KR20030091908A - A method for getting access to database permitting user's access using smart card and temporary IP - Google Patents

Abstract

PURPOSE: A method for accessing an internal database permitting the user access by using a smart card and a temporary IP(Internet Protocol) is provided to enable a user knowing the temporary IP to access the database of an organization engaging the user through the Internet by allotting the temporary IP to the database and opening the database. CONSTITUTION: The data for a license/qualification of the user is transmitted to a certification organization through a user terminal(100). The certification organization searches and certifies the validity of the license/qualification data(110). The certification data for the license/qualification is transmitted to the engaged organization. The organization receives the certification data and generates the random temporary IP by using an IP generator. The temporary IP is transmitted to the certification organization and a gate system, and the gate system stores the temporary IP(120). The certification organization transmits the temporary IP to the user terminal. The user terminal is connected with the gate system through the Internet by inputting the temporary IP to the user terminal(130).

Description

A method for getting access to database permitting user's access using smart card and temporary IP}

The present invention relates to a method of accessing a database of affiliated organizations that allow users to access smart cards and temporary IPs. In more detail, a licensee / qualified person who works at a certain affiliated organization, such as a doctor, belongs to another affiliated organization. In order to access the database, the first step is to verify the identity from a third party, and after the real license / qualification has been authenticated, the organization creates a temporary IP address and then authenticates it. The certificate authority transmits the received temporary IP to the authenticated user through the Internet, and the smart card and the temporary license permit the licensee / qualifier to access the organization's database through the temporary IP. It is about how to access affiliated organization database using IP.

For example, conventionally, medical-related data is operated in a state where data stored in one institution is not shared with other institutions. For example, if a patient using the Seoul Central Hospital is treated at a general hospital in Busan, he or she directly visits the Seoul Central Hospital to obtain the data obtained from the Seoul Central Hospital. I had to ask. In this case, the patient had to come to Seoul from Busan by means of trains, planes, and other means of transportation. In addition, many patients were inconvenient and expensive because they obtained their medical data through complicated procedures of the hospital.

In addition to the examples mentioned above, there have been many studies on how to share data using the Internet among institutions, but have not found a sharp solution.

The present invention has been made to solve the above problems, the main object of the present invention is to be authenticated from the certification authority whether the user is the holder of the actual license / qualification, and the DB access of the authority allowed to access the user by the authentication and Utilization.

When a user attempts to access a specific database of a related organization on the Internet using a temporary IP provided by the belonging organization, the belonging organization assigns a temporary IP to the corresponding specific database of the belonging organization, and the database having the temporary IP The purpose of the present invention is to provide a method of accessing a database of affiliated organizations using a smart card and a temporary IP that allows a user who knows the temporary IP to access a specific database of the affiliated organization through the Internet using the temporary IP.

In order to achieve the above object, the affiliated organization database access method on the Internet according to the present invention comprises the steps of: transmitting data on the license / qualification of the user through the user terminal 30 to the certification authority (40);

Verifying and authenticating data of the license / qualification by the certification authority (40);

If the certification authority 40 authenticates that the data on the license / qualification is true, transmitting the authentication data on the license / qualification to the affiliated organization 10 to which the user belongs;

Receiving, by the affiliated organization (10), the authentication data and generating a random temporary IP using an IP generator;

Transmitting the temporary IP to a gate system of the certification authority and the affiliated organization, and storing the temporary IP in the gate system;

Transmitting, by the certification authority, the temporary IP to the user terminal (30); And

Inputting the received temporary IP into the user terminal 30 and connecting the user terminal 30 and the gate system 15 storing the temporary IP to the Internet; Including,

The gate system 15 is connected to the database of the affiliated organization 10, characterized in that it can transmit and receive data,

The user terminal is connected to the card input and output to transmit and receive data, characterized in that the card reader can read the data stored in the smart card of the user,

The smart card is divided into a storage area for storing the user's license and qualifications, and a storage area for storing temporary IPs.

Features, advantages, preferred embodiments, etc. of the present invention will be described in detail below with reference to the accompanying drawings.

