KR20060002000A - System and method for logging-in website and storing game item by using ic card - Google Patents

Abstract

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and system for website login and game item storage using an IC card (including a smart card). Receiving a client login request to a web server (including a game server) through, Requesting encryption data for login to the client system in accordance with the login request, IC chip unique number embedded in the smart card on the client system Encrypting using a serial number and transmitting the encrypted data to the web server, verifying client authentication by decrypting the encrypted data transmitted from the client system, and allowing the authenticated client to log in, In-Game and Avatar Items It consists of including the step of causing the storage function is valid.

According to the present invention, it is possible to securely log in to an online game or the like using a smart card, thereby preventing identity theft and password theft by other clients, and safely storing and protecting a game or an avatar item possessed by the client. can do.

Smart Card, Unique Number, Encryption

Description

System and Method for Logging-in Website and Storing Game Item by Using IC Card}

1 is a simplified block diagram of the implementation of the present invention.

2 is a simple flowchart of the overall process of implementing the present invention.

3 is a simple flowchart of a process of creating encrypted data in a system of a client and decrypting the received web server.

4 is a simple flowchart illustrating a process of storing items (avatars or games, etc.) held or used by the client in the smart card after the client logs in using the smart card.

<Description of main parts of drawing>

100: web server (including game server) 105: login authentication system

110: encryption calculation module 115: authentication module

120: personal information database 125: item management system

130: upload / download module 135: item information database

140: transmission module 145: client

150: Affiliate Website

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and system for website login and game item storage using an IC card (including a smart card). Receives a client login request to a web server (including a game server) through the client system and requests encrypted data for login to the client system, and encrypts and transmits the data using an IC chip serial number embedded in a smart card on the client system. After verifying the client authentication by decrypting the encrypted password data, the client is allowed to log in and provides the smart card with a storage function such as a game item and an avatar item.

Due to the development of the Internet, many websites have been created online. Recently, many websites provide a login ID and password for identifying the client through the membership registration of the client. The website is accessed using a password, and the website identifies each individual client by the ID and password entered by the client.

In addition, the website obtains specific IP address information from the client, holds the multiple IP address information of the multiple clients, checks the IP address that attempts to connect, and permits access to one PC. There are methods to allow access to clients using certificates and private keys, and client fingerprint, iris, voice recognition, and Onetime Password methods.

However, in the above-described login identification method of the client, the method of providing the ID and password to the client can be forgotten or hacked when the number of IDs and passwords that the client needs to memorize becomes large, There is a problem in that a method of managing an IP address allowing access of a plurality of clients may be cumbersome for managing a plurality of IP addresses, and a client may access only a corresponding IP address.

The method of providing each client with a certificate and a private key to store in a personal PC has only one PC, so there was a problem in mobility or security, and a biometric and one-time password providing method such as a fingerprint or an iris is provided in the terminal. Its value is expensive or applies only to logins, and it is difficult to apply to continuous tasks in the same session.

An object of the present invention to solve the above problems is to receive a client login request to a web server (including game server) via the Internet on a client system (system including a smart card reader, such as a PC) having a smart card drive program Request the encrypted data required to log in to the client system, receive the encrypted encrypted data using the IC chip unique number (Serial Number) embedded in the smart card on the client system, verify the client authentication by decrypting it, and then The present invention provides a method and system for allowing a login of a smart card and providing a storage function such as a game item and an avatar item to the smart card.

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and system for website login and game item storage using an IC card (including a smart card). Receiving a client login request to a web server (including a game server) through, Requesting encryption data for login to the client system in accordance with the login request, IC chip unique number embedded in the smart card on the client system (Serial Number) encrypting and transmitting to the web server, decrypting the encrypted data transmitted from the client system to verify the client authentication, allowing the client to verify the authentication, the smart Cards for gaming and avatar items And validating the storage function.

A network component of the present invention includes a web server (including a game server) that provides a function such as secure login using smart card information of a client, and accesses the web server through a smart card of its own. It is characterized by consisting of at least one client to securely record the items such as games or avatars on the smart card.

According to the present invention, the web server recognizes a client requesting login with a smart card, and encrypts login request data (chip-specific serial number, server) transmitted from the system of the client (system including a smart card reader such as a PC). Decrypt the time, cryptogram, etc., and perform login authentication using a smart card of the client.Uploading or downloading (game or avatar items) to the smart card is allowed to the client who is allowed to log in. Down Loading) feature, and data uploaded from the smart card to the web can be deleted randomly.

In addition, according to the present invention, the encrypted or decrypted data is used a unique serial number of the IC chip mounted on the smart card held by the client, the unique serial number of the IC chip is impossible to forgery, modulation and duplication, etc. It is a hardware unique number, and the web server specifies that the serial number information of the IC chip can be registered in advance from the client and stored in the database for smooth implementation of the present invention.

