KR20030072821A - System and Method for Buying & Issuing of the Internet Lottery ticket through the Certificate of Public Key Infrastructure - Google Patents

Abstract

PURPOSE: A system and a method for selling and issuing an online lottery ticket based on a certificate are provided to make a user buy and receive the online lottery ticket conveniently and safely by efficiently operating the business for buying and issuing the online lottery ticket without using the certificate. CONSTITUTION: A user terminal(210) includes a plug-in transmitting the information to a sales server(220) of a corresponding store. The sales server(220) of the stores processes the buying information and the user information when the user requests the online lottery ticket. A server of the stores transfers the buying information and the user information if the buying information is transferred from the plug-in of the user terminal(210). An issuing server(230) of an issuing company confirms the buying information and the user information from the sales server(220), and issues the online lottery ticket at the sales server(220) by including the online lottery ticket information and the user information. A database server(240) stores the buying information and the online lottery ticket information of the user.

Description

Certificate-based online lottery purchase and ticketing system and method {System and Method for Buying & Issuing of the Internet Lottery ticket through the Certificate of Public Key Infrastructure}

The present invention relates to a certificate-based online lottery purchasing and issuing system so that customers can use the online lottery more safely and conveniently and quickly.

With the development of digital communication technology and the development of computer communication, the use of the Internet has become more active than online information exchange. In addition, even in the method of purchasing the lottery, users have been provided with the service of applying for and issuing an online purchase. However, with the activation of the online lottery market through the Internet, there is a demand for a safe method of purchasing and issuing an online lottery and issuing a channel security method. Only is used.

Therefore, many online lottery issuers use only channel encryption in the process of purchasing and issuing online lotteries. Recently, the online lottery issuing and issuing systems are certificate-based encryption between issuing server and sales server. There is a problem that there is no way to prevent malicious use of the ticketing server and sales server because it does not use only the digital signature function.

In addition, the channel between the user and the sales server may cause a serious security problem because it does not provide a certificate-based encryption function, and some vendors that provide a certificate-based channel encryption do not provide a digital signature function. There is a problem that cannot provide confidence in the lottery buying behavior.

Therefore, online lottery companies have recently tried to introduce encryption and digital signature functions between all channels, which cannot be implemented by the user arbitrarily copying and transmitting the issued online lottery or presenting it to others for the issued online lottery. There is a problem that cannot be introduced.

The present invention has been devised to solve the above-mentioned conventional problems, and an object thereof is to provide a system and method for purchasing and issuing a certificate-based online lottery, which is more secure and convenient when purchasing and issuing an online lottery.

As mentioned above, the introduction of the function of digital signature is actively discussed in the situation where only encryption between channels is made. However, only the digital signature can be used to deny the user's purchase or to authenticate the user who copied or illegally purchased the online lottery. This problem has not been solved, and even if a user attempts to solve such a problem by using a certificate, there is an inconvenience of issuing a certificate for the purchase of an online lottery. Overloading the system puts a heavy burden on efficient system operation.

Accordingly, the present invention aims to build a system that enables users to efficiently operate the online lottery purchase and ticketing without using a certificate, and to solve the above problems by using the electronic lottery.

1 is a block diagram showing a data flow and the purchase application and issuance system of the existing online lottery,

2 is a block diagram showing a system and data flow provided with a certificate-based online lottery purchase service according to the present invention,

3 is a block diagram showing the configuration of an online lottery in the above system;

[Description of Symbols for Main Parts of Drawing]

110,210: Users buying lottery tickets online

120,220: A server in charge of an online lottery of a company that sells online lotteries, and provides an online lottery ticket issued from a ticketing server of an online lottery ticketing company.

130,230: a ticketing server of a company that sells online lottery tickets with actual lottery information, and performs ticketing of an online lottery ticket.

140,240: This is a DB server of a company that sells online lotteries, and stores online lottery information.

330: User information to buy an online lottery

340: It illustrates the fact that the digital signature is performed using the server certificate issued by the ticketing server that issues the online lottery.

As a means for achieving the above object of the present invention, the configuration of the digital signature certificate-based online lottery purchase and issuance system according to the present invention transmits key pair information and encrypted purchase information to the sales server and receives accordingly when the online lottery ticket is issued. It transmits the encrypted encrypted user information and purchase information to the ticketing server and stores it in the DB server of the ticketing server, and includes the user information in the online lottery by using the user information and purchase information as a ticketing means, and the certificate of the ticketing server. By using the real-time digital signature to be issued to the user through the sales server.

