KR20050108542A - Method for using communication programs simultaneously as single sign on - Google Patents

Abstract

The present invention relates to a method for enabling communication with a remote server using different communication programs with a single sing on. According to the present invention, upon receiving a request for using a communication program from a user, it is checked whether there is another communication program currently being executed, and the operation according to whether or not there is another communication program being executed is different. If there is no other communication program in progress, it performs unconditional sign-on process and generates and stores an access key which is an identifier of the communication program to be used. If there is another communication program running, if the user selects to use the communication program through the stored access key, communication with the remote server can be made by using the same connection key and socket as the currently running communication program without sign-on process. .

Description

How to use different communication programs simultaneously as single sign on

The present invention relates to a method of accessing a specific server using a communication program, and more particularly, to a method of enabling simultaneous use of different communication programs with a single sign-on.

In general, in order for a terminal to access an operator server, a wired or wireless network must be formed between the terminal and the operator server, and a communication program that enables data exchange with the operator server through the network should be installed in the terminal.

The communication program includes a web browser such as Internet Explorer (IE) or Netscape installed on all computers using the Internet, and a carrier communication program developed by a company and distributed to a specific person.

Whereas a web browser is provided to an unspecified number of users and the terminal is connected to an arbitrary Internet server according to a user's request, an operator communication program is provided for a specific person and connects the terminal to a specific provider server. Therefore, the operator communication program has a sign on process of confirming whether a specific person is a subscriber before connecting the specific person to the operator server. Home trading programs offered by securities firms are representative service providers.

Currently, securities companies provide a variety of services according to customer preferences, and develop and provide communication programs for specific services to users so that operators can easily manage the services and users can easily use the services. In other words, one brokerage company provides a plurality of communication programs to users.

However, many communication programs developed by the same brokerage company require sign-on for each communication program because there is no sign-on information or communication terminal information sharing even when the same subscriber is used in one terminal. Therefore, the user has the trouble of inputting the same ID and password for each communication program driving, and the terminal has a problem of wasting network resources by connecting different TCP / IP sockets for each communication program.

SUMMARY OF THE INVENTION The present invention has been made to solve a conventional problem, and an object thereof is to enable a plurality of communication programs to be used simultaneously with only one sign-on. In addition, an object of the present invention is to enable communication with a remote server with less communication resources when using a plurality of communication programs.

The above description will be readily understood by those skilled in the art through a brief description of the invention or the following description of embodiments of the invention. In the following description of the present invention, when it is determined that the specific gist of the present invention with respect to related known functions or configurations may be unnecessarily obscured, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, and may be changed according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

The present invention is directed to a plurality of communication programs distributed by the same operator. The communication program is a kind of application communication program. Hereinafter, in the present invention, a plurality of communication programs distributed by the same operator are collectively referred to as an 'application program group', and a communication program of the application program group is referred to as an 'application communication program'.

The present invention generates and stores an access key corresponding to an application communication program for accessing a remote operator server. The present invention uses the access key as an identifier for identifying an application communication program being used by a user. The access key is a predetermined code and may be encrypted / decrypted for security.

A general operation of the present invention will be described with reference to FIG. 1. 1 is a flowchart illustrating a method of enabling simultaneous use of different communication programs with single sign-on according to the present invention. The process shown in FIG. 1 is performed at a user computer.

S10: Receive a request for using the first application communication program of the application program group from the subscriber.

S20: Check whether the subscriber is using another application communication program of the application group.

S30 (None): If there is no other application communication program in use by the subscriber, S31: Designate a socket for the first application communication program and connect the specified socket with a remote provider server, S32: perform a sign-on process, S33: access key Generate and match / store the access key with the socket information.

S30: If there is another application communication program in use, S41: check stored connection information (ie access key and matching application communication program and socket information), S42: display the confirmed connection information as a list, S43: user Receives the selected connection information, S44: Determine whether the single sign-on service.

S50: If the user selection is single sign-on, providing the access key of the connection information selected by the user to the first application communication program.

S60: The first application communication program performs a socket use authentication using a connection key.

S70: The first application communication program communicates with a remote provider server (i.e., brokerage server) through an authenticated socket.

