KR20030022568A - Method and system for generating temporary identification and password and accessing web site by using the same - Google Patents

Abstract

PURPOSE: A method and system for creating a temporary ID(IDentification) and a password and connecting to a web site using the same is provided to connect to a predetermined web site through a communication network by creating and managing a temporary ID and password. CONSTITUTION: In a method for creating an ID and a password for using a plurality of web sites(110) in an agent(108) connected to a plurality of users(106) through a communication network interactively, the agent(108) receives at least one condition with respect to the users(106), respectively, for being used in creating IDs and passwords through the communication network. The agent(108) creates IDs and passwords corresponded to the condition with respect to the users(106), respectively. The condition is a kind, number of web sites, or user age. The agent(108) registers the created ID and password in a list being stored at a pre-set place. A use time limit is set in the ID and password, and the use time limit includes a use available period and a use available time.

Description

METHOD AND SYSTEM FOR GENERATING TEMPORARY IDENTIFICATION AND PASSWORD AND ACCESSING WEB SITE BY USING THE SAME}

The present invention relates to a method and system for accessing a web site via a communication network, and more particularly, to generate and manage a temporary ID and a password. A method and system for accessing a web site.

Recently, due to the rapid development of communication technology, a user can easily obtain desired information through a communication network called the Internet. When using the Internet for the purpose of obtaining useful information or communicating with a certain class, for this purpose, the user subscribes as a member to a website providing such information and services.

However, when you sign up as a member of a website, you must enter sensitive information related to your personal privacy, such as information about yourself, such as your ID, password, name, social security number, address, email address, or credit card number. do. In such a case, the user's personal information may be leaked and stolen and used for criminal purposes, regardless of the user's intention. In addition, in the case of registering as a member in a plurality of web sites, the user is inconvenient to use each site only by remembering all of the plurality of IDs and passwords.

Therefore, there is a need for a method and system for creating and managing temporary IDs and passwords used by a user to access a website so that the user can access the desired website without disclosing his or her information.

Accordingly, an object of the present invention is to provide a method and system for generating and managing a temporary ID and password, and for a user to access a desired web site through a communication network using the same. It is done.

According to a feature of the present invention, in a system in which an agent including a database and a database engine, a plurality of users, and a plurality of web sites are interconnected through a communication network, each of the plurality of users uses a plurality of temporary IDs and passwords. A method is provided for accessing at least one of the web sites of. This method comprises the steps of: a) the agent receiving an authentication request for the user's temporary ID and password from at least one of the web sites at which the user attempts to log in, and b) the agent via the database engine on the database. Retrieving the temporary ID and password of the user who has been authenticated from the list of temporary IDs and passwords stored in the server; and c) whether the agent has a valid temporary ID and password of the user who has been authenticated based on the search result of step b). (D) determining whether the user's temporary ID and password are valid as a result of the determination of step c), and providing the authentication result of the user's temporary ID and password to the web site requested by the agent, and e) And in response to the authentication result, the web site permits the user to log in.

According to another feature of the invention, a system is provided for generating a temporary ID and password and for a user to use it to access a desired website. The system includes an agent for generating a temporary ID and password, and a communication network for connecting agents, users, and web sites. The agent is implemented on a computer readable medium, a database engine for storing temporary IDs and passwords, a database engine for classifying, retrieving, and reading data stored in the database, and on a computer readable medium. It is implemented as a web server equipped with a processing engine for processing the process of accessing a web site using a temporary ID and password.

1 is a view for explaining the concept of a method of creating a temporary ID and password and accessing a web site using the same according to the present invention.

2 is a schematic block diagram of a system for a user to access a desired web site using a temporary ID and password in accordance with the present invention.

3 is a flow chart illustrating a process of issuing an ID card including a temporary ID and password in accordance with the present invention.

4A and 4B are flowcharts for explaining a process in which a user connects to a desired web site using a temporary ID and password.

<Description of the symbols for the main parts of the drawings>

102: Seller

104: machine

106: user

108: agent

110: web site

Now, embodiments of the present invention will be described in detail with reference to FIGS. 1 to 4B.

First, FIG. 1 is a diagram illustrating a concept of a method of generating a temporary ID and password and accessing a web site using the same according to the present invention. First, the seller 102 requests the agent 108 to generate and authenticate a temporary ID and password for sale to the user 106 (T100). The seller 102 includes stores that the user 106 can easily use in their daily lives, such as existing convenience stores, supermarkets, lottery offices, etc., and the agent 108 provides a temporary ID and password for sale to the user 106. Function to create and manage. Detailed description thereof will be described later with reference to FIGS. 3 to 4B.

