KR20020039703A - Single Sign-On Transaction Method and Transaction Apparatus For Internet Web Sites - Google Patents

Abstract

PURPOSE: A method and system for a user certification single sign-on is provided to perform a stable certification confirmation by decreasing an unnecessary data transmission between a server for a certification process and a plurality of member company web sites and supplying user certification confirmation information effectively. CONSTITUTION: A service subscriber attaches a smart card recording device storing one's subscriber information with respect to the first domain web site to a user terminal detachably, and installs a control program(S1). The service subscriber connects to the Internet and inputs a URL with respect to one out of the second domain web sites in accordance with a control of the control program, and judges as to a trial of a visitor connection or not(S2¯S4). The subscriber information and the URL are supplied to the first domain web site, and a user certification process with respect to the second domain web site is requested(S5). An IP address and subscriber information of the subscriber who requested the user certification process are transmitted to the second domain web site(S7). The second web site which received the subscriber information from the first domain web site embodies a service permission to a visitor who tried a visit connection to the corresponding address(S8).

Description

Single Sign-On Transaction Method and Transaction Apparatus For Internet Web Sites}

The present invention utilizes personal access information stored in a subscriber information recording device such as a smart card attached to a data communication terminal, so that user authentication processing for a plurality of Internet web sites can be automated and simplified. Sign-On) technology.

In the generalized Internet environment according to the development of information and communication technology, many Internet web sites differentiate their services from members and non-members, paid members and free members. Therefore, the web site visitor must go through the process of login and user authentication in order to receive the service set by the contract with the web site. Since the login and user authentication process is usually performed by the visitor directly inputting the accessor's name (ID) and the access password, this process has inconvenienced the user and various attempts have been made to simplify the process.

The first attempt to simplify the login and user authentication process for multiple websites is to record the visitor's name and password for each of the multiple web pages in a specific area of the visitor's communication terminal (personal computer). This is a way to automatically enter each time you visit.

At this time, it is classified into a software type recording method and a hardware type recording method according to a medium for recording the accessor name and the connection password.

The software recording method is to record a data key for user authentication on a hard disk of a user terminal, which is generally difficult to use on a computer other than one's own computer, and thus has no mobility. Because special security is required, there is a fatal problem that security information is exposed according to the cookie setting when installing from a publicly used computer such as a PC room.

The hardware recording method is to record the data key for user authentication in the subscriber information recording device such as a smart card that is portable and can be installed. The security information is superior to that of the software method. It has the advantage of being free to use without fear of exposure. However, even in this case, there is a fundamental limitation in that a complicated procedure of signing up cannot be omitted for each web site, and a separate login procedure and user authentication procedure must be performed at the web site every time the user connects.

Korean Patent Publication No. 2000-0006645 (published Feb. 7, 2000) allows an integrated circuit card to remember the owner's personal information and the accessor's name and access password for all the registered websites. It simplifies the sign-up process and automates a part of the process of logging in to the web site by using the recorded visitor name and access password, and discloses a method for making various transactions such as searching and purchasing products. However, this method does not omit a separate registration process at each web site, and requires individual user authentication at each web site.

A second attempt to simplify the login process for multiple Web sites is a technique published in the 1997 book "X / open Single Sign-On Service" published by the OPEN Group (www.opennc.org).

According to a newly disclosed technique in this document, a web page visitor can bypass the login process for the related web site (the second domain), that is, the user authentication process, simply by logging in to a specific domain web page (the first domain). Doing. As a specific procedure for realizing such an authentication process, first, a user accesses a membership service of the first domain, provides information about himself, and receives membership rights. The first domain then provides the member information of the members subscribed to its domain web page to the plurality of second domains in its account management service group. When the subscriber who has obtained the membership authority starts surfing the web site, the first request is to log in to the first domain, and when the subscriber is authenticated, the second domain is provided to the second domain by providing authentication processing information for a plurality of second domains. Allows you to log in without having to log in separately.

In this open technology, a single process of authenticating a user for a plurality of web sites means that when the subscriber requests authentication in the first domain, the subscriber confirms the authentication and simultaneously provides the user information according to the authentication process. This is done by notifying. Therefore, in each second domain, since the authentication process information for the subscriber requesting access has already been received from the first domain, a separate authentication process can be omitted.

