KR20040075191A - Certification system for WEB service access using a mobile terminal - Google Patents

Abstract

PURPOSE: A Web service access authentication system using a mobile terminal is provided to prevent an illegal Web service access of a different user by encoding an access code and transmitting it to a mobile terminal of a user. CONSTITUTION: A Web server(10) provides a certain Web service. A user terminal(20) accesses the Web server(10) through a network and enjoys the Web service. An authentication server(30) codes an access code generated from the Web server(10) and transmits it to a mobile terminal(40) of a user who has requested the Web service. The mobile terminal(40) decodes the coded access code received from the authentication server(30) and outputs it on a screen.

Description

Certification system for WEB service access using a mobile terminal

The present invention relates to a web service access authentication system using a portable terminal. In particular, a user can receive an access code for accessing a web service, which is arbitrarily generated every time a web service access request is made, through the user's portable terminal. The present invention relates to a web service access authentication system using a portable terminal capable of blocking access to web services by malicious users by encrypting and transmitting them.

In the conventional case, in order to enjoy a web service provided by a web server, a user is granted an ID and password for access by registering a web server that provides the web service through a predetermined membership registration procedure. We had to connect to the web server that provided the web service using a password.

However, in the conventional web service access method according to the ID and password system, there is a great risk of serious damage to the user when the ID and password are exposed due to various Trojan horse programs or the like.

Of course, you can change the password to reduce the risk of hacking, but this was also not a fundamental solution.

Therefore, the present invention allows the user to receive an access code for accessing the web service, which is arbitrarily generated at each web service access request, through the portable terminal of the user, and encrypts and transmits the access code to the web service of another malicious user. The research on web service access authentication system using a new type of portable terminal to block access is conducted.

The present invention has been invented under the above-mentioned purpose, and the user can block access to the web service by the malicious user by allowing the user to receive an access code for accessing the web service, which is randomly generated every time the web service connection request is made, through the user's portable terminal. An object of the present invention is to provide a web service access authentication system using a portable terminal.

Still another object of the present invention is to provide a web service access authentication system using a more secure portable terminal by encrypting and transmitting the access code transmitted to the user's portable terminal.

According to an aspect of the present invention for achieving the above object, a web service access authentication system using a portable terminal according to the present invention is a connection randomly assigned for accessing a user's portable terminal number and service from a web server. An authentication request information receiver configured to receive authentication request information including a code; Encryption for retrieving the encryption key assigned to the portable terminal number included in the authentication request information received by the authentication request information receiving unit from the member information database, and encrypting the access code included in the authentication request information using the retrieved encryption key. A processing unit; And an authentication server module including an access code transmitter for transmitting the access code encrypted by the encryption processing unit to the portable terminal number.

According to an additional aspect of the present invention, a web service access authentication system using a portable terminal according to the present invention includes a decryption key for the authentication server module to decrypt a user's portable terminal number and an encrypted access code from a user through a network. Membership request information receiving unit for receiving the membership request information including a; An encryption key generator for generating an encryption key corresponding to the decryption key included in the subscription request information received by the subscription request information receiver; And a member registration processing unit for registering the user requesting for membership and storing member information including a portable terminal number and an encryption key of the user who has been registered for membership in a member information database.

According to an additional aspect of the present invention, a web service access authentication system using a portable terminal according to the present invention requests a portable terminal number input to a user terminal requesting a web service access, and receives a portable terminal number from the corresponding user terminal. An information receiving unit; A connection code generation unit for arbitrarily generating and allocating a connection code for a service connection to a portable terminal number of the user received by the connection request information receiving unit, and storing the connection code assignment information in a connection code database; An authentication request information transmission unit for transmitting the authentication request information including the portable terminal number of the user who requested the web service connection request and the access code assigned to the portable terminal number of the user by the access code generation unit to the authentication server module; The web service access processing unit which searches the access code database from the access code inputted from the user terminal and checks whether the access code is identical to the access code assigned to the user's portable terminal number. It characterized in that it further comprises a web server module to include.

According to an additional aspect of the present invention, a web service access authentication system using a portable terminal according to the present invention provides a service to a portable terminal number for every access request received by the access request information receiver of the access code generator of the web server module. And generating and assigning an access code for connection at random, and updating the access code assignment information assigned to the corresponding mobile terminal number in the access code database.

According to an additional aspect of the present invention, a web service access authentication system using a portable terminal according to the present invention comprises: an access code receiver for receiving an encrypted access code transmitted from an access code transmitter of the authentication server module; A decryption key input processing unit for requesting a decryption key input for decrypting the encrypted access code received by the access code receiving unit; A decryption processing unit for decrypting the encrypted access code using the decryption key received from the decryption key input processing unit; And a portable terminal module including a screen output processing unit for outputting the access code decrypted by the decryption processing unit.