In response to the seller 102's request, the agent 108 generates a temporary ID and password for which the usage period is set, registers in a list stored at a predetermined place, and then gives the seller 102 the temporary ID and password. Transmit (T110). In this case, the temporary ID and password may be newly generated by an ID & password generation engine provided in the agent 108, or a temporary ID and password previously generated and stored in a predetermined place of the agent 108 may be used. . The seller 102 then transmits (T120) the temporary ID and password received from the agent 108 to the issuer 104, for example in the form of an ID card, and sells it to the user 106 (T130). Here, the ID card may be manufactured in a form in which a portion where the temporary ID and password are printed is coated with an opaque material, such as a form of instant lottery which is widely used.

In the process of selling to the user 106, the seller 102 can identify and sell the age of the user 106, thereby limiting the websites that can be accessed according to the age of the user 106. In detail, when the seller 102 provides the agent 108 with information such as the age of the user 106, the agent 108 is associated with an affiliated web site, i.e., created if the age of the user 106 corresponds to a minor. By sending a temporary ID and password, which is not accessible to an age-restricted web site among the web sites that can be accessed with a temporary temporary ID and password, to the seller 102, access to the harmful web site is made when the user 106 is a minor. Limiting effect can be obtained.

The user 106 purchases an ID card including a temporary ID and password, and then attempts to log in to a desired desired website 110 using the temporary ID and password (T140). The website 110 then requests the agent 108 to authenticate the temporary ID and password used by the user 106, and the agent 108 responds in response to the authentication or non-authentication of the temporary ID and password. It transmits to the web site 110 (T160). According to the authentication result, the web site 110 determines whether to permit access to the user 106 (T105).

According to one embodiment of the present invention, the seller 102 and the agent 108 may be the same subject, in which case it will be understood by those skilled in the art that transactions T100 to T120 are not needed. Further, according to another embodiment of the present invention, the seller 102, the agent 108, and the web site 110 may be implemented in one unit, in which case the above-described transactions T100 to T130 and transaction T160 It will be done in the integration.

2 shows a schematic system for a user 106 to access any desired web site 110 using a temporary ID and password on an ID card purchased from a seller 102. As shown in FIG. 2, the system 200 is comprised of users 106, merchants 102, multiple websites 110, and agents 108 interconnected via a network 204, where Multiple web sites 110 will be referred to simply as web sites 110 for ease of explanation below.

The agent 108 is composed of a web server 210, a database engine 220, and a database 230. The web server 210 controls the database engine 200 and the database 230 to process the generation and authentication of temporary IDs and passwords performed by the agent 108, and to process data and transactions associated with them. processing engine) (not shown). The database engine 220 performs a function of systematically separating data, storing the data in the database 230 and managing the data according to an instruction from the web server 210, and executing a program on a computer-readable medium. It is implemented in the form of. In FIG. 2, the web server 210 and the database engine 220 are shown as separate, but this is exemplary and the present invention is not limited thereto, and those skilled in the art will appreciate that the database engine 220 may be installed on the web server 210. It will be appreciated that it can be implemented.

The database 230 is divided into an access time database 232, a temporary ID and password database 234, a user account database 236, a billing database 238, and an affiliate web site database 240. The access time database 232 stores data such as the time when the user 106 logs in to a desired web site 110 and starts a session and ends. The temporary ID and password database 234 stores a list of temporary IDs and passwords that are in use or are in use, and are divided according to the types of web sites to which the user 106 can access. That is, temporary IDs and passwords are classified and stored according to generation conditions such as types of sites (e.g., education, shopping, entertainment sites, etc.) that can be accessed when generating temporary IDs and passwords, and usage amounts.

The user account database 236 is a database that stores data on the available amount of the ID card purchased by the user 106. When the temporary ID and password of the user 106 are authenticated by the agent 108, the user ( 106) An account is created for each and the aforementioned data is stored. When a user 106 accesses a web site and pays a fee for it, the fee is deducted by the agent 108 from the account of each user 106 and paid to the web site. The billing database 238 is a database that stores billing data for the user 106 received from each of the web sites to which the user 106 can access, ie, each of the affiliate web sites. As described above, the agent 108 pays the use amount on behalf of the user 106 to the affiliated web site based on this data.

In detail, the agent 108 receives the charging data for the user 106 from the website 110 and, in response, an amount corresponding to the charging data in the account of the user 106 stored in the user account database 236. The payment may be made to the web site 110 in real time. Alternatively, agent 108 may make a payment for user 106 on a predetermined payment date with web site 110. In this case, the agent 108 stores the user billing data in which the billing data from the web site 110 is classified for each user in the billing database 238, and then, based on the user billing data on the preset settlement date, 110 can be paid. The payment process as described above, i.e., the real-time payment and the payment process of a predetermined payment date, can be implemented using conventionally well-known processes.

