KR20050032727A - System and method for storing action history information by using smart card and recording medium for achieving it - Google Patents

Abstract

A system and method for storing action history information based on a smart card is provided to load the action history information on the smart card applied to an application program for a client terminal, and automatically process the action using the at least one action history information on the smart card. An action extracting unit(520) connects a smart card with a client terminal, and extracts at least one action information applied when a user uses an application program using an MMI(Man Machine Interface). An action history information storing unit(525) generates and stores the extracted action information according to the order of a generated time. An action history information processing unit(530) processes the stored action history information to a data set or a program code to be stored in a predetermined memory of the smart card. An action history information mounting unit(545) mounts the processed action history information in the memory of the smart card through a smart card terminal.

Description

Smart card-based action history information storage system and method and a recording medium for the implementation of the method {System and Method for Storing Action History Information by Using Smart Card and Recording Medium for Achieving It}

According to the present invention, at least one action history information mounted on the smart card when the action history information applied to the application program of the client terminal is mounted on the smart card of the client and the application program is used using the smart card. The present invention relates to a smart card-based action history information storage system and method for enabling automated action processing, and a recording medium for implementing the method.

Extract at least one user action applied to a user interface (eg, a graphical user interface (GUI)) through at least one or more input devices (eg, a keyboard, and / or a mouse, etc.) The function of defining a batch function with a specific shortcut key to process at least one or more actions in a specific batch is provided in an application program (for example, a word processor) that needs to repeatedly perform at least one or more actions. It is.

For example, in the case of Hangul Hangul and computer company, click the “Alt-L” key to edit the letter shape, and click “Alt-B” to process the letter shape in the letter dialog box. In addition, to apply the letter shape change, click “Alt-D”. By extracting specific key data input through the keyboard as described above, and defining the extracted key as a continuous arrangement function, the letter shape It is possible to define a specific function that handles bold.

However, the existing batch function definition method as described above is a part of the application configuration, and since the defined batch function is included in the data file of the corresponding application, it is impossible to use a specific batch function in another data file. It is included.

Alternatively, even if the batch function is provided on a hard disk of a computer provided with a corresponding application rather than a data file, the batch function may be used only in the corresponding application and cannot be used in an application provided in another computer. It includes.

In addition, the batch function may include a function of manipulating a part of the configuration of the corresponding application program. In this case, a malicious code corresponding to a virus may be included in a batch function included in a data file and / or a hard disk of a computer. It may be included or distributed, or the batch function repeatedly performs a specific task, thereby depleting system resources of the computer (e.g., infinite loop) and depleting memory and central processing unit (CPU) computing functions. There is a problem.

An object of the present invention to solve the above problems is to provide a smart card-based action history information storage system and method, and to record the electronic information management program for implementing the above method. In providing.

The present invention provides a smart card having a function of storing action history information for an application program through a MMI (Man Machine Interface), and storing action history information with the smart card. Smart card based action history information storage system and method, and a recording medium for implementing the method.

The smart card-based action history information storage system includes a smart card including a memory for storing at least one or more information, and a card terminal for the smart card is mounted or connected, and used by the smart card owner. It characterized in that it comprises a client terminal, after connecting the smart card with the client terminal through the smart card card terminal, when the smart card owned user uses the application program of the client terminal, a predetermined MMI (Man An action extractor for extracting at least one action information applied when the user uses the application program using a machine interface, and a predetermined action sequentially listing the action information of the user extracted by the action extractor in order of occurrence time Histo Action history information processing for processing the action history information storage unit for generating and storing information, and processing the action history information stored in the action history information storage unit into a data set and / or program code stored in a predetermined memory in the smart card. And an action history information mounting portion for mounting the action history information processed by the action history information processing portion to the memory in the smart card through the smart card card terminal.