1 is a schematic diagram of a web service access authentication system using a portable terminal according to the present invention;

2 is a block diagram of an authentication server module of a web service access authentication system using a portable terminal according to the present invention.

3 is a block diagram of a web server module of a web service access authentication system using a portable terminal according to the present invention;

4 is a block diagram of a portable terminal module of a web service access authentication system using a portable terminal according to the present invention;

<Explanation of symbols for the main parts of the drawings>

10: web server 11: access request information receiving unit

12: access code generation unit 13: authentication request information transmission unit

14: Web service access processing unit 20: User terminal

30: authentication server 31: authentication request information receiving unit

32: encryption processing unit 33: access code transmission unit

34: request information registration unit 35: encryption key generation unit

36: registration processing unit 40: portable terminal

41: access code receiver 42: decryption key input processing unit

43: decoding processing unit 44: screen output processing unit

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily understand and reproduce the present invention.

1 is a schematic diagram of a web service access authentication system using a portable terminal according to the present invention.

As shown in the figure, the web service access authentication system using a portable terminal according to the present invention is a web server 10 for providing a predetermined web service, and the web server 10 is connected to the web server through a network At least one user terminal 20, such as a personal computer, a PDA, a mobile phone, and the like, and an arbitrary access code generated from the web server 10 is encrypted and transmitted to the portable terminal 40 of the user requesting the web service connection. The authentication server 30, and a portable terminal 40, such as a mobile phone, a smart phone to decrypt the encrypted access code received from the authentication server 30 and outputs the screen.

Accordingly, the web service access authentication system using a portable terminal according to the present invention provides a web service when a user who accesses a network requests access to a web service provided by a predetermined web server using his or her user terminal 20. The web server 10 requests and receives the user's portable terminal 40 number from the user terminal 20, generates a connection code of the time limit allowing access to the web service, and sends them to the authentication server 30. When transmitting, the authentication server 30 encrypts the access code by using an encryption key assigned to the user's portable terminal number from a database and transmits the access code to the portable terminal number of the user, and receives the encrypted access code. When the user inputs the decryption key according to the decryption key input request from the portable terminal 40, the portable terminal 40 The terminal 40 decrypts the encrypted access code by using the decryption key and outputs the screen so that the user randomly generates an access code for accessing the encrypted web service through his portable terminal. This prevents access to web services by malicious other users such as hacking.

At this time, the user is registered in advance to the authentication server 30, the encryption server 30 is encrypted by the encryption key and the encryption key for encrypting the access code generated and transmitted from the web server 10 It should be preceded by storing member information including information on the decryption key for decrypting the access code and information on the portable terminal number to which the encrypted access code is to be transmitted.

Hereinafter, the web service access authentication system using the portable terminal according to the present invention will be described in more detail with reference to specific embodiments.

2 is a block diagram of an authentication server module of a web service access authentication system using a portable terminal according to the present invention.

The authentication server module exists in the form of software executed in the authentication server 30, and includes an authentication request information receiving unit 31, an encryption processing unit 32, and an access code transmitter 33.

The authentication request information receiving unit 31 receives authentication request information including a portable terminal number of a web service access request user and an access code arbitrarily assigned for accessing a service from the web server 10.

The encryption processing unit 32 retrieves an encryption key assigned to the mobile terminal number included in the authentication request information received by the authentication request information receiving unit 31 from the member information database, and uses the retrieved encryption key to perform the authentication request. Encrypt the access code included in the information.

The access code transmitter 33 transmits the access code encrypted by the encryption processor 32 to the portable terminal number. At this time, it is preferable that the access code transmitter 33 transmits the encrypted access code to the corresponding mobile terminal number using a short message service (SMS) method.

That is, the authentication server module receives the authentication request information from the web server 10 through the authentication request information receiving unit 31 including authentication request information including an access code arbitrarily assigned for accessing the service and the portable terminal number of the user of the web service access request user. Search for an encryption key assigned to the portable terminal number included in the authentication request information received through the encryption processing unit 32 from the member information database, and access code included in the authentication request information using the retrieved encryption key. It encrypts and transmits the encrypted access code to the portable terminal 40 of the web service access request user through the access code transmitter 33 through a short message service (SMS) scheme.

Therefore, the user can receive the access code for accessing the encrypted web service through his portable terminal arbitrarily generated at every web service access request, thereby preventing access by the malicious user such as hacking. It becomes possible.

On the other hand, the user who wants to receive the encrypted access code as described above through his portable terminal should be registered in advance by applying for membership to the authentication server 30 in advance. To this end, the authentication server module additionally includes a member registration request information receiver 34, an encryption key generator 35, and a member registration processor 36.

