KR20020026753A - A method for automatically executing log-in in distributed netwokrk - Google Patents

Abstract

PURPOSE: An automatic log-in method on a distributed network having the plural authentication region is provided to enable a user to access a web site with a single command without remembering the log-in information for a plurality of web sites needing an authentication. CONSTITUTION: The method comprises a client system(300) wanting an automatic log-in, a plurality of web sites(400) approving an access through an authentication, an authentication server(200) storing a list for each user about the web site and the log-in information of each web site, and a computer network(100) connecting to the components each other. The client system includes a browser program(320) and an OS(310). The browser program is equipped with an automatic log-in module(325) to be installed by downloading from the authentication server and other recording media. The authentication server includes a server engine(210), an authentication list generating module(220), a plurality of web pages(230), an authentication information database(240) and a user database(250).

Description

Automatic login method in a distributed network with multiple authentication fields {A METHOD FOR AUTOMATICALLY EXECUTING LOG-IN IN DISTRIBUTED NETWOKRK}

The present invention relates to a method for automatically logging in a plurality of authentication sites in a distributed computing environment, and more particularly, to a method for automatically logging in a plurality of membership sites distributed on the Internet with a single user command.

As the distribution and exchange of information based on the Internet is active, numerous websites are appearing with it. Websites, whether paid or free, generally encourage users to join as members in order to satisfy the profit structure of the Internet industry.

At this time, the website allows member subscribers to input various personal information. In addition, many websites require that users register as members in order to check or use the substance of the contents or services they own.

Also, even when a site is already registered as a member, new login information is always required, namely, an ID and password. Therefore, a user who registers to a plurality of sites may feel inconvenient to remember each ID and password.

The present invention provides an automatic login method that allows a user who wants to visit a plurality of websites that require authentication to access the website with a single user command without having to remember login information for the plurality of sites. will be.

Other objects and advantages of the invention will be described below and will be appreciated by the practice of the invention. Furthermore, the objects and advantages of the present invention can be realized by means and combinations indicated in the appended claims.

The following drawings attached to this specification are illustrative of preferred embodiments of the present invention, and together with the detailed description of the invention to serve to further understand the technical spirit of the present invention, the present invention is a matter described in such drawings It should not be construed as limited to.

1 is a diagram illustrating a network system in which the automatic login method of the first embodiment of the present invention is implemented.

2 is a view for explaining the function of the automatic login module that is a client-side program.

3 is a flowchart for explaining the automatic login process of the first embodiment according to the present invention.

4 is a diagram illustrating a network system in which the automatic login method of the second embodiment of the present invention is implemented.

5 is a view for explaining the function of the automatic login document creating means on the authentication server side.

6 is a flowchart for explaining the automatic login process of the second embodiment according to the present invention.

<Description of the symbols for the main parts of the drawings>

100, 600: network 200, 700: authentication server

300, 800: client terminal 400, 900: website

325: automatic login module 220, 720: authentication list creation means

740: automatic login document creation means

In order to achieve the above object, the automatic login method as an aspect of the present invention is authentication for storing and managing location information (URL) for a plurality of websites that require authentication and login information of the website for each individual user. A method of automatically logging in to a plurality of websites through a server, comprising: a first step of receiving a list of authentication sites corresponding to a corresponding client, location information of each authentication site, and login information from the authentication server; A second step of obtaining a login executing web document from the location information of the selected authentication site in response to the client's authentication request; A third step of interpreting the web document to automatically input corresponding login information, and a fourth step of executing user authentication using the input login information.

The first step may further include: receiving, by the authentication server, client identification information from a client terminal; Extracting a list of authentication sites registered by a corresponding client based on the client identification information; Extracting location information and login information of the extracted authentication site from a login information database storing and managing location information (URL) and login information of a login execution site; And transmitting the authentication site list, location information, and login information to the corresponding client terminal.

The fourth step may further include displaying a web document automatically inputting login information on a browser screen; Transmitting the login information to a web server managing a corresponding web document according to a login execution request of a user; The web server may be configured to execute user authentication according to the transmitted login information.

In addition, the fourth step may include automatically transmitting a web document in which login information is input to a web server managing the web document; The web server may be configured to execute user authentication according to the transmitted login information.

As another aspect of the present invention, an automatic login method includes a login information database for storing and managing location information (URL) of a plurality of websites requiring authentication and login information of the corresponding website for each user, and each authentication site. A method of automatically logging in to a plurality of websites through an authentication server including a login form database for storing and managing a login form, the method comprising: a first step of receiving a list of authentication sites corresponding to a corresponding client from the authentication server; Selecting a site to be visited by the client from the list of authentication sites, and transmitting the selection request to the authentication server; Extracting a login form and login information of the selected authentication site based on the selection request, and inputting the login information into the login form to create an automatic login document; And transmitting a user login document to the client terminal.