Further, according to the present invention, the smart card-based action history information storage system, after the action history information is stored in the memory in the smart card, the smart card owned user through the smart card card terminal through the smart card After connecting with the client terminal, when the application program of the client terminal is reused, the action history information stored in the memory of the smart card is received from the card terminal, and the received action history information is read and included in the action history information. And an action history information reader for extracting at least one action as action control information, and an action controller for automatically controlling a user action on the application program based on the action control information extracted by the action history information reader. This can be done.

The smart card-based action history information storage method may include a smart card having a memory for storing at least one or more information, and a card terminal for the smart card mounted or connected to the smart card owner. A method for storing smart card-based action history information comprising a client terminal, comprising: connecting the smart card to the client terminal through the smart card card terminal; A user action extraction step of extracting at least one action information applied when the user uses the application program by using a predetermined MMI (Man Machine Interface) when the application program is used in the terminal, and when the extracted action of the user is generated Generating and storing action history information sequentially generating predetermined action history information sequentially arranged in a predetermined storage medium, and storing the action history information stored in the storage medium in a predetermined memory in the smart card. Action history information processing step of processing into a data set and / or program code, and action history information for loading the action history information processed by the action history information processing unit into the memory in the smart card through the smart card terminal. It includes a mounting step.

Further, according to the present invention, the smart card-based action history information storage system, after mounting the action history information in the memory in the smart card, the smart card owned user through the smart card card terminal through the smart card Connecting to the client terminal and reusing the application history of the client terminal when the application program is reused, and providing the action history information stored in the memory in the smart card to the client terminal; and providing the received action history information. Reading the action history information for extracting at least one or more actions included in the action history information as action control information, and a user liquid for automatically controlling a user action for the application based on the extracted action control information. It may further include a control step.

The recording medium for implementing the smart card-based action history information storage method as a computer program, after the smart card owned user connects the smart card with the client terminal, when the user uses the application program of the client terminal, A function of extracting at least one action information applied when using an application program, a function of sequentially listing the extracted action information of the user according to the order of occurrence time, and user action information sequentially listed according to the time order Recording an electronic information management program for realizing a function of processing into a data set and / or program code stored in a predetermined memory and providing the processed user action information to a card terminal for a smart card; After loading the action history information in the memory in the smart card, the smart card owned user connects the smart card with the client terminal through the smart card card terminal and reuses the application program of the client terminal. A function of receiving the user action information stored in the memory in the smart card from the card terminal, and reading the received action information to extract at least one user action included in the action information as action control information. And an electronic information management program for realizing a function of automatically controlling a user action for the application program based on the extracted function and the extracted action control information.

In the present invention, at least one smart card satisfies an IC chip standard such as ISO / IEC 7816 and / or ISO / IEC 1443, and / or a financial IC chip standard such as EMV (Europay, Master, VISA). As an intelligent card equipped with the above IC chip, an open platform capable of storing the action history information proposed by the present invention is provided.

In the present invention, MMI (Man Machine Interface) is a means for applying the action to the application, the user action is applied to the user interface through at least one or more input devices to the application to which the action is applied, and external processes (eg, The inter-process action applied through IPC (InterProcess Communication (IPC)) from another application provided in the computer provided with the application program, and the network action applied from other computers and / or servers through the network. It is characterized by providing a means to.

For example, if the application to which the action applies is a web browser, the action applied via MMI may include a network address link to at least one website accessed through the web browser, entering an account and password, and a web page provided by the website. User's click information, and / or information provided by the website to the web browser for use of functions provided in the web browser.

According to the present invention, the action history information is at least one action information which is sequentially extracted according to time by sequentially extracting an action applied to an application through MMI. For example, if the first action and the second action are composed of independent functions. The action history information is generated by sequentially listing the first action and the second action according to time, and when the second action consists of dependent functions of the first action, execution of the first action is successful. The action history information is generated by enumerating such that the second action is performed (eg, performing the first action and determining a different second action according to the result) depending on the result after the operation is performed.

According to the present invention, the application program from which the above-mentioned action history information is extracted has at least one user interface, and is provided with other computers and / or servers through a network and / or a function for communicating with an external process via IPC. A computer program provided with a function for communicating with a process.

