KR20050053184A - System and method for auto log-in in corporated cite using smart card - Google Patents

Abstract

Disclosed are an automatic login system and method in an affiliate site using a smart card that enables a user to use a service provided by an affiliate site without a separate login procedure when the user moves to an affiliate site linked with a smart card. The primary key stored in the smart card and the primary key stored in the map table of the affiliate site are compared to log in or register at the affiliate site. User information management is performed by comparing the data synchronization information stored in the map table with the data synchronization information stored in the smart card and updating the user DB of the affiliated site or the user information of the smart card with the latest information.

Description

System and method for automatic login at affiliate sites using smart card {SYSTEM AND METHOD FOR AUTO LOG-IN IN CORPORATED CITE USING SMART CARD}

The present invention relates to an automatic login system and method at an affiliate site using a smart card. More specifically, when a user moves to an affiliate site linked with a smart card, the user has the same authority as a member of the site without a separate login procedure. The present invention relates to an automatic login system and method at an affiliate site using a smart card.

Recently, with the expansion of the Internet base, Internet-related sites are increasing exponentially, and these Internet sites are encouraging users to sign up to provide their respective services. However, users who want to receive the services provided by the Internet sites must sign up for each site, and even if they sign up, they must log in for each site before receiving the services provided by each site. There was this.

In order to overcome this problem, a single sign-on-based subscription and automatic login technology and a user registration technology by transmitting user information to an affiliate site have been proposed.

Single sign-on based membership and automatic login technology is a concept designed to integrate and manage each member as a service that allows the use of services of multiple affiliates with a single login. On the other hand, membership technology by sending user information to affiliate sites needs to secure user information by sending user information that is held in order to reduce unnecessary user information input of affiliated users. It is a method that companies use as event property.

However, the single sign-on-based membership and automatic login technology has a problem that requires system integration in order to be able to use the services provided by various affiliates. In addition, the member registration technology by transmitting user information to the affiliate site is vulnerable to security by transmitting the user information without encrypting it through an HTTP header, and simply transmits only the user information that is retained. There is a problem that does not manage user information and does not play any role in the login process of affiliates.

The present invention has been made to solve the above problems, an object of the present invention, so that the user has the same authority as the member of the site without a separate login procedure when the user moves to the affiliated site linked with the smart card. It is to provide an automatic login system and method in an affiliate site using a smart card.

Another object of the present invention, when the user subscribes to the affiliated site linked to the smart card, the automatic login in the affiliated site that can be conveniently registered as a member to the affiliated site by the subscription is made by using the information stored in the smart card It is to provide a system and method.

Another object of the present invention is to compare the data synchronization information (Sync anchor) information stored in the smart card and the data synchronization information stored in the map table of the affiliate site by storing the latest information in the smart card or affiliate site to update the user's information It is to provide an automatic login system and a method in an affiliate site that can be updated with the information.

The method of the present invention for achieving the above object, a smart card stage having a smart card reader and a terminal device for reading a smart card, and the affiliated site using a smart card comprising a smart site and an affiliated site connected to the Internet An automatic login method in an automatic login system in an apparatus comprising: (a) monitoring whether a smart card is inserted into the smart card reading apparatus and reading login information from the smart card if it is determined to be inserted; (b) determining whether the same primary key as the primary key in the read login information exists in a map table of an affiliate site; And (c) if the primary key is in the map table, performing a login according to login basic information corresponding to the primary key.

In addition, in the method of the present invention, if there is no primary key, (d) if the primary key exists in the user DB of the affiliated site, the login is performed after storing the login basic information in the table; If the primary key does not exist in the user DB of the affiliated site, the method may further include performing a member registration at the affiliated site, storing the login basic information in the map table, and then performing a login.

The map table may include a basic key and basic login information, wherein the basic key is a resident registration number of the user, and the basic login information is an ID and a password.

The login information may further include URL information of the affiliated site, and the URL information may be used to perform access to the affiliated site.

