KR20040099041A - System and Method for Connecting Coupled Wire·Wireless Network by Using IC Card - Google Patents

Abstract

PURPOSE: A method and a system for connecting to a coupled wire/wireless network using an IC card are provided to use the wire/wireless network with one smart card by installing a network access code generated based on wire/wireless network access information to the smart card and making a client generate/connect to an address to a network device or server based on the network access code. CONSTITUTION: The smart card(100) is linked with the wire/wireless client(110,140) through an ICC(IC Chip) interface(105) installed to the wire/wireless client. The wired client is linked with the smart card through the ICC interface, and is connected to a wired server(125), a network access executing server(165), and a network access management server(180) on the wired network. The wireless client is linked with the smart card through the ICC interface, and is connected to a wireless server(155) and the network access executing server on the wireless network.

Description

System and Method for Connecting Coupled WireWireless Network by Using IC Card}

The present invention relates to a wired / wireless interworking network access method and system, and includes a network access code generated based on wired and / or wireless network access information in a smart card and wired (or wireless) based on the network access code. A client may generate (extract) an access address for connecting to a device or server on a wired (or wireless) network so as to automatically connect based on the access address.

At least one ICC storage information is provided in the smart card, and the Internet Protocol ver. 4 (IPv4) -based and / or domain name-based Uniform Resource Locator (URL) and / or login to the provided ICC storage information. After including information (e.g., user account and password), etc., a client (e.g., a personal computer equipped with a smart card reader) extracts at least one URL and / or login information from the ICC stored information included in the smart card; A technique for automatically accessing a server corresponding to the URL based on the extracted URL and / or login information has been proposed.

However, in order to include IPv4-based and / or domain name-based URLs in ICC storage information, at least 4 bytes of memory space (for example, IPv4 is a 32-bit addressing scheme) are required, and ICC stores domain name-based network addresses. To include in the information, you need as much memory space as the number of characters in the domain name. In addition, the location where the user can log in through the login information on the server corresponding to the network address, the detailed address inside the server must be additionally included in the URL, which is also necessary to include the above URL in the ICC storage information. This means that additional memory space is required for the number of characters included in the street address.

Meanwhile, in the case of the ICC storage information including the existing IPv4-based and / or domain name-based URL as described above, since the URL is directly included in the ICC storage information, it is possible to provide an interworking service for at least two other network systems. There is a problem that at least two different URLs must be included in the ICC storage information in order to provide a network interworking service.

An object of the present invention to solve the above problems is to provide a wired and / or wireless client with at least one network device and / / via a wired network and / or wireless network through a wired / wireless interworking connection module, agent, and / or program, etc. Or a smart card having ICC storage information including a network access code for accessing a server, etc., and an ICC which extracts and reads a network access code from the ICC storage information included in the smart card and provides it to a wired and / or wireless client. A network connection address for an interface and a network device and / or server that can be connected via at least one of a wired network and / or a wireless network to which a client is connected based on the extracted and read network access code as described above. Extract and / or A wired or wireless network connection may interlock system with a network connecting unit, network access control server and the like for managing the network connections to provide.

In addition, another object of the present invention is a wired or wireless client in the wired or wireless interlocking network connection system and the wired network connection information that can be connected to a network device and / or server on the wired network through at least one or more wired client, and / or Register network connection information including wireless network connection information that can be connected to a network device and / or a server on a wireless network through at least one or more wireless clients, and the network connection unit to the wired and / or wireless network connection information. Generate a network access code based on the information, and load the generated network access code into the ICC storage information provided in the smart card through the ICC interface, and the wired or wireless client If the network access code is extracted and read from the ICC stored information provided to the network and provided to the network access unit, the network access unit may connect the wired client to the network device and / or server on the wired network based on the extracted and read network access code. Extract and / or generate a wired network connection address, or extract and / or generate a wireless network connection address that can connect a wireless client to a network device and / or server on a wireless network, and generate the wired or wireless Wired / wireless interworking network access system and wired / wireless, which automatically connects a wired client to a network device and / or server on a wired network based on a network access address, or automatically connects a wireless client to a network device and / or server on a wireless network. To provide a dynamic network connection method.

1 is a simple diagram of a wired / wireless interworking network access system.

2 is a simple flowchart illustrating a process of including a new network access code in ICC storage information included in a smart card by interworking with a wired client and a network access unit.

FIG. 3 is a simple flowchart of a process in which a wireless client extracts and reads a network access code from ICC stored information included in a smart card, processes it into a wireless URL through a network connection, and accesses a wireless server.

<Description of main parts of drawing>

100: smart card 105: ICC interface

110: wired client 115: wired browser

120: network relay module 125: wired server

130: (wired) content D / B 135: member D / B

140: wireless client 145: wireless browser

150: network relay agent 155: wireless server

160: (wireless) content D / B 165: network connection execution server

170: network connection unit 175: network information D / B

180: network access management server 185: user information D / B

190: network information D / B

The present invention provides a smart card with ICC storage information (eg, smart card applet) including at least one network access code for a smart card equipped with an integrated circuit chip (ICC), and a network connection provided in the smart card. The present invention relates to a wired / wireless interlocking network access system and a wired / wireless interlocking network access method including a network access unit providing a network access service based on a code, and to a wired network and / or a wireless network through a wired / wireless interlocking connection module, an agent, and / or a program. A smart card with ICC storage information including a network access code for connecting a wired and / or wireless client to at least one or more network devices and / or servers via a network connection from the ICC storage information provided in the smart card. Extract the code and Network devices and / or servers that can be connected via at least one of the wired network and / or the wireless network to which the client is connected based on the read ICC interface and the network access code extracted and read as described above. A wired / wireless interworking network access system comprising a network connection unit for extracting and / or generating a network connection address, a network connection management server for managing the network connection unit, and the wired / wireless interworking network connection system, wherein at least one wired or wireless client is used. Wired network connection information capable of connecting to a network device and / or server on a wired network through the above wired client, and / or a network on the wireless network through at least one or more wireless clients Registering network connection information, including wireless network connection information that can be connected to the device and / or the server, to the network connection unit [step 1], and the network connection unit connecting to the network based on the wired and / or wireless network connection information. Generating a code, mounting the generated network access code to the ICC storage information provided in the smart card through the ICC interface [step 2], and storing the ICC stored in the smart card through the ICC interface by the wired or wireless client. Extracting and reading the network access code from the information and providing it to the network connection [step 3], wherein the network connection is configured to connect the wired client to the network device and / or server on the wired network based on the extracted and read network access code. Can extract the wired network connection address Extracting and / or generating a wireless network connection address for generating or / or connecting a wireless client to a network device and / or server on the wireless network [step 4], and generating the generated wired or wireless network connection address. Automatically connecting the wired client to a network device and / or server on the wired network, or automatically connecting the wireless client to a network device and / or server on the wireless network [step 5].