According to a preferred embodiment of the present invention, the application program has at least one user interface, communicates with at least one plug-in program via IPC, and at least one process provided in a server via a network. Web browsers with the ability to communicate with are preferred.

According to another exemplary embodiment of the present invention, the application program basically has at least one user interface, and in some cases, a function of communicating with an external process through an IPC or a process provided with another network device through a network. Any computer program provided with this is included.

According to the present invention, the action extractor extracts at least one action applied to an application program and stores the action history information in D / B. The application program includes an action extraction function as part of a component. In this case, the action is extracted from the component of the application and stored in the action history information D / B, or when the application does not have an action extraction function, the action applied to the application is captured from the MMI. And / or by spoofing and store in action history information D / B.

The action history information processing unit may be provided as a part of a card terminal program, or may be provided as an independent process for interprocess communication with a card terminal program through an IPC, or through at least one communication means based on a card terminal program. It is provided as a process of communicating with.

According to the present invention, the action history information reading unit reads the action history information extracted from the memory unit provided in the IC chip of the smart card through the card terminal program, and extracts the action control information. The reading unit is provided as some component of the card terminal program, is provided as an independent process for interprocess communication with the card terminal program via the IPC, or a process for communicating with the card terminal program via at least one or more communication means based on the network. It is provided as.

According to the present invention, the action control unit may sequentially apply at least one or more actions to an application program by using action control information read and extracted by the action history information reading unit, and the action control unit is configured to the application program. If the external action control function is provided as part of the element, the action control information is applied to the application through the component of the application program, or if the application does not have the external action control function, the MMI is used. To apply the action control information to the application.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

The following embodiment uses a web browser as an application to which the action is applied through MMI. However, the web browser corresponds to an embodiment for efficiently explaining the smart card-based action history system proposed by the present invention, and those skilled in the art to which the present invention pertains are based on the embodiments described below. As a result, the technical configuration of the smart card-based action history system applied to various applications can be clearly understood.

FIG. 1 is a functional representation of the internal structure of an IC chip of a smart card having a function of storing action history information.

With reference to IC chip specifications including ISO / IEC 7816 and / or ISO / IEC 14443, the smart card's ICC is based on the power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), I / O interfaces that communicate with card terminal devices through contact points such as programming power supplies (VPP), and / or input / output (I / O), central processing units (CPUs), micro process units (MPUs), and / or coprocessors. A processor unit including at least one computing element including a coprocessor, a read only memory (ROM), a random access memory (RAM), an electrically erasable and programmable read only memory (EEPROM), a flash memory (FM), and the like. And a memory unit including at least one memory device, wherein at least one of the memory devices includes a chip operating system (COS) for managing and operating a smart card internal resource. At least one of the memory elements is provided with at least one IC chip storing information (100) for providing a service using a smart card.

In particular, the IC chip storage information 100 included in the memory unit on the IC chip included in the smart card includes a data storage unit for storing a data set corresponding to data or information read and used by the card terminal program; And / or a program processing unit for storing and driving program code (eg, JAVA Applet) or the like that can be used by the card terminal program, may be provided. In some cases, the specific IC chip storage information 100 may be provided. The data storage unit may be provided only, or the data storage unit and the program processor may be provided together.

Referring to FIG. 1, the action history storing information 105 for storing the action history information proposed by the present invention is data stored by the action history information data set extracted by the card terminal program and read by the action history information reading unit. An application program (eg, iexplorer) that guarantees the integrity of the storage unit 110 and the action history information stored in the data storage unit 110, and optionally, the action history information stored in the data storage unit 110 is applied. .exe) and a program processing unit 115 provided with a unique function for authenticating a user who applies action history information to the application program.

2 is a simple embodiment of the action history storage information 105 provided for storing the action history information according to the preferred embodiment of the present invention.

Particularly, FIG. 2 illustrates a case in which action history information is stored in a smart card equipped with a financial IC chip according to a preferred embodiment of the present invention. 2, the structure of the action history storage information 105 provided in each IC chip for storing the action history information according to the type and field of the IC chip will be clearly understood.