The subscription request information receiving unit 34 receives subscription request information including a decryption key for decrypting a user's portable terminal number and an encrypted access code through a network.

The encryption key generation unit 35 generates an encryption key corresponding to the decryption key included in the subscription request information received by the subscription request information receiver 34.

The registration processing unit 36 registers the user who requested the membership, and stores member information including a portable terminal number and an encryption key of the user who has been registered, as a member information database.

That is, a user who wants to use the service provided by the web service access authentication system using the portable terminal according to the present invention accesses the authentication server 30 through a network and registers the member according to a predetermined membership procedure in the authentication server 30. You must register. At the request of the user, the authentication server 10 provides a predetermined screen interface for membership to the user terminal 20, such as a personal computer (PC), and inputs the user's portable terminal number and encrypted access from the user. Member registration request information including a decryption key for decrypting a code is received through the membership request information receiving unit 34. When member registration request information is received from the user, the authentication server 30 generates an encryption key corresponding to the decryption key included in the member registration request information received through the encryption key generation unit 35, and the membership registration processing unit ( The user who checks whether the user who requested the membership registration meets the membership registration condition through 36) and performs member registration, and stores the member information including the portable terminal number and the encryption key of the user who has been registered as a member information database. Perform the registration process.

Accordingly, according to the web service access request of the member registered user, the random access code generated and transmitted from the web server 10 is encrypted using an encryption key read from the user information of the user, and then the portable terminal 40 of the user. ) Can be sent.

3 is a block diagram of a web server module of a web service access authentication system using a portable terminal according to the present invention.

The web server module exists in the form of software executed in the web server 10, the access request information receiving unit 11, access code generation unit 12, authentication request information transmitting unit 13, web service A connection processor 14 is included.

The access request information receiving unit 11 requests the portable terminal number input from the user terminal 20 requesting the web service access, and receives the portable terminal number from the corresponding user terminal 20.

The access code generation unit 12 arbitrarily generates and assigns an access code for service access to the portable terminal number of the user received by the access request information receiving unit 11, and assigns the access code assignment information to the access code data. Save to base. At this time, the connection code generation unit 12 arbitrarily generates and assigns a connection code for service connection to the portable terminal number at every connection request received by the connection request information receiving unit 11, and the connection code database. By updating the access code assignment information assigned to the corresponding mobile terminal number in the web server, it is desirable to generate a different random access code every time the user accesses the web service, thereby minimizing the risk of hacking when the access code is exposed by hacking or a Trojan horse program. Do.

The authentication request information transmitting unit 13 may include authentication request information including a portable terminal number of a user who has requested a web service connection and an access code assigned to the portable terminal number of the user by the access code generator 12. Send to the authentication server module.

The web service access processing unit 14 searches the access code database from the access code input from the user terminal 20, checks whether it matches the access code assigned to the portable terminal number of the user, and confirms the identity. In case of web service connection.

That is, when a user requests a web service access to use a predetermined web service provided on a network, the web server 10 provides the user terminal 20 with a screen interface for inputting the mobile terminal number of the user. The portable terminal number of the user input through the connection request information receiving unit 11 is received. The web server 10 arbitrarily generates and assigns an access code for service access to the portable terminal number of the user received through the access code generation unit 12, and stores the access code assignment information as an access code database. Then, the authentication including the portable terminal number of the user who requested the web service access request through the authentication request information transmission unit 13, and the access code assigned to the portable terminal number of the user by the access code generation unit 12 The request information is transmitted to the authentication server module. Then, the operation of the authentication server module described in FIG. 2 is performed. That is, the authentication server 30 retrieves the encryption key assigned to the mobile terminal number included in the authentication request information transmitted from the web server 10 from the member information database, and searches the authentication request information using the retrieved encryption key. The included access code is encrypted, and the encrypted access code is transmitted to the portable terminal 40 of the web service access request user. Accordingly, the user receives it through his portable terminal 40, decrypts the encrypted access code, confirms it, and inputs it through the screen interface for inputting the access code provided by the web server 10. The service access processing unit 14 searches the access code database from the access code input from the user terminal 20, checks whether it matches the access code assigned to the portable terminal number of the user, and confirms the identity. Process the service connection. The operation of decrypting the encrypted access code in the user's portable terminal 40 will be described later in the portable terminal module.

Therefore, the user can receive an access code for accessing the encrypted web service randomly generated at each web service access request through his portable terminal and access the web service using the same. It is possible to block access to web services.

4 is a block diagram of a portable terminal module of a web service access authentication system using a portable terminal according to the present invention.

The portable terminal module exists in the form of software executed in the user's portable terminal 40. The portable terminal module includes a connection code receiver 41, a decryption key input processor 42, a decryption processor 43, and a screen output processor. 44).