In addition, the method of the present invention, (e) after receiving the user data field and the data synchronization (Sync anchor) information received from the smart card after receiving the login data synchronization information and the data synchronization information of the map table received After comparing the data synchronization information, if the data synchronization information is the same, the information of the smart card or the map table is not changed, and if the data synchronization information is different from each other corresponding to the latest data synchronization information of the smart card or the map table. The method may further include managing user information by recording the user information on the other side and designating the recorded date as data synchronization information.

The map table may further include the data synchronization information. When the identifiers for data corresponding to the data synchronization information are different in the smart card and the user DB of the affiliated site, the map table may map the different identifiers to each other. It is characterized by.

On the other hand, the present invention, the smart card terminal having a smart card reader and terminal device for reading a smart card and an automatic login system at an affiliate site using a smart card including an affiliated site connected to the smart card terminal and the Internet. The affiliated site may include: a smart card insertion monitoring device configured to monitor whether the smart card is inserted into the smart card reader; An affiliate site server which transmits data between the smart card and the affiliated site via the Internet and transmits data between devices in the affiliated site; A map table for storing a primary key and basic login information to perform a login at the affiliate site; And a login device that searches for whether a primary key exists in the map table and performs a login according to the login basic information when the primary key exists.

The affiliate site determines whether the primary key exists in the user DB of the affiliate site when the primary key is not present in the map table, and stores login basic information in the map table when the primary key exists. After the login, and if the primary key does not exist, it may further include a member registration device for performing a member registration in the affiliated site, storing the login basic information in the map table, and then logging in.

In addition, the primary key is a user's social security number, the login basic information is characterized in that the ID and password.

The login information may further include URL information of the affiliated site, and the affiliated site may further include a site moving device that attempts to access the affiliated site according to the URL information.

The affiliated site compares the data synchronization information transmitted from the smart card terminal with the data synchronization information of the map table after the login is performed. If the data synchronization information is different without changing the information, the user management apparatus for recording the user information corresponding to the latest data synchronization information of the smart card or the map table on the other side and designating the recorded date as the data synchronization information It may further include.

The map table may further include the data synchronization information. When the identifiers for data corresponding to the data synchronization information are different in the smart card and the user DB of the affiliated site, the map table may map the different identifiers to each other. It is characterized by.

Hereinafter, with reference to the accompanying drawings will be described in detail the present invention.

The present invention uses a smart card for an automatic login system and method in an Internet site. That is, the present invention provides a system and method for automatically logging in at an affiliated site linked with a smart card using a smart card in which user information is stored.

1 is an overall configuration diagram of an automatic login system at an affiliate site using a smart card according to the present invention. As shown in FIG. 1, an automatic login system at an affiliate site using a smart card according to the present invention includes at least one smart card stage 100 and at least one affiliate site 200, and includes a smart card stage 100 and a smart card stage 100. The affiliate sites 200 are connected to each other via the Internet. The connection is also possible via a general communication link other than the Internet.

The card stage 100 reads the smart card 102 storing the user's personal information, the smart card reader 104 which reads the information stored in the smart card 102 and writes the information to the smart card 102, the smart card. It receives the information read by the reader 104 and outputs it to the affiliate site 200 via the Internet, and receives the information from the affiliate site 200 and outputs it to the smart card reader 104 to the smart card 102. The terminal device 106 is configured to record information and to allow a user to receive an Internet service from the affiliated site 200 via the Internet.

On the other hand, the affiliated site 200 controls the connection with the terminal device 106 and other affiliated sites through the Internet, and the affiliated site server 202 and the smart card for controlling the connection between other devices in the affiliated site 200. Smart card insertion monitoring device 204 for determining whether to insert (102), a key corresponding to basic information such as a user's social security number among the personal information stored in the smart card 102 (hereinafter referred to as 'default key'), Allows the user to log in to the map table (206) and the affiliate site (200), which store information such as login basic information (ID and password) and data synchronization information corresponding to each data field at an affiliate matching the primary key. A site moving device that moves from the login device 208, the user DB 214 that stores the information of the members of the affiliate site 200, and the affiliate site 200 to another affiliate site. 218, and may further include a subscription device 210 that performs membership when the user is not subscribed to the affiliate site 200.

