KR20070107395A - Service providing system and method through membership certification - Google Patents

Abstract

A system and a method for providing service through a membership certification are provided to prevent personal information disclosure by receiving a membership authentication through a group membership center not a service provider. A system for providing service through a membership certification includes a group server(12), a group membership authentication center(20) and a service providing server(32). The group server creates a membership authentication code based on the basic information of a member and provides the membership authentication code. The group membership authentication center is provided with the membership authentication code and authenticates the membership. The service providing server is connected to a personal terminal, requests authentication by transmitting the basic information inputted through the personal terminal to the group membership authentication center, and provides an authenticated member with a service.

Description

Service providing system and method through membership certification

1 is a block diagram illustrating a service providing system through member authentication according to an embodiment of the present invention.

2 is a flowchart illustrating a service providing method using the service providing system of FIG. 1.

3 is a flowchart illustrating a step of generating a member authentication code of FIG. 2.

Description of the main parts of the drawing

10: group 12: group server

14: Member Information DB 15: Personal Information DB

16: basic information DB 16a: basic information

17: Membership Authentication Code DB 17a: Membership Authentication Code

18: Hash Algorithm 20: Group Membership Authentication Center

22: authentication server 24: member authentication DB

30: service provider 32: service provider server

34: Website 40: Personal Terminal

54, 56: communication network 100: service providing system

The present invention relates to a service providing system and a service providing method using a communication network, and more particularly, to a service providing system and a service providing method for providing a service through member authentication.

In accordance with the development of the Internet environment and mobile communication network through wired or wireless, service users can receive various services from service providers through personal terminals. In this case, a personal terminal may be a PC, a notebook computer, a PCS, a cellular phone, or a PDA.

At this time, the service provider is a provider of services on the Internet, and operates a web site based on a service providing server. The user basically needs to be a member in order to receive the service from the service provider. In addition, the service provider provides a limited service or specialized service for the subscribed members.

However, when signing up, service providers require personal information (name, social security number, address, phone number, e-mail address, etc.) as basic sign up information.

Therefore, the user is inconvenient to provide personal information for each web site that requires the use of the service, and always has anxiety due to the leakage of personal information.

In particular, organizations that have a large number of members or employees (hereinafter collectively referred to as 'members'), such as general businesses, carriers, banks, cards, refiners, fellowships, and general organizations, offer their members online through service providers. If you choose to provide the service, you are under pressure to provide your personal information to the service provider.

In general, the service provider provides the same service to members who subscribe through the web site (called 'site members' to distinguish it from the members of the organization), and therefore provides various services depending on the user organization. If you ask for it, there is a problem that the response is not.

Therefore, the first object of the present invention is to be able to receive a service from a service provider without providing the personal information of the member.

A second object of the present invention is to connect a group and a service provider so that specialized services can be provided only to members of the group.

In order to achieve the above object, the present invention provides a service providing system and service providing method through a member authentication that provides a service through the member authentication through the group member authentication center without providing the personal information of members to the service provider to provide.

The present invention is a service providing system that provides a service only to members of a group, and includes a group server, a group member authentication center, and a service providing server. The group server generates and provides a member authentication code based on the basic information of the member. The group membership certification center receives a member verification code to verify membership. The service providing server connects through a personal terminal, transmits basic information input through the personal terminal to the group member authentication center, requests authentication, and provides a service to the authenticated member.

The present invention is also a service providing system for providing a service only to members of a group, and includes a group server, a service providing server, and a group member authentication center. The group server generates and provides a member authentication code based on the basic information of the member. The service providing server connects through a personal terminal, requests input of basic information, and provides a service to an authenticated member. The group member authentication center receives and stores / updates the member authentication code from the group server, checks whether there is a member authentication code corresponding to the basic information received from the service providing server, and provides the result to the service providing server.

In the service providing system according to the present invention, the member authentication code may be generated by a hash algorithm.

In the service providing system according to the present invention, the group member authentication center includes a member authentication DB and an authentication server. The member authentication DB stores / updates the member authentication code received from the group server. The authentication server checks whether the member authentication code corresponding to the basic information received from the service providing server is in the member authentication DB, and provides the result to the service providing server.

The present invention also provides a service providing method through member authentication. The service providing method according to the present invention includes (a) receiving / saving a member authentication code from a group server that generates and provides a member authentication code based on the basic information of the member, and authenticates the member based on the member authentication code. We start from building an authentication server. Next, (b) access the service providing server through a personal terminal. (c) The service providing server receives the basic information through the personal terminal and transmits it to the authentication server. (d) The authentication server checks whether there is a member authentication code corresponding to the basic information, and transmits the result value to the service providing server. And (e) the service providing server determining whether to transmit the service to the personal terminal according to the result value.

In the service providing method according to the present invention, in step (a), the member authentication code is generated by a hash algorithm.