In the present invention, the network access code is a code value included in place of URL and / or login information included in at least one or more ICC stored information included in the smart card, and is extracted and / or generated by the network access unit to generate an ICC interface. It is included in the corresponding ICC storage information, characterized in that it is included in the ICC storage information in the form of 1 byte, 2 bytes, and / or 4 bytes Integer or Hexadecimal Code according to the system characteristics of the ICC.

According to the present invention, the network access code provides a uniqueness that is not duplicated at least in the corresponding ICC stored information, and each network access code is linked with at least one URL by the network access unit, and corresponds to at least one URL. It can be changed to a network access address.

According to a preferred embodiment of the present invention, the network connection code (for example, hexa code 0x0010) is a wired network connection address (for example, http://www.bizmodeline.co. kr) and a wireless network access address (for example, http://m.bizmodeline.co.kr) that can be connected through a wireless network.

For example, if the smart card with the ICC stored information including the network access code is interlocked with a wired client (eg, a personal computer equipped with a smart card reader) connected to the wired network, the network connection may use a network access code of 0X0010. If the smart card is interworked with a wireless client (e.g., a wireless terminal with a removable ICC card slot) connected to the wireless network, it is processed into a wired network connection address such as http://www.bizmodeline.co.kr. As described above, the network connection unit may use the same network access code as 0X0010, which may be processed to a wired network connection address, to a wired client as described above. It is possible to process into a wireless network connection address.

According to a preferred embodiment extending from the present invention, the network access code is a code value included in place of a URL and / or login information included in at least one or more ICC stored information included in a smart card, and is stored in the corresponding ICC stored information. And / or at least one or more personal information included in the region of the ICC memory.

For example, the ICC storage information included in the smart card may include at least one public certificate issued by a public certification authority. The public certificate may be a wireless public certification through a wireless network as well as a wired public certification service through a wired network. It is possible to provide services at the same time. Therefore, it is preferable that the network access code interworking with the public certificate as described above is processed into a wired network access address that can access a wired authentication server that can be connected through a wired network in a wired client connected to the wired network, and also a wireless network. It is preferable that the wireless client connected to is processed into a wireless network access address that can access a wireless authentication server that can connect through a wireless network.

Alternatively, the ICC stored information included in the smart card may include royalty information for providing at least one coupon or mileage point for a royalty service, and the royalty information may be wired royalty service through a wired network, as well as It is possible to simultaneously provide a wireless loyalty service over a wireless network. For example, it is obvious that a wired coupon provided through a wired client or a wired mileage point earned through the wired client should be available on the wireless network through the wireless client. Therefore, it is preferable that the network access code linked to the royalty information is processed into a wired network access address that can access a wired royalty-related server that can be accessed through a wired network in a wired client connected to the wired network. The wireless clients connected to the network are preferably processed into a wireless royalty access address that can access a wireless royalty related server that can be accessed through the wireless network.

In the present invention, the network connection information includes at least one network connection address (eg, wired URL and wireless URL and login information for a network device and / or server) and / or ICC stored information provided in the smart card and / or smart card. Information consisting of storage information (for example, a certificate, a coupon, mileage point information, etc.) interlocked with the network access address therein, and the wired client receives a wired / wireless interworking network access service according to the present invention through a network access unit. At least one database (e.g., internal D / B of the network connection unit, or D / B linked with the network connection management server, etc.) to register or provide a wired / wireless interworking network access service according to the present invention. Automatically extracted and / or generated from [Network connection information is information input in the first step of the present invention, which includes a wired / wireless network connection address (interworking information on the ICC storage information is optional), and in the second step of the present invention, the network connection part Generate a network access code to be mounted on the smart card based on the network access information.]

According to the present invention, the network access information provides a basis for generating a network access code to be included in the ICC stored information provided in the smart card by the network access unit, and the network access code generated as described above is provided in the smart card. The network connection address (and / or at least one or more personal information and interworking information included in the smart card memory or the ICC storage information) included in the ICC storage information is included in the network connection. Thus, the network connection may be based on at least one network [at the fourth step of the present invention] based on the network access code extracted and read from the ICC stored information provided on the smart card [at the third step of the present invention] via the ICC interface. It is possible to extract and generate a connection address.

In the present invention, the network access address may be a URL of a network device and / or server that a wired client can access through a wired network, and / or a URL of a network device and / or server that a wireless client can access through a wireless network. Network address information, and / or login information including client user accounts and passwords and / or authorized certificates (eg, when logging in via a public certificate) to the network device and / or server. As the configured information, the network connection unit extracts and generates a wired network connection address for the wired client and / or a wireless network connection address for the wireless client from the network access code included in the ICC stored information included in the smart card.

According to the present invention, a wired URL and / or a wireless URL included in a network connection address may be protocol information (for example, HTTP (HyperText Transfer Protocol), or FTP) to which a wired and / or wireless client connects to a corresponding network device and / or a server. (File Transfer Protocol), the addresses of network devices and / or servers, directory information inside the network devices and / or servers, network shared file information contained in the directories, and / or the shared files. Line parameter information, and so on.

Further, according to the present invention, the login information included in the network access address is information for the wired and / or wireless client to log in to the network device and / or the server, and is registered in the network device and / or the server during the registration process. At least one including a user account and password, an accredited certificate issued by at least one accredited certification authority, and a certificate password obtained from the accredited certificate, bank account number, credit card information, various transaction passwords, and / or security card numbers. At least one or more personally identifiable information, including one or more financial information, name, social security number, address, date of birth, telephone number, Deoxyribo Nucleic Acid (DNA) information, and / or a fingerprint registered with at least one biometric authority, Enemy including hand shape, iris, voice, face, signature, retina, vein It is also included in the information, such as one or more biometric login information. However, in order to use a user account and password as login information, the client must be registered with the corresponding network device and / or server, and in order to use a public certificate as the login information, the corresponding network device and / or server must be smart. The authentication server for the authentication certificate included in the card must be registered as an authentication server such as a corresponding network device and / or server.In order to use the biometric information as login information, the biometric information extraction unit is included in the wired and / or wireless client. Should be.