The first step may further include: receiving, by the authentication server, client identification information from a client terminal; Extracting a list of authentication sites registered by a corresponding client based on the client identification information; The extracted authentication site list is transmitted to the corresponding client terminal.

The fourth step may further include receiving, by the browser of the client terminal, the automatic login document; Delivering the automatic login document to a web server of a corresponding authentication site; The web server may be configured to execute user authentication based on login information of the automatic login document.

The login information includes a user ID and a password.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Prior to this, terms or words used in the specification and claims should not be construed as having a conventional or dictionary meaning, and the inventors should properly explain the concept of terms in order to best explain their own invention. Based on the principle that can be defined, it should be interpreted as meaning and concept corresponding to the technical idea of the present invention.

Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiment of the present invention, and do not represent all of the technical idea of the present invention, which can be replaced at the time of the present application It should be understood that there may be various equivalents and variations.

Example 1

1 to 3 illustrate an automatic login method according to a first embodiment of the present invention. In the present embodiment, a separate automatic login program is installed on the client system side.

Hereinafter, with reference to the drawings will be described in detail the configuration and operation of the present embodiment.

1 shows a configuration of a network system in which the automatic login method of the present embodiment is performed.

The automatic login method of the present embodiment includes a client system 300 of a user side who wants automatic login, a plurality of websites 400 allowing access through user authentication, a user-specific list of the websites, and a list of each website. It consists of an authentication server (200) embedding login information and a computer network (100) for connecting them.

The client system 300 of the user side loads a web page based on a Uniform Resource Locator (URL) of the website, and interprets the HTML code of the web page to display on a monitor and a computer system. An operating system program 310 for overall management and control is included. The client system also includes network access tools for accessing numerous objects and resources scattered across the distributed network.

Within the browser program 320, there is a separate automatic login module (ie, client side program) 325 for executing the automatic login routine described later. Of course, the automatic login module 325 may be installed and executed independently of the browser program 320. In particular, this automatic login module (ie, client-side program) may be downloaded from the authentication server and installed, or may be installed on the client system via another computer-readable recording medium.

The function and role of this automatic login module will be described later in detail.

The web site 400 refers to a server where a web document is located. In particular, the web site 400 requires input of a user ID and a password to access the site. Accordingly, these websites 400 include a login execution document for performing user authentication using the ID and password of the connected user.

The authentication server 200 is a computer system for automatically executing a login between an individual client system 300 and a website 400 to which the client system 300 accesses.

The authentication server 200 includes a server engine 210, authentication list creation module 220, a plurality of web pages 230, authentication information database 240, user database 250.

The server engine 210 receives a HTTP (Hyper Text Transfer Protocol) request for accessing a web page identified by a URL, provides a web page to various client systems, and the authentication list preparation module 220 described later. It provides a platform for server-side programs.

The authentication list preparation module 220 is a program module for creating an authentication site list document such as the reference numeral 500 of FIG. 2. The certified site list document 500 includes a plurality of website lists 510 registered by the user. That is, when a specific user provides user identification information to the authentication server 200, the authentication list creation module 220 extracts an address where a list of websites registered by the user is stored from the user database 250, Based on this address, a list of websites is extracted from the authentication information database. When the website list is extracted, the authentication list preparation module 220 extracts location information (URL) and login information (user ID and password) of the corresponding websites from the authentication information database 240. In the state in which the location information and login information of the websites are extracted, the authentication list creation module 220 links the authentication site list document 500 of FIG. 2 by linking the location information and the login information to the title 510 of each website. And deliver this document to the browser 320 of the client system.

The authentication information database 240 includes a list of websites registered by a specific user (hereinafter, abbreviated as "authentication site"), location information of a specific website, a user ID and password for logging into the website. Stores and manages the location information vs. login information matching table matched with: 1.

In addition, the user database 250 is the authentication information database 240 that stores the personal information (name, social security number, address, email address, ID, password, etc.) of the users registered in the authentication server 200 and the authentication site list Stores and manages the user directory address of).

Hereinafter, with reference to the accompanying drawings, Figures 2 and 3 will be described in detail the automatic login method of this embodiment based on the above-described system configuration.

First, a client who wants to use the automatic login service of the present invention should download the client program from the authentication server or from a specific recording medium and install the program on the client system.