In addition, the affiliated site 200 may be configured to include user information transmitted from the user management device 212 and the smart card 102 that manage the information of members after login at the affiliated site 200 and the user DB within the affiliated site 200 ( The apparatus may further include an optional information transmitting device 216 that compares the information stored in 214 and selectively transmits the latest information to the smart card 102 or the user DB 214.

The information of each user using the smart card 102 is stored in the user's own smart card 102, and a user who wants to receive a service from the internet site uses the terminal device 106 to connect to the Internet site through the Internet. Access to Internet service. In the form in which the user information is stored in the smart card, data synchronization information is designated and stored for each personal information data field such as name, address, social security number, and the like.

At this time, information corresponding to basic information such as a social security number among the user information is used as a primary key to log in at the affiliate site 200. In addition, the data synchronization information is used for synchronization with the date and time at which data was recorded, including information on the date and time at which each personal information was recorded.

The information stored in the smart card 102 is read by the smart card reading device 104 and the smart card reading device 104 is connected with the terminal device 106 so that the information stored in the smart card 102 is stored in the terminal device 106. To be sent). If the user information at the affiliate site 200 is up-to-date, the terminal device 106 receives the latest information from the affiliate site and transmits the latest information to the smart card reader 104 so that the smart card 102 has the latest information. You can also record

On the other hand, the terminal device 106 is connected to a plurality of affiliate sites 200 through the Internet to enable the user to use the Internet services provided by the affiliate site 200, the affiliate site server 202 in the affiliate site 200 ) May be connected to various devices 204-218 in affiliate site 200.

2 is an overall flowchart of an automatic login method at an affiliate site using a smart card according to the present invention.

First, the smart card insertion monitoring device 204 monitors whether the smart card 102 is inserted into the smart card reading device 104 (S202), and the login information from the smart card 102 when the smart card 102 is inserted. Read (S204). At this time, the login information includes a primary key (for example, the user's social security number), login basic information (for example, the user's ID (ID) and password (PASSWORD)).

On the other hand, the login information may further include URL information on the affiliate site 200. If the URL information is further included, access to the affiliate site 200 corresponding to the URL information is made, and then HTTP / HOST is used. The login information is transmitted to the connected affiliated site 200 (S206). On the other hand, the connection to the affiliated site 200 may be performed by a user directly inputting URL information at the terminal device 106.

The affiliate site 200 searches whether the map table 206 has information required for login by searching for a primary key that matches the primary key read from the smart card 102 (S206). In step S208, login to the affiliate site 200 is performed. That is, if there is a primary key in the map table 206 that matches the primary key read from the smart card, the login to the affiliated site is automatically performed using the login basic information corresponding to the primary key. The affiliate site 200 may use a service provided by the affiliate site without going through a separate login procedure.

On the other hand, if there is no login basic information corresponding to the primary key, after the member registration at the affiliated site 200 is performed, the login is performed, and the member registration is performed to record the user's information in the map table 206. And (S210), the procedure for performing membership will be described later.

In addition, after performing login or membership, user information management for updating the user information of the smart card 102 or the affiliate site 200 with the latest information is performed (S214), which will be described later.

On the other hand, the map table 206 is a separate database for integrated ID operation, which stores a primary key, basic login information (eg, ID and password), and data synchronization information for each data field. The map table 206 maps different data identifiers when the identifiers for the data to be synchronized in both the smart card 102 and the user DB 214 of the affiliated site 200 are different. That is, when the identifiers corresponding to the data for the same information in the smart card 102 and the affiliate site 200 are different from each other, an operation of mapping different identifiers to each other is performed.