In addition, the present invention is more secure than the existing Internet client identification method, and can be used in parallel with the existing client identification method, even if not a member, access (access) rights for a certain time. Granting and retrieval may be possible, and the present invention may be practiced in conjunction with other web sites affiliated with the present web server.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First, in adding reference numerals to the elements of each drawing, it should be noted that the same elements are denoted by the same reference numerals as much as possible even if they are shown in different drawings. In addition, in the following description, in order to explain the embodiments of the present invention, specific details such as specific elements are illustrated, which are provided to help a more general understanding of the present invention, and the present invention may be practiced without these specific details. It will be apparent to those skilled in the art. In describing the present invention, when it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

In addition, in order to be more faithful to the present invention, it is noted that changes or modifications can be made by those skilled in the art without departing from the spirit of the present invention.

1 is a simplified block diagram of the implementation of the present invention.

In this figure, when the client 145 logs in to the web server (including a game server) 100 using his smart card, the web server 100 is mounted on the smart card of the client 145. A simple configuration diagram of a system for identifying a client 145 by identifying a chip unique serial number and allowing login.

The web server 100 is composed of a login authentication system 105 and an item management system 125, each of which is as follows.

The login authentication system 105 determines whether the client 145 is allowed to access the device, and when the user authentication of the client 145 is completed, allows the login of the client 145. The encryption calculation module 110 is provided. , An authentication processing module 115 and a personal information database 120.

The encryption calculation module 110 recognizes a client 145 attempting to log in using his smart card, and includes a client 145 system (smart card reader such as a PC) to which the client 145 is connected. Request the encrypted data to authenticate the login, and receive the login encrypted data formed in the client 145 system and decrypt it to confirm the login authentication of the client 145, and the client 145 To allow login access.

In more detail, the encryption calculation module connects the specialized data including the inquiry command for authentication and the server time to the smart card according to the website access and login request of the client 145 to the smart card. Send to a client 145 system (system including a smart card reader, such as a PC), check the login encryption data (chip unique serial number, server time, cryptogram) transmitted from the client 145 system, Decryption for login authentication of the client 145 is performed by using factors included in the encrypted data.

The authentication module 115 checks the login authentication of the client 145 when the analysis of the login authentication data transmitted by the client 145 through the encryption calculation module 110 is completed, and the client 145 smart card. It is possible to securely log in, and to send the authentication confirmation information to the item management system to be described later serves to help the client 145, whose authentication is verified, to store their games and avatar items in the smart card. .

The personal information database 120 stores personal information (name, ID, password, address, mobile phone number, etc.) of the client 145, and is mounted on the smart card of the client 145 according to the present invention. The serial number of the IC chip is stored.

The item management system 125 serves to allow the client 145, which is securely logged in with his smart card, to select some or all of his items (games or avatars), etc., to store and manage them as the smart card. And an up / down loading module 130 and an item information database 135.

The up / down loading module 130 downloads and stores an item (game or avatar item, etc.) possessed by the client 145 having completed login authentication in the data area of the smart card of the client 145 or Up Loading the items stored in the smart card.

In addition, according to the present invention, the downloaded data cannot be deleted arbitrarily, and the random deletion enables only the uploaded data.

The item information database 135 records information about items (game or avatar items, etc.) of the client 145 which are uploaded or downloaded by being interchanged with the smart card of the client 145 and the web server 100. Database.

The transmission module 140 transmits and receives various data processed by the web server 100 and exchanges data with the client 145, and works in conjunction with the transmission / reception and personal information database 120 through the Internet. (145) It automatically helps to maintain a more secure user interface by automatically sending login details and up / downloading items of items according to the request of the client 145 when an event occurs. .

The client 145 refers to a user on the Internet who wants to log in with his or her smart card, and is basically a system connected to a card reader capable of reading / writing a smart card (PC capable of connecting to the Internet). Etc.) to access the web server 100, the system is interoperable with the web server 100 and is equipped with an application program for managing the smart card.

The client 145 attempting to log in to the web server 100 has an IC chip unique serial number mounted on the smart card using the program and the like, and creates encrypted data and transmits the encrypted data to the web server 100. . The encrypted data is login authentication data of the client 145, and the web server 100 may analyze the login authentication of the client 145.

According to the present invention, by enabling the smart card login of the client 145 by using the unique serial number of the chip (Chip) mounted on the smart card, it is possible to build a more secure login system.

2 is a simple flowchart of the overall process of implementing the present invention.

When the client 145 attempts to access the web server 100 using its smart card (200), the web server 100 receives a connection request from the client 145, and sends the request to the client 145. An encryption data for authentication is requested (205).

The client 145 creates encrypted data including a unique serial number of the IC chip mounted on the smart card through a system (a system including a smart card reader such as a PC) used by the client, and creates the encrypted data on the web. The server 100 transmits the data to the server 100 (210).

The web server 100 receives the encrypted data transmitted from the client 145 (215), and interprets it to confirm the authentication of the client 145 (220). If the authentication is confirmed, the client 145 is allowed to log in, and also the up / down loading of the retained item may be allowed (230). If authentication is not performed, the login reject message is transmitted (225).