2 is a block diagram showing an example of a user computer environment that is the subject of the present invention. In the user computer shown in Fig. 2, a home trading system for stock trading service is constructed. An application program group 40 is formed in the home trading system, and the application program group 40 includes at least two application communication programs. Each application communication program constitutes an application unit 41, 42, 43.

The first to third applications 41, 42, and 43 of the application group 40 are driven by the starter 10, and the starter 10 is the first to third applications 41, 41. 42, 43 create an initial condition that can be driven. The starter 10 downloads new information from the securities firm server A, determines an application unit to be driven according to a user input, processes a sign-on process, and instructs a socket connection between the user computer and the securities firm server A. .

 In the home trading system, the actual communication with the securities firm server A is performed by the communication unit 20. The communication unit 20 connects to the securities company server A, that is, connects the TCP / IP socket, and transmits data transmitted from each application unit 41, 42, 43 to the securities company server A through the connected socket. , Receives the data from the securities company server (A) and delivers it to the application. The communication gate unit 30 serves as a gateway between the communication unit 20 and each application unit.

On the other hand, the present invention can be applied to the case of using a plurality of different communication programs distributed by the securities company, and can also be applied to the case where the user opens a plurality of accounts in one securities company. In general, when a plurality of accounts are opened, the user registers a different communication ID and password for each account. In this case, conventionally, when the user uses the same communication program, when the applied account is different, the registered ID and password have to be input and used for each.

Hereinafter, an embodiment of the present invention will be described with reference to FIG. 3. 3 is an operation flowchart when only one communication program is driven according to an embodiment of the present invention. In the following description with reference to FIG. 3, the communication gate unit 30 is included in the communication unit 20, and the first application unit 41 is referred to as 'cyborg 2004', which is one of the home trading programs of Daishin Securities. It is called an application program.

If the user requests the start of the cyborg 2004, the starter 10 receives the user input and determines that the execution request of the cyborg 2004 (S301). In order to establish an initial environment for starting the first application unit 41, the starter 10 first displays a sign-on screen for authenticating the use of the first application unit 41, and performs a sign-on screen. The user's ID and password are provided (S302).

When the starter 10 receives an ID and a password from the user, the starter 10 provides an ID and a password informing the use of the first application unit 41 to the communication unit 20 to request a socket connection with the securities company server A (S302). In response, the communication unit 20 connects one TCP / IP socket to the securities company server A and transmits an ID and a password to the securities company server A (S303).

After the socket connection, the communication unit 20 receives the user authentication message from the securities company server A, generates a connection key indicating the use of the first application unit 41 (S305), and connects the generated connection key with TCP. The / IP socket information is matched and temporarily stored in a specific memory (S306).

The stored matching information is deleted at the end of the use of the TCP / IP socket. Here, the access key serves as a user identifier. In other words, the access key serves as information for telling who is using what application.

When a TCP / IP socket connection is established, a user's ID and password are typically transmitted to the brokerage server (A) via the connected TCP / IP socket, and the brokerage company (A) uses this as a data for identifying the subscriber. When the brokerage company A authenticates the user as a subscriber, the communication unit 20 transmits the access key previously generated according to the authentication of the brokerage company A to the starter 10 (S307).

At this time, the communication unit 20 may encrypt the generated access key using a 128-bit encryption library, and then transmit the encrypted access key to the starter 10, thereby improving security. When the access key is encrypted, the starter 10 has a function of decrypting the encrypted access key.

When the starter 10 receives the encrypted access key from the communication unit 10, the starter 10 decrypts the encrypted access key, transfers the access key to the first application unit 41, and drives the first application unit 41. (S308). The first application unit 41, which has started driving, should use a pre-connected TCP / IP socket for communication with the securities company server A. The received application key is transmitted to the communication unit 20 to request the use of the TCP / IP socket. (S309). At this time, the access key transmitted from the first application unit 41 is transmitted to the communication unit 20 through the communication gate unit 30 not shown in FIG.