Referring to FIG. 2, the memory unit of the IC chip includes one master file corresponding to a root file according to an IC chip standard including ISO / IEC 7816 and / or ISO / IEC 14443. (ATR) including function information on at least one IC chip storage information 100 under the master file, and at least one dedicated file corresponding to each ICC storage information; DF) and an element file (EF) disposed under the dedicated file and containing substantial information and / or data for a smart card service, according to the technical idea of the present invention. The action history storage information 105 included in the memory unit on the IC chip included in the smart card is also characterized by following the IC chip standard.

Referring to FIG. 2 according to a preferred embodiment of the present invention, the action history storing information 105 for storing action history information is determined according to the IC chip standard including ISO / IEC 7816 and / or ISO / IEC 14443. An application for storing an action history dedicated file 200 including unique property information for the history storing information 105 and a data set for action history information included in the action history storing information 105 under the dedicated file. An application and / or to which the program authentication information element file 205 and the action history data element file 210 and / or the integrity of the action history information are guaranteed, and in which case the action history information stored in the element file is applied. Action history processing for authenticating a user who applies action history information to the application program in the IC chip. The modules such as 215 are arranged.

The action history-only file 105 that includes unique property information for the action history storage information 105 is placed under the master file according to the ICC standard including ISO / IEC 7816 and / or ISO / IEC 14443, etc. Only one exists on the action history storing information 105, and the card terminal program uses the action history dedicated file 200 to execute the application authentication information element file 205 and the action history data element file 210. FIG. And / or the action history processing module 215 or the like.

The application authentication information element file 205 for storing application authentication information for authenticating an application to which the action history storage information 105 is applied on the action history storage information 105 is stored on the action history storage information 105. The authentication information required to authenticate an application to which the action history information, which is disposed below the history-only file 200 and is extracted and read by the card terminal program and stored in the action history data element file, is stored.

The action history data element file 210 in which action history information applied to an application to which the action history storage information 105 is applied on the action history storage information 105 is stored is an action history dedicated file on the action history storage information 105. It is disposed below (200), and is extracted and read by the card terminal program to be processed into action control information for the action control unit to control the application program. For example, the action history data included in the action history data element file 210 may be a Visual Basic Script (VBS) or Java Script that can apply at least one action to a web browser. .

The action history processing module 215 included in the action history storing information 105 on the action history storing information 105 is a function for guaranteeing the integrity of the action history information, and optionally an application program to which the action history information is applied. And / or a user who applies action history information to the application program, etc. in the IC chip.

FIG. 3 is an exemplary embodiment of the action history information stored in the application program authentication information element file 205 of the action history storing information 105 included in the IC chip memory of the smart card.

Referring to FIG. 3, the application authentication information stored in the application authentication information element file 205 of the action history storing information 105 is linked to the application file information, the application version information, and the application through IPC. IPC process information and the like.

According to Figure 3 according to a preferred embodiment of the present invention, the application file of the application authentication information is an Internet Explorer (= web browser) provided in the Microsoft Windows operating system, the Internet Explorer is a <PROGRAM> directory (for example, , "Iexplorer.exe" in the "Internet Explorer" directory under the C: Files directory, and the application version information is "Mozilla / 4.0 (compatible; MSIE 6.0)", and the action history information in the Internet Explorer. "Proctexe.ocx" and "nppdf32.dll" must be included in order for this to be applied. "Proctexe.ocx" is located in the "<WINDOWS>" directory (eg "C:") and "nppdf32." The dll should be provided in the "<PROGRAM> Explorer \ f3 Plugins" directory (eg, "C: ram Files> Explorer \ f3 Plugins").

4 is a diagram illustrating an example of action history information stored in the action history data element file 210 of the action history storage information 105 included in the IC chip memory of the smart card.

Referring to FIG. 4, the action history data stored in the action history data element file 210 of the action history storing information 105 stores inter-step action information from the first action to the Nth action.