In the present invention, after the network access unit extracts and generates a network access code linked to the network access address based on the network access information input and / or extracted from the wired and / or wireless client, the network access code is smart through the ICC interface. It is included in the ICC storage information provided in the card, and the network connection address is stored in the corresponding network connection, and the wired and / or wireless client is extracted from the ICC storage information provided in the smart card through the ICC interface. Based on the read network access code, a wired and / or wireless client extracts and processes a network access address for connecting to a network device and / or a server through a corresponding network.

According to the present invention, the network connection unit corresponds to a card terminal device (eg, a terminal device equipped with an ICC interface) on a wired / wireless interworking network connection system according to the present invention. Ex> ATM, KIOSK, CAT, etc.], a wired and / or wireless client, and / or a server (for example, network connection execution server) on the network, characterized in that it is mounted on at least one or more locations.

According to a preferred embodiment of the present invention, the network connection portion is mounted in the form of a server application to a server (for example, a network connection execution server) on a network accessible by a wired network and / or a wireless network or the like.

According to another embodiment of the present invention, the network connection unit is mounted in the form of a client application to a wired client (eg, a personal computer equipped with an ICC interface), and a wireless client (eg, a personal communication system (PCS), Global System for Mobile communications (GSM), Personal Digital Cellular (PDC), Personal Handyphone System (PHS), Personal Digital Assistant (PDA), International Mobile Telecommunication (IMT) -2000 terminals, and Smart Phones It is mounted in the form of an agent program (Agent Program) of a handheld (wireless terminal).

According to another embodiment of the present invention, the network connection unit is additionally mounted in the form of a network connection module (Module) of the terminal application which is provided in the card terminal device (for example, KIOSK, ATM, etc.) or the terminal application (Terminal Application). It is mounted in the form of).

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

For example, in the preferred embodiment of the present invention described below, a network connection unit is mounted on a server (network connection execution server) on a network, user account and password are used as login information, and wired and / or registered by the wired client to the network connection unit. Based on the wireless network access information, the network connection part is processed into a network access code and included in the ICC stored information included in the smart card, and the wireless client extracts and reads the network access code from the ICC provided in the smart card, It deals with extracting and generating network connection addresses through connections and automatically connecting to network devices and / or servers on the wireless network.

However, as described above, the features of the present invention are not limited to the case of the preferred embodiment described below. For example, the network connection unit may be mounted inside a wired and / or wireless client or a card terminal device as well as a server on a network, and use of a user certificate and password as well as a public certificate or biometric information as login information. It is possible to use the network connection information registered in the wired client in the wireless client, as well as use the network connection information registered in the wireless client in the wired client.

1 is a simple diagram of a wired / wireless interworking network connection system.

Particularly, FIG. 1 illustrates some exemplary implementation methods for a wired / wireless interworking network access system according to the present invention, and (a) of FIG. 1 shows that the network connection unit 170 has a wired client 110 and / or a wireless client ( 140 is mounted inside the accessible network connection execution server 165, and (b) of FIG. 1 shows that the wired network connection unit 170a is mounted inside the wired client 110, and the wireless network connection unit ( 170b is for the case where it is mounted on the network connection execution server 165, (c) of FIG. 1 shows that the wired network connection unit 170a is inside the wired client 110, and the wireless network connection unit 170b is the wireless client. 140 is mounted on the inside. Of course, those skilled in the art to which the present invention pertains have various implementation methods that can be extended from the wired / wireless interworking network connection system proposed by the present invention based on some implementation methods mentioned in FIG. It is obvious that it can be recognized.

Hereinafter, a configuration of a preferred embodiment of a wired / wireless interworking network access system according to the present invention will be described with reference to FIG.

Referring to FIG. 1 according to a preferred embodiment of the present invention, the wired / wireless interworking network access system interworks with the wired client 110 via the ICC interface 105 mounted on the wired client 110, and connects to the wireless client 140. Smart card 100 that can interoperate with wireless client 140 via onboard ICC interface 105, ICC interface 105 and ICC interface 105 that connect the smart card 100 and wired client 110. And a wired client 110 connected to the smart card 100 through a wired network, and connected to a wired server 125 on a wired network, a network connection execution server 165, a network connection management server 180, and the like through a wired network. Interworking with the smart card 100 through the ICC interface 105, the ICC interface 105 connecting the smart card 100 and the wireless client 140, through a wireless network And a wireless client 140 connected to a wireless server, a network connection execution server 165, or the like on the wireless network.

The smart card 100 is a handheld-based storage medium equipped with an ICC that meets at least one integrated circuit chip (ICC) standard including ISO / IEC 7816 and / or ISO / IEC 14443. It is characterized in that it is linked to the wired client 110 through the ICC interface 105 mounted on 110, and to the wireless client 140 through the ICC interface 105 mounted on the wireless client 140. .

According to the present invention, the smart card 100 is linked to the wired client 110 as an ICC (eg, a contact card, a contactless card, a hybrid card, a combination card, etc.) mounted on a credit card sized plastic card, and wirelessly. All forms of ICC ((e.g., Subscriber Identity Module (SIM), Universal Identification Module (UIM), Universal Subscriber Identity Module (USIM), etc.) interlocked with the wireless terminal through the removable ICC interface 105 mounted on the terminal Include.

In addition, the smart card 100 and / or the ICC storage information included in the smart card 100 may include a sufficient memory area in which the network access code of the present invention may be included, and a network access code in the memory area. It specifies that there is a means for inclusion.

According to the preferred embodiment of the present invention, the ICC stored information included in the smart card 100 includes a wired network access address and / or a wireless client (where the wired client 110 can access the wired server 125 through a wired network). A network access code associated with at least one network access address including a wireless network access address for accessing a wireless server through a wireless network is stored, and the wired server 125 is linked with the network access code. And / or at least one login information for logging in to the wireless server, wherein the network access code and login information are at least one security system specified in at least one standard including ISO / IEC 7816 and / or ISO / IEC 14443. Confidentiality, Authentication, Integrity, And nonrepudiation.