The affiliate web site database 240 is a database that stores a list of web sites available to the user 106. The affiliate web site database 240 is classified into, for example, education, shopping, and entertainment sites according to the contents of the web site.

The network 204 is a communication network that interconnects the website 110, the user 106, the seller 102, and the agent 102, and is a wired / wireless communication network including a conventional wired / wireless internet.

3 is a flowchart illustrating a process of issuing an ID card including a temporary ID and password according to the present invention.

First, in step S302, the agent 108 receives a request for the generation and authentication of a temporary ID and password to be included in the ID card to be sold from the seller 102. At this time, the conditions for generating the temporary ID and the password to be generated are received together. In detail, the user 106 may purchase an ID card that can access all websites 110 associated with the agent 108, whereas the user 106 may only purchase the website 110 to which he or she wishes to connect. You can also buy an ID card. As such, when the user 106 selects a web site that the user 106 wants to access from the affiliated web sites, information such as the age of the user 106 as well as information on the number of selected web sites becomes a condition for generating the web site. Therefore, the selling price of the ID card varies according to the number and age of web sites selected by the user 106, and it is possible to limit the web sites to which the user 106 can access. In addition, the available amount determined by the user 106 may be further included in the above-described generation condition.

In step S304, the agent 108 retrieves from the temporary ID and password database 234 in the database 230 for a temporary ID and password that meet the received generation conditions. That is, when the agent 108 receives a generation and authentication request from the seller 102, the agent 108 may randomly generate a temporary ID and password, but the temporary ID and password that have been generated and used previously but can be reused now. You can also search for and use. This has the advantage of reducing the amount of data stored in the database 230 while speeding up the overall process by effectively responding to authentication requests from affiliated web sites. However, it should be noted that the present invention is not limited to this, and as described above, a temporary ID and password can be newly generated for each generation and authentication request.

In step S306, the agent 108 determines whether to newly generate a temporary ID and password based on the search result in step S304. If the result of the determination in step S306 is affirmative, i.e., newly generating a temporary ID and password, the process according to the present invention proceeds to step S310. In step S310, the agent 108 generates a temporary ID and password corresponding to the generation condition received from the seller 102 through the ID & password generation engine provided therein, and then proceeds to step S312. This ID & password generation engine can be implemented with a commonly used random number generating program.

On the contrary, if the determination result in step S306 is negative, that is, an existing temporary ID and password matching the generation condition are retrieved, the process according to the present invention proceeds to step S308. In step S308, the agent 108 selects one of the retrieved temporary ID and password and then proceeds to step S312.

In step S312, the agent 108 transmits the temporary ID and password newly generated in step S310 or selected in step S308 to the seller 102 and performs authentication thereon. Then, as in FIG. 1, the seller 102 issues an ID card containing these temporary IDs and passwords through the issuer 104 and sells them to the user 106.

In step S314, the agent 108 registers the temporary ID and password sent to the seller 102 in the list of the temporary ID and password database 234 and classifies them as currently in use, and then all processes according to the present invention. To exit.

4A and 4B show flowcharts for explaining operations performed on the agent 108 side in the process of accessing the desired web site by using the temporary ID and password on the ID card purchased by the user 106. .

First, in step S402 of FIG. 4A, the agent 108 receives an authentication request for a temporary ID and password that the user 106 uses to attempt to log in from the server of the web site 110. The website 110 is a site that is affiliated with the agent 108, where the temporary ID and password used by the user 106 to log in are managed by the website 110 itself, If it is not a password, ask the agent 108 for authentication. This temporary ID may be easily distinguished from a member ID managed by the server of the website 110 itself, for example, starting with a predetermined character between the agent 108 and the website 110 (eg, , "** ...").

In step S404, the agent 108 retrieves the temporary ID and password requested for authentication based on the list on the temporary ID and password database 234 via the database engine 220.

In step S406, the agent 108 determines whether the temporary ID and password requested for authentication are valid based on the determination result in step S404. If the determination result in step S406 is negative, i.e., the temporary ID and password are not on the list or the expiration date has expired, the agent 108 proceeds to step S408 to inform the server of the web site 110. After notifying of authentication, the process proceeds through tap B of FIG. 4A to terminate all processes according to the present invention.