In this state in which the automatic login module is installed in the client system, the specific user executes the browser 320 of the client system to access the authentication server 200. At this time, the authentication server 200 requests the ID and password (that is, user identification information) of the user.

When the client who has logged in using the identification information requests his authentication site list document (S102), the authentication list preparation module 220 lists the authentication sites registered by the corresponding user from the authentication information database 240. And extract the location information and login information of each authentication site to create an authentication site list document 500, such as the reference numeral 500 of FIG. (S104)

When the creation of the authentication site list document 500 is completed, the authentication server 200 transmits the authentication site list document 500 to the browser 320 of the client system 300. (S106)

The browser of the client system interprets and displays the authentication site list document, and the user browses the displayed authentication site list and selects the site he wants to visit (S108, S110).

At this time, the selection of the site is possible, for example, by clicking on the title of the site using a pointing device such as a mouse. When a specific site, for example, clicks on a site called "Patent Technology Information Center" as shown in Fig. 2, an automatic login module 325 installed in a browser is executed. (S112)

The autologin module 325 is a client-side program for executing the autologin routines of S114 to S122 in Fig. 3, and a typical example is a program module based on Microsoft's ActiveX technology. Of course, the autologin module of the present invention is not necessarily limited to ActiveX technology, but may be based on Netscape's plug-in or other application technology that allows user interaction.

According to a user's selection, the automatic login module 325 receives a URL, a user ID, and a password of a selected site (for example, a patent technology information center) from the authentication site list document 500 as shown in FIG. 2. The URL of this site points to the login execution document of the website. Accordingly, the automatic login module 325 requests an authentication web page (ie, login execution document) from the corresponding site based on the URL information. (S114)

The web server 400 (i.e., website) requesting the authentication web page transmits the login execution document (550 of FIG. 2) of the corresponding URL to the auto login module 325. (S116) Auto login module 325 ) Interprets the login execution document 550 and inputs the user ID and password extracted from the authentication site list document 500. (S118, S120) Here, the " interpret the login execution document " means that the HTML code of the web page transmitted from the web server is interpreted to find the positions 551 and 552 for the user ID and the password.

The automatic login module 325 that inputs the user ID 551 and the password 552 in the login execution document 550 displays the login execution document 550 in which the login information is input on the browser screen. When the login execution document 550 is displayed on the browser screen, the user confirms the ID 551 and password 552 information and then executes the login by clicking the login execution button. (S122)

More preferably, the automatic login module 325 does not display the login execution document 550 in which the login information 551, 552 is input on the browser screen, and displays the login execution document 550 in the web server 400. It is also possible to log in by passing it directly. In this case, the browser screen will immediately display the next web page delivered after the login is executed. Therefore, it is possible to minimize the operation of the user required for login.

Since the web server 400 which has received the login information required for authentication from the client system to authenticate the corresponding user is a well-known technique, it is omitted by referring to S124 to S130 of FIG. 3.

As described above, the automatic login method of the present embodiment can simply complete user authentication for the corresponding site by a single operation of the client receiving the authentication site list document from the authentication server to select a specific site from the authentication site list. . Therefore, the user does not need to memorize login information of sites that he visits frequently.

Example 2

In the case of the first embodiment described above, there is a inconvenience in that a client-side program such as an auto-login module must be downloaded from the authentication server in order to execute auto-login, and the program must be installed on the client computer. In addition, in the case of the first embodiment, there is a disadvantage in that the automatic login service provided by the authentication server cannot be utilized in a client system environment in which the client-side program is not installed.

Therefore, in the present embodiment, a client program other than a browser is not required to execute the autologin service, and if only a client system accessible to the authentication server exists, the autologin service of the present invention can be used anytime and anywhere. It is characteristic.

Hereinafter, the automatic login method of the present embodiment will be described in detail with reference to FIGS. 4 to 6.

4 shows a configuration of a network system in which the automatic login method of the present embodiment is performed.

The automatic login method of the present embodiment includes a client system 800 of a user who wants automatic login, a plurality of websites 900 allowing access through user authentication, a user-specific list of the websites, and a list of each website. An authentication server 700 having embedded login information and a computer network 600 connecting them to each other.

The client system 800 of the user side retrieves a web page based on a Uniform Resource Locator (URL) of the website, and interprets the HTML code of the web page to display on a monitor and a computer system. An operating system program 810 for overall management and control is included. The client system also includes network access tools for accessing numerous objects and resources that are scattered across the distributed network.

