KR20020065284A - operating method for security of computer on network - Google Patents

Abstract

PURPOSE: A method for operating a computer security device in a network is provided to control a series of actions for logging onto a network system by preparing an RF(Radio Frequency) receiving unit in a slot of a computer and using an IC card. CONSTITUTION: A network system comprises an ID card reading unit and a server. The ID card reading unit reads the user information stored in a non-contact IC card. The server forms a client network with computers having storage units and stores the natural IC information of respective client computers. In the storage unit of the computer, user information is embedded. If the IC card passes by a magnetic field formed in a specific area via an RF antenna, the user information stored in the IC card is read to authenticate a user. With the first user authentication, a corresponding computer is operated normally. With the second user authentication, the computer system is changed into the network log-on state.

Description

Operating method for security of computer on network

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a computer security system in a network state. In particular, the present invention provides an RF receiving means in a slot inside a computer and can control a series of operations for logging on to a network system in a contactless manner using an RF IC card. The present invention relates to a method of operating a computer system security device.

In general, a personal computer (PC) security system records a specific user password on an integrated circuit (IC) card, and reads the password entered by the keyboard and the password of the IC card when the PC is used. It is preventing access. And even after accessing the PC, removing the IC card from the card unit locks the keyboard and mouse so that the PC cannot be used.

In addition, in order for several people to share a PC, the user is registered in the memory of the PC security system, and the user's password is also recorded in the memory. In particular, the user cannot insert the IC card into the card unit and use it as a reader / writer of the IC card.

This can cause the following problems:

The first is a problem related to access control. By directly comparing the password stored in the IC card with the value entered by the user through the keyboard, there is a risk of theft, since a trace may be left in the memory of the card or the PC security system.

Second is the problem of locking / unlocking keyboard and mouse. That is, the PC security system always polls the user card to check whether it is a legitimate user or not, so that the performance of the system is degraded. It cannot be used as an IC card reader / writer. In addition, since the IC card must be read at all times, power must be supplied, which is a major cause of shortening the life of the IC card.

Third, as a matter of user registration management, in order to use it by multiple people other than the master who uses a PC, the IC card of another person is usually registered and used. By registering, the registered user's password is exposed.

Therefore, the above-mentioned problems are basically easy to access the information of the server related to the network logon operation, such as the risk of exposing the information inside each individual computer on the office or local area network (refer to FIG. 1) which is widely applied. Since it can be leaked, the existing method has been exposed as it is in the approval method related to the network log-on operation.

An object of the present invention for solving the above problems is to provide a computer with an RF receiving means in a slot inside the computer and to control a series of operations for a logon operation to a network system using a RF IC card in a contactless manner. The present invention provides a method of operating a system security device.

1 is an exemplary view for explaining a computer case security device according to the present invention

2 is a perspective view showing a lock device of a computer security device according to the present invention installed on a desktop computer

3 is an exemplary diagram for explaining a main board according to the present invention.

4 is a flowchart illustrating operations of the computer security device according to the present invention.

<Explanation of symbols for the main parts of the drawings>

10: CPU 11: BIOS Memory

12: Peripheral Device Control Module 13: ROM

14 I / O module 15 IC card reader

A feature of the method for operating a computer security device according to the present invention for achieving the above object is an IC card for forming a magnetic field in a predetermined area via an RF antenna and reading the user information stored in the contactless IC card via the magnetic field. Reading unit; And a server comprising a computer having storage means for storing user information approved for use, and a server storing unique IC information of each client computer. User information stored in the IC card when the user information having authority to use the system and a magnetic field formed in a certain area through the RF antenna in a non-contact manner by using a contactless IC card having an antenna and an IC chip embedded therein A first step of reading the normal user authorization by reading the information; A second process in which the computer operates normally when the user authentication of the first process is initially received by using the IC card; And after receiving the user authentication of the first process after the second process, converting the computer system to the network logon state.

The above object and various advantages of the present invention will become more apparent from the preferred embodiments of the present invention described below with reference to the accompanying drawings by those skilled in the art.

Hereinafter, exemplary embodiments of the present invention will be described with reference to the accompanying drawings.

2 is an exemplary diagram for explaining each client network computer system security apparatus according to the present invention, the security system of the computer system according to the present invention is characterized by using a contactless IC card, the IC card in FIG. A separate RF receiver called a reader is placed in a slot inside the computer and used to perform a system locking operation in the CPU of the motherboard.

That is, the RF antenna is connected to the IC card reading unit among components constituting the computer body enclosed by a dotted line, and is connected to the main board to perform a system locking operation, which is shown in FIG. As the configuration of the existing motherboard and the RF communication module are linked, when a user with an IC card storing a specific password approaches the IC card to the main body of the computer, the main board of the computer is connected to the network logon operation. Will perform the operation of.

At this time, when looking at the contactless IC card used in the present invention, typically the contactless IC card is manufactured by embedding the IC chip and antenna in a card form made of a material such as PVC, card reader (in the present invention of Figure 2 Each time it passes through the RF antenna and the attached IC card reader of FIG. 3, the card reader emits electromagnetic waves in the vertical direction of the antenna to form a magnetic field, which causes magnetic field induction. Through the antenna and the communication antenna, power and pulse signals are transmitted to the memory chip embedded in the card, and at the same time, a card reader generates a stored data processing command signal to process data input to the contactless IC card. Refers to the system.