1 is a diagram illustrating an overall system configuration for explaining a method of accessing an affiliated organization database using a smart card and a temporary IP on the Internet according to the present invention.

2 is a flow chart of a method of accessing the affiliated organization database using a smart card and temporary IP on the Internet according to the present invention.

3 is a block diagram showing an example of the configuration of the gate system according to the present invention and the connection state between the database of the affiliated organization.

4 is a block diagram showing another example of the configuration of the gate system according to the present invention and the connection state between the database of the affiliated organization.

** Description of the symbols for the main parts of the drawings **

10: institution 15: gate system

30: user terminal 40: certification authority

1 is an overall system configuration for explaining a method of accessing the affiliated organization database on the Internet according to the present invention.

Referring to Fig. 1, a method of accessing an affiliated organization database on the Internet according to the present invention will be described. A user using the present invention is defined as a doctor belonging to the affiliated organization 10. Affiliation (10) is defined as university hospital A. The user defines that he or she has limited or unlimited access to medical-related data stored in the database of his / her affiliated organization (10). The data access area and range of the user are determined by the affiliated organization (10).

The affiliated organization 10 is provided with a plurality of databases 12, which store medical-related data and data to which a user has permission to access and use. The plurality of databases 12 are each connected to a gateway 15 which serves as a passage through which data can be inputted and outputted through the Internet. The gateway 15 of the present invention has areas for storing an IP address temporarily assigned by the affiliated organization 10, and respective areas in which each temporary IP is stored are connected with a respective database 12, respectively. Different temporary IPs can be accessed by external clients on the Internet.

For example, if a user who knows the temporary IP from the outside attempts to access the database 12 of the affiliated organization 10 by using the Internet, the temporary IP can be entered by using his terminal.

The other institution 20 according to the present invention is an institution to which the user does not belong and is defined as university hospital B, and the other institution 20 does not have authority to access the database of the affiliated organization 10 through the Internet in principle. . In addition, a user belonging to the affiliated organization 10 is defined in principle so as not to be able to access the database of the affiliated organization 10 using the computer system of the other organization.

The user terminal 30 according to the present invention serves to receive a temporary IP through which the user can access the database 12 of the affiliated organization 10 from the affiliated organization 10 through the certification authority 40. In addition, the user may access the database of the affiliated organization 10 by inputting the temporary IP into the user terminal 30.

The user terminal 30 according to the present invention is connected to a smart card input / output device 32 that reads data stored in the user's smart card 35 and also stores data on a chip of the smart card. The doctor has a smart card 35. The smart card 35 of the present invention has a chip composed of a ROM and a RAM capable of storing data. In the ROM, a user's license / qualification number, personal information, and the like are recorded, and a temporary IP is stored in RAM, and a temporary IP is read through the smart card input / output device 32 and sent to the user terminal 30. To allow the user terminal 30 to access the database 12 with the temporary IP.

Certification authority 40 according to the present invention serves to authenticate whether the user has a legitimate authority to access the affiliated organization (10). In the case of a valid qualification or authority for a user, the certification authority 40 has its own database 42, and information about all users is stored in the database 42. (32) inputs the user's smart card (35) and password and sends a signal to the certification authority (40) to request an authentication request for his / her qualification or legitimate authority, and the certification authority (40) searches the information in its database. The user's qualification or legitimate authority is reviewed and a response signal is sent to the user terminal 30. When the user's legitimate doctoral qualification or legitimate authority is authenticated, data on this authentication result is transmitted to the affiliated organization 10.

In addition to the above method, upon receipt of a signal from the user or another organization 20 from the user or another organization 20, a signal of the authentication request for the user's qualification or legitimate authority to access the database 12 of the affiliated organization 10, (10) sends a confirmation request signal thereof, and after receiving the request signal, the affiliated organization (10) examines the data of the user, and then sends a response signal regarding the qualification or legitimate authority of the user to the authentication authority ( 40, the authentication authority 40 may send a response signal to the user terminal 30 based on this response signal. When the user's legitimate doctoral qualification or legitimate authority is authenticated, data on this authentication result is transmitted to the affiliated organization 10.