The website 900 refers to a server where a web document is located. In particular, the website 900 requires input of a user ID and a password to access the site. Therefore, these websites 900 include a login execution document for performing user authentication using the ID and password of the connected user.

The authentication server 700 is a computer system for automatically executing a login between an individual client system 800 and a website 900 accessed by these client systems 800.

The authentication server 700 is a server engine 710, authentication list creation module 720, automatic login document creation module 740, a plurality of web pages 730, authentication information database 770, user database 750 And a login form database 760.

The server engine 710 receives a Hyper Text Transfer Protocol (HTTP) request for accessing a web page 730 identified by a URL and provides a web page 730 to various client systems 800, which will be described later. It provides a platform for server-side programs such as authentication list creation module 720 and automatic login document creation module 740.

The authentication list preparation module 720 is a program module for creating an authentication site list document as shown by reference numeral 910 of FIG. 5. This certification site list document 910 includes a list 911 of a plurality of websites (hereinafter referred to as "authentication sites") registered by the user. That is, when a specific user provides user identification information (ID, PASSWORD) to the authentication server 700, the authentication list creation module 720 extracts the address where the authentication site list is stored from the user DB 750, and the address is stored. Based on the extracted authentication information DB 770, a list of websites registered by the corresponding user is extracted. When the website list is extracted, the authentication list creation module 720 organizes the extracted websites according to the title, and links a command to execute the automatic login document creation module 740 to the title 510 of each website. 5 to create an authentication site list document 500 as shown in FIG. 5 and deliver it to the browser 820 of the client system.

The automatic login document creation module 740 is a program module for receiving a selection request for a specific authentication site from a client system and creating an automatic login document such as 920 of FIG. 5.

Hereinafter, the function and role of the automatic login document creation module 740 will be described in detail with reference to FIG. 5.

When the user selects and clicks a specific site 911 from the authentication site list 910 displayed on the browser screen, the selection request is transmitted to the automatic login document creation module 740. At this time, the automatic login document creation module 740 extracts the login information (ID, PASSWORD) and the login form corresponding to the selected site from the authentication information DB 770 and the login form DB 760 based on the selection request. do. The login form means a login execution format extracted from the site by the authentication server.

The automatic login document creation module 740 extracting login information and a login form creates an automatic login document 920 by inputting login information into the login form. The automatic login document 920 executes login by sending the login form 921 to which the login information is input and the browser 820 of the client system, as shown in 920 of FIG. 5, to the web server. The login execution unit 922 is included. For example, the login execution unit 922 is preferably an application program written in a JavaScript language used by being embedded in HTML code. That is, the automatic login document 920 includes a login form 921 written in HTML and a login execution unit 922 written in a language such as JavaScript. The login form 921 is filled with the user ID and password extracted from the authentication information DB 770.

In addition, the login execution unit 922 is an application program that causes the client's browser to transmit the login form filled with the login information to the web server to execute the login.

The authentication information database 770 includes a list of websites registered by a specific user (hereinafter, abbreviated as "authentication site"), location information of a specific website, and a user ID and password for logging into the website. Stores and manages the location information vs. login information matching table matched with: 1.

The user database 750 of the authentication information database 770 that stores the personal information (name, social security number, address, email address, ID, password, etc.) of the users registered in the authentication server 700 and the list of the authentication site Store and manage the user directory address.

The login form database 760 stores and manages login forms of authentication sites registered by users. This login form is a login execution format of each authentication site including HTML code or a specific program for inputting an ID and password to execute user authentication.

Hereinafter, with reference to the accompanying drawings, Figures 5 and 6 will be described in detail the automatic login method of the present embodiment based on the above-described system configuration.

When a specific user accesses the authentication server 200 by executing a browser 320 installed on his or her client system, the authentication server 200 requests the user's ID and password (ie, user identification information). (S100)

When the client who executes the login using the identification information requests its authentication site list document (S202), the authentication list preparation module 720 lists the authentication sites registered by the corresponding user from the authentication information database 770. Extract and create an authentication site list document 910 such as the reference numeral 910 of FIG. 5. (S204)

When the creation of the authentication site list document 910 is completed, the authentication server 700 delivers the authentication site list document 910 to the browser 820 of the client system 800. (S206)

The browser of the client system interprets and displays the authentication site list document, and the user browses the displayed authentication site list and selects the site he wants to visit (S208, S210).

At this time, the selection of the site is possible, for example, by clicking on the title of the site using a pointing device such as a mouse. When a specific site is clicked, for example, as shown in Fig. 5, a site called "Patent Technology Information Center", the authentication site selection request is transmitted to the automatic login document creation module of the authentication server according to the command contained in the site title. Here, the selection request is information indicating which site the client selects from the list of authentication sites.