The ICC interface 105 for interworking the wired client 110 and / or the wireless client 140 and the smart card 100 proposed by the present invention may include the smart card 100 and the wired client 110 and the present invention. And / or an apparatus and / or system for interworking with the wireless client 140, based on at least one or more smart card standards that satisfy ISO / IEC 7816 and / or ISO / IEC 14443, etc. Through the same protocol, it is characterized in that the data exchange and / or transaction (Transaction) between the card terminal device and the smart card 100.

According to the smart card standard that satisfies ISO / IEC 7816 and / or ISO / IEC 14443, the ICC interface 105 defines the card terminal device as the master mode, and the half-duplex that defines the smart card 100 as the slave mode. Half duplex) communication. For example, when the wired client 110 and / or the wireless client 140 sends a series of commands to the smart card 100 via the ICC interface 105, the smart card 100 performs a series of tasks accordingly. The result is returned to the card terminal device via the ICC interface 105.

According to a preferred embodiment of the present invention, the ICC interface 105 includes a contact interface including a contact contact based on ISO / IEC 7816 and / or a contactless interface including a contactless contact based on ISO / IEC 14443 and the like. Etc. are provided.

The contact interface is an interface method based on ISO / IEC 7816, in which the wired client 110 and / or the wireless client 140 supply electric power to the ICC and use electrical contact as a means for data exchange. The smart card 100 interworking with the wired client 110 and / or the wireless client 140 through the contact interface as described above includes an electrical chip (Chip On Board; COB), and the smart card 100 ) Is inserted into the contact interface, the contact interface supplies power to the ICC through at least one or more contact points (e.g., VCC contact points) of the contact plates, and through at least one or more contact points (e.g., I / O contact points). Provides data exchange between the ICC and the card terminal device.

Contactless Interface An interface based on ISO / IEC 14443, wherein the wired client 110 and / or wireless client 140 supplies power to the ICC and does not use electrical contact as a means for data exchange. The smart card 100 interworking with the card terminal device through the contactless interface as described above includes an antenna interworking with the card terminal device through capacitive coupling and / or inductive coupling, and the like. When 100 accesses the contactless interface, the contactless interface supplies power to the ICC through the antenna of the smart card 100 in at least one of electrostatic coupling and / or electromagnetic induction, and the ICC and the wired client 110. And / or provide data exchange between the wireless clients 140.

The wired client 110 is interlocked with the smart card 100 through the ICC interface 105 among the clients connected to the wired network, the wired server 125 for providing content to the client through the wired network, and the wired network A network connection execution server 165 on which the network connection unit 170a is mounted, and a client linked to the network management server 180 for controlling and managing the network connection unit 170a.

According to a preferred embodiment of the present invention, the wired client 110 has a wired browser 115 (eg, Internet Explorer) that can be provided with at least one or more contents by accessing the wired server 125 and the wired browser 115. A network relay module 120 for providing a wired / wireless interworking network access relay service proposed by the present invention is provided.

The wired browser 115 is a means for receiving at least one or more contents by accessing the wired server 125 through a protocol promised between the wired client 110 and the wired server 125. At least one wired browser 115 is mounted.

The network relay module 120 that provides the wired / wireless interworking network access relay service proposed by the present invention to the wired browser 115 may include a smart card (IPC) through an interprocess communication (IPC) and / or a direct data exchange (DDE). 100 is a module for relaying the wired browser 115, the network connection execution server 165 and the wired browser 115, and / or the network connection management server 180 and the wired browser 115, the preferred embodiment of the present invention In Figure 1 according to the method serves as a terminal application provided in a wired network equipped with an ICC interface 105.

The wired server 125 is a server through which the wired browser 115 provided in the wired client 110 can be connected and provided with content through a wired network. The wired server 125 stores at least content to be provided to the wired client 110. At least one content D / B 130 is provided, and the wired server 125 is a wireless server 140 and a member D / B 135 connected to the wireless client 140 through a wireless network according to the present invention. ) Are shared.

The wireless client 140 is interworked with the smart card 100 through the ICC interface 105 among the clients connected to the wireless network, the wireless server for providing content to the client via the wireless network, and the network connection on the wired network And a client interlocked with the network connection execution server 165 and the like.

According to a preferred embodiment of the present invention, the wireless client 140 includes a wireless browser 145 (eg, a WAP browser) capable of connecting to a wireless server and receiving at least one or more contents, and the wireless browser. A network relay agent 150 for providing a wired / wireless interworking network access relay service according to the present invention is provided to the target 145.

The wireless browser 145 is a means for receiving at least one or more contents by accessing the wireless server through a protocol promised between the wireless client 140 and the wireless server. Generally, the wireless client 140 includes at least one wireless browser ( 145 is mounted.

The network relay agent 150 providing the wired / wireless interworking network access relay service proposed by the present invention for the wireless browser 145 may be connected to the smart card 100 through a virtual machine mounted in the wireless terminal. As a wireless terminal agent program for relaying the wireless browser 145, the network connection execution server 165 and the wireless browser 145, and / or the network connection management server 180 and the wireless browser 145, a preferred embodiment of the present invention. In Figure 1 according to the method serves as a terminal application provided in the wireless network equipped with the ICC interface 105.

The wireless server is a server through which the wireless browser 145 provided in the wireless client 140 can access the wireless network 145 to provide contents, and at least one or more contents storing the contents to be provided to the wireless client 140. The D / B 160 is provided, and the wireless server also shares the member D / B 135 with the wired server 125 to which the wired client 110 connects through the wired network according to the present invention. It is characterized by that.

According to the present invention, since the wired server 125 and the wireless server on the wired / wireless interworking network system share the member D / B 135, the smart card 100 proposed by the present invention on the wired / wireless interworking network system. It is possible to provide wired and wireless interworking access service.

According to (a) of FIG. 1, the network connection execution server 165 is a server connected to the wired client 110 and / or the wireless client 140 on a network mounted on the network, which the present invention proposes. The server is mounted. That is, it is apparent that all servers equipped with the network connection unit 170 of the present invention on the wired or wireless network can perform the role of the network connection execution server 165.