In each of the above cases, the affiliated organization 10 receives data on the user's pseudo-certification from the certification authority 40, when authentication of the user's pseudo-qualification is made from the certification authority 40, The IP generator 11 randomly extracts the temporary IP and transmits the temporary IP to the authentication authority 40. The authentication authority 40 transmits the received temporary IP to the user terminal 30 to send the temporary IP to the smart card 35. To be stored in RAM.

Temporary IP temporarily granted by the affiliated organization 10 according to the present invention means that the user has a legitimate authority to access the database 12 of the affiliated organization 10. Is an Internet address transmitted from the affiliated organization 10 to the user terminal 30 only when it is confirmed by the confirmation signal of the affiliated organization 10, or the user transmits the temporary IP to the user terminal 30. Through the card I / O 32, it is stored in the RAM area of the smart card 35 of the user.

The configuration of the temporary IP of the present invention is in the form of a fixed IP + CHECK DIGIT of the institution. For example, if one of the fixed IP of the affiliated organization 10 is 211.222.141.133, a random IP is given after the 211.222.141.133 IP. For example, 211.222.141.133/12.32.22 becomes a temporary IP, so that IP 211.222.141.133 is connected to the organization and the Internet, and 12.32.22 in the rear is connected to the gateway system and the designated database.

The user connects the smart card 35 in which the temporary IP is stored in RAM to the user terminal 30 connected to the card input / output device 32, and the user terminal 30 reads out the temporary IP and stores the temporary IP. It is to be connected to the database (12) of affiliated organization having the Internet.

The affiliated organization 10 of the present invention extracts the temporary IP and assigns it to a predetermined area of the gate system 15. When the user inputs the temporary IP to the user terminal 30 or the computer system of another organization 20, the user belongs to the organization through the area to which the temporary IP of the gate system 15 of the organization is assigned through the Internet. Access to database 12 of (10). The temporary IP of the present invention is limited in the usable time and the like, and cannot be used again if the temporary IP is exceeded.

2 is a flow chart of a method of accessing the affiliated organization database using a smart card and temporary IP on the Internet according to the present invention.

2,

Step 1 (100): The user makes a request for certification of his / her license to the certification authority 40 through the Internet using the user terminal 30.

Step 110: For the authentication request signal, certification authority 40 conducts a search as to whether the user has a true license / qualification. In this case, the license / qualification data regarding the user may be searched for using the database 42 of the certification authority 40, in which the license / qualification data regarding the user has been input in advance, and the institution 10 may request a true qualification. The signal may be transmitted, and authentication may be received by receiving a response signal of a true qualification from the affiliated organization 10.

The certification authority 40 transmits data indicating that the user has been authenticated for the license / qualification of the user, if the user is authenticated that the user is truly licensed / qualified.

Step 3 120: The affiliated organization 10 that receives the user's license / qualification authentication data transmits the temporary IP generated using the IP generator 11 to the authentication authority 40, and the authentication authority 40 The temporary IP is received and transmitted to the user terminal 30 so as to be stored in the RAM area of the smart card 35 connected with the card input / output device 32.

In addition, the affiliated organization 10 assigns the same temporary IP to the temporary IP storage area of the gate system 15, and opens the database 12 connected to the storage area of the temporary IP so that the user can access it on the Internet. Let's do it.

Step 130: The user who receives the temporary IP by the user terminal 30 connects the smart card 35 in which the temporary IP is stored to the card input / output machine 32, and accesses the temporary IP viewed by the user terminal 30. Read and linked to the institution's database 12 to bring in the necessary data; or

For example, after opening Microsoft's Internet Explorer, the temporary IP can be entered into a URL window to access the organization's database 12 and retrieve necessary data.

Step 5 140: If the usage limit imposed on the temporary IP is exceeded, the gate system 15 disconnects the connection so that the temporary IP can no longer access the database 12 of the affiliated organization. The usage restriction may be a restriction on time or a restriction on the number of connections. The data and program for this usage restriction allow the affiliated organization 10 to install a program on usage restriction when storing the temporary IP in the IP storage area of the gate system 15. Once the usage limit is reached, the user no longer has access to the database 12 at the gate system 15.