Accordingly, the components include a user terminal having a plug-in transmitted to a sales server of a corresponding retailer (in one embodiment, a PC), a sales server of a retailer that receives and processes purchase information when a user requests an online lottery, When the purchase information is transmitted from the plug-in of the user terminal (an embodiment: PC), the server of the retailer that delivers the user information together with the user information, the purchase information and the user information when the purchase request of the online lottery from the sales server of the retailer is requested. It is characterized in that it consists of a ticketing server of the ticketing company to issue an online lottery to the sales server of the retailer, including the online lottery information and the user information and the DB server for storing the user's purchase information with the online lottery information do.

In addition, the method for purchasing and issuing online lottery in the system includes requesting for issuance by sending online lottery purchase information from a user terminal (one embodiment: a PC) to a server of a retailer, and session with a sales server to send online lottery information. Generating and encrypting the key, transmitting the lottery purchase information and the user information received from the user to the ticketing server of the ticketing company, encrypting using a server certificate for transmission to the ticketing server, and purchasing from the sales server of the store Receiving request information and user information and storing the information together with the online lottery information in the DB server of the ticketing company, and performing the digital signature of the online lottery information including the received user information using the server certificate of the ticketing server. Issuing step, the sales server to deliver the issued online lottery to the sales server Encrypting with the ticketing server, receiving and transmitting the online lottery information transmitted by the issuing server of the ticketing company to the user, using the encrypted voting to transmit the online lottery to the user, Checking whether the digital signature is performed by using a plug-in of a user terminal (one embodiment: a PC), checking online lottery information issued by the issuing server, and storing the confirmed online lottery information. It features.

In the method of purchasing and issuing the online lottery, the step of verifying the electronic signature using a plug-in installed in the user terminal in the step of confirming and storing the online lottery on which the electronic signature was performed is omitted in consideration of user convenience. can do.

In addition, when the user wins an online lottery through the system, requesting a winnings from a store using an online lottery stored in a user terminal (in one embodiment, a PC), and checking the user information and the user stored together in the online lottery. Checking the online lottery information and the user's purchase application information stored in the DB server of the ticketing company, and paying the winnings by the payment means of the ticketing company or the vendor for the confirmed user; It is done.

The online lottery purchase and ticketing system proposed by the present invention checks the user's illegal online lottery for modifications and random changes by an electronic signature performed by the ticketing server of the ticketing company. Checking lottery information, user information, and purchase offer information provides a solution to any security incident that may occur.

In addition, by inserting a bar code in the step of issuing the online lottery by the above method, it is possible to provide convenient confirmation means and various means of use when the online lottery is distributed or winning.

Hereinafter, with reference to the accompanying drawings, the configuration and operation of the certificate-based online lottery purchase and issue system according to the present invention will be described in detail.

1 is a system configuration diagram of a company that generally issues online lotteries.

As shown in the figure, although the certificate-based encryption channel is maintained between the user terminal 110, the sales server 120, and the ticketing server 130, the lottery purchase information of the user 110 is encrypted to the sales server 120. Transmitting, encrypting and receiving the received lottery purchase information to the ticketing server 130, selecting encrypted lottery information from the DB server 140 based on the received lottery purchasing information, and transmitting it to the sales server 120 And transmitting the received online lottery ticket to the user 110.

The general online lottery purchase and issuance process consisting of these steps may allow arbitrary manipulation of the user 110 and the sales server 120 and forgery / modulation of the lottery information.

In order to solve this problem, even if the issuing server electronically signs the online lottery, the user 110 copies and distributes the normal online lottery to the online lottery that the sales server 120 randomly transmits or purchases to another user who has not purchased the online lottery. If you do not know the exact user of the online lottery purchased. If you issue a certificate to the user 110 and use the lottery purchase information and the user's certificate to perform an electronic signature, you can solve some of these problems, but add an inconvenient process of issuing a certificate to the user 110 to purchase the lottery. The online lottery ticketing company has to pay a lot of money to issue a certificate to the user, and in order for the user 110 to perform an electronic signature during the purchase process, it causes a lot of burden and overload on the online lottery purchasing and issuing system. do. In addition, there is a problem that the user 110 can not be protected from the anonymity of the fact that the online lottery purchase.

FIG. 2 is a schematic diagram illustrating a system block diagram and a data flow diagram of the present invention devised to effectively solve the above problems. In detail, the user 210 accesses the sales server 220 and makes a purchase request to purchase an online lottery, and encrypts the lottery purchase application information of the user 210 by using an encrypted channel. ), Transmitting the lottery purchase information together with the user information using the transmitted lottery purchase information to the ticketing server 230 by using an encrypted channel, and separating the provided user information and the lottery purchase information. Encrypting and storing the purchase information and the online lottery together in the DB server 240, and the ticketing server 230 performing the electronic signature together with the user information and the online lottery information to the sales server 220, and the user information. And transmitting the online lottery ticket to which the electronic lottery information has been digitally signed to the user 210, verifying and verifying the online lottery received by the user 210. And then storing.