According to Figure 4 in accordance with a preferred embodiment of the present invention, the first action is to use Internet Explorer through a Transmission Control Protocol / Internet Protocol (TCP / IP) stack for the bank's website on the Internet http://www.xxxbank.com The second action is a user's account (e.g., "bkkwon") and a password (e.g., "bkkwon") at a location for entering an account and / or password on a web page provided by the website. 3edcvb "), wherein the first action and the second action are performed independently.

In addition, after the third action inputs the account and / or password of the second action and the result is approved (for example, "if.return == OK"), the third action may be linked to a bank transfer site among the corresponding bank websites. For example, "link_page =" http://www.xxxbank.co.kr/remittance ", link to link_page") is an action, and the third action is performed dependent on the second action.

Finally, if the above action is performed from the first action to the N-1th action, the Nth action performs the action of terminating the communication session from the bank website http://www.xxxbank.co.kr .

According to a preferred embodiment of the present invention, the process of performing the Nth action in the first action as described above may be performed for at least one website.

5 is a simple embodiment of a smart card based action history system according to a preferred embodiment of the present invention.

Referring to FIG. 5 according to a preferred embodiment of the present invention, the smart card-based action history system applies a web browser 500 corresponding to an application to which an action is applied and at least one action to the web browser 500. In addition to the computer equipped with the MMI 505, and / or the card terminal program 510 for storing the action history information in the smart card through the card interface 515, the web browser 500 from the MMI 505 An action history extractor 520 for extracting at least one action applied to the action, an action history information storage unit 525 for storing at least one action extracted by the action extractor 520 as history information, and action history information Action history definition for processing the action history information stored in the storage unit 525 into a data set and / or program code stored in the IC chip. An action history information reading unit 535 for reading, as action control information, at least one or more actions included in the action history information extracted from the smart card through the card processing unit 530 and the card terminal program 510, and the action history; An action control unit 540 for automatically applying at least one or more actions to the application program 500 based on the action history information read by the information reading unit 535, and the action history information processing unit 530 processes It is achieved by providing an action history information mounting unit 545 or the like for mounting action history information into the memory in the smart card via the smart card card terminal.

The action extractor 520 may extract at least one or more actions applied to the application program 500 from the MMI 505 that applies the at least one action to the web browser 500. The action extracted through 520 is stored in the action history information storage unit 525 as history information.

According to a preferred embodiment of the present invention, the action extractor 520 extracts the action applied to the web browser 500 from the MMI 505 through capture and / or spoofing. In order to perform the action extracting unit 520, the key data input from the keyboard, the click information input from the mouse (for example, LBUTTON_DOWN event, click coordinate value, etc. on the screen), plugged into the web browser 500 Monitors an IPC path between at least one external process and the web browser 500, a TCP / IP communication port connecting a communication session for the web browser 500 and a server process, and the web from the MMI 505. When the action is applied to the browser 500, the action is extracted.

The action history information storage unit 525 is a storage medium and / or a database that stores at least one or more actions extracted by the action extraction unit 520 as history information sequentially arranged in the order of time, and the action extraction unit 520. Stores the action information extracted by the action extractor 520 as history information from the step of extracting at least one or more actions through the MMI 505 to the end of the action extraction.

The action history information processing unit 530 may store the action history information stored in the action history information storage unit 525 in the step where the action extraction unit 520 ends the extraction of the action applied to the web browser 500 through the MMI 505. Is processed into action history storage information 105 (eg, a data set and / or program code stored in the IC chip) that can be recorded in a memory unit included in the IC chip of the smart card through the card terminal program 510. The action history information processed by the action history information processing unit 530 is stored in the memory unit provided in the IC chip of the smart card through the card terminal program 510.

The action history information reading unit 535 reads the action history information extracted by the card terminal program 510 from the action history storing information 105 stored in the memory unit provided with the IC chip of the smart card, and includes at least the information contained in the action history information. Extract one or more actions as action control information, and the action control information is provided to the action controller 540.