Therefore, the automatic login document creation module 740 can grasp which site the user wants to visit just by receiving the selection request (S212).

The automatic login document creation module 740, which has received the selection request from the client system, obtains the login information, that is, the user ID and the password matching the site selected from the authentication information DB 770. (S214)

The automatic login document creation module 740 having obtained the user ID and password obtains a login form (that is, a login execution format) matching the selected site from the login form DB 760. (S216)

The automatic login document creation module interprets the obtained login form, completes the login form by inputting the user ID and password, and sends the login form to a corresponding website to execute the login. Included in the form to create an automatic login document such as 920 of FIG. 5 (S218).

The server engine 710 transmits the automatic login document 920 thus created to the browser 820 of the client system (S220), and the browser 820 receives the automatic login document 920 and logs in the execution unit 922. Execute JavaScript of (S222, S224)

In response to the login execution unit, the browser transmits the automatic login form to the web server. (S226)

The web server 900 receives the automatic login form and executes login. (S228, S230)

As such, the procedure for authenticating the corresponding user by the web server 900 which has received the login information required for authentication from the client system is a well-known technique, and thus the description thereof will be omitted by referring to S232 to S238 of FIG. 6.

As described above, the automatic login method of the present embodiment can simply complete user authentication for the corresponding site by a single operation of the client receiving the authentication site list document from the authentication server to select a specific site from the authentication site list. . Therefore, the user does not need to memorize login information of sites that he visits frequently.

In particular, in the present embodiment, unlike the first embodiment, there is no need to download and install a separate client program on the client PC, and the automatic login service can be received even in a PC on which the client program is not installed.

As described above, the present invention is not limited to the above-described embodiments, and various changes within the equivalent scope of the technical concept of the present invention and the claims to be described below by those skilled in the art to which the present invention pertains. Of course, modifications and variations are possible.

The automatic login method of the present invention can simply complete user authentication for a corresponding site by a single operation of selecting a specific site by the client. Therefore, the user does not need to memorize login information of sites that he visits frequently.

Claims (9)

As a method of automatically logging in to multiple websites through the authentication server that stores and manages the location information (URL) of the multiple websites requiring authentication and the login information of the websites for each user, A first step of receiving a list of authentication sites corresponding to the corresponding client, location information of each authentication site, and login information from the authentication server; A second step of obtaining a login executing web document from the location information of the selected authentication site in response to the client's authentication request; A third step of interpreting the web document and automatically inputting corresponding login information; and And a fourth step of performing user authentication by using the input login information. The method of claim 1, The log-in information includes a user ID and a password. The method of claim 2, The first step is Receiving, by the authentication server, client identification information from a client terminal; Extracting a list of authentication sites registered by a corresponding client based on the client identification information; Extracting location information and login information of the extracted authentication site from a login information database storing and managing location information (URL) and login information of a login execution site; Automatic login method comprising the step of transmitting the authentication site list, location information and login information to the corresponding client terminal. The method of claim 3, wherein The fourth step is Automatically displaying a web document in which login information is input on a browser screen; Transmitting the login information to a web server managing a corresponding web document according to a login execution request of a user; And performing user authentication according to the login information transmitted by the web server. The method of claim 3, wherein The fourth step is Automatically transmitting the web document inputted with the login information to a web server managing the web document; And performing user authentication according to the login information transmitted by the web server. A login information database that stores and manages the location information (URL) of multiple websites that require authentication and the login information of the website for each user, and a login form database that stores and manages login forms of each authentication site. As an automatic login to a plurality of websites through the authentication server, including, A first step of receiving a list of authentication sites corresponding to the corresponding client from the authentication server; Selecting a site to be visited by the client from the list of authentication sites, and transmitting the selection request to the authentication server; Extracting a login form and login information of the selected authentication site based on the selection request, and inputting the login information into the login form to create an automatic login document; And a fourth step of performing user authentication on transmitting the automatic login document to the corresponding client terminal. The method of claim 6, The login information includes a user ID and a password, automatic login method. The method of claim 7, wherein The first step is Receiving, by the authentication server, client identification information from a client terminal; Extracting a list of authentication sites registered by a corresponding client based on the client identification information; The automatic login method comprising the step of transmitting the extracted authentication site list to the corresponding client terminal. The method of claim 8, The fourth step is Receiving, by the browser of the client terminal, the autologin document; Delivering the automatic login document to a web server of a corresponding authentication site; And executing, by the web server, user authentication based on the login information of the auto login document.