In the service providing method according to the present invention, step (e) transmits a service to a personal terminal when there is a member authentication code corresponding to the basic information, and an error to the personal terminal when there is no member authentication code corresponding to the basic information. Send a message. In this case, when the error message is transmitted, the service providing server may further include requesting re-entry of the basic information.

Hereinafter, with reference to the accompanying drawings will be described in detail an embodiment of the present invention.

Service delivery system

1 is a block diagram illustrating a service providing system 100 through member authentication according to an embodiment of the present invention.

Referring to FIG. 1, the service providing system 100 according to an exemplary embodiment of the present invention connects a group 10, a group member authentication center 20, a service provider 30, a personal terminal 40, and each other. Communication networks 54 and 56;

The group 10 includes a group server 12 and a member information DB 14. The group server 12 generates a member authentication code 17a based on the basic information of the member and provides it to the group member authentication center 20. At this time, the group server 12 constructs the member information DB 14, and the member information DB 14 includes a personal information DB 15, a basic information DB 16, and a member authentication code DB 17.

In particular, the member authentication code 17a may be generated with a hash algorithm 18 based on the provided basic information 16a, as shown in FIG. At this time, the example in which the name and the resident (registration) number of the member are provided as the basic information 16a is not limited thereto, and may be selected and provided from personal information that can distinguish the member. Personal information that can be provided as basic information 16a includes a name, resident number, address, telephone number, e-mail address, employee number, member number, and the like. Personal information is provided in the personal information DB 15.

On the other hand, if only the member's name and social security number are provided as the basic information (16a), problems may arise due to the theft of another person's name. Can be provided.

The group member authentication center 20 receives the member authentication code 17a from the group server 12 and authenticates the membership according to the request of the service provider 30 through the communication network 54. The group member authentication center 20 is based on the member authentication DB 24 that stores / updates the member authentication code received from the group server 12 and the member authentication DB 24 at the request of the service provider 30. An authentication server 22 for searching and authenticating group membership is included.

The service provider 30 is building a service providing server 32 capable of web services. The service providing server 32 operates a web site 34 accessible through the personal terminal 40. The service providing server 32 operates and manages the web site 34 so that a service can be provided to an authenticated member among users who access the web site 34. In this case, the service providing server 32 may distinguish and provide a first service provided to the site member and a second service provided to the group member authenticated through the group member authentication center 20.

In this case, the second service is prepared by a pre-contract (partnership) between the organization 10 and the service provider 30, and may be prepared separately from the first service or may be at least a part of the first service.

Meanwhile, in the present embodiment, although the service providing server 32 discloses an example of providing the web site 34, a WAP (Wireless Application Provider) site may be provided. That is, the service providing server 32 may be a web server or a swap server. The swap site may be provided to a mobile communication terminal (PCS, cellular phone or PDA) using a mobile communication network among the personal terminals 40.

The user accesses the web site 34 of the service providing server 32 through the personal terminal 40 and receives the service through member authentication. Of course, the personal terminal 40 connects to the web site 34 via the communication network 56.

In this case, the user may be provided with the second service through group membership authentication, or may be provided with the first service through membership of a typical web site 34. In the latter case, since it is a method of receiving a conventional first service, a detailed description thereof will be omitted and the description will be mainly given for the former. The former member authentication is made in the authentication server 22, the latter in the service providing server 32.

That is, when a user inputs basic information into the service providing server 32 through the personal terminal 40, the service providing server 32 transmits the basic information to the authentication server 22. The authentication server 22 determines whether the member authentication code corresponding to the basic information received from the service providing server 32 is in the member authentication DB 24, and provides the result value to the service providing server 32. The service providing server 32 determines whether to provide a service to the user according to the result value.

Therefore, the service providing system 100 according to the present invention is authenticated through the third group member authentication center 20 without transmitting the user's personal information to the service providing server 32, thereby causing a problem of personal information leakage. Can be solved.

In addition, by connecting the group 10 and the service provider 30 through the group member authentication center 20, the group 10 may provide a second service specialized to the members.

How to provide service

The service providing method 60 using the service providing system 100 according to the present invention will be described with reference to FIGS. 1 to 3 as follows. 2 is a flowchart of a service providing method 60 using the system of FIG. 1. 3 is a flowchart showing a step of generating a member authentication code 17a of FIG. In this case, the service corresponds to the second service, and the service is provided according to whether the group member authentication center 20 is authenticated by a pre-contract (partnership) between the group 10 and the service provider 30.

First, the group member authentication center 20 is started. That is, the group server 12 generates the member authentication code 17a through the hash algorithm 18 based on the basic information 16a of the member. The member authentication code 17a is provided and stored / updated in the member authentication DB 24. And the group member authentication center 20 is constructed by building the authentication server 22 which authenticates a member based on the member authentication code 17a.

