KR20030013724A - Integrated single authentication service method in network environment - Google Patents

Abstract

PURPOSE: A method for an integrated single authentication service based on a network environment is provided to enable a user to connect to a corresponding site through only one authentication to an initially integrated single authentication system without an additional authenticating process. CONSTITUTION: An auto-proxy function is set by operating an integrated single authentication system(201). At this time, a specific URL wanted by a user for an integrated authentication is registered(202). If the user inputs a URL through a web browser(203), the integrated single authentication system checks a registration or not of the URL based on the auto-proxy function(204). If the URL is registered, the integrated single authentication system intercepts an HTTP(HyperText Transfer Protocol) packet(206). The integrated single authentication system checks whether a storage flag is set in the intercepted HTTP packet(207). If a storage flag is set in the intercepted HTTP packet, the integrated single authentication system checks whether an authenticated packet exists or not(208). If an authenticated packet exists, the authenticated HTTP packet is transmitted to a web server(212). If an authenticated packet does not exist, the HTTP packet is stored and transmitted to the web server(209). If an authentication is successful(210), the stored HTTP packet is stored as an HTTP packet authenticated in the corresponding URL(213).

Description

Integrated single authentication service method in network environment}

The present invention relates to the field of user authentication technology that provides an integrated single authentication service to a user in an Internet web environment. More specifically, the site is transparent to an Internet user without additional authentication procedures with the first successful single authentication. An integrated single authentication service method for enabling access and a computer readable recording medium having recorded thereon a program for realizing the method.

Conventional technology is a method for eliminating the inconvenience of having to input ID and password every time a user enters a registered site when using the Internet. A mandatory input item is displayed in a state where a login page is displayed. Automatically fills in the username and password fields and allows the user to click the Submit button to access and log in by analyzing the HyperText Markup Language (HTML) source code of the login site. Internet service that obtains and stores login data, name, ID, password, ID variable, password variable, login page Uniform Resource Locator (URL), etc. In this case, the login server transmits the login data.

In other words, as the Internet is now active, many sites require membership registration, and accordingly, users use the Internet through numerous authentication processes in one day. However, the burden of ID and password management causes personal security loopholes, and authentication through cookies, which many sites currently use, eliminates multiple authentications for the site, but at least once for the site. There is a hassle for the user to authenticate individually.

That is, conventionally, the user had to enter his or her ID and password every time a site requiring authentication. However, this may cause a great inconvenience for the user as the number of sites increases.

Although authentication schemes in Internet sites vary from site to site, at least a common aspect is that some packet information for authentication is passed at the time of authentication. Therefore, if a predetermined system has successful authentication information and automatically provides it when necessary, it will be convenient authentication. Here, the predetermined system should not affect the user's other Internet environment, and the contents of the service provided by the site should not be changed for automatic authentication. For example, if the first splash screen of the site is not visible due to automatic authentication, this would also be a limitation. This is because advertisements, announcements, etc. are presented on the first initial screen. Therefore, in consideration of the user and the operator, a method for transparently providing a single authentication is required so as not to affect the service provided without changing the user's Internet environment.

The present invention has been proposed to solve the above problems, and allows the user to authenticate the site that the user needs to authenticate to the first integrated single authentication system with only one authentication without additional authentication procedure. It is an object of the present invention to provide an integrated single authentication service method that enables access and a computer-readable recording medium that records a program for realizing the method.

1 is an exemplary configuration of an integrated single authentication service system to which the present invention is applied.

2 is a flow diagram of one embodiment of an integrated single authentication service method in accordance with the present invention.

FIG. 3 is a detailed flowchart illustrating an example of a processing process of inputting a URL after storing authentication information in the integrated single authentication service method according to the present invention. FIG.

* Explanation of symbols for the main parts of the drawings

11: web browser 12: integrated single authentication system

13: Web server to be authenticated

The present invention for achieving the above object, in the integrated single authentication service method in a network environment, the window registry portion of the user terminal so that the integrated single authentication system is only involved in the packet corresponding to the web address (URL) desired by the user Changing to set the integrated single authentication system as an auto-proxy; A second step of, upon web surfing, checking whether the integrated single authentication system has already registered the address of the web site based on an automatic proxy function; And a third step of the integrated single authentication system intercepting the packet of the registered web site and delivering authentication information corresponding to the web site to the web server according to the result of the second step. It is characterized by.