In addition, for more secure login operation, the login of the client 145 is performed and the login history is transmitted to the mobile phone of the client 145 (235). Also, uploading / downloading items, etc. held by the client 145 are performed. When the job is requested, the details are transmitted to the mobile phone of the client 145 as in the case described above (240).

When all the work is completed and the client 145 requests logout, the web server 100 terminates the session connected with the client 145 and stores the usage history of the client 145 in the database (245). ).

3 is a simple flowchart illustrating a process of decrypting a web server 100 receiving the encrypted data from the process of creating encrypted data in the system of the client 145.

The web server 100 receives a login request using a smart card from the client 145 (300), and encrypts the data necessary for login authentication to the client 145 system to which the client 145 is connected with the smart card. In operation 305, the server time for transmitting the encrypted data is transmitted.

The client 145 system receives the server time transmitted from the web server (310), and recognizes the chip serial number of the smart card connected to the system (315). The client 145 system scrambles the chip serial number and the received server time to create encrypted data (320), and transmits the created encrypted data to the web server 100 (325). The encryption data may include a chip serial number, a server time, a cryptogram, and the like.

The web server 100 receives the encryption data required for the login authentication transmitted from the client 145 system (330), and compares the received server time with the current server time prior to decryption to check the error (335). If the server time error is less than 1 minute, the web server 100 proceeds with the decoding process, and if the server time error is more than 1 minute and transmits a login rejection message (340).

The web server 100 performs a decryption process using the encrypted and transmitted data (345), the process is to create a cryptogram (Cryptogram) using the server time and chip serial number included in the data, and The ciphertext is compared with a cryptogram received from the client 145 system to check whether the ciphertext matches.

When the authentication through decryption is completed, the web server 100 inquires the smart card chip serial number of the client 145 stored in the database and matches the chip serial number included in the encryption data. The authentication is verified by comparison (350). When the authentication is completed, the client can log in (355).

In addition, it is noted that the encryption algorithm used for encryption and decryption may use a 16-bit algorithm (SEED, 3DES) and the like.

The encryption and decryption process to be described in this drawing uses an IC chip mounted on a smart card possessed by the client 145. The unique serial number represented by the chip is a unique unique hardware number. Modulation, duplication, and the like are not possible, helping the client 145 to perform a more secure login procedure.

4 is a simple flowchart of a process of storing an item (such as an avatar or a game) held or used by the client 145 in the smart card after the client 145 logs in using the smart card.

The figure adds a function to allow the client 145 to store, store, and carry games, avatars, and other items in the data area of the smart card held by the client 145, thereby preventing the risk of hacking into the account of the client 145. By doing so, it is possible to freely upload items between different accounts.

In addition, the format of data usable in the data area may include a website code, an item number, an authentication field, a download or upload time and ID, and the authentication field may include a site code, an item number, data download or upload. It can be configured to include the time, the unique serial number, etc., and it can be scrambled by the encryption algorithm of the corresponding site to enable post-verification.

When the client 145 accesses the web server 100 using his smart card (400), the login authentication of the client 145 is completed through the process of FIG. When the login of the client 145 using the smart card is completed (405), the client 145 performs a game or other Internet operation on the website, and the avatar or the like can also be managed (410). .

When the client 145 requests uploading for use of a game or other avatar item stored in the smart card (415), and uploading the item of the client 145 stored in the smart card proceeds (420), the web server ( 100 transmits the uploading details to the client 145 mobile phone or e-mail to prevent theft by others in real time (425).

When the corresponding operation of the client 145 is completed within the website and the client 145 requests logout (430), the web server 100 checks whether or not the item being used is downloaded to the smart card. At operation 435, the client 145 downloads the used or selected items to the smart card at operation 440.

As with the uploading, the downloading history is simultaneously transmitted to the mobile phone of the client 145 so that the client 145 can check in real time (445). When the process is completed, the logout process of the client 145 is completed (450).

Uploading or downloading an item using a smart card specifies that it may be linked to another site having a relationship with an affiliated website and the like in which the present invention is implemented.

According to the present invention, by providing a method and system for enabling a user to log in to a website on the Internet using a smart card owned by the client and to store avatars or game items, the smart card chip provides a unique serial number. By preventing forgery, forgery, and duplication of ID and password, there is an advantage that a more secure login procedure can be performed.

The third party may provide and recover access rights for a predetermined time, and upload or download important game items, points, miles, gift certificates, and avatar items by recording them on a smart card.

Claims (2)

Authentication means for authenticating the client when the client terminal is connected; And Based on the authentication result, a game is provided to the client terminal, and the game item information is transmitted to the client terminal so that game item information held by the client according to the game progress is stored in the client owned IC card. And a game item management means. The method of claim 1, wherein the authentication means, In connection with a storage medium for storing a unique code previously stored in the client-owned IC card, when the client terminal transmits a unique code previously stored in the IC card, the unique code transmitted from the client terminal and stored in the storage medium Game server characterized in that the authentication process for the client by comparing the unique code.

Images