The network connection unit 170 mounted on the network connection execution server 165 is provided with at least one network information D / B 175, and the network information D / B 175 is a network registered by the wired client 110. At least one or more URLs including wired URLs and / or wireless URLs of the device and / or server are included, and the URLs are shared by the wired client 110 and the wireless client 140.

According to a preferred embodiment of the present invention, the network connection execution server 165 is equipped with a respective network connection unit 170 corresponding to each smart card 100, and each network connection unit 170 has a respective smart connection. At least one wired URL and / or wireless URL corresponding to the network access code and / or login information included in the ICC storage information included in the card 100 is stored in the network information D / B 175.

Accordingly, the network connection unit 170 mounted on the network connection execution server 165 extracts and reads at least one network access code from the ICC stored information provided in the smart card 100 by the wired client 110. Then, the wired URL corresponding to the network access code is extracted and processed from the network information D / B and transmitted to the wired client 110, and the wireless client 140 is stored in the ICC stored information provided in the smart card 100. After extracting and reading at least one network access code, the wireless URL corresponding to the network access code is extracted and processed from the network information D / B 175 and transmitted to the corresponding wireless client 140.

According to a preferred embodiment of the present invention, each network connection unit mounted on the network connection execution server 165 may include an encryption certificate such as a corresponding 3DES (Data Encryption Standard) and / or an authorized certificate included in the smart card 100. By encrypting with a public key and / or digital signature, etc., access to the network connection execution server 165 and / or each network connection in an improper manner is blocked. However, in the present invention, since the encryption and decryption process using the encryption method may obscure the gist of the present invention, a detailed description thereof will be omitted.

According to various embodiments of the present disclosure, the network connection unit 170 is mounted on the network connection execution server 165 (eg, FIG. 1), as well as mounted inside the wired client 110 ( For example, it is possible to (B), (C) of FIG. 1, and / or to be mounted (eg, (C) of FIG. 1) inside the wireless client 140.

The network access management server 180 is a server that controls and manages the network connection unit 170 on a wired or wireless network. In the case of (a) or (b) of FIG. 1, at least one network connection unit 170 is Since the network connection management server 180 is interlocked with the network connection execution server 165 because it is mounted in the network connection execution server 165, the network connection unit 170 is connected to each client as shown in FIG. If mounted, it is apparent that the network access management server 180 is directly linked with the corresponding client.

Referring to FIG. 1 according to a preferred embodiment of the present invention, the network access management server 180 includes a user information D / B 185 and a network information D / B 190.

The user information D / B 185 of the network access management server 180 includes at least one or more network access codes in the ICC storage information included in the smart card 100, according to the present invention. As the user information of the smart card 100 that exists in at least one wired client 110, a wireless client 140, and / or a network connection execution server 165, the network connection unit 170 interworking with 100 is the user. The information D / B 185 includes smart card unique information (eg, smart card number) that can distinguish each smart card 100 on the network. Accordingly, the network connection execution server 165 distinguishes each network connection unit 170 corresponding to each smart card 100 based on the smart card unique information included in the user information D / B 185.

The network information D / B 190 of the network connection management server 180 is a database for backing up the network information D / B 175 included in the network connection unit 170, and the network connection unit 170 exists in each client. (E.g., (b) and (c) of FIG. 1), the network connection unit 170 provided in the client is always updated with the latest information.

Hereinafter, based on (a) of FIG. 1 according to a preferred embodiment of the present invention, the wired client 110 registers new network connection information in the network connection unit 170, and the network connection unit 170 registers the network connection information. Generating a network access code based on the ICC storage information included in the smart card 100 and the wireless client 140 included in the ICC storage information provided in the smart card 100 through the above process. The network access code is extracted and read and provided to the network access unit 170. The network access unit 170 extracts and processes the wireless URL based on the network access code, and transmits it to the wireless client 140. The wireless client 140 ) And a preferred implementation process for accessing a wireless server through a wireless network based on the above URL.

However, as described above, the implementation process of the present invention, which is presented through the following flowchart and description, is only one of the preferred processes among the various implementation processes proposed by the present invention, and the implementation process of the present invention is in the field to which the present invention belongs. It is intended that the skilled person will include all implementations that can be inferred and extended based on the flowcharts, descriptions, and claims described below. For example, it is apparent that various implementations occur in addition to the implementations described below according to the location of the network connection unit 170.

In addition, in describing the implementation process of the present invention through the following flowchart and description, the wired client 110 includes the network access code as ICC storage information included in the smart card 100 through the ICC interface 105 or Or the security system used in the process of extracting and reading the network access code from the ICC stored information included in the smart card 100 through the ICC interface 105 or the network connection unit 170. The encryption and / or decryption process according to the encryption algorithm is clearly recognized by those of ordinary skill in the art to which the technology of the present invention belongs, and it is rather difficult to explain the detailed process because it may obscure the gist of the present invention. The description will be omitted. However, the present invention is intended to indicate that all kinds of security systems and / or encryption algorithms are clearly recognized by those skilled in the art.

2 is a simple flowchart illustrating a process in which the wired client 110 and the network connection unit 170 interoperate to include a new network access code in the ICC stored information included in the smart card 100. [1/2]

According to a preferred embodiment of the present invention, in the process of updating the ICC storage information in the smart card 100, it is preferable that the network access code basically provided by the ICC storage information issuing authority is basically included in the ICC storage information. 2 illustrates a process of adding a new network access code to ICC storage information included in the smart card 100 in which at least one network access code is already included as described above.

Referring to FIG. 2, the process of adding a new network access code to the ICC storage information included in the smart card 100 is performed by the present invention in the ICC interface 105 mounted on the wired client 110. It is initiated through the process of inserting the smart card 100 provided with, and driving the network relay module 120 mounted on the wired client 110.

When the network relay module 120 is driven to the wired client 110 through the process (200), the network relay module 120 through the ICC interface 105, such as ISO / IEC 7816 and / or ISO / IEC 14443 Through the validity authentication means defined in at least one smart card standard including the authentication to validate the confidentiality, authentication, integrity, and non-repudiation for the smart card 100 (202).

If the validity of the smart card 100 is not authenticated (204) in the above process, the network relay module 120 mounted on the wired client 110 and / or the wired client 110 is as described in the present invention. The process of adding the new network access code to the ICC storage information included in the smart card 100 is terminated.

