to find a member whose main site ID is sky and retrieves the subsite ID (eg, sky1). The subsite A automatically logs in to the subsite using sky1 (S420) and sky1 (S430).

Next, the automatic subscription and login operation using the SSO method of the present invention will be described with reference to FIG. In FIG. 7, jobs processed in the main site are not shaded in the blocks of the flowchart, and jobs processed in the sub site are distinguished from each other by being shaded in the flowchart.

When the user of the main site clicks on the subsite linked to the main site, the SSO module is called (S700). Next, in step S710, it is determined whether the user of the main site has logged in to the main site. If the result of the determination is YES, it is determined whether the sub site is a member (step S720). If the determination result in the step (S710) is no, output the SSO member registration link on the screen (S730), output the main site login screen to receive an ID and password from the user (S740), this ID and It is determined whether the sub site member is based on the password (S720). Subsequently, if the determination result of step S720 is YES, the subsite automatic login is performed in step S750, and then the automatic subscription and login operation ends. If the determination result of step S720 is no, the sub site member agreement agreement is output (S760).

In more detail, step S760, when user authentication is required or when the user clicks the sign-up link, the user accesses the URL of the auto sign-up agreement located on the main site, where the URL is a module commonly used by all sub sites. It is desirable to change the screen according to the unique site number coming from the sub site. One example of creating an SSO subscription link on a subsite is the auto signup terms URL = http://channel.netian.com/cgi-bin/cp/sso_join_agree.cgi; Subsite unique id = yecatour; URL to go to after signing up = http://www.yecatour.com

SSO membership link is 'http://channel.netian.com/cgi-bin/cp/sso_join_agree.cgi?cp_id=yecatour&cp_url=http://www.yecatour.com'. When the user clicks on the above link to join the sub site, the sub-site unique ID from the main site database is retrieved and displayed on the screen.

Subsequently, it is determined whether the user agrees to the subscription (S770). If the user does not agree to the subscription, the user terminates. If the user agrees to the subscription, the SSO interface module of the subsite takes the member information of the main site and passes it to the subsite subscription CGI. (S780). Here, the information transmitted to the subsite subscription CGI is the subsite subscription processing URL position and main site member information (subsite unique number, main ID information, etc.).

Subsequently, it is determined whether the member has already joined the subsite before the SSO connection (step S790). If the result is YES, the ID matching process is performed on the database of the subsite as described above with reference to FIG. The main site ID and the sub site ID are stored together (S794). If the determination result of step S790 is NO, the subsite subscription process and the ID matching process are performed in the database of the subsite as described above with reference to FIG. 4 to store the main site ID and the subsite ID together (S792). , S794).

In the above-described operation with reference to FIG. 7, in all cases where the ID of the main site moves to the subsite, it is effective through the main site ID authentication module located at the subsite by always sending an authentication key that encrypts the ID together. The user's perception can be examined to prevent ID manipulation by the intended user, which is a problem of the third and fourth prior art described above.

8 is a screen capture of a link representing a link from a main site to a sub site. As depicted in Fig. 8, there is a link to the subsite (e.g., YECATOUR, HOOLLA of the highlighted and elliptical portion) on the page of the main site. When a user of the main site clicks on a link to these sub sites, as described above,

Step S700 shown in FIG. 7 is started.

9A and 9B are screens showing an example of an automatic member registration using the sub-site main screen and the SSO of the present invention. As described above with reference to FIG. 7, FIG. 9A corresponds to the screen output in step S730 of FIG. 7. When the user clicks on the membership of FIG. 9A, the automatic membership terms and conditions screen of FIG. 9B is displayed. Is output.

10 is a flowchart illustrating an authentication method of an SSO interface of the present invention. When the user of the main site logs in to the main site, the information necessary to run the SSO, that is, the main site ID, the authentication key generated by encryption, the unique ID of the subsite to be connected, and the location of the authentication module of the subsite stored in the database of the main site And the like are combined to generate a URL. For example, the authentication URL of the subsite = http://www.yecatour.com/netian_auth.php3; Main site ID = sky; Authentication key = / 200007220345 / ad1ce0fc2f15823cfc14bac6df9; Unique ID of the subsite to connect to = yecatour; Final page to show = http://www.yecatour.com

The URL of the link to go to the subsite is 'http://www.yacatour.com/netian_auth.php3?netian_id=sky&netian_key=/200007220345/ad1ce0fc2f15823cfc14bac6df9&cp_id=yacatour&cp_url=http%3A//www.yecatour.com'.

