KR20090000093A - Method for offering web service by utilizing internet network access authentication and system thereof - Google Patents

Abstract

A method and a system thereof for providing a web service by using internet access authentication are provided to subdivide an access authentication process by utilizing the access authentication of a subscriber for Internet access, thereby providing an individualized customized web service which is possible for expansion and dynamic configuration. If a web browser request is generated from a user terminal(100), a login page is configured and provided. The user terminal requests authentication after receiving ID and password. As the authentication result, in case the user terminal is a welcome page subscriber(102) or non-subscriber, the welcome page is provided. In case the user terminal is a welcome page refusal subscriber, the welcome page is not provided. In case the user terminal is the welcome page non-subscriber(101), a base page is comprised of the welcome page. In case the user terminal is a security service subscriber, the welcome page is provided to the user terminal. If a web browser request is received from the user terminal, an connection unit(200) delivers the request along with IP(Internet Protocol) information. By the request of the connection unit, an authentication system(400) performs the authentication of the user terminal. If a security service request is received from the user terminal, a security solution(500) performs subscriber verification.

Description

Web service providing method and system using internet access authentication {METHOD FOR OFFERING WEB SERVICE BY UTILIZING INTERNET NETWORK ACCESS AUTHENTICATION AND SYSTEM THEREOF}

1 is a block diagram for providing a web service using the Internet network access authentication procedure according to an embodiment of the present invention.

2 is a flowchart illustrating a method of providing a web service for each subscriber according to an embodiment of the present invention.

3 is a flowchart illustrating a web service providing method using the internet network authentication of FIG. 2 in detail.

FIG. 4 is a flow chart illustrating a security service providing method utilizing internet network access authentication of the security service subscriber of FIG. 2.

<Description of Symbols for Main Parts of Drawings>

100: user terminal 101: welcome page non-subscriber

102: individual welcome page subscriber 103: group welcome page subscriber

104: welcome page rejected subscriber 105: security service subscriber

200: connection device 300: web service system

310: Web Server 320: Web DB

400: authentication system 410: authentication server

420: authentication unit 430: Web DB configuration information

The present invention relates to a method and system for providing a web service using internet access authentication, and more particularly, to provide a personalized personalized web service using a subscriber authentication for accessing the internet. Technology for.

With the development of the information society, the search and sharing of information through the Internet is being activated, and the number of Internet users is increasing rapidly.

However, most general users use their own computers to access the Internet through communication devices such as modems. Therefore, each user has to go through an authentication process for accessing the Internet.

In addition, as the Internet market goes beyond the simple sharing of academic information for the past academic purposes, users are required to use such services as the information service methods are gradually diversified, such as providing high value-added information required by users for a fee or restricting the search of specific groups. There is a need for a separate service certification.

However, the process of obtaining additional authentication for the use of a separate service every time a user wants to use a desired service is cumbersome, which not only greatly reduces the convenience of using the service but also uses a plurality of additional services. It is difficult to notify the users by managing the amount of usage collectively, which has been pointed out as a problem in the development of the new Internet market.

In addition, it is pointed out that the waste of service resources such as account loss is also a problem by using a separate service use account and password for each user according to the type of additional service.

As such, the user authentication technology using the conventional Internet access and service is limited to the study of various methods according to the high-level encryption method and the authentication procedure for individual authentication, and thus, separate accounts and passwords for individual authentication. The maintenance of the service provider was essential, and it was impossible to provide a satisfactory user service because there were many difficulties in the settlement of the total usage by user.

That is, the conventional Internet service is divided into access authentication for internet access right and service authentication for separate additional service use right, and access authentication is processed by an Internet service provider (ISP) providing an internet access service. And once the user wants to use the additional service desired by the user, the service has been managed again by performing service authentication for service use.

However, the provision of services through such individual authentication is cumbersome for users to enter their account (login ID) and password every time they use the service. There was a difficulty.

Accordingly, an object of the present invention is to provide a personalized customized web service using an internet network access authentication procedure and subscriber subscription information to increase user convenience.

Web service providing method using the Internet network access authentication procedure according to an embodiment of the present invention for achieving the above object, the first process to configure and provide a login page when a web page request from the user terminal, and the A second process of requesting authentication after receiving an ID and password; and performing authentication on the authentication request, and if the user terminal is a welcome page subscriber or a non-subscriber as a result of the authentication, a welcome page is provided and the user terminal In the case of the rejection of the welcome page, the third process may include not providing the welcome page.

In addition, the web service providing system using the internet network access authentication procedure according to an embodiment of the present invention, when receiving a web page request from the user terminal and the connection device for transmitting the request with the IP information, by the request of the access device An authentication system for authenticating the user terminal and, upon receiving a web page request from the access device, construct and provide a login page, and if the user terminal is a welcome page subscriber or a non-subscriber according to a result of the authentication, a welcome page And provide a web service system that does not provide the welcome page when the user terminal is a welcome page rejected subscriber.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

1 is a block diagram for providing a web service using the Internet network access authentication procedure according to an embodiment of the present invention.

The present invention provides a user terminal (101 ~ 105), access device 200, Web service system 300, authentication system 400, and security solution 500 to provide a web service using the Internet access authentication procedure It includes.

The web service using the access authentication procedure of the present invention is a welcome page composed of a login information page including a web DB configured based on the access area, subscription information such as individual and group subscription, and security service subscription, and a web DB selected by the subscriber ( Wellcome), categorized into individual and access area logoff pages.

In particular, welcome pages categorize subscribers into four types to provide web services. That is, it checks whether a web service is subscribed when checking subscriber information for access authentication, and accordingly, welcome page non-subscriber terminal 101, individual or group welcome page subscriber terminals 102 and 103, and welcome page reject subscriber terminal 104. ), And the security service subscriber station