On the other hand, if the validity of the smart card 100 is authenticated (206), smart card unique information (for example, smart card serial number) for the smart card 100 from the smart card 100 through the ICC interface 105 ), And transmits the extracted smart card unique information to the network connection execution server 165 on which the network connection unit 170 linked with the smart card 100 is mounted (208).

When the smart card specific information is transmitted from the network relay module 120 mounted on the wired client 110, the network connection execution server 165 performs network connection to the smart card 100 based on the smart card unique information. A user interface for selecting and executing a network connection unit 170 mounted on the server 165 and exchanging information and data between the network connection unit 170 and the wired client 110; UI 212 to the wired client 110.

According to FIG. 2, the wired client 110 instructs the network connection unit 170 to input network connection information or generate a network connection code based on the user interface provided by the network connection unit 170.

The network connection unit 170 corresponding to the smart card 100 linked with the wired client 110 is executed through the above process, and exchanges information and data with the network connection unit 170 through the wired client 110. If a user interface is provided, the network connection unit 170 should start a process of registering new network connection information corresponding to the process of FIG. 2 from the wired client 110 through the user interface, or corresponds to the process of FIG. Determining which should initiate the network access service process.

If it is necessary to start the network access service process (214), the network connection unit 170 starts the network access service based on the process shown in FIG.

On the other hand, if a process of registering new network connection information is started (218), the wired client 110 inputs new wired network connection information and new wireless network connection information through a user interface provided by the network connection unit 170 (220). ).

When the new wired and wireless network access information is input to the network access unit 170 through the above process, the network access unit 170 authenticates the validity of the input new wired and wireless network access information (222). For example, the network connection unit 170 attempts to access the wired server 125 based on the wired URL information included in the wired network connection information, or connects to the wireless server based on the wireless URL information included in the wireless network connection information. Whether the wired server 125 and / or the wireless server are currently active on the network and can log in based on the login information included in the wired network connection information and / or the wireless network connection information. Validity is verified through the process of checking whether or not.

If the validity of the wired and wireless network connection information is not authenticated in the process (224), the network connection unit 170 generates an error message and outputs it to the wired client 110, and the wired client 110 and the network connection unit. Initialize the wired / wireless interworking network access system including 170 (226).

On the other hand, if the validity of the wired and wireless network access information is authenticated in the process (228), the network connection unit 170 is a smart card that will include a network access code generated based on the network access information through the wired client 110 ( 100 is checked for validity (230). For example, in order for the network access code to be included in the ICC storage information included in the smart card 100, the ICC storage information that may include the network access code in the smart card 100 must be issued and / or post-issued. In addition, the ICC storage information should have a free storage space that additionally includes a newly generated network access code.

If the validity of the smart card 100 including the network access code is not authenticated in step 232, the network connection unit 170 generates an error message and outputs the error message to the wired client 110. Initializes the wired / wireless interworking network access system including the network connection unit 110 and the network connection unit 170 (226).

On the other hand, if the validity of the smart card 100 included in the network access code is authenticated in step 234, network information D / B (included in the network connection unit 170) 175 and already included in the ICC storage information included in the smart card 100 based on the backup information about the network access code included in the network information D / B 190 included in the network access management server 180, and the like. A new network access code that is not duplicated with the existing network access code is generated (236). For example, if the network access code is a code value in the form of a 2-byte integer, there are 65536 network access codes that do not overlap.

As described above, when a network access code that is not duplicated with the network access code included in the ICC storage information included in the smart card 100 is generated in the network access unit 170, the network access unit 170 connects the wired client 110. The new network access code is mounted on the ICC storage information included in the smart card 100 (238).

According to a preferred embodiment of the present invention, the network connection unit 170 repeatedly repeats the process of including the new network access code generated as described above in the ICC storage information included in the smart card 100 successfully. Try (240).

If the newly generated network access code is successfully performed on the ICC storage information included in the smart card 100 in the process (242), the network access unit 170 connects to the wired network on which the network access code is generated. Information and wireless network connection information are further stored in the network information D / B 175 of the network connection unit 170 (244).

If the wired network access information and the wireless network access information are additionally stored in the network information D / B 175 of the network access unit 170 as described above, the contents stored in the network information D / B 175 are not changed. If not (246), the network connection unit 170 immediately registers the network connection information to terminate the process of additionally mounting the new network access code to the ICC storage information provided in the smart card 100.

On the contrary, if the contents stored in the network information D / B 175 are changed in the process of additionally storing the wired network access information and the wireless network access information in the network information D / B 175 of the network access unit 170 as described above. In operation 248, the network connection unit 170 may provide the changed information to the network information D / B 190 of the network access management server 180. Reference numeral 190 is used as a backup of the network information D / B 175 included in the network connection unit 170 (250).

3 is a diagram illustrating a process in which the wireless client 140 extracts and reads a network access code from ICC storage information included in the smart card 100, processes the wireless access code through a network connection unit 170, and accesses the wireless server. Simple flow chart. [Step 3/4/5]

Referring to FIG. 3, the process of extracting the wireless URL for the wireless server based on the network access code included in the ICC storage information included in the smart card 100 is mounted on the wireless client 140. Initiated through the process of inserting the smart card 100 with the ICC storage information proposed by the present invention to the ICC interface 105, and driving the network relay agent 150 mounted on the wireless client 140 do.

When the network relay agent 150 is driven to the wireless client 140 through the process (300), the network relay agent 150 through the ICC interface 105, such as ISO / IEC 7816 and / or ISO / IEC 14443 Through the validity authentication means defined in at least one smart card standard including the authentication to validate the confidentiality, authentication, integrity, and non-repudiation for the smart card 100 (302).

If the validity of the smart card 100 is not authenticated in the above process (304), the network relay module 120 mounted on the wired client 110 and / or the wired client 110 is in accordance with the present invention The process of extracting and reading the network access code from the ICC storage information included in the smart card 100, processing the wireless URL through the network connection unit 170, and ending the process of accessing the wireless server.

On the other hand, if the validity of the smart card 100 is authenticated (306), smart card unique information (for example, smart card serial number) for the smart card 100 from the smart card 100 through the ICC interface 105 ), And transmits the extracted smart card unique information to the network connection execution server 165 in which the network connection unit 170 linked to the smart card 100 is mounted (308).