3 is a block diagram showing an example of the configuration of the gate system according to the present invention and the connection state between the database of the affiliated organization.

Referring to FIG. 3, there are a plurality of temporary IP storage areas 16 in which the temporary IP is stored in the gate system 15, and each temporary IP storage area includes the respective databases DB1, DB2, DB3, ... Connected with

By using the temporary IP stored in the temporary IP storage area 16 connected with DB1, only DB1 and the Internet can be connected, and only the data stored in DB1 can be downloaded to the user terminal 30. .

4 is a configuration diagram showing another example of the configuration of the gate system according to the present invention and the connection state between the database of the affiliated organization.

Referring to FIG. 4, when the gate system 16 has one temporary IP storage area 16 and the user has a temporary IP given to the system having a temporary IP, the user is recorded on his smart card. If the pseudo-license code and the authority data of the access range of the data granted by the affiliated organization 10 are transmitted to the gate system 16 storing the temporary IP through the user terminal 30, the authentication system of the affiliated organization ( 17) automatically classify the access range of the data according to the pseudo-license code and the authority data for the access scope of the data granted by the affiliated organization (10) to access only the database according to the authority for the pseudo-license code and the data access scope. do.

For example, if a user's access authority is limited to accessing DB1 and DB2 only, the affiliated authority authentication system 17 allows only the gateway system 15 to be connected to DB1 and DB2, and the user stores only DB1 and DB2. Only access to the data is allowed.

The affiliated organization of the present invention has data such as a hospital, a public office, a company, and has a database for storing the data, and can be applied to any institution that exists or will exist in the future where data is not shared with other organizations. have.

For example, in the case of a realtor who is engaged in a job other than a doctor, it may be applicable to a realtor who accesses a database of his or her institution (the agency office or the association of brokers), and is also available when viewing the register of another institution, ie the ward office. The ward office becomes the affiliated organization, and transfers the temporary IP to the certification body (in this case, it can be a broker association), and the certification body sends the temporary IP to the broker, and the broker uses the temporary IP It can also be applied to being able to read the register DB of the ward office.

Under the organization's database access method on the Internet according to the present invention, the user's user terminal 30 can receive a temporary IP to maintain the security of the temporary IP information, by applying a certain restriction to the use of the temporary IP Prevents permanent or semi-permanent use to achieve its objectives in security.

Then, the temporary IP is stored in the smart card so that the smart card can be used while connected to the user terminal or the temporary IP is inputted into the URL input window of the Internet Explorer. It works.

While the preferred embodiments of the present invention have been described using specific terms, such descriptions are for illustrative purposes only, and it is understood that various changes and modifications may be made without departing from the spirit and scope of the following claims. Should be done.

Claims (4)

Transmitting data on a user's license / qualification to the certification authority 40 through the user terminal 30; Verifying and authenticating data of the license / qualification by the certification authority (40); If the certification authority 40 authenticates that the data on the license / qualification is true, transmitting the authentication data on the license / qualification to the affiliated organization 10 to which the user belongs; Receiving, by the affiliated organization (10), the authentication data and generating a random temporary IP using an IP generator; Transmitting the temporary IP to a gate system of the certification authority and the affiliated organization, and storing the temporary IP in the gate system; Transmitting, by the certification authority, the temporary IP to the user terminal (30); And Inputting the received temporary IP into the user terminal 30 and connecting the user terminal 30 and the gate system 15 storing the temporary IP to the Internet; Including, The gate system (15) is connected to the database of the affiliated organization (10), characterized in that the affiliated organization database access method using a smart card and the temporary IP, characterized in that the data. The method of claim 1, The user terminal is connected to the card I / O to enable data transmission and reception, and the card reader accesses the affiliated organization database using the smart card and the temporary IP, characterized in that the data stored in the smart card of the user can be read. Way. The method of claim 2, The smart card is divided into a storage area for storing the user's license, the qualifications, and a storage area for storing the temporary IP access method of the affiliated organization database using the smart card and temporary IP. The method of claim 1, The temporary IP is a method of accessing the database of the affiliated organization using a smart card and the temporary IP, characterized in that the fixed IP and the access allowed check number of the institution.