In the system for purchasing and issuing the online lottery by the above-described method, the online lottery information and the user information are electronically signed together so that the user 210 illegally uses the online lottery through any forgery, forgery or copying. Prevent it. In addition, in the sales server 220, the user information is electronically signed together in the online lottery, and thus cannot be transmitted to another user or used arbitrarily.

This method is a method of constructing an online lottery using the existing system, which can be conveniently configured without burdening the online lottery purchase and ticketing system, and purchases an online signature by presenting an original method of electronic signature. And it can bring breakthrough stability and efficiency of ticketing system.

FIG. 3 is a block diagram illustrating a block diagram of an online lottery ticket distributed by [2] described above. The online lottery ticketed by applying for purchase has the advantage that it can be used like electronic money by circulating the electronic signature by using the certificate of the ticketing server 230 including the online lottery information and the user information, which are inherent parts of the online lottery. have.

At present, various business modems using the Internet have been proposed due to the rapid development of the Internet and the increase of users, and in the case of the lottery, the Internet lottery, which is purchased and ticketed through the Internet, has appeared.

However, in the form of purchase and ticketing of the online lottery currently used, there is a weakness in the security that can cause malicious operation and assertion about the online lottery of the store or the user due to the simple channel encryption or the execution of the electronic signature. Not only does it make it a stumbling block to buying lottery tickets, but it also incurs a great burden and economic damage to both the ticketing companies and the vendors of online lotteries.

The present invention solves these problems and presents effects that can solve not only economic profits but also problems related to the online lottery purchase for all the ticketing companies, vendors, and users of the online lottery.

To summarize the problems solved by the method proposed by the present invention in detail.

First, by performing certificate-based encryption, it performs stronger security than the channel encryption supported by simple browsers.In the case of issuing online lottery, the digital lottery is performed by using the certificate of the ticketing server. Can prevent modulation.

Second, by reducing the load of the online lottery purchase and ticketing system to provide a solution to a number of security vulnerabilities as described above, it enables effective system operation.

Third, malicious winnings of online lottery can be blocked in various ways. For example, an online lottery can be signed using a certificate of a ticketing server to verify whether it is a useful online lottery by verifying it and verify user information when signing the ticketing server. Finally, the user can confirm that the purchase request information of the online lottery and the information of the online lottery provided together when the user requests the purchase of the online lottery are encrypted and stored in the DB server of the online lottery ticketing company. By providing the verification process of 2-3, it has the effect of preventing malicious use by using the online lottery.

Fourth, by verifying and storing the online lottery with the e-signature while issuing the online lottery, the user can immediately check whether the online lottery is valid at the time of purchase, thus preventing accidents and providing the trust of the online lottery. Can be.

Fifth, online lottery ticket with electronic signature is circulated using the certificate of the ticketing server of the online lottery ticketing company, so that it can be distributed like electronic money, providing various service means related to online lottery ticketing. It suggests ways to receive many services.

As described above, the present invention ultimately presents an environment in which a stable service can be provided to a user who purchases an internet lottery, an online lottery vendor, or an online lottery ticket maker, and ultimately activates a business using the Internet. It is an opportunity to contribute to the economy.

Claims (4)

In the system constituting the ticketing of the Internet lottery, step 1 in which the user 201 requests an online lottery purchase application, the online lottery purchase application passes through the sales server 220, and the online lottery purchase application information and the user information are provided in the online lottery issuing server ( Step 2 is transmitted to 230, encrypted with the received online lottery purchase application information and online lottery information and stored in the server lottery server 240 of the online lottery ticketing company, step 3, ticketing with the received user information and online lottery information Step 4 of issuing and issuing an electronic signature using the certificate of the server 230, step 5 of receiving the ticketed online lottery using the sales server 220, step 5 of receiving the received electronic signature online Comprising the purchase and ticketing of the certificate-based online lottery, including the six steps of storing the lottery user 210 after verifying and confirming the online lottery Method and system. A method and system (310) for constructing an online lottery in which an electronic signature is performed using a certificate of a ticketing server by combining lottery information and user information, which is a lottery-specific part, in the construction of an internet lottery. Step 1 in which the user confirms the winning by the sales server 220 or another method (e.g., an email notification) by the user 210 to confirm the winning of the online lottery ticketed by claim 1, presented by the user. Step 2 of verifying the online lottery to verify that it is a valid online lottery, step 3 of confirming the user information and the user signed with the online lottery, online lottery ticket purchase information encrypted and stored in the DB server 240 of the online lottery ticketing company And check the winnings of the online lottery including four steps to check the lottery information. In the construction of the online lottery issued by the method or system according to claim 1, the user 201 inserts a barcode into the electronic signature data value of the online lottery, and stores the digital signature data of the online lottery using only the image of the barcode itself or the printed matter of the barcode. Method and system for verification.