When the smart card specific information is transmitted from the network relay agent 150 mounted in the wireless client 140, the network connection execution server 165 performs network connection to the smart card 100 based on the smart card unique information. A user interface for selecting and executing a network connection unit 170 mounted on the server 165 and exchanging information and data between the network connection unit 170 and the wireless client 140; UI 312 to the wireless client 140.

According to FIG. 3, the wireless client 140 interoperates with the network connection unit 170 based on a user interface provided by the network connection unit 170 to obtain a network access code from the ICC stored information included in the smart card 100. Extracting and reading, and processing the wireless URL through the network connection unit 170 to access the wireless server.

Through the above process, the network connection unit 170 corresponding to the smart card 100 interworking with the wireless client 140 is executed, and exchanges information and data with the wireless client 140 through the network connection unit 170. If a user interface is provided, the network connection unit 170 should initiate a process of registering new network connection information corresponding to the process of FIG. 2 from the wired and / or wireless client 140 through the user interface, or FIG. Determine the network access service process corresponding to the process of 3 to start.

If the process of registering new network connection information is started 314, the wired client 110 inputs new wired network connection information and new wireless network connection information through a user interface provided by the network connection unit 170. In operation 316, a network access code is generated based on wired and wireless network access information and included in the ICC storage information included in the smart card 100.

On the other hand, if it is necessary to start the network access service process (318), the network connection unit 170 is a network included in the network connection unit 170 based on the network information D / B 190 mounted on the network connection management server 180 It is determined whether the process of updating the information D / B 175 with the latest information is performed (320).

If it is necessary to update the network information D / B 175 included in the network connection unit 170 to the latest information in step 322, the network connection unit 170 may determine network information of the network connection management server 180. The network information D / B 175 of the network connection unit 170 is updated to the latest version based on the D / B 190 (324).

On the contrary, when the process of updating the network information D / B 175 included in the network connection unit 170 to the latest information is ended in step 326, the network connection unit 170 receives the corresponding network information D / B 175. The wireless server list is extracted and generated, and the wireless server list generated as described above is provided to the wireless client 140 (328).

(Hereinafter, description (b) of FIG. 3)

When the wireless server list is provided to the wireless client 140 through the above process, the wireless client 140 selects a wireless server to be connected through the wireless network based on the provided wireless server list (330).

When the wireless client 140 selects a wireless server to be connected through the wireless network from the wireless server list, the network relay agent 150 corresponds to the network access code corresponding to the selected wireless server in the ICC stored information included in the smart card 100. After extracting and reading the login information 332, the network access code is transmitted to the network access unit 170, thereby requesting wireless URL transmission corresponding to the network access code (334).

When the network access code is transmitted from the network relay agent 150 of the wireless client 140 as described above, the network access unit 170 extracts a wireless URL corresponding to the network access code from the network information D / B 175. And process (336) and transmit (338) the network relay agent 150 of the wireless client 140.

When the wireless URL for the selected wireless server is transmitted from the network connection unit 170, the network relay agent 150 drives the wireless browser 145 mounted on the wireless client 140 (340). As described above, the wireless URL transmitted from the network connection unit 170 and the login information extracted from the smart card 100 are provided to the wireless browser 145, thereby attempting to access the wireless server through the wireless browser 145. (342).

According to the present invention, the process of accessing the wireless server through the wireless browser 145 based on the wireless URL transmitted from the network connection unit 170 and the login information extracted from the smart card 100 is performed as described above. It is performed repeatedly until completion (344).

If the process of accessing the wireless URL to the wireless server by the wireless browser 145 of the wireless client 140 through the above process is successfully performed (346), the wireless browser 145 is the network relay agent 150 By extracting and reading the network access code from the ICC storage information included in the smart card 100 through the process of logging in to the wireless server based on the login information provided from the), and processing the wireless URL through the network connection unit 170 The process of accessing the wireless server is performed (348).

According to the present invention, a network access code generated based on wired and / or wireless network access information is mounted on a smart card so that a wired (or wireless) client is connected to a device on a wired (or wireless) network based on the network access code. Or by generating (or extracting) a connection address for connecting to the server and automatically connecting based on the connection address,

With one smart card, it is possible to use wired and wireless networks in conjunction. (For example, a site account used on a wired network can be linked and used on a wireless network, and content information (coupon, etc.) provided by a wired (or wireless) mounted on a smart card can be used wirelessly (or wired). )

According to the present invention, by storing the network access code within a few bytes without directly storing the URL, which is a long string, on the smart card, it is possible to efficiently use the insufficient smart card memory than when storing the URL of the long string directly. It has the advantage of storing more information than URL of string.

Claims (31)