The access code receiver 41 receives an encrypted access code transmitted from the access code transmitter 33 of the authentication server module.

The decryption key input processing unit 42 requests a decryption key input for decrypting the encrypted access code received by the access code receiving unit 41, and receives the decryption key input.

The decryption processor 43 decrypts the encrypted access code by using the decryption key received from the decryption key input processor 42.

The screen output processor 44 screens the access code decrypted by the decryption processor 43.

That is, when the encrypted access code for accessing the web service is transmitted to the user's portable terminal number encrypted by the authentication server module, the portable terminal module installed in the portable terminal 40 of the user receives the access code receiving unit ( 41) and outputs a screen interface for inputting a decryption key for decrypting an encrypted access code to the screen output means of the portable terminal through the decryption key input processor 42, and key input means of the portable terminal. When a user inputs a decryption key by using it, it is received. When the decryption key is input by the user's key input, the portable terminal module decrypts the access code encrypted through the decryption processor 43, and the screen output means of the portable terminal of the user through the screen output processor 44. Output through

Therefore, the user receives and reads the access code for accessing the web service through his portable terminal, and accesses the web service using this, so that there is little possibility of a password leak by hacking or Trojan horse program, and even if it leaks, every web service access Since the access code for accessing the web service generated every time is different, it is possible to block access to the web service by malicious users.

By doing so, the object of the web service access authentication system using the portable terminal according to the present invention as described above can be achieved.

Web service access authentication system using a portable terminal according to the present invention as described above allows a user to receive a connection code for a web service access that is randomly generated every time a web service access request through the user's portable terminal, the access By encrypting the code and transmitting it to the user's portable terminal, it has a useful effect of blocking access to the web service by malicious other users.

Although the present invention has been described with reference to the preferred embodiments described with reference to the accompanying drawings, it is not limited thereto and it will be apparent to those skilled in the art that various modifications may be derived therefrom. Therefore, the present invention should be construed by the claims intended to cover such modifications.

Claims (5)

An authentication request information receiving unit for receiving, from a web server, authentication request information including a portable terminal number of a web service access request user and an access code arbitrarily assigned for accessing a service; Encryption for retrieving the encryption key assigned to the portable terminal number included in the authentication request information received by the authentication request information receiving unit from the member information database, and encrypting the access code included in the authentication request information using the retrieved encryption key. A processing unit; A connection code transmitter which transmits and processes the access code encrypted by the encryption processing unit to the portable terminal number; Web service access authentication system using a portable terminal, characterized in that it comprises an authentication server module including. The method of claim 1, The authentication server module: A subscription request information receiver configured to receive subscription request information including a decryption key for decrypting a user's portable terminal number and an encrypted access code from a user through a network; An encryption key generator for generating an encryption key corresponding to a decryption key included in the subscription request information received by the subscription request information receiver; A registration processing unit which registers the user who has requested the membership and stores member information including a portable terminal number and an encryption key of the user who has been registered in the membership database; Web service access authentication system using a portable terminal, characterized in that it further comprises. The method according to claim 1 or 2, Web service access authentication system using the portable terminal: A connection request information receiving unit requesting a mobile terminal number input to a user terminal requesting a web service connection and receiving a portable terminal number from the corresponding user terminal; A connection code generation unit for arbitrarily generating and allocating a connection code for a service connection to a portable terminal number of the user received by the connection request information receiving unit, and storing the connection code assignment information in a connection code database; An authentication request information transmission unit for transmitting the authentication request information including the portable terminal number of the user who requested the web service access request and the access code assigned to the portable terminal number of the user by the access code generation unit to the authentication server module; The web service access processing unit which searches the access code database from the access code inputted from the user terminal and checks whether the access code is identical to the access code assigned to the user's portable terminal number. ; Web service access authentication system using a portable terminal, characterized in that it further comprises a web server module comprising. The method of claim 3, wherein Access code generation unit of the web server module: Randomly generating and allocating a connection code for service connection to the portable terminal number at every connection request received by the connection request information receiving unit, and updating the access code assignment information assigned to the corresponding portable terminal number in the connection code database. Web service access authentication system using a portable terminal, characterized in that. The method of claim 4, wherein Web service access authentication system using the portable terminal: An access code receiver for receiving an encrypted access code transmitted from the access code transmitter of the authentication server module; A decryption key input processing unit for requesting a decryption key input for decrypting the encrypted access code received by the access code receiving unit; A decryption processing unit for decrypting the encrypted access code using the decryption key received from the decryption key input processing unit; A screen output processor configured to screen output the access code decrypted by the decryption processor; Web service access authentication system using a portable terminal, characterized in that it further comprises a portable terminal module comprising.