KR20040066396A - Web Automatic Connecting System Using Bio Token - Google Patents

Abstract

PURPOSE: A system for automatically connecting to the web using a bio-token is provided to remove the inconvenience for inputting an ID and a password whenever a user connects to a site by storing the ID/password of each site to a storage of the bio-token, offering an automatic web access function, and judging identification in real-time. CONSTITUTION: The bio-token(10) stores a fingerprint image and the ID/password for the URLs(Uniform Resource Locator) of the user, and transmits the ID/password of the URL to the outside if the user is a true user by confirming the true user. A client PC(30) receives the ID/password of the URL from the bio-token if a true user confirmation signal is received after the user connects to the URL, and connects to the web site by transmitting the ID/password to a web server(20) of the URL through the Internet. The bio-token includes a memory, a fingerprint recognition sensor, a CPU, and a USB(Universal Serial Bus) controller.

Description

Web Automatic Connecting System Using Bio Token

The present invention relates to a web automatic access system using a bio-token, and more specifically, to compensate for the security vulnerabilities that can occur in the current Internet that aims for openness, and automatically without the user hassle of managing ID or password It relates to a web automatic access system for accessing.

The Internet, the world's largest telecommunications network, now used by millions of computers and used by tens of millions of netizens worldwide, is called the Sea of Information at its scale. Such a huge Internet is still not growing, and it is certain that it will become the foundation of the information society, where information and communication are combined in the 21st century.

However, it is well known that such information society has a positive side and a negative side coexisting. In particular, the negative side may not only cause the destruction of personal life but also threaten national security.

In addition, as the use of the Internet and the number of users increase rapidly, individuals feel the necessity of managing each website information, and it is quite significant that individuals remember all the login information such as ID and password of many websites. If you are troublesome and accidentally lose information, you will feel very uncomfortable using the site. In addition, due to the activation of electronic commerce, various security policies for safe commerce have been proposed, and the security policy of public key infrastructure is the mainstream. An important issue in the security policy of the public key infrastructure is the demand for a recording medium for storing a secure private key or certificate.However, even a conventional disk or a smart card general USB token can be accessed. The use of seats alone cannot be regarded as a fundamental security measure.

Of course, in order to solve this problem, specialized sites that manage login information of some large sites have been created, and methods for managing IDs and passwords of Internet sites subscribed to by using general disks or various storage media have been proposed. In particular, as a technology for reducing the inconvenience of having to input a different ID or password every time in order to access many sites to which a user is subscribed, an internet automatic access method using various storage media has been proposed.

However, these technologies have the advantage of bringing convenience from the user's point of view, but if the ID and password for the site that manages the ID or password have been stolen by someone or such an ID and password If you lose a disk or a variety of storage media to manage the loss caused by information leakage can be said to be greater than the intended convenience.

Accordingly, the present invention has been made to solve such a problem, and an object of the present invention is to supplement a vulnerability of security that may occur in the current Internet which is aimed at openness recently, and to provide a fingerprint input module in a token itself with respect to a user authentication technology that proves the user. By using the attached biometric token (hereinafter referred to as "Bio-Token") 10 as shown in FIG. 1, confidentiality, integrity, authentication, access control, non-repudiation, etc. In addition, as more Internet sites are operated by membership system, users are required to manage different IDs or passwords for each Internet site to secure the Internet web by automatically matching and storing the storage media in the bio-token 10. And many identity management must have the advantage of solving both problems at once. In addition, the automatic access using the bio token 10 should be able to further enhance security by using a certificate or a private key after checking personal authentication.

To this end, the present invention can be easily carried by each individual, and a biometric module capable of fingerprint authentication must be equipped with an internal storage device of the bio-token 10. The ID or password for the website provided by the server 20 should be stored, and when visiting the website, the client PC 30 should be provided with an automatic access technology for automatically accessing the website.

1 is a conceptual diagram of a web automatic access system using a bio token according to the present invention,

2 is a block diagram of a biotoken according to the present invention,

3 is a circuit configuration diagram of the bio token shown in FIG.

4 is an overall system configuration diagram of a web automatic access system using a bio token according to the present invention;

5 is a flow diagram of a web automatic access system using a bio token according to the present invention,

6 is a view showing a data storage structure of a bio token according to the present invention,

7 is a web automatic access flow diagram using a bio token according to the present invention.

*** Explanation of symbols for main parts of drawing ***

10 ... Bio Token 12 ... Fingerprint Sensor

13 ... Bio Smart Token 14 ... Sensor Interface

16 ... Central Processing Unit 18 ... ROM

20 ... Web Server 21 ... RAM

22 ... USB Controller 23 ... Card Interface

24 ... ISP 26 ... Fingerprint

28 ... Internet 30 ... Client PC

32 ... Web Browser 36 ... Device Driver

38 ... mapping table

The present invention relates to an automatic web access system using a bio-token, and stores a fingerprint image of a specific user and a connection ID and password of a specific URL, and checks whether the user is a genuine user. A bio token for transmitting to the outside; After accessing the specific URL of the user, when receiving the authentic user confirmation signal from the bio-token receives the access ID and password of the website of the specific URL from the bio-token and the ID to the web server of the specific URL through the Internet And a client PC accessing a website by transmitting a password.