The action controller 540 performs an action control on the web browser 500 based on the action control information read and provided by the action history information reader 535, and the action controller 540 performs MMI ( Action control based on the action control information is performed by the web browser 500 through 505.

FIG. 6 is a simple flowchart illustrating an embodiment of extracting action history information applied to the web browser 500 and storing it in a memory unit included in an IC chip of a smart card according to a preferred embodiment of the present invention.

Referring to FIG. 6 according to a preferred embodiment of the present invention, the process of extracting action history information applied to the web browser 500 through the MMI 505 may be performed by, for example, the user driving the action extractor 520. It starts from monitoring the action applied to the web browser 500 from the MMI 505 through the action extracting unit 520.

That is, the action extractor 520 determines whether to start extracting the action history information applied to the web browser 500 through the MMI 505 (600), if the extraction of the action history information is started (605), The user inserts a smart card in which the action history information is to be stored in the card interface, and the card terminal program 510 is an IC chip standard such as ISO / IEC 7816 and / or ISO / IEC 14443 and / or a financial IC chip standard such as EMV. In operation 610, the validity of the inserted smart card is authenticated.

According to a preferred embodiment of the present invention, the validity authentication process for the smart card is a process of ensuring confidentiality, authentication, integrity, nonrepudiation, and the like of the smart card.

If the validity of the smart card as described above is not authenticated (615), the card terminal program 510 outputs a smart card validation authentication error message (620), inserts another smart card into the card interface, Repeat the smart card validation process.

On the other hand, if the validity of the smart card is authenticated (625), the action extractor 520 extracts at least one or more actions applied to the web browser 500 through the MMI (505), and extracted as described above The action is stored in the action history information storage unit 525 as history information (630).

According to a preferred embodiment of the present invention, as described above, the action extractor 520 extracts the action history information applied to the web browser 500 through the MMI 505 and stores it in the action history information storage unit 525. The process is repeatedly performed until the end command for the action extraction process is processed.

If the process of extracting the action history information applied to the web browser 500 through the MMI 505 and storing the action history information in the action history information storage unit 525 is terminated (635), the action history information processing unit 530 ) Extracts action history information from the action history information storage unit 525 in which the action extractor 520 stores at least one or more actions applied to the web browser 500 through the MMI 505 as history information ( 640).

When the action history information is extracted from the action history information storage unit 525 as described above, the action history information processing unit 530 converts the action history information into an IC chip standard such as ISO / IEC 7816 and / or ISO / IEC 14443, and the like. And / or process the action history storage information 105 (e.g., data set and / or program code stored in the IC chip) that can be stored in a memory unit included in the IC chip of the smart card according to a financial IC chip standard such as EMV. (645).

When the action history storing information 105 is processed by the action history information processing unit 530, the card terminal program 510 is provided with the IC chip standard and / or financial IC chip standard as described above and an open platform. Based on the technical characteristics of the smart card, the action history storing information 105 is stored in the memory unit provided in the IC chip of the smart card (650).

7 is a simple flowchart of an exemplary method of extracting and reading action history information stored in a memory unit included in an IC chip of a smart card and applying the same to a web browser 500 according to a preferred embodiment of the present invention.

Referring to FIG. 7 according to a preferred embodiment of the present invention, in order to extract action history information stored in a memory unit included in an IC chip of a smart card, confidentiality, authentication, integrity, and / or non-repudiation of the smart card may be used. The same validity must be certified.

Therefore, in order to extract and read the action history information stored in the memory unit included in the smart card of the smart card and apply it to the web browser 500, the user inserts the smart card in which the action history information is stored into the card interface, and the card terminal. The program 510 authenticates the validity of the inserted smart card according to the IC chip standard such as ISO / IEC 7816 and / or ISO / IEC 14443 and / or the financial IC chip standard such as EMV (700).

If the validity of the smart card as described above is not authenticated (705), the card terminal program 510 outputs a smart card validation authentication error message (710), inserts another smart card into the card interface, Repeat the smart card validation process.