In addition, the present invention, the integrated single authentication system receives the packet after the successful authentication, and inserts a redirection code in the packet, so as to show the initial screen in the successful authentication state when connecting to the web site in the future It further comprises a fourth step to the made.

On the other hand, the present invention is to change the window registry portion of the user terminal so that the integrated single authentication system is involved only in the packet corresponding to the web address (URL) desired by the user under a network environment having a processor, the integrated single authentication system A first function of setting a to an auto-proxy; A second function of, upon web surfing, checking whether the integrated single authentication system has already registered the address of the web site based on an automatic proxy function; And in accordance with the verification result of the second step, the integrated single authentication system intercepts a packet of a registered web site and delivers authentication information corresponding to the web site to a web server for realizing a third function. A computer readable recording medium having recorded a program is provided.

In addition, the present invention, the integrated single authentication system receives the packet after the successful authentication, and inserts a redirection code in the packet, so as to show the initial screen in the successful authentication state when connecting to the web site in the future A computer readable recording medium having recorded thereon a program for further realizing the fourth function is provided.

The present invention seeks to resolve the authentication of a site that a user has to authenticate as a single authentication in the first integrated single authentication system. At this time, the user's environment should not be affected by the automatic authentication, and the information provided to the user should also be the same environment as without the automatic authentication.

To this end, the present invention uses an auto-proxy setting function, a login information interception function, and a redirection function.

Here, the auto-proxy setting function is a function for bringing a packet for a specific URL into an integrated single authentication system.

The login information interception function intercepts and stores the login information based on the auto-proxy setting function.

In addition, the redirection function is to show the user the first screen in the logged in state, not the screen after logging in.

Based on this function, the present invention allows an Internet user to transparently access the site without additional authentication procedure with the first successful single authentication. This provides users with better security and convenience in an Internet environment where more IDs and passwords and more frequent authentications are required.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary configuration diagram of an integrated single authentication service system to which the present invention is applied.

As shown in FIG. 1, the integrated single authentication service system provides a single integrated authentication service to a user in an Internet environment and displays a first screen in a logged-in state. The web browser 11 and the integrated computer are implemented on a user PC. It consists of a single authentication system 12 and an authentication target web server 13.

The integrated single authentication system 12 which provides integrated single authentication (automatic authentication) and the first screen upon login status between the web browser 11 and the web server 13 is implemented in various ways such as client, Java applet, plug-in, etc. There may be branches.

In order to provide a single integrated authentication service (automatic authentication service) to the user in the Internet environment and to display the first screen in the logged-in state, the integrated single authentication system 12 must be provided with the following functions.

First, there is a need for an auto-proxy configuration function that directs packets for a particular URL to the integrated single authentication system 12.

Second, based on the auto-proxy setting function, a login information interception function is required to intercept and store the login information.

A single authentication service (automatic authentication service) may be performed through the auto-proxy setting function and the login information interception function.

Third, a redirection function is needed to show the user the first screen in the logged in state rather than the screen after logging in.

The integrated single authentication system 12 intercepts only the packets related to authentication for the site desired by the user and maintains the information related to the authentication. Provide. Of course, the initial screen in the logged-in state of the site is shown. Looking at this in detail.

Since the integrated single authentication system 12 acts as an auto-proxy when connecting to the Internet through the web browser 11, auto-proxy occurs when Internet traffic corresponding to a URL registered in advance by the user occurs. It is to go through an integrated single authentication system (12).

The integrated single authentication system 12 is set as an auto-proxy, so that it only engages when the user wants to access the site. In order for the integrated single authentication system 12 to be an auto-proxy, it must be configured by touching a specific part of the Windows registry. This leads to the integrated single authentication system 12 only if the packet corresponds to the URL desired by the user.