In the smart card, Smart card with ICC stored information including at least one network access code for allowing a client located on a wired and / or wireless to connect to at least one or more network devices and / or servers via a wired and / or wireless network. . The method of claim 1, wherein the network access code, A smart card comprising at least one URL and / or login information. The network access code according to claim 1 or 2, Linked to at least one URL by the network connection, or Smart card, characterized in that changed to a network access address corresponding to at least one or more URLs. The method of claim 1, wherein the network access code, And a wired network access address that can be accessed through a wired network and a wireless network access address that can be accessed through a wireless network by the network connection unit. The method of claim 1, wherein the network access code, Smart card, characterized in that associated with at least one or more personal information. The method of claim 1, wherein the network access code, Smart card, characterized in that associated with at least one public certificate issued by a public certification authority. The method of claim 1, wherein the network access code, Smart card, characterized in that associated with the loyalty information providing at least one or more coupons, and / or mileage, and / or points for the loyalty service. The method of claim 1, wherein the client, A wired terminal including a smart card reader, and / or Smart card, characterized in that it comprises at least one or more wireless terminal on which the ICC is mounted or detached. The method of claim 1, wherein the ICC stored information, Smart card comprising at least one public certificate issued by a public certification authority. The method of claim 1, wherein the ICC stored information, A smart card comprising at least one coupon for loyalty services, and / or loyalty information for providing miles and / or points. The method of claim 3 or 4, wherein the network connection address is Network address information including the URL of the network device and / or server to which the wired client connects via the wired network, and / or the URL of the network device and / or server to which the wireless client connects via the wireless network, and / or A smart card comprising login information including at least one of a client's user account and password and / or a public certificate for the network device and / or server. The method of claim 2, wherein the URL information, Protocol information (HyperText Transfer Protocol (HTTP) or File Transfer Protocol (FTP)) that wired and / or wireless clients connect to network devices and / or servers, Address information of the network device and / or server; Directory information within the network device and / or server; Network shared file information included in the directory, Smart card comprising at least one parameter information provided in the shared file. According to claim 2, The login information of the network connection address, The wired and / or wireless client uses the user account and password registered with the network device and / or server during the registration process, A public certificate issued by at least one public certification authority, and / or a certificate password obtained from the public certificate; At least one financial related information including at least one of a bank account number, credit card information, various transaction passwords, and a safety card number; At least one or more personally identifiable information including at least one of a name, social security number, address, date of birth, telephone number, and DNA (Deoxyribo Nucleic Acid) information; A smart card comprising at least one biometric information including a fingerprint, a hand, an iris, a voice, a face, a signature, a retina and a vein registered with at least one biometric authority. The method of claim 1, wherein the smart card, Smart card, characterized in that mounted on or detached from the wireless terminal. A smart card having at least one network access code for connecting a client located on a wired and / or wireless network to at least one or more network devices and / or servers via a wired network and / or a wireless network; An ICC interface for extracting and reading the network access code from the smart card; Extracting and / or extracting a network connection address for a network device and / or a server connected via at least one of a wired network and / or a wireless network to which a client is connected based on the extracted and read network access code as described above; Or creating a network connection; And A wired / wireless interworking network connection system using a smart card, including; a network connection management server managing the network connection unit. The method of claim 15, wherein the network access code, Wired / wireless interworking network access system using a smart card, characterized in that it comprises at least one or more URL and / or login information. The method of claim 15, wherein the network access code, Linked to at least one URL by the network connection, or Wired / wireless interworking network access system using a smart card, characterized in that for changing to a network connection address corresponding to at least one or more URLs. The method of claim 15, wherein the network access code, A wired / wireless interworking network connection system using a smart card, wherein the network connection unit is processed into a wired network connection address that can be connected through a wired network and a wireless network connection address that can be connected through a wireless network. The method of claim 15, wherein the network access code, Wired / wireless interworking network access system using a smart card, characterized in that the interlocking with at least one or more personal information. The method of claim 15, wherein the network access code, Wired / wireless interworking network access system using a smart card, characterized in that the interlocking with at least one public certificate issued from an authorized certification authority. The method of claim 15, wherein the network access code, A wired / wireless interworking network access system using a smart card, characterized in that it interlocks with at least one coupon for providing a royalty service, and / or mileage, and / or loyalty information. The method of claim 15, wherein the client, A wired terminal including a smart card reader, and / or Wired / wireless interworking network connection system using a smart card, characterized in that it comprises at least one or more wireless terminals to which the ICC is mounted or detached. The method of claim 15, wherein the network connection address, Network address information including the URL of the network device and / or server to which the wired client connects through the wired network, and / or the URL of the network device and / or server to which the wireless client connects through the wireless network, and / or Wire-wireless interworking network access system using a smart card, characterized in that it comprises a login information including at least one of a client's user account and password and / or a public certificate for the network device and / or server. The method of claim 16 or 17, wherein the URL information, Protocol information (HyperText Transfer Protocol (HTTP) or File Transfer Protocol (FTP)) that wired and / or wireless clients connect to network devices and / or servers, Address information of the network device and / or server; Directory information within the network device and / or server; Network shared file information included in the directory, Wire / wireless interworking network access system using a smart card, characterized in that it comprises at least one or more parameter information provided in the shared file. The method of claim 16, wherein the login information of the network connection address, The wired and / or wireless client uses the user account and password registered with the network device and / or server during the registration process, A public certificate issued by at least one public certification authority, and / or a certificate password obtained from the public certificate; At least one financial related information including at least one of a bank account number, credit card information, various transaction passwords, and a safety card number; At least one or more personally identifiable information including at least one of name, social security number, address, date of birth, telephone number, and DNA (Deoxyribo Nucleic Acid) information; Wired / wireless using a smart card, characterized in that it includes at least one or more biometric information including a fingerprint, hand, iris, voice, face, signature, retina, vein registered in at least one biometric authority Interlocking network access system. The method of claim 15, wherein the network connection unit, Card terminal devices or wired / wireless interfaces; Auto Teller Machine (ATM); KIOSK; Credit Authentication Terminal (CAT); Wired and / or wireless client terminals; Servers on the network; Wired / wireless interworking network connection system using a smart card, characterized in that mounted on at least one of the locations. The network connection unit according to claim 15 or 26, Is loaded in the form of a server application, or It is loaded in the form of a client application for a client terminal, or It is loaded in the form of an agent program for a wireless terminal, or Is mounted in the form of a network connection module (Module) of the terminal application provided in the card terminal device, or A wired / wireless interworking network connection system using a smart card, which is mounted in the form of a terminal application. The method of claim 15, wherein the smart card, Wired / wireless interworking network connection system using a smart card, characterized in that mounted on or detached from the wireless terminal. Wired network connection information that allows a wired or wireless client to connect to a network device and / or server on a wired network through at least one or more wired clients and / or a network device on a wireless network that has a wired or wireless client through at least one or more wireless clients, and And / or registering network connection information including wireless network connection information for accessing the server to the network connection unit; A second step of generating, by the network access unit, a network access code based on the wired and / or wireless network access information, and mounting the generated network access code to a smart card through an interface; A second step of the wired or wireless client extracting the network access code installed in the smart card through the interface and providing the extracted network access code to the network access unit; Extract and / or generate a wired network connection address that allows the network connection to connect a wired client to a network device and / or server on a wired network based on the extracted network access code, or to generate a wireless client to a network device on a wireless network And / or extracting and / or generating a wireless network access address for accessing the server; And Automatically connecting the wired client to a network device and / or server on a wired network or automatically connecting the wireless client to a network device and / or server on a wireless network based on the generated wired or wireless network connection address. Step 5, wired and wireless interworking network access method using a smart card comprising a. The method of claim 29, Upon change of the ICC stored information and / or network access code, Adding, and / or deleting, and / or updating the ICC stored information and / or network access code. The method of claim 29, wherein the network connection information, Use the network connection information registered in the wireless client in the wired client, or A wired / wireless interworking network connection method using a smart card, characterized in that the wireless client uses the network connection information registered in the wired client.