If the validity of the smart card as described above is authenticated (715), the card terminal program 510 is the action history information (for example, from the action history storage information 105 stored in the memory unit provided in the IC chip of the smart card) Application program authentication information, action history data, etc.) is extracted, and the action history information extracted as described above is provided to the action history information reading unit 535 (720).

The action history information reading unit 535 reads the action history information provided from the card terminal program 510 to extract action control information (725), and authenticates the validity of the web browser 500 through the action control information. (730).

According to a preferred embodiment of the present invention, the action history information includes the application authentication information, the action history information reading unit 535 is based on the validity of the web browser 500 (for example, based on the application authentication information) Application file information, application version information, and / or IPC process information, etc. to determine whether it is an available web browser).

If the validity of the web browser 500 is not authenticated (735), the action control unit 540 outputs a web browser 500 validation error message (740), and the action control unit 540 is the web browser 500 ) Does not apply the action control information.

On the other hand, if the validity of the web browser 500 is authenticated (745), the action control unit 540 automatically performs at least one or more actions in the web browser 500 through the MMI 505 based on the action control information. The application process is performed (750).

According to the present invention, the present invention stores the action history information in a smart card that is excellent in security and is portable, thereby storing action history information independently of the computing system for an application (eg, a web browser), and storing the action history. It is possible to provide automated action processing through information, and to automatically handle complex user actions (e.g. payment processing for Internet shopping malls) that require security for an application (e.g., a web browser). Has the advantage.

In addition, according to the present invention, it is possible to provide reliable and automated automatic control of an application program (eg, a web browser) for Trojan horses and / or spyware that captures user actions.

1 is a functional representation of the internal structure of an IC chip of a smart card with a function of storing action history information.

FIG. 2 is a simple embodiment of action history storing information provided for storing action history information according to a preferred embodiment of the present invention.

FIG. 3 is an exemplary embodiment of action history information stored in an application program authentication information element file of action history storing information included in an IC chip memory unit of a smart card.

FIG. 4 is an exemplary embodiment of the action history information stored in the action history data element file of the action history storing information included in the IC chip memory of the smart card.

5 is a simplified embodiment of a smart card based action history system according to a preferred embodiment of the present invention.

FIG. 6 is a simple flowchart of an exemplary embodiment of extracting action history information applied to a web browser and storing it in a memory unit included in an IC chip of a smart card according to an exemplary embodiment of the present invention.

FIG. 7 is a simple flowchart of an embodiment of extracting and reading action history information stored in a memory unit included in an IC chip of a smart card according to a preferred embodiment of the present invention and applying it to a web browser.

<Description of main parts of drawing>

500: Application 505: MMI

510: card terminal program 515: card interface

520: action extraction unit 525: action history information storage unit

530: action history information processing unit 535: action history information reading unit

540: action control unit 545: action history information mounting unit

Claims (13)