When the communication unit 20 receives the access key from the first application unit 41, the communication unit 20 compares the received access key with the access keys stored in a specific memory to check whether the same access key exists, and if there is the same access key, the TCP / IP socket. Authorize use (S310). However, the communication unit 20 disables the use of the TCP / IP socket for the first application unit 41 if the connection key received from the first application unit 41 is not stored in a specific memory or if the connection key is not received. do.

When the first application unit 41 authenticates the use of the socket by the communication unit 20, the first application unit 41 performs communication with the securities company server A through the socket, thereby providing the cyborg 2004 service to the user (S311).

Hereinafter, the operation of the present invention will be described when at least one of the application programs in the application program group executes another application while communicating with the securities company server. As an example of this case, while the first application unit is driven as shown in FIG. The case where the second application unit is driven will be described. 4 is an operation flowchart when a plurality of communication programs are executed by one user according to an embodiment of the present invention.

As shown in Fig. 4, the first application part 41 is in communication with the securities company server A via the first TCP / IP socket at the request of the user. When the user requests the driving of the second application unit 42 in this state, the starter 10 receives the driving request of the second application unit 42 (S401). Here, the second application unit 42 is an application named 'Cyros Plus', which is one of Daishin Securities' home trading programs.

When the starter 10 receives the driving request of the second application unit 42 from the user, the securities company server A among the programs of the current application group 40 to determine whether or not to perform a sign-on process. The program is trying to figure out if there is a program communicating with), and if so, which TCP / IP socket to use.

That is, the starter 10 requests the communication unit 20 to the information of the application communication programs currently being used and the information of the socket to be used (hereinafter referred to as connection information) (S402). The connection information requested by the starter 10 is limited to the connection information corresponding to the application program group 40.

 As mentioned in the description with reference to FIG. 3, when each application of the application group communicates with the securities company server A, an access key corresponding to each application is generated by the starter 10. The socket connection for the application will be established and this information will be stored in a specific memory.

Therefore, the communication unit 20 checks the connection information stored in the specific memory according to the request of the starter 10 and grasps an application program currently communicating with the securities company server A (S403). In this process (S403), along with the currently running application program, the access key matched with the application program, and the socket information is grasped.

The communication unit 20 determines that only the first application unit 41 is being driven and uses the first socket with information stored in a specific memory, and provides the starter 10 with connection information indicating this (S404). . In this process (S404), the communication unit 20 encrypts the access key of the connection information provided to the starter 10 to 128 bits and transmits it.

 Then, the starter 10 decrypts the access key received from the communication unit 20 and displays the received connection information on the screen so that the user can check it (S405). Accordingly, the user determines whether to use the socket currently in use or to use a new socket based on the currently displayed connection information.

If the user selects the second application unit 42 to communicate with the securities company server A through the new socket, the present invention performs a new sign-on process as shown in FIG. IP socket connection, access key creation and storage, access key notification, etc. are performed. When a new socket connection is made, the new socket information is matched to the application and access key that uses the socket and stored in additional memory.

On the contrary, when the user selects to use the first socket currently being used by the first application unit 41 (S406), the starter 10 transmits the decrypted access key to the second application unit 42. (S407). When the second application unit 42 receives the access key, the second application unit 42 attaches the received access key to the communication unit 20 and requests the use of the first socket that the first application unit 41 is using (S408).

When the communication unit 20 receives the access key from the second application unit 42, the communication unit 20 compares the received access key with the access key matched with the first socket stored in the specific memory, and if the comparison result matches, authenticates the use of the first socket. (S409). Accordingly, the second application unit 42 communicates with the securities company server A using the first socket together with the first application unit 41 (S410).

The technical spirit of the present invention has been described above with reference to the accompanying drawings, but this is by way of example only and not intended to limit the present invention. In addition, it is obvious that any person skilled in the art can make various modifications and imitations without departing from the scope of the technical idea of the present invention.

According to the present invention, a user who uses a plurality of communication programs distributed by one brokerage company through one computer, or a user who opens and uses a plurality of accounts in one brokerage company, can use another communication program or a single sign-on process when using a communication program. The effect is that you can use another account. In addition, the present invention has the effect of preventing the waste of communication resources by not having to connect as many sockets corresponding to each when using different communication programs or a plurality of accounts.