Next, the user accesses the web site 34 of the service providing server 32 through the personal terminal 40 (61 in FIG. 2). At this time, the personal terminal 40 accesses the web site 34 through the communication network 56. The web site 34 provides an input window for inputting basic information for group membership authentication.

In detail, first, when a user inputs basic information into an input window (62 of FIG. 2), the service providing server 32 transmits the basic information to the group member authentication server 32 through the communication network 54 ( 63 of FIG. 2).

Next, the authentication server 22 proceeds to authenticate the membership (64, 65 of Figure 2). That is, the authentication server 22 confirms whether the member authentication code corresponding to the basic information is in the member authentication DB 24 (64 in FIG. 2), and transmits the result value to the service providing server 32 (FIG. 2). Of 65). In this case, the result value may be one of "group member authentication", "withdrawal member", "unregistered member" or "system failure".

Next, when the service providing server 32 receives the "group member authentication" as a result, the service providing server 32 provides a web service to the personal terminal 40 through member authentication approval (66, 67 of FIG. 2) (FIG. 2). 68). The user can use the web service provided by the service providing server 32 (69 in FIG. 2). A user may purchase or receive a prize as a product, contents or various items provided by a web service through web surfing.

However, when the service providing server 32 receives a result value other than "group member authentication", that is, not a group member (66 in FIG. 2), an error message is transmitted to the personal terminal 40 (71 in FIG. 2). ). For example, if you are a "Withdrawal member", send the error message "You have already left or left the membership." If you are an "unregistered member", send the error message "You are not a member / member of this member." In case of a "system failure", the error message "system failure" is sent.

In addition, the service providing server 32 provides an input window for inputting basic information again (72 of FIG. 2). In this case, the user may attempt to access by inputting the basic information again through the personal terminal 40, or may terminate the connection of the service providing server 32 (73 of FIG. 2).

On the other hand, the embodiments of the present invention disclosed in the specification and drawings are merely presented specific examples to aid understanding, and are not intended to limit the scope of the present invention. In addition to the embodiments disclosed herein, it is apparent to those skilled in the art that other modifications based on the technical idea of the present invention may be implemented.

Therefore, according to the structure of the present invention, since the service user receives member authentication through the group member authentication center rather than the service provider by providing basic information, the service user and the service provider can solve the problem caused by the exposure of personal information. have. The user can be provided with the service without providing personal information directly to the service provider.

Groups and service providers are connected by a pre-agreement (partnership) through the Group Membership Authentication Center, which enables them to provide specialized services only to group members from the point of view of the organization, and to generate revenue through service provision from the point of view of the service provider. Can be.

In addition, the service provider can be connected to the group without attracting members, thereby reducing the burden of attracting members and expecting the effect of attracting potential members.

Claims (8)

Service delivery system that provides services only to members of the group, A group server generating and providing a member authentication code based on the basic information of the member; A group member authentication center receiving the member authentication code and authenticating a member; A service providing server connected to a personal terminal, requesting authentication by transmitting basic information input through the personal terminal to the group member authentication center, and providing a service to an authenticated member; Service delivery system through authentication. Service delivery system that provides services only to members of the group, A group server generating and providing a member authentication code based on the basic information of the member; A service providing server connecting through a personal terminal, requesting input of basic information, and providing a service to an authenticated member; The group receiving and storing the member authentication code from the group server, checking whether the member authentication code corresponds to the basic information received from the service providing server, and providing the result to the service providing server. Member authentication center; service providing system through member authentication, characterized in that it comprises a The system of claim 1 or 2, wherein the member authentication code is generated by a hash algorithm. The method of claim 1, wherein the group member authentication center, Member authentication DB for storing / updating the member authentication code received from the group server; And an authentication server for checking whether a member authentication code corresponding to the basic information received from the service providing server is in the member authentication DB, and providing a result value to the service providing server. Service provision system through. (a) receiving and storing / updating the member authentication code from a group server that generates and provides a member authentication code based on the basic information of the member, and constructing an authentication server for authenticating the member based on the member authentication code; ; (b) accessing a service providing server through a personal terminal; (c) the service providing server receiving basic information through the personal terminal and transmitting the basic information to the authentication server; (d) checking, by the authentication server, whether there is a member authentication code corresponding to the basic information, and transmitting a result value to the service providing server; (e) determining, by the service providing server, whether to transmit the service to the personal terminal according to the result value. The method of claim 5, wherein in the step (a), the member authentication code is generated by a hash algorithm. The method of claim 6, wherein step (e) If there is a member authentication code corresponding to the basic information, the service is transmitted to the personal terminal, And if there is no member authentication code corresponding to the basic information, transmitting an error message to the personal terminal. The method of claim 7, wherein when the error message is transmitted in step (e), the service providing server further includes requesting re-entry of basic information.

Images