Smart Card having a memory for storing at least one or more information, and the smart card card terminal is mounted or connected, and comprises a client terminal used by the smart card owner users In the card-based action history information storage system, After the smart card is connected to the client terminal through the smart card card terminal, when the smart card owned user uses the application program of the client terminal, the user uses the predetermined MMI (Man Machine Interface). An action extraction unit for extracting at least one action information applied when the program is used; An action history information storage unit for generating and storing the action information of the user extracted by the action extractor as predetermined action history information sequentially arranged in the order of occurrence time; An action history information processing unit for processing the action history information stored in the action history information storage unit into a data set and / or program code stored in a predetermined memory of the smart card; And And an action history information mounting unit configured to mount the action history information processed by the action history information processing unit into the memory in the smart card through the smart card terminal. The method of claim 1, wherein the action extraction unit, Smart card based action history information storage system, characterized in that for extracting through the capture and / or spoof user action information applied to the application from the MMI (Man Machine Interface). The method of claim 1 or 2, wherein the action extraction unit, Extract user action information from key data input through the keyboard, or Extract user action information from click information input through a mouse, or Extract user action information from an IPC path with at least one external process plugged into the web browser, or A smart card based action history information storage system comprising extracting user action information from a TCP / IP communication port connecting a web browser and a communication session to a server process. The method of claim 1, wherein the action history information processing unit, It is provided in the card terminal, or It is provided as an independent process to communicate between the process through the card terminal and the IPC, or Smart card-based action history information storage system characterized in that it is provided with a process for communicating with the card terminal via at least one communication means based on a network. The system of claim 1, wherein the smart card-based action history information storage system comprises: After the action history information is stored in the memory in the smart card, when the smart card owned user connects the smart card with the client terminal through the smart card card terminal, and reuses the application of the client terminal, the card An action history information reading unit receiving the action history information stored in the memory in the smart card from a terminal, reading the provided action history information, and extracting at least one action included in the action history information as action control information; And And an action control unit for automatically controlling a user action for the application program based on the action control information extracted by the action history information reading unit. The method of claim 5, wherein the action history information reading unit, It is provided in the card terminal, or It is provided as an independent process to communicate between the process through the card terminal and the IPC, or Smart card-based action history information storage system characterized in that it is provided with a process for communicating with the card terminal via at least one communication means based on a network. The method of claim 1, wherein the user action information, A user action applied to the user interface through at least one input device, Interprocess actions applied through external process communication (IPC) from external processes, A smart card based action history information storage system comprising at least one network action applied from another computer and / or server via a network. The method of claim 1, wherein the user action information, If the application to which the user action is applied is a web browser, To use network address link information, account and password input information for at least one website accessed through the web browser, user click information on a web page provided by the website, and functions provided in the web browser. Smart card-based action history information storage system, characterized in that it comprises at least one information provided by the website to the web browser. The method of claim 1, wherein the application program, A smart device having at least one user interface and having a function of communicating with at least one plug-in program through an IPC and at least one process provided in a server through a network. Card based action history information storage system. Smart Card having a memory for storing at least one or more information, and the smart card card terminal is mounted or connected, and comprises a client terminal used by the smart card owner users In the card-based action history information storage method, Connecting the smart card to the client terminal through the smart card card terminal; A user action extracting step of extracting at least one or more action information applied when the user uses the application program using a predetermined MMI (Man Machine Interface) when the smart card possessing user uses the application program of the client terminal; Generating and storing action history information that generates predetermined action history information in which the extracted actions of the user are sequentially arranged in the order of occurrence time and stored in a predetermined storage medium; An action history information processing step of processing the action history information stored in the storage medium into a data set and / or program code stored in a predetermined memory in the smart card; Smart card-based action history information storage method comprising the; action history information processing step of mounting the action history information processed by the action history information processing unit in the memory in the smart card via the smart card card terminal. The method of claim 10, After loading the action history information in the memory in the smart card, When the smart card owning user reuses the application program of the client terminal after connecting the smart card with the client terminal through the smart card card terminal, Extracting, from the card terminal, the action history information stored in the memory in the smart card to the client terminal; An action history information reading step of reading the provided action history information and extracting at least one or more actions included in the action history information as action control information; And And a user action control step of automatically controlling a user action for the application based on the extracted action control information. After the smart card owning user connects the smart card with the client terminal, when using the application program of the client terminal, Extracting at least one action information applied when the user uses the application program; A function of sequentially arranging the extracted action information of the user in the order of occurrence time; Processing user action information listed sequentially according to the time sequence into a data set and / or program code stored in a predetermined memory in a smart card; And And an electronic information management program for realizing the function of providing the processed user action information to a smart card terminal. The method of claim 12, wherein the recording medium, After loading the action history information in the memory in the smart card, When the smart card owning user reuses the application program of the client terminal after connecting the smart card with the client terminal through the smart card card terminal, Receiving the user action information stored in the memory in the smart card from the card terminal; Reading the received action information and extracting at least one user action included in the action information as action control information; And And an electronic information management program for realizing the function of automatically controlling a user action for the application program based on the extracted action control information.