1 is a flow chart illustrating a method for enabling simultaneous use of different communication programs with single sign-on in accordance with the present invention.

Figure 2 is a block diagram showing an example of a user computer environment of the present invention.

3 is an operation flowchart when only one communication program is driven according to an embodiment of the present invention.

4 is an operation flowchart when a plurality of communication programs are executed by one user according to an embodiment of the present invention.

Claims (7)

When a user terminal uses a communication program to communicate with a remote server via a wired or wireless network, a method for enabling simultaneous use of different communication programs with single sign-on, A first step of confirming whether a communication program currently being driven is received when a request for using the first communication program is received from a user; If there is no communication program currently running, a sign-on process is performed, a first socket is connected to the remote server, and a first connection key, which is an identifier of the first communication program, is generated to create and store connection information, and then the first socket. Communicating the first communication program with the remote server via a second server; And If there is a currently running communication program, the stored communication information is displayed to the user and when the user selects one of the connection information, the first communication program is connected to the remote server through the socket of the connection information without going through a sign-on process. A single sign-on method comprising the step of communicating, enabling different communication programs to be used simultaneously. The method according to claim 1, When the second step is performed in a user terminal including a starter, a communication unit and a first application unit made by the first communication program, A first sub-step, wherein the start unit receives ID and password information from a user; A second sub step of the communication unit connecting the first socket to the remote server; A third sub step of the communication unit generating the first access key; A fourth sub-step in which the communication unit creates the connection information by matching the first access key with information of the first communication program, and stores the connection information in a specific memory; A fifth sub step of transmitting, by the communication unit, the first access key to the start unit; A sixth sub-step in which the starter delivers the first access key to the first application part; A seventh sub-step, wherein the first application unit provides the first access key to the communication unit to request authentication for use of the first socket; And comparing the received first access key with the stored information of the specific memory to perform authentication, and as a result, the first application unit to perform communication through the first socket. Characterized by single sign-on enabling different communication programs to be used simultaneously. The method according to claim 2, In the fifth sub-step, the communication unit encrypts and transmits the first access key, and in the sixth sub-step, the first access key is decrypted after the decryption of the first access key encrypted by the start unit. Single sign-on, characterized in that the transfer to the wealth to enable the use of different communication programs at the same time. The method according to claim 2, The third step may include: a ninth sub-step in which the starter displays the connection information stored in the specific memory as a list to a user; A tenth sub-step in which the communication unit determines socket information of the connection information selected by the user when the user selects one of the connection information displayed as a list; An eleventh sub-step of the communication unit determining an access key matched with the socket information; A twelfth sub-step of transmitting the access key determined by the communication unit to a start unit; A thirteenth substep of transmitting the access key received by the starter to a first application unit; A fourteenth substep of the first application unit providing the access key to the communication unit to request authentication of the first socket; And a fifteenth step in which the communication unit authenticates the received access key through the stored information of the specific memory, and as a result, the first application unit performs communication through the first socket. To enable different communication programs simultaneously. The method according to claim 4, In the twelfth sub-step, the communication unit encrypts and transmits the access key, and in the thirteenth sub-step, the starter decrypts the encrypted access key and then transfers the access key to the first application unit. To enable different communication programs simultaneously with single sign-on. The method according to claim 1 or 4, The third step is If the user selects the single sign-on denial of service that does not select one of the connection information, the second server performs a process of the second step in which there is no communication program currently running to communicate with the remote server through a separate socket. Single sign-on, characterized in that to enable the use of different communication programs at the same time. On your computer, A first step of confirming whether a communication program currently running is received when a request for starting a first communication program is received from a user; If there is no communication program currently running, a sign-on process is performed, a first socket is connected to the remote server, and a first connection key, which is an identifier of the first communication program, is generated to create and store connection information, and then the first socket. Communicating the first communication program with the remote server via a second server; And If there is a currently running communication program, the stored communication information is displayed to the user and when the user selects one of the connection information, the first communication program is connected to the remote server through the socket of the connection information without going through a sign-on process. A computer-readable recording medium having recorded thereon a program capable of executing a third step of communicating.