For example, if the identifier for the data corresponding to the user's address is 'aaa' in the smart card 102 and 'bbb' in the affiliate site 200, the identifier for the address data to be synchronized in the map table 206 is used. 'aaa' and 'bbb' are mapped to each other. By doing so, it is possible to manage the user information which maps the information stored in the smart card 102 and the information stored in the affiliate site 200 to each other and updates the latest information according to the data synchronization information. The procedure will be described later.

3 is a detailed flowchart of an embodiment of a procedure of performing a member registration in the method of FIG. 2.

The case where there is no login basic information in the map table 206 of the affiliated site 200 connected can be roughly divided into two cases. In one case, the affiliated site 200 is subscribed to, but the user is connected to the affiliated site 200 for the first time by using a smart card. The other case is that the user is not subscribed to the affiliated site 200.

In either case, it may be determined whether the primary key exists in the user DB 214 of the affiliate site 200 (S302). That is, when the primary key exists in the user DB 214 of the affiliate site 200, since the user has subscribed to the affiliate site 200, login basic information is obtained from the user DB 214 without a separate registration procedure. The data is read and stored in the map table 206 (S304), and login is performed (S312).

On the other hand, if the primary key does not exist in the user DB of the affiliate site 200, since the member is not registered in the affiliate site 200, membership registration should be performed. That is, after receiving an ID and password to be registered in the affiliate site 200 from the user (S306), it is determined whether the input ID exists in the user DB 214 of the affiliate site 200 (S308). Since another person is registered with the ID, the user inputs his / her ID and password again, and if it does not exist, the member is joined to the affiliated site 200 and information necessary for logging in is stored in the map table 206 (310). ) Login is made (S312).

By this operation, even when the user first visits the affiliated site 200 using the smart card 102, the user can use the service provided by the affiliated site without any manipulation, and further, joins the affiliated site 200. Even if it is not, you can easily register by entering your ID and password, and you can use the services provided by the affiliate site without any additional operation.

4 is a detailed flowchart of an embodiment of a method of managing user information among the methods of FIG. 2.

When the login is made at the affiliate site 200, a user information management procedure is automatically performed (S214). When the login is made, the affiliate site 200 receives the user data field and the corresponding data synchronization (Sync anchor) information from the card stage 100 (S402). The data synchronization information is designated for each user data field and indicates a time at which user data is recorded.

After receiving the data synchronization information, it is compared whether the information corresponding to the data synchronization information in the map table 206 and the information corresponding to the data synchronization information received from the card terminal 100 are the same (S404). As a result of the comparison, if the corresponding information is the same, there is no need to manage user information separately. If different, the latest information of one of the two information should be recorded on the other side.

That is, when the time of the data synchronization information corresponding to the information received from the card stage 100 is more recent than the time of the data synchronization information corresponding to the information in the map table 206, the corresponding data stored in the smart card 102 is stored. The information is recorded in the user DB 214 of the affiliate site 200. On the contrary, if the time of the data synchronization information corresponding to the information in the map table 206 is more recent, the corresponding information stored in the user DB 214 is recorded. Recording is made to the smart card 102 (S406).

After recording the latest information as described above, the time updated with the latest information is designated as data synchronization information (S408). Through this operation, the user information of the smart card 102 and the affiliated site 200 can be updated to the latest one, so that the user information can be efficiently managed.

According to the present invention, by sharing and updating user information through the linkage between the smart card and the affiliate site, the user can conveniently use the service provided by the affiliate site without having to go through a separate login procedure at the affiliate site. Since the user DB can be updated with the latest information, the user information can be managed efficiently.

In the above described and illustrated with respect to the preferred embodiment of the present invention, the present invention is not limited to the specific embodiments described above, anyone of ordinary skill in the art without departing from the gist of the present invention Various modifications are possible, of course, and such variations will be within the scope of the claims of the present invention.

1 is an overall configuration diagram of an automatic login system at an affiliate site using a smart card according to the present invention.

2 is an overall flowchart of an embodiment of an automatic login method at an affiliate site using a smart card according to the present invention.

FIG. 3 is a detailed flowchart of an embodiment of a procedure of performing a subscription at an affiliate site in the method of FIG. 2.