However, in this open technology, the user has to be inconvenient to log in to the first domain first and then authenticate the user in order to log in to any one of the plurality of second domains. This may result in an inconvenience in the case of a visitor visiting only a web site of a specific domain among a plurality of second domains. In addition, after the user logs in to the first domain and authenticates the user, the information is notified to the plurality of second domains, so that the authentication processing modules of the second domain each wait for the visitor to access and request service provision. It becomes the state to do. Therefore, when a plurality of second domains receive user authentication in the first domain, even if the visitor does not visit, the second domains must receive data from the first domain and perform data processing. Therefore, unnecessary data transmission processing is repeated. There is a problem.

In addition, even if the user terminates the session by stopping using the Internet, the second domains that the user does not visit have no way of confirming the user's session termination. Therefore, even if the user cannot be authenticated due to the user's cause, since the user has already been notified of the authentication confirmation information, the user may omit the user authentication process and provide a service, or later confirm the payment request. There is concern. On the other hand, in order to avoid such adverse effects, when the user terminates the use of the web browser or the like to stop using the Internet, it may be designed to be notified from the first domain information about the session termination, in this case, the actual visit This results in notifying the fact that the user logged in with the second domains that are not logged in as well as the fact that they logged off, which causes unnecessary data transfer processing.

The present invention is to compensate for the drawbacks of the above-described conventional user authentication process, by using a subscriber information recorded in his smart card by accessing any one of the web pages belonging to the management group of the authentication processing server Single user authentication method for multiple web sites and users, which allows users to bypass the authentication process for each web site when accessing one of a plurality of web sites belonging to the same administrative group by simply authenticating a user. It is a technical problem to provide an authentication single processing system.

In addition, the present invention provides a single user authentication method for performing a stable authentication by providing effective user authentication information while reducing unnecessary data transmission between the authentication processing server and a plurality of member web sites and It is another technical problem to provide a processing system.

In addition, the present invention is to provide a paid or free service provided by a number of web pages, and to remove the hassle of the user side that must be registered and authenticated user for the website in order to purchase the product is another technical It is a task.

1 shows a simplified configuration of a user authentication single processing system according to the present invention in relation to a user terminal, a first domain website and a second domain website;

2A and 2B are flowcharts for explaining a sequence in which the user authentication single processing method according to the present invention is executed.

<Description of the symbols for the main parts of the drawings>

1: user terminal 2: Internet

3: first domain website 4: second domain website

In order to realize the above technical problem, the present invention provides a first domain for a user among a plurality of independently operated second domain web sites connected to the Internet and subscribing to the payment authentication service group of the first domain web site. A user authentication single processing method that allows one-time user authentication processing on a web site to replace service user authentication for each of a plurality of second domain web sites. Attaching a smart card recorder recording subscriber information to the user terminal so as to be separable, and installing a control program, and under the control of the control program, the service subscriber accesses the Internet and connects to one of the second domain web sites. Determining whether a URL is entered and attempting to access a visitor; Under the control of the program, providing the subscriber information recorded in the smart card and the URL of the second domain web site that attempted to access the visitor to the first domain web site and requesting user authentication for the second domain web site. And transmitting the IP address and subscriber information of the subscriber who requested the user authentication process from the first domain website to the second domain website to which the subscriber has attempted to access, and receiving the subscriber information from the first domain website. In the second domain web site, providing a single user authentication method for a plurality of web sites, further comprising granting service permission to the visitor who has visited the IP address.

By providing a single user authentication method (Single Sign-On) for a plurality of Web sites of such a configuration, the first domain that is operated for the purpose of user authentication processing according to the subscriber information recorded in the smart card recording device such as a smart card The second domain website, which usually provides paid or free web service only to its members by simply authenticating the user, can be used without the need for a separate registration or login process. With the support of certification, the relevant services such as product purchase can be obtained.

In addition, by providing such a method, it is possible to reduce unnecessary data transmission between the first domain website and a plurality of second domain websites belonging to the payment authentication service group of the first domain website, and to reduce the amount of unnecessary data transfer between the second domain websites requiring user authentication. Since data can be transmitted only to a web site, user authentication can be effectively performed for the purpose of providing contents, charging for sales of goods, and the like.

Further, according to a preferred aspect of the present invention, in the user authentication single processing method for the plurality of websites described above, the step of transmitting the IP address and subscriber information to the second domain web page, the subscriber is the first domain website Only when the user is logged out of the terminal, the subscriber terminal requests the subscriber information recorded in the smart card attached thereto, and proceeds after subscriber authentication is performed based on the subscriber information transmitted from the user terminal.

By providing this configuration, subscriber authentication is performed only the first time you visit either the first domain website or a plurality of second domain websites after a previous logout, and then the other When visiting the second domain web site, the user can authenticate the second domain web site that they want to visit immediately without a separate subscriber authentication confirmation process, thereby unnecessary and repeated data between the first domain web site and the user terminal. Allows the transmission process to be skipped.

According to another aspect of the invention, among a plurality of independently operated second domain web sites connected via the Internet and subscribing to the payment authentication service group of the first domain web site, A user authentication single processing system that can replace service user authentication for each of a plurality of second domain web sites as a one-time user authentication process, comprising: subscriber information of a user registered in the first domain web site and a plurality of system information; URLs for 2 domain web sites are recorded, and a smart card recorder attached to the user terminal detachably and attached to the user terminal, and monitors the input URL when the user inputs the URL of the domain to be accessed through the web browser. The URL is for a second domain web site recorded on the smart card recorder. If it is determined and confirmed as one of the URLs of the second domain website, it communicates with the authentication system of the first domain website and transmits the URL input by the user, thereby requesting authentication processing for the first domain website. An authentication requesting means, a subscriber information recording apparatus attached to the first domain web site for recording subscriber information for each of a plurality of subscribers, and attached to the first domain web site, and transmitting an access target URL from the authentication requesting means. Receive the subscriber's IP address, the authentication processing means for transmitting subscriber information, the second domain web site, and the subscriber information transmitted from the authentication processing means to the second domain web site of the connection target URL; Use of service that grants service license to service requested by visitor of relevant IP address and records the processing result It provides a single user authentication processing system for a plurality of web site comprising the authentication means.

By providing a user authentication single processing system for a plurality of web sites of such a configuration, unnecessary data transfer between the first domain web site providing the payment authentication service and the plurality of second domain web sites belonging to this service group is eliminated. It is possible to operate the authentication processing service while reducing it. Thus, the user can freely use all the free services on the second domain web site of every service group without having to register or log in with only one authentication. In addition, in the second domain web site, simply joining the payment authentication service group can obtain user information about the non-subscriber and easily collect the payment for the purchase of the content or the product provided by the web site.

In addition, according to the present invention, in the user authentication single processing system having the above-described configuration, the authentication processing means attached to the first domain web page is attached to the user terminal when it is determined that the connection state of the subscriber who has requested authentication has been logged out. Request to transmit the subscriber information recorded in the smart card to the requested authentication request means, and authenticate the corresponding subscriber based on the subscriber information transmitted from the user terminal side and the subscriber information recorded in the subscriber information recording device according to the request. After confirming that, it is preferable to configure the transmission of subscriber information and access IP address of the subscriber to the second domain web site only when authentication is successful.

By providing this configuration, a user who is logged out can be authenticated by attempting to connect to either the first domain website or the second domain website, or, if they are already authenticated, unless they log out. When accessing the second domain web site, various services provided by the web site can be used without going through a separate user authentication process.

In addition, according to the present invention, in the user authentication single processing system of the above-described configuration, it is preferable that the smart card recording apparatus attached to the user terminal is a portable smart card attached directly to the USB port of the personal computer.

By adopting such a configuration, it is possible to use the user information recorded in his smart card on his or a public personal computer with a smart card that is easy to carry and easy to install, and can also use the first domain web page and the second domain web. It is possible to easily access to any of the pages in a state of obtaining user authentication, and to easily perform payment processing according to various content purchases and product purchases provided by various second domain web pages.

Hereinafter, with reference to the accompanying drawings to describe the configuration of the present invention in more detail.

1 shows a schematic configuration of a user authentication single processing system for a plurality of web sites according to the present invention. The connection relationship between the user terminal 1, the first domain web site 3, and the second domain web site 4 is shown in FIG. It is a figure shown in the center. 2 is a process flow chart showing a sequence of user authentication single processing performed in this user authentication single processing system.

As shown in FIG. 1, the user terminal 1 is provided with a smart card recording apparatus 11, and controls the recording contents of the smart card recording apparatus as part of performing the user authentication single processing of the present invention. The control processor 12 is installed as a control program for communicating with the authentication processor of the first domain web page and performing authentication processing.

The smart card recording device 11 may be provided in the form of a magnetic recording method or an integrated circuit recording method. Preferably, the smart card recording device 11 is portable and easy to move and install, and is provided to a peripheral device such as a personal computer main body or a monitor. Universal Serial Bus) is best inserted directly into the port. An example is the ikey series from Rainbow Technology.

The smart card recorder 11 records a unique serial number assigned to a key, and also registers a subscriber's name, social security number, address, member name (ID), and access, which are recorded when a key registration is issued for the first domain website. Cyber payment account information, including subscriber information such as passwords, payment account numbers and payment passwords, is recorded.

And, according to the embodiment, the balance information of the cyber payment account which is changed and recorded according to the charging or payment may be recorded. In addition, in order to prevent the credit card number and the like from being exposed to others in the case of charging or the like, the credit card information such as a credit card number, a credit card expiration date, etc., which are recorded for charging the cyber payment account, is stored in the recording device 11. It is desirable to be recorded so as to be changeable by.

In addition, the smart card recorder 11 records a list 112 of the second domain web site belonging to the payment authentication service group provided by the first domain, which is regularly updated under the control of the control processor 12. do.

In addition, a web site-specific user ID and access password may be recorded to assist a user in automatically logging in to a plurality of second domain web sites (with or without service group subscription). In this way, the user records the access user ID and access password for all the domain websites regardless of whether the corresponding domain website subscribes to the service provided by the first domain website in the present invention, and is convenient for logging in. Can be used.

The control processor 12 is generally provided in the form of a control program, and performs system security related processing by communicating with the user based on the recorded contents of the smart card recording apparatus 11 to confirm whether a party user exists. Control is performed to update a part of the recorded contents of the user terminal recording apparatus at the request of the political party user.

The control processor 12 also functions as an authentication request processor that communicates with the authentication processor 35 of the first domain web site and performs authentication processing. In addition, the payment / settlement processor 34 of the first domain web site communicates with the payment / settlement process according to the content purchase and the product purchase. In addition, it communicates with the authentication processor 35 of the first domain web page to receive information on the payment authentication service group of the first domain web page and to modify the list of websites recorded in the recording device 13.

In particular, in connection with the user authentication single processing of the present invention, the control processor 12 as the authentication request processor first hooks a web site address (URL) when the user enters a web browser or the like to access a specific web site. To monitor which one of the second domain web sites is attempting to connect (steps S2 to S4 in FIG. 2A). This process begins when the user attempts to connect to one of the second domain web sites by writing a URL to a web browser or the like (1 in FIG. 1), and the control processor 12 reads the written URL (step S2), by performing a filtering process (step S3) which compares the read content with the list of the second domain web site recorded in the recording device 13.

If the subscriber attempts to connect to any one of the second domain web sites (step S4), the subscriber sends the URL to the authentication processor 35 of the first domain web site and requests authentication (2 in FIG. 1). . Subsequently, the authentication processor 35 of the first domain web site which has received the authentication request provides the address information of the IP currently used by the user to the second domain web site of the corresponding URL along with basic information about the user. You will be asked to grant a party right to a user who requests access by IP.

On the other hand, if the subscriber attempts to access either the first domain website or a plurality of second domain websites for the first time since the subscriber previously logged out (step S6), the subscriber authentication in relation to the first domain website is performed. Should receive. In this case, when there is a request for provision of subscriber information from the authentication processor 35 of the first domain web page (step S9), the subscriber information recorded in the smart card recording device 11 is encrypted by the encryption processor 13 to authenticate the authentication processor ( 35) is provided.

Upon successful subscriber authentication, when the authentication confirmation message is received from the authentication processor 35 of the first domain website (step S12), the control processor 12 allows the user to check the message through a display device (not shown). Control and end the authentication process.

The first domain website determines whether the user is logged in to the first domain web site, but the user terminal receives a 1 bit (login status, "1") to confirm whether the user is logged in to the first domain web page. And the control processor 12 may check whether or not to precede the user authentication for the first domain web page according to this 1-bit recorded value. In this case, the control processor 12 checks this 1-bit value first before the operation, and if it is not yet authenticated by the user from the first domain website (logout state, "0"), the second domain website. When there is an initial connection attempt to any one of them, the user information recorded in the smart card recording apparatus is transmitted and processing is performed to receive user authentication for the first domain web site.

In addition to the user authentication request processing, the control processor 12 communicates with the charging processor 33 and the payment / settlement processor 34 of the first domain web page to perform processing related to charging and payment / settlement. Specifically, in connection with the cyber money charging, the control processor 12 encrypts information such as a credit card number necessary for electronic payment of the charge, and provides the information to the charge processor 33 of the first domain website 3. (33) Receive and display the result of the charging processing, and perform the related processing of correcting the record contents of the account. In addition, in connection with the payment / settlement according to the purchase of content or goods on the website visited by the user, it communicates with the payment / settlement processor 34 of the first domain website to receive the payment / settlement processing result, and the result Display through the display device for user confirmation. If the recording apparatus is configured to record the balance of the account, the account data recorded in the smart card recording apparatus 11 is modified and recorded.

The encryption processor 13 encrypts and transmits data transmitted to the first domain web page and the second domain web page, and decrypts the data transmitted from the first domain web page and the second domain web page. ) Into a format that can be interpreted.

The first domain web page 3 is constructed for the purpose of substituting payment authentication services for a plurality of second domain web pages, and includes data including a network connection processor 31, a web server 32, and a recording device. It is configured to include a server 36, a charge processor 33, a payment / settlement processor 34, an authentication processor 35, a cryptographic processor 37, and the like.

Specifically, the first domain web page provides the subscriber information of the smart card recorder of the user terminal and the webpage of any one of the second domain web service groups which are the web pages of the member companies subscribed to the payment authentication service. When requesting user authentication (steps S1 to S5), it communicates with the visitor authentication processor 43 of the designated second domain web page, requesting that the second domain web page authenticate the user for the visitor, It charges subscribers by receiving payment for the purchase of content and products on the second domain web page.

In particular, in connection with the user authentication single processing of the present invention, if the authentication processor 35 of the first domain web page 3 receives a user authentication request for a particular second domain web page from the control processor 12 of the user terminal, In response to the request, it communicates with the visitor authentication processor 43 of the designated second domain web page to provide the IP address of the user and the user information of the user, and to provide the web service to the visitor who attempted to access the IP address. The user authentication process to confirm that it can be performed is performed (step S7, ③ in Fig. 1).

On the other hand, the authentication processor 35 of the first domain web page, when the subscriber requesting user authentication requests the user authentication for the first time since the last logout, first proceeds with the procedure for subscriber identification and authentication qualification (step) S6, S9 to S12).

Specifically, when the user terminal 1 requests a user authentication for the web page while specifying the URL of the second domain web page (step S5), the authentication processor 35 is first logged into the first domain web page. It is checked whether it is in a state (step S6). If it is confirmed that the user is logged out (YES), the process proceeds to step S9 and requests the control processor 12 of the user terminal to provide the subscriber information recorded in the smart card recording apparatus 11 (step S9). . When subscriber information is transmitted from the user terminal, it is judged whether to qualify for user authentication based on this (step S11). As a result, if there is no subscriber authentication eligibility, a message indicating that authentication is not possible, together with a reason for not being able to authenticate (step S14); To transmit (step S13). In this case, the confirmation message confirming that the subscription authentication has been performed may be provided with the balance of the subscriber account and the like, and recent usage statistics.

If the subscription authentication is made, the authentication processor 35 of the first domain web page is the visitor authentication processor 43 of the second domain web page where the subscriber requests user authentication and attempts to access the subscriber information. And providing an IP address and granting a service right to a visitor connecting with the IP address (step S14).

The second domain web site 4, which is another part of the user authentication single processing system configuration for a plurality of web sites according to the present invention, is a web site joined by a payment / authentication service group provided by the first domain web site operator. It is connected to the first domain web site 3 online to exchange encrypted data and to provide services related to payment authentication.

According to the user authentication single processing system of the present invention, the visitor authentication processor 43 of the second domain website receives the user information and the IP address provided by the authentication processor 35 of the first domain website (Fig. 1). ③, ④), Grant the right to use the service for your web page to the visitor who accesses the IP.

After granting the right to use the service, the second domain website records the purchase of the paid content or product viewed by the visitor, and then requests the payment to the first domain website. Specifically, when the visitor requests a purchase to purchase paid content or goods, the second domain web site may provide credit information to the payment / settlement processor 34 of the first domain web page to confirm the purchasing power of the corresponding product. In response, the purchase process is executed according to the credit information provided from the first domain web site, and the result is recorded and transmitted to the first domain web page.

The operation of the user authentication single processing system of the above-described configuration will be briefly described from the user visiting a specific site.

After the user is issued a portable smart card, the user installs the smart card on his computer or a public computer such as a PC room, and starts a service request. After the smart card is mounted, the controller communicates with the control processor 11 of the smart card, and undergoes user confirmation with its own user name (ID) and access password. After the user verification process is completed, the user surfs the web by inputting the URL of the web page he / she wants to receive.

Then, if the web page of the URL entered by the user is the URL of any one of the first domain web page or the second domain web pages, the user authentication single processing system for the plurality of web sites according to the present invention 2, the initial subscriber authentication and the user authentication procedure in the second domain web page of steps S2 to S6 and steps S9 to S14 are carried out (3 in FIG. 1), and finally, the user wants the second domain web page. The service for is freely available.

In addition, after receiving subscriber authentication for the first domain web site in this manner, a separate subscriber authentication procedure for the first domain web page is omitted when attempting to visit another second domain web page. That is, the process of transmitting subscriber information between the first domain web page and the user terminal is omitted, except that the control processor 12 of the user terminal hooks the URL of the second domain web site entered by the user. By simply transmitting the URL to the first domain web page and requesting user authentication (4 in FIG. 1), the user can obtain a qualification for viewing content on the second domain web page.

In addition, the operation of the user authentication single processing system for the plurality of websites of the present invention proceeds between the control processor 12, the first domain website, and the second domain website without the user confirming. Regardless of which webpage you access first, you can bypass the separate registration or login procedure for the web site and obtain a right to use the web site.

As a result, the user can browse the contents provided by the second domain website only by using the authentication process on the first domain website without omitting a separate registration procedure for the second domain website that he or she has not subscribed to. It is also possible to easily purchase paid content and goods.

On the other hand, the operation policy of the second domain web site may restrict that only the right to view a particular page is required to log in to the web site. For example, if you operate a community site on a second domain web site, the content viewing and content provision on the community site is generally configured to be limited to members, while the sale of paid content or goods is actually paid and paid. Only relevant credit is important and often does not require membership.

In this case, a separate login procedure is required for the second domain web site, and when the user accesses the second domain web site, the smart card recording apparatus 11 of the present invention is requested in response to a request from the second domain web site. It is more preferable that the user ID and access password are automatically transmitted as subscriber information for each site recorded separately.

With this configuration, in the case of the non-member paid product sales mode on the second domain website, the user can skip the registration and login procedure and process the payment by authentication processing between the first domain website and the user. Can be configured to automate login processing on the premise of a user's membership only when a connection request is made in the member-only mode.

From the point of view of the user, for the second domain web site where the user has already registered and recorded the access ID and password on the smart card, the user is automatically logged in at the time of connection, and the member-only mode on the second domain web site is displayed. Allow the user to purchase paid products by the payment verification on the first domain website, and purchase paid products by the payment verification process on the first domain website even for websites where the user has not registered. Can be.

A method for a user to log in to a second domain web site using a smart card provided by the present invention includes automatically entering a user access ID and a password when the user accesses a second domain web site and logging in the user. It may be configured to log in by a command, or may be configured to log in directly by communication between the control processor 11 installed in the user terminal and the second domain website without the user's knowledge.

As described above, the single user authentication method for a plurality of web sites and the configuration of a system for executing the method have been described. However, the present invention is not limited to these embodiments and can be modified in various forms by those skilled in the art.

According to the present invention, it is possible to process a single user authentication for a plurality of second domain websites belonging to the payment authentication service group of the first domain website, and the user can perform a separate registration procedure for the second domain website. Even if the login procedure is omitted, only the first user authentication on the first domain web site allows the user to view the free contents provided by the site and purchase goods for sale. In particular, in a single process of user authentication, it is possible to reduce unnecessary data transmission between the first domain website and the second domain website, and to transmit data only to websites that require user authentication for immediate access. As a result, it is possible to save resources on each web site and improve user convenience.

Claims (6)

Among a number of independently operated second domain web sites connected to the Internet and subscribing to the payment authentication service group of the first domain web site, a plurality of first-time authentication processes for the user at the first domain web site are performed. In a single method of user authentication that allows for substituting service user authentication for each of the two domain Web sites, Attaching a smart card recorder in which the service subscriber records his / her subscriber information on the first domain website to the user terminal and installing a control program; Determining, according to the control of the control program, that the service subscriber accesses the Internet, inputs a URL to one of the second domain web sites, and attempts to access the visitor; According to the control of the control program, the subscriber information recorded on the smart card and the URL of the second domain web site that attempted to access the visitor are provided to the first domain web site and the user authentication process for the second domain web site is requested. Steps, Transmitting the IP address and subscriber information of the subscriber who requested the user authentication process from the first domain website to the second domain website to which the subscriber attempted to connect; At the second domain web site receiving subscriber information from the first domain web site, granting service permission to the visitor who has visited the IP address; User authentication single processing method. The method of claim 1, The step of transmitting the IP address and subscriber information to the second domain web page, If the subscriber is logged out from the first domain web site, the subscriber terminal requests the subscriber information recorded in the smart card attached to the user terminal and performs subscriber authentication based on the subscriber information transmitted from the user terminal. A method of processing a single user authentication for a plurality of web sites, characterized in that. The method according to claim 1 or 2, Recording a user ID and an access password on a smart card for each second domain website; The user attempting to access the second domain website by entering the URL of the second domain website recorded on the smart card; Reading from the smart card a user ID and access password for each second domain web site that attempted to connect; And transmitting the read user ID and the access password to the corresponding second domain web site. Among a number of independently operated second domain websites that are connected via the Internet and subscribed to the payment authentication service group of the first domain website, a plurality of user authentication processes at the first domain website for the user A user authentication single processing system for substituting service user authentication for each of the second domain web sites, A subscriber's subscriber information registered on the first domain website and URLs for a plurality of second domain websites, the smart card recording apparatus being attached to the user terminal to be detachable; It is attached to the user terminal, and when the user enters the URL of the access target domain through a web browser, the inputted URL is monitored and the URL is determined to be the URL for the second domain web site recorded in the smart card recorder. An authentication requesting means for requesting an authentication process for the first domain web site by communicating with the authentication system of the first domain web site when it is confirmed as one of the URLs of the second domain web site; , A subscriber information recording device attached to the first domain web site, for recording subscriber information for each of a plurality of subscribers; Authentication processing means attached to the first domain web site, receiving the connection target URL from the authentication requesting means, and transmitting the subscriber's IP address and subscriber information to the second domain web site of the connection target URL; A service usage authentication means attached to the second domain web site, which receives the subscriber information transmitted from the authentication processing means, grants a service use right to the service requested by the visitor of the corresponding IP address, and records the processing result. A user authentication single processing system for a plurality of web sites, characterized in that. The authentication processing means according to claim 4, wherein the authentication processing means attached to the first domain web page comprises: If it is determined that the subscriber has requested to be authenticated and is logged out, he / she requests to transmit the subscriber information recorded in the smart card to the authentication requesting means attached to the user terminal, and the subscriber transmitted from the user terminal according to the request. After confirming the authentication of the subscriber based on the information and the subscriber information recorded in the subscriber information recording apparatus, the subscriber information of the subscriber and the access IP to the second domain web site only when authentication is successful. A single processing system for authenticating a user to a plurality of web sites, characterized in that the address is transmitted. The method according to claim 4 or 5, The smart card recorder attached to the user terminal is a portable smart card that is inserted and inserted directly into a USB port of a personal computer.