In addition, the integrated single authentication system 12 intercepts and stores the login information. Therefore, the integrated single authentication system 12 stores the packet used when the authentication succeeds and automatically delivers it when accessing the URL (automatic authentication).

In addition, when the integrated single authentication system 12 receives the packet after the successful authentication from the web server 13, the integrated single authentication system 12 analyzes the HTML of the received packet, and sends the code for redirection back to the original site at the last stage. Insert it. This is not to show the next screen after successful authentication, but to show the initial screen of the site in the successful authentication state.

Looking at the auto-proxy setting function in more detail, in order for the integrated single authentication system 12 to be an auto-proxy, it is necessary to adjust the Windows registry value. That is, it adjusts the values of certain parts of the registry, saves the original values to a file in advance, and resets them back to the original registry part when auto proxy is turned off. At this time, the registry to be changed needs to be adjusted in the "Default Connection Settings" portion of "SOFTWARE / MicroSoft / Windows / CuurentVersion / InternetSettings / Connection" as a subfolder of the "HKEY_CURRENT_USER" folder. And, to find out the value that needs to be changed, manually enter the URL in the "Tools / Internet Options / Connections / LAN Settings / Use Automatic Configuration Script (S)" section and change the value of the part to be changed in the registry. "Regedit" to find out. Then, the value is changed by using the registry read / write function of window32API.

If most sites do not use auto-proxy and always use the proxy function such as S-HPPT, the page may appear broken. However, when using an auto-proxy, the above-described cracking phenomenon does not occur.

On the other hand, to look at the redirection function in more detail, to analyze the HTML and insert the JavaScript code, such as "location.herf = desired URL" in the next part of the execution location of the JavaScript SetCookie function. Here, the desired URL means a URL to which the user first attempted to connect. This URL value is already known to the client, so you can just insert it.

As described above, the integrated single authentication service system allows the Internet individual user to automatically log in without the need for multiple logins. Based on one successful login, all subsequent logins are automated due to the integrated single authentication system 12, which also provides a transparent environment and transparent services to the user. In other words, the integrated single authentication system 12 does not change the existing user's Internet environment, nor does it change the information obtained from the target site. As the number of sites that individual users have to log in in recent years, this integrated single authentication system 12 provides a lot of convenience and security for the user.

2 is a flow diagram of an embodiment of an integrated single authentication service method according to the present invention.

As shown in FIG. 2, in order to perform an integrated single authentication method, an auto-proxy function is set by first driving an integrated single authentication system (201). At this time, a specific URL for which the user wants integrated authentication is registered (202).

Then, when the user enters the URL through a web browser (203), the integrated single authentication system checks whether it is a registered URL based on the auto-proxy function (204), and if it is not a registered URL, the integrated single Processing is performed regardless of the authentication system (205), and if it is a registered URL, it intercepts the HyperText Transfer Protocol (HTTP) packet (206). In other words, since the integrated single authentication system is set as an auto-proxy and only engages when the user wants to access the site, it does not participate in any other site access.

Thereafter, after intercepting the HTTP packet of the registered URL, the integrated single authentication system checks whether the store flag is set in the intercepted HTTP packet (207), and if the store flag is not set, forwards the HTTP packet to the web server. If the storage flag is set (211), it is checked whether an authenticated HTTP packet exists (208). This is because the integrated single authentication system intercepts and stores the login information through the interception function.

As a result of the check, if the authenticated HTTP packet exists, the authenticated HTTP packet is transmitted to the web server (212). If the authenticated HTTP packet does not exist, the HTTP packet is stored and transmitted to the web server (209).

Next, it is checked whether the authentication is successful (210). If the authentication is successful, the stored HTTP packet is stored as an authenticated HTTP packet for the corresponding URL (213).

FIG. 3 is a detailed flowchart illustrating an example of a processing process of inputting a URL after storing authentication information in the integrated single authentication service method according to the present invention.

As shown in FIG. 3, in the integrated single authentication service method according to the present invention, when the URL is input after storing authentication information, the URL is input from the user through a web browser (301). Check whether the input URL is a registered URL (302), if it is a registered URL, intercept the HTTP packet (303), and pass the authentication information corresponding to the URL to the web server (304), HTTP packet from the web server Receive a response to (305).