When the user of the main site clicks the link as shown in FIG. 8, the connection is made using the URL of the link to move to the sub site as described above, and the connected sub site calculates the ID and encryption key passed from the main site and authenticates the authentication. It generates a key and checks whether it is the same as the passed authentication key to determine whether it is a member of the correct main site. Subsequently, if it is a correct member, it is checked whether the main ID passed in the main ID field of the sub site member database is stored or not. If you are a member of a subsite, you are automatically logged in to the subsite according to the subsite login method.

FIG. 11 is a diagram illustrating a log database process of a main site when a member joins a subsite using the SSO method of the present invention.

The member database 1100 of the main site stores member information such as a member's name, social security number, etc., and the SSO subscription log database 1110 of the main site stores login IDs and subsites of members automatically subscribed to the subsite. Membership information is stored and can be usefully used as statistics of the members of each site.

The foregoing has been described to enable those skilled in the art to easily practice the invention in accordance with the illustrated embodiments, and is described in accordance with patent requirements. Those skilled in the art will be able to make various modifications to the illustrated embodiment, and the general wintry disclosed herein may equally apply to other embodiments. Thus, the illustrated embodiments are not intended to limit the invention to these embodiments, but to cover the widest scope consistent with the principles and features described herein.

According to the present invention, as shown in FIG. 5B, not only the sub site can be registered without logging in to the main site, but also as shown in FIG. You will be able to do this.

In addition, according to the present invention, since the main site member can be authenticated even after the main site security authentication module is placed in the sub site and moved to the sub site, the user cannot arbitrarily manipulate the ID.

In addition, according to the present invention, not only the existing member database of the subsite can be used as it is without establishing a separate ID matching database, but also when a member who subscribes to the subsite before the SSO connection wants to register through SSO, By matching the main site ID to an existing member database on the site, the SSO service can be used with the original ID already subscribed to the subsite.

In addition, according to the present invention, when a user having an SSO subscription directly enters the subsite URL without going through an SSO connection, the user may log in to the subsite with the SSO subscription ID and password.

Claims (6)

In the method of automatic internet sign-up and automatic login, Iii) receiving a sub-site linked to the main site from a user of the main site; Ii) determining whether a user of the main site has logged in to the main site; I) Determining whether or not the subsite is a member—wherein if the determination result of step ii) is yes, then step iv) is entered immediately; if the determination result of step ii) is no, then the SSO membership link Is displayed on the screen and the main site login screen is displayed to receive the member ID and password from the user, and then enters step 단계) ―, Iii) if the determination result of step iii) is YES, perform subsite login; If the determination result of step iii) is no a) print out the terms and conditions of subsite membership agreement; b) If you do not agree with the displayed terms of membership, terminate your membership, If you agree, take the membership information of the main site and pass it to the subsite subscribing CGI. It is determined whether or not the member is already subscribed to the subsite before the SSO connection. The ID is matched to the subsite, and if no, the subsite subscription process and the main site ID and the subsite ID are matched to the subsite. Including, The sub site database includes both a main site ID and a sub site ID. The method of claim 1, wherein the main site security authentication module is placed in the sub site so that the main site member authentication is possible even after the user moves to the sub site. The method of claim 1, wherein the main site further comprises an SSO subscription log database. In the automatic website registration and automatic login system, Including CPU, network interface and storage devices, The storage device Iii) Click on the sub site linked to the main site from the user of the main site, Ii) determine whether a user of the main site has logged in to the main site, I) Determining whether or not it is a sub-site member, where if the determination result of ii) is 'yes', go directly to step i), and if the determination result of ii) is no, output the SSO membership link on the screen. And prints the main site login screen, enters the member ID and password from the user, and enters 으로) ―, Vi) if the determination result of vi) is YES, perform subsite login; If the result of the judgment in iii) is no a) print out the terms and conditions of subsite membership agreement; b) If you do not agree with the displayed terms of membership, terminate your membership, If you agree, take the membership information of the main site and pass it to the subsite subscribing CGI. It is determined whether or not the member is already subscribed to the subsite before the SSO connection. Match ID to subsite; if No, process subsite subscription and match main site ID and subsite ID to subsite Contains program code to The CPU performs an operation according to the program code, An Internet site auto sign up and auto login system, characterized in that the sub site database contains both a main site ID and a sub site ID. The Internet site automatic member registration and automatic login system according to claim 4, wherein the main site security authentication module is provided in the sub site so that the main site member authentication can be performed even after the user moves to the sub site. The system of claim 4, wherein the main site further comprises an SSO subscription log database.