On the contrary, if the determination result in step S406 is affirmative, that is, the temporary ID and password are registered and available on the list, the agent 108 proceeds to step S410 and the server of the web site 110. Authenticates the temporary ID and password as valid. In this step, the agent 108 also allows the user 106 to access the website 110 such as the available time of the temporary ID and password authenticated to the server of the website 110, that is, the remaining usage time and the available amount. Provide additional information needed to use the information provided by).

In step S412, the agent 108 receives, from the server of the web site 110, the session start time of the user 106 logged in using the authenticated temporary ID and password, and billing data thereof. The database engine 220 classifies and stores it in a corresponding database among the access time database 232, the user account database 236, the billing database 238, and the affiliate site database 240 of the database 230. .

In step S414, the agent 108 receives report data periodically from the server of the corresponding website 110 to continuously monitor the site access time of the user 106 and the charging state thereof. do. This report data includes data associated with the connection status of the user 106, billing data for usage information, and the like.

In step S416, the agent 108 determines the time of invalidation of the temporary ID and password of the user 106 based on the monitoring result in step S414. If the result of the determination in step S416 is negative, i.e., the temporary ID and password of the user 106 can still be used, the process according to the present invention returns to step S414. On the contrary, if the determination result in step S416 is affirmative, that is, it is time to invalidate the temporary ID and password of the user 106, the process according to the present invention is performed through the tab A of FIG. 4A (S418) of FIG. 4B. Proceed to

In step S418, the agent 108 extends and / or extends the expiration date (eg, available time and / or available period) of the temporary ID and password in use from the user 106 and the available amount associated therewith. It is determined whether there is an additional request based on the request received from the server of the web site 110. Here, extending the expiration date means the use of a temporary ID and password of an ID card currently using a preset expiration date of an ID card previously purchased but not used in addition to the ID card already used by the user 106. To add up to the deadline.

In detail, when the user 106 purchases a plurality of ID cards and logs in to the website 110 using a temporary ID and password on one of these ID cards, when the user expires, Enter a new temporary ID and password on another purchased ID card without logging out of the website 110 and add the corresponding preset expiration date to the expiration date of the current temporary ID and password. To extend. Similarly, a preset available amount of money can be added to the temporary ID and password in use in the manner described above.

At this time, the agent 108 transmits data such as the expiration date and / or the available amount limit to the user 106 through the server of the corresponding website 110 so that the user 106 may request an extension and / or additional request. Do it. If the determination result in step S418 is affirmative, that is, if the user 106 makes an extension and / or an addition request, the agent 108 proceeds to step S420 to check the server of the web site 110. After the user 106 receives the newly input temporary ID and password, the process proceeds to step S422.

In contrast, if the determination result in step S418 is negative, that is, there is no request for extension and / or addition from the user 106, the agent 108 proceeds to step S428 to determine the status of the user 106 currently in use. The temporary ID and password are invalidated and the data associated with it is updated, and then the process proceeds to step S430. In step S430, the agent 108 notifies the server of the web site 110 where the user 106 has logged in, notifying the temporary ID and password invalidation of the user 106, and then terminates all processes according to the present invention. Then, the server of the website 110 will disconnect after notifying the user 106 that it can no longer provide the information.

In step S422, the agent 108 determines whether the temporary ID and password newly input by the user 106 are valid based on the list in the temporary ID and password database 234 of the database 230. If the determination result in step S422 is negative, that is, the temporary ID and password entered by the user 106 are not valid, the agent 108 proceeds to step S428 and performs the process as described above. Alternatively, if the determination result in step S422 is affirmative, that is, the temporary ID and password input by the user 106 are valid, the agent 108 proceeds to step S424.

In step S424, the agent 108 updates the database 230 with data associated with the temporary ID and password of the user 106 via the database engine 220.

In step S426, the agent 108 transmits the data updated in step S424 to the server of the corresponding website 110, and then returns to step S414 of FIG. 4A through tab C, as described above. Perform the action.

As described with reference to FIGS. 1-4B, agent 108 is shown and described as separate from web site 110, although one of ordinary skill in the art would appreciate that agent 108 may be implemented as part of web site 110. I can understand enough. Thus, each web site 110 has the function of an agent 108 so that the user 106 does not have to register personal information and register as a member in order to use the information provided by the web site 110. Obviously, it is possible to connect using a temporary ID and password according to the present invention.

While the invention has been described and illustrated through preferred embodiments, it will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the appended claims.

As described above, according to the present invention, a user can access a web site that provides desired information without exposing personal information. In other words, since the information provided by the web site can be used without providing the web site with the information related to the user, there is an effect that can fundamentally block the leakage of personal information, which is a serious social problem. In addition, when selling ID cards, by checking and selling the user's age, such as conventional alcohol and tobacco, there is an effect that can block minors from harmful sites.