Thereafter, a code for redirection to the original URL is inserted (306) in the received packet and transmitted to the web browser (307).

On the other hand, if the URL is not registered, the system is terminated.

That is, when a user attempts to access the user with the URL, the authentication related information is transmitted to the web server and automatic authentication is performed. Then, the direction change code is inserted into the packet received from the web server, and the cookie is set in the user's PC. Subsequently, when the first connection attempt is made according to the set cookie, the initial screen in the authentication state of the URL is moved.

The method of the present invention as described above may be implemented as a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes are possible in the art without departing from the technical spirit of the present invention. It will be apparent to those of ordinary knowledge.

As described above, the present invention enables the Internet individual user to automatically log in without the need for multiple logins, and based on one successful login, all subsequent logins are automated due to the integrated single authentication system, and also transparent to the user. It is effective to provide transparent and transparent services.

In other words, the present invention does not change the Internet environment of the existing user due to the integrated single authentication system, and does not change the information obtained from the target site. Increasingly, this integrated single authentication system can provide a lot of convenience and security to users.

Claims (6)

In the integrated single authentication service method in a network environment, A first method of setting the integrated single authentication system as an auto-proxy by changing the window registry portion of the user terminal so that the integrated single authentication system is only involved in packets corresponding to a web address (URL) desired by the user. step; A second step of, upon web surfing, checking whether the integrated single authentication system has already registered the address of the web site based on an automatic proxy function; And According to the verification result of the second step, the integrated single authentication system intercepts the packet of the registered web site and delivers the authentication information corresponding to the web site to the web server for automatic authentication Integrated single authentication service method in a network environment including a. The method of claim 1, A fourth step in which the integrated single authentication system receives the packet after the successful authentication and inserts a redirection code into the packet to show the initial screen in the successful authentication state when the corresponding web site is accessed later. Integrated single authentication service method in a network environment further comprising. The method according to claim 1 or 2, The integrated single authentication system, Login information intercepting and storing login information on the basis of the auto-proxy setting function and the auto-proxy setting function that allow a packet for a specific web address (URL) to come to the integrated single authentication system. A method for integrated single authentication service in a network environment, comprising: an interception function and a redirection function to show a user the first screen in the logged in state instead of the screen after logging in. The method of claim 3, wherein The third step, A fifth step of processing, regardless of the integrated single authentication system if the registered URL is not a registered URL, and intercepting a hypertext transfer protocol (HTTP) packet if the registered URL is a registered URL; After intercepting the HTTP packet of the registered URL, the integrated single authentication system checks whether the storage flag is set in the intercepted HTTP packet, and if the storage flag is not set, forwards the HTTP packet to the web server, and the storage flag is A sixth step of checking whether an authenticated HTTP packet exists if it is set; A seventh step of transmitting the authenticated HTTP packet to the web server if the authenticated HTTP packet exists, and storing and transmitting the HTTP packet to the web server if the authenticated HTTP packet does not exist. ; And An eighth step of, upon successful authentication at the web server, storing the stored HTTP packet as an authenticated HTTP packet for the corresponding web address (URL); Integrated single authentication service method in a network environment including a. Under a network environment with a processor, A first method of setting the integrated single authentication system as an auto-proxy by changing the window registry portion of the user terminal so that the integrated single authentication system is only involved in packets corresponding to a web address (URL) desired by the user. function; A second function of, upon web surfing, checking whether the integrated single authentication system has already registered the address of the web site based on an automatic proxy function; And A third function for the integrated single authentication system to intercept a packet of a registered web site and deliver authentication information corresponding to the web site to a web server according to the result of the checking of the second step for automatic authentication; A computer-readable recording medium having recorded thereon a program for realizing this. The method of claim 5, A fourth function in which the integrated single authentication system receives the packet after the successful authentication and inserts a redirection code into the packet to show an initial screen in the successful authentication state when the website is accessed later. A computer-readable recording medium that records a program for further realization.