The bio token may include a memory configured to store a fingerprint image of the specific user and an access ID and password of a specific URL; A fingerprint recognition sensor for recognizing a fingerprint of a user and capturing the fingerprint image; A central processing unit for comparing a fingerprint image captured by the fingerprint recognition sensor with a fingerprint stored in the memory and transmitting an authentication confirmation signal and a connection ID and password of a specific URL if the user is a genuine user; And a USB controller for transmitting the authentication confirmation signal and the connection ID and password of a specific URL transmitted from the central processing unit to the USB port of the client PC.

The bio-token may be any one of a USB token using a USB of the client PC or a smart token using a card reader of the client PC.

With reference to the accompanying drawings, a web automatic access system using a biotoken according to the present invention will be understood by the embodiments described in detail below.

2 is a configuration diagram of a bio token according to the present invention, FIG. 3 is a circuit configuration diagram of the bio token shown in FIG. 2, and FIG. 4 is an overall system configuration diagram of a web automatic access system using the bio token according to the present invention. 5 is a flow chart of a web automatic access system using a biotoken according to the present invention, FIG. 6 is a diagram showing a data storage structure of a biotoken according to the present invention, and FIG. 7 is a biotoken according to the present invention. Web automatic access flow using.

According to Figures 2 to 3, the present invention uses the bio-token 10 to support the user authentication technology to prove that the user is the identity of security requirements, such as confidentiality, integrity, authentication, access control, non-repudiation, etc. Supporting and storing private keys or certificates securely in biotokens can enhance the usability and security of private keys and certificates in the field of public key-based information security.

In addition, as more Internet sites are operated by membership system, users can access the Internet automatically by automatically matching the stored information using the storage media in the bio token, which is caused by managing different IDs or passwords for each Internet site. By supporting automatic connection technology, it has the advantage of solving two problems at once: security of the Internet and many identity management. In particular, the present invention, even if the ID (ID) and Personal Identification Number (PIN) or password (PASSWORD) leaked by someone else, even if the bio-token itself is not from the bio-token to confirm that you are not yourself In the case of access denied, it has a big advantage that it is safer to leak personal information.

In order to achieve the above object, the bio-token 10 may store ID information and password for identifying a user and must have a fingerprint input device installed thereon for applying and applying biometric technology.

More specifically, the bio token 10 includes a fingerprint recognition sensor 12 capable of recognizing a fingerprint of a user's finger, a sensor interface 14 for communicating with the central processing unit 16, and a flash memory device. ROM (18) in which fingerprint data is stored, RAM (RAM) 21 temporarily storing data for operation, ISP 24 for transmitting or downloading a program to the outside, and fingerprint recognition The central processing unit 16 and the central processing unit 16 for comparing the recognized fingerprint received from the sensor 12 with the user fingerprint data stored in the ROM 18 and confirming that the user is a legitimate user. This signal is made up of the USB controller 22 for transmitting the signal through the USB port of a computer such as a client PC.

The fingerprint recognition sensor 12 is a semiconductor sensor attached to recognize a fingerprint and is attached in a rectangular shape to the outside of the token. The token 18 includes a ROM 18 storing user fingerprint data, and a central processing unit 16 comparing and comparing the fingerprint recognized by the sensor with the user fingerprint data. It communicates with the computer via.

Of course, the above-described bio token 10 is a description of the USB bio token 15, and when the smart card 13 is configured, the card interface 23 is used to be connected to a computer. The internal operation is the same as when using the USB controller 22.

Hereinafter, a configuration method and a method of storing information in the bio token will be described with reference to FIGS. 2 to 3.

The connection method of the bio token 10 is a USB bio token 15 in the case of using the USB port that is already attached to the computer system itself, which is the client PC 30, or RS-USB to the USB. A converter capable of converting to 232c may be used, and in the case of the bio smart token 13, data is transmitted and received through a smart card reader (not shown), wherein the smart card reader is a client according to a standard connection method. It is connected to the PC (30).

If the user finishes surfing the desired Internet site and logs out (Log_out), the client PC 30 stores the memory in the bio-token 10 for the password or other personal information changed by the user. Ask whether to save to. If the user wants to change the information, the web server 20 causes the user bio token 10 to store the change information.

4 shows the overall configuration of the web automatic access system, the client PC 30 of the web server 20 is connected via the Internet 28 and the bio-token 10 for recognizing the fingerprint 26 of the user An internet connection processing unit is required for the connection processing and a device driver is provided for the interface between the biotoken 10 and the client PC 30.