In addition, the user can access the desired site by using a temporary ID and password purchased without having to remember the ID and password for each site individually, thereby avoiding the inconvenience of having to store and manage multiple IDs and passwords. There is an effect that can be solved.

Moreover, since the usage amount limit of the ID card including the temporary ID and password can be determined, there is an effect that the user can not use the paid site indiscriminately.

Claims (16)

Claims [1] A method for generating an ID and password for use of a plurality of web sites in an agent interconnected with a plurality of users through a communication network. a) the agent receiving at least one condition for each of the plurality of users used to generate an ID and password via the communication network; b) the agent generating an ID and a password for each of the plurality of users corresponding to the condition Including, The condition may include at least one of a web site type, number, and user ages that each of the plurality of users wants to access. The method of claim 1, c) the agent further comprising registering the generated ID and password in a list stored in a predetermined place. The method of claim 1, The generated ID and password have a preset expiration date, and the expiration date includes at least one of a usable period and a usable time. The method of claim 3, wherein And the agent is provided on the plurality of web sites. Agents, including databases and database engines, multiple users, and systems where multiple websites are interconnected through a communication network, each of the multiple users using a preset ID and password A method of accessing at least one of the plurality of web sites, a) the agent receiving an authentication request for the user's ID and password from at least one of the web sites at which the user attempts to log in; b) the agent retrieving the ID and password of the user who has been authenticated from the list of IDs and passwords stored on the database through the database engine; c) the agent determining whether the ID and password of the user who has been authenticated are valid based on the search result of step b); d) if the ID and password of the user are valid as a result of the determination of step c), the agent providing the authentication result of the ID and password of the user to the web site requesting authentication; e) in response to the authentication result, the web site permitting the user to log in Connection method comprising a. The method of claim 5, Step d), d1) the agent providing data associated with the user's ID and password to the web site requesting authentication; d2) if the ID and password of the user are invalid as a result of the determination of step c), the agent notifies the website requesting authentication of the impossibility of authenticating the user's ID and password; Connection method comprising a. The method of claim 6, f) the agent periodically receiving report data from the web site to which the user has logged in, and g) the agent determining the invalidation time of the ID and password of the user based on the report data; h) when the determination result of step g) indicates that the user's ID and password are to be invalidated, the agent notifies the user of the invalidation time through the web site; i) determining, via the web site, whether the user attempts to log in with a new ID and password in response to the notification of invalidation time; j) when the user attempts to log in with the new ID and password as a result of the determination of step i), the agent sets a preset expiration date of the ID and password previously logged in by the user to the new ID and password; Steps to Replace Passwords with Preset Expiration Dates Connection method further comprising. The method of claim 7, wherein Step j) is, j1) if the user does not respond to the invalidation timing notification as a result of the determination of step i), the agent invalidates the ID and password of the user and notifies the web site thereof; j2) the agent resetting the expiration date of the invalidated ID and password to register in the ID and password list Including, The expiration date includes at least one of a usage period and a usage time. The method of claim 7, wherein Step j) is, j3) when the user tries to log in with the new ID and password as a result of the determination of step i), the agent repeats steps b) to d) Connection method comprising a. The method of claim 9, The data associated with the user's ID and password is a preset available amount of the user, wherein the preset available amount is used by the agent in step g). The method of claim 10, The preset available amount of money is summed with the new available amount in step j). The method of claim 11, The agent is provided on the plurality of web sites. In a system for generating an ID and password with a preset expiration date and for a user to use it to access a desired desired website, An agent for generating an ID and password for which the expiration date is preset; Communication network for connecting the agent, the user, the web site to each other Including, The agent, A database for storing data relating to the ID and password for which the expiration date is preset; A database engine implemented on a computer readable medium for classifying, retrieving, and reading the data stored in the database; A web server embodied on a computer readable medium and equipped with a processing engine for processing the process of the user accessing the web site by using the predetermined ID and password. System comprising. The method of claim 13, The database, A first portion storing data associated with the time the user logged in to the web site; A second portion for storing the data relating to the ID and password for which the expiration date is preset; A third portion storing charging data from the web site for the user System comprising. The method of claim 13, The processing engine, A first code segment for retrieving the ID and password of the user attempting to log in to the web site from the data stored on the database via the database engine; A second code segment for determining whether the ID and password of the user are valid based on the search result; A third code segment for providing an authentication result for the ID and password to the web site requesting authentication System comprising. The method of claim 15, The agent is provided on the web site.