4 is a detailed flowchart of an embodiment of a procedure of performing user information management at an affiliate site in the method of FIG. 2.

Claims (12)

A smart card stage having a smart card reader and a terminal device for reading a smart card and an automatic login method in an automatic login system at an affiliate site using a smart card including an affiliated site connected to the smart card terminal and the Internet. , (a) monitoring whether a smart card is inserted into the smart card reading apparatus and reading login information from the smart card if it is determined to be inserted; (b) determining whether the same primary key as the primary key in the read login information exists in a map table of an affiliate site; And (c) if the primary key is in the map table, performing a login according to login basic information corresponding to the primary key; Automatic login method at the affiliate site using a smart card comprising a. The method of claim 1, If the primary key does not exist, (d) If the primary key exists in the user DB of the affiliated site, log in after storing the login basic information in the table, and if the primary key does not exist in the user DB of the affiliated site, And performing a login after performing member registration at an affiliate site, storing the login basic information in the map table, and performing a login. The method according to claim 1 or 2, The map table includes a primary key and basic login information, The primary key is a social security number of the user, and the login basic information is an automatic login method in the affiliated site using a smart card, characterized in that the ID and password. The method of claim 1, The login information further includes URL information of an affiliate site, And the URL information is used to perform an access to the affiliated site. The method according to claim 1 or 2, (e) receiving the user data field and data synchronization information received from the smart card after performing the login, comparing the received data synchronization information with the data synchronization information of the map table, and then synchronizing the data synchronization. When the information is the same, the information of the smart card or the map table is not changed without changing the information of the smart card or the map table. Managing user information by designating the recorded date as data synchronization information Automatic login method in the affiliate site using a smart card, characterized in that it further comprises. The method of claim 5, The map table further includes the data synchronization information, If the identifier for the data corresponding to the data synchronization information is different from the smart card and the user DB of the affiliated site, the different identifiers are mapped to each other. A smart card stage having a smart card reader and a terminal device for reading a smart card, and an automatic login system at an affiliate site using a smart card comprising an affiliated site connected to the smart card terminal and the Internet, The affiliate site, A smart card insertion monitoring device for monitoring whether the smart card is inserted into the smart card reader; An affiliate site server which transmits data between the smart card and the affiliated site via the Internet and transmits data between devices in the affiliated site; A map table for storing a primary key and basic login information to perform a login at the affiliate site; And A login device which searches for whether a primary key exists in the map table and performs a login according to the login basic information when the primary key exists Automatic login system at the affiliate site using a smart card comprising a. The method of claim 7, wherein The affiliate site, If the primary key does not exist in the map table, it is determined whether the primary key exists in a user DB of the affiliated site. If the primary key exists, the user stores the login basic information in the map table and logs in. If the primary key does not exist in the affiliate site using a smart card, characterized in that it further comprises a member registration device for performing a member registration in the affiliated site, storing login basic information in the map table, and performing login. Automatic login system. The method according to claim 7 or 8, The primary key is a social security number of the user, and the login basic information is an automatic login system in an affiliated site using a smart card, characterized in that the ID and password. The method of claim 7, wherein The login information further includes URL information of an affiliate site, The affiliate site, A site moving device which attempts to access an affiliated site according to the URL information; Automatic login system at the affiliate site using a smart card, characterized in that it further comprises. The method according to claim 7 or 8, After the login is performed, the data synchronization information transmitted from the smart card terminal is compared with the data synchronization information of the map table. When the data synchronization information is the same, the data is not changed without changing the information of the smart card or the map table. And a user management device for recording the user information corresponding to the latest data synchronization information in the smart card or the map table on the other side if the synchronization information is different, and designating the recorded date as the data synchronization information. Automatic login system in affiliate site using smart card to say. The method of claim 11, The map table further includes the data synchronization information, If the identifier for the data corresponding to the data synchronization information in the smart card and the user DB of the affiliate site is different from each other, the automatic login system at the affiliate site using a smart card, characterized in that for mapping each other.