FIG. 5 is a diagram illustrating a web automatic access flow using the bio token 10, and in order to relay the command between the internet web browser 32 and the bio token 10 in advance with respect to the operation of the client PC 30. Referring to FIG. If a small software module (aka Agent: Agent) 34 is installed and the user launches the web browser 32 to access the Internet and enters a Uniform Resource Locator (URL) that the user wants to visit, the web browser 32 Is converted to the website according to the HTTP protocol procedure.

Recognizing access to the website, the web server 20 checks the existence of the bio token 10 by accessing the accessed IP address. In order to confirm the presence or absence of the bio token 10, the device driver 36 must be designed and exist between the bio token 10 and the web browser 32.

FIG. 6 is a diagram illustrating a memory storage structure of a biotoken, in which a table 38 existing inside the biotoken 10 is searched to determine whether a specific registration website is used. If the client PC 30 confirms that the user's ID and password for the currently accessed site exist inside the c), it searches the mapping table 38 of the biotoken 10 and checks the corresponding web server. After reviewing the validity of the ID and password for (20), if the ID and password managed by the client PC 30 match, the user who is currently connected to perform the user's judgment from the bio-token 10 Down.

If the user puts his / her hand on the fingerprint input sensor 12 of the biotoken 10 and confirms his / her identity, the biotoken 10 transmits a command to the client PC 30 to confirm that the user is checked. (30) grants access to the original intended website from this. Likewise, in the public key infrastructure, the certificate or private key should be used after authenticating whether the user is the current user, the owner of the stored medium, and the owner of the certificate and private key before proceeding with the stored private key or certificate.

According to the system-wide flowchart of FIG. 7, in order for a user to access a specific website using the bio-token 10, the client PC 30 should be provided with an internet access agent 34 (S-100). Of course, at this time, even if only once installed in the client PC 30 is preferably configured to be automatically driven from. When the Internet connection agent 34 is installed in the client PC 30, the user using the client PC 30 executes the web browser 32 to perform web surfing (S-102). After the web browser 32 is executed, the user inputs a URL that he / she wants to surf (S-104). If a user attempts to connect after inputting a URL of a specific website, the Internet connection agent 34 of the client PC 30 operates to compare whether the user is a registered website (S-106). If the specific website currently being accessed is a website where the user is already registered, the user checks the ID and password (S-108), and checks whether the user is a true user (S-110). If the user is a real user, the fingerprint that the current user inputs through the bio token () is re-checked again (S-112), and this is again checked (S-114). Next, if it is determined whether to request a certificate verification (S-116), if a certificate verification request is confirmed (S-118), the web site is logged in to a specific site (S-120). If the user is not a website registered as a member from step S-106 or if the comparison result of step S-110 is not a genuine user, branching to web surfing step S-120 is performed as a general guest. Access and use the website. In addition, even if the certificate is not required as a result of the comparison of the step (S-116) is branched to the step of using the web surfing (S-120). However, in step S-114, if the user attempts illegal access, it may be desirable to block access to the website itself rather than surfing the web.

Although the embodiments of the present invention have been described in detail as above, the scope of the present invention is not limited thereto, and the scope of the present invention extends to the range substantially equivalent to the embodiment of the present invention.

As can be seen from the above description, according to the present invention, if an ID or password for each website is stored in a storage device of a bio-token that can be easily carried by each individual, and a web server wants to visit the website, With the ability to access the web automatically, it is less convenient to input different ID and password every time to access many sites, and it is convenient and secure by judging whether you are in real time. You can get the effect that all can satisfy. In addition, by supporting confidentiality, integrity, authentication, access control, and non-repudiation requirements such as security, and storing private key or certificate securely in bio token, We can improve security more

Claims (3)

A bio-token that stores a fingerprint image of a specific user and a connection ID and password of a specific URL, and verifies whether the user is a genuine user, and transmits the access ID and password of the specific URL to the outside if the user is a genuine user; After accessing the specific URL of the user, when receiving the authentic user confirmation signal from the bio-token receives the access ID and password of the website of the specific URL from the bio-token and the ID to the web server of the specific URL through the Internet And a client PC which transmits a password to access the website. Web automatic access system using a bio-token, characterized in that comprises a. The method of claim 1, wherein the bio token is A memory for storing the fingerprint image of the specific user and the connection ID and password of the specific URL; A fingerprint recognition sensor for recognizing a fingerprint of a user and capturing the fingerprint image; A central processing unit for comparing a fingerprint image captured by the fingerprint recognition sensor with a fingerprint stored in the memory and transmitting an authentication confirmation signal and a connection ID and password of a specific URL if the user is a genuine user; Web access point system using a bio-token, characterized in that it comprises a; USB controller for transmitting the authentication confirmation signal sent from the central processing unit and the connection ID and password of a specific URL to the USB port of the client PC. The method of claim 1, The bio-token is a web token automatic access system using a bio-token, characterized in that any one of the US token using the USB port of the client PC or smart token using the card reader of the client PC.