FIG. 3 is an exemplary diagram for describing a connection configuration between a main board and an IC card reader of the computer system security apparatus according to the present invention. The BIOS memory 11 stores system initialization data related to computer booting. ), A ROM 13 storing a series of information related to computer operation (which may include information related to reading an IC card), and a peripheral device control module 12 for controlling peripheral devices such as a power switch. In addition, the I / O module 14 for performing data input / output with various devices constituting the computer system, and forms a magnetic field through the RF antenna at all times and converts the data induced by the formed magnetic field into digital data and outputs the digital data. The IC card reader 15 and the I / O module 14 and the peripheral device control module 12 based on the data stored in the BIOS memory 11 during the boot operation. This system performs a system boot operation and controls the system operation through the I / O module 14 and the peripheral device control module 12 according to a basic operating program stored in the ROM 13 during normal operation and reads the IC card. The data flowing through the unit 15 is compared with the data stored in the ROM 13 to determine whether the computer network log-on operation is executed, and the information of the IC card which has already been read when the network logon operation is executed is transferred to the server side. The CPU 10 is configured to perform a network logon approval operation on the server side.

At this time, the server side in FIG. 1 stores a password for performing a network logon operation for each client, that is, unique information according to the IC card reading, so that communication means such as a LAN card can be controlled by the CPU 10 in the client. The IC card receives information from the IC card and determines whether to use the previously stored data to approve the network logon operation.

Referring to FIG. 4 attached to this series of procedures, the computer system performs the magnetic field forming mode for non-contact IC reading through the process of step S101 in the standby power mode. At this time, the method of performing the process of step S101 is to turn on the IC card reader 15 shown in Figure 3 attached to the electromagnetic wave in the vertical direction of the RF antenna shown in Figure 2 attached to the magnetic field To form a magnetic field induction phenomenon.

At this time, in step S102 it is determined whether any user has accessed the contactless IC card according to the present invention and requested unlocking for use of the computer system, which reads randomly through the IC card reader 15. It is to determine whether data is generated.

If it is determined in step S102 that there is no data to be read, the process proceeds to step S101 again. If it is determined that there is data to be read, the process proceeds to step S103 to access the user information stored in the ROM 13.

At this time, the user information is the reference data for unlocking the system, which is only for the user of the corresponding system, that is, only one unique information is stored, so that only the corresponding IC card can be accessed and the installer is installed when installing the system. By a certain group of users can be distinguished.

The following description will be based on the recognition of only one user.

Therefore, there is only one user information accessed in step S103, and the corresponding information accessed in step S103 is compared with the data determined to flow in step S102 (S104).

If the data read from the IC card and the user information previously stored in the ROM 13 are not the same through the process of step S104, the flow advances to step S105 to proceed to the standby power mode while maintaining the system lock state. If the above-described operation is performed again and judged to be the same, the process proceeds to step S106.

In step S106, the normal on operation and the boot operation are performed to perform an operation for using the computer.

At this time, in step S106, the network logon operation is not performed, and only the operation of the individual computer system is performed.

Then, when the user using each client computer feels the necessity of a network logon operation, the IC card contact should be performed once again for the logon operation according to the network operation.

Accordingly, the computer system performs the magnetic field forming mode for the non-contact IC reading through the process of step S108 and the user accesses using the non-contact IC card according to the present invention through the process of step S109 to release the lock for use of the computer system. It is determined whether the request is made.

If it is determined in step S109 that there is no data to be read, the process proceeds to step S108 again. If it is determined that the data to be read exists, the flow proceeds to step S110 to access the user information stored in the ROM 13.

Therefore, the corresponding information accessed in step S110 is compared with the data judged to flow in step S109 (S111).

If the data read from the IC card and the user information previously stored in the ROM 13 are not the same through the process of step S111, the flow goes to step S105 to return the system lock state to the original state, that is, the standby power mode. If the processing proceeds to the above-described operation again and is determined to be the same, the process proceeds to step S112.

In step S112, the network logon approval request is transmitted to the server side, and the flow proceeds to step S113, when the approval of the network logon operation is denied on the server side, a normal logon operation is performed to the network using this.

While the invention has been shown and described in connection with specific embodiments thereof, it is well known in the art that various modifications and changes can be made without departing from the spirit and scope of the invention as indicated by the claims. Anyone who owns it can easily find out.

By providing a computer case security device according to the present invention that operates as described above, it is possible to perform user authentication using an IC card without using a conventional IC card reader that can only be used as one function, IC card By not reading through a reader, the life of the IC card is extended, and the contactless method has the effect of being convenient for the user.

In addition, there is an effect that the outsider without a computer license can not leak the information of the server in the network state.

Claims (1)

An IC card reader configured to form a magnetic field in a predetermined area through the RF antenna and read user information stored in the contactless IC card via the magnetic field; And a server comprising a server having storage means for storing user information approved for use, and a server storing unique IC information of each client computer. If the user has permission to use a computer system and a magnetic field formed in a certain area through the RF antenna in a non-contact manner using a contactless IC card in which an antenna and an IC chip are embedded, the data is stored in the IC card. A first step of reading the user information by reading the user information; A second process in which the computer operates normally when the user authentication of the first process is initially received by using the IC card; And a third step of switching the computer system to a network logon state when receiving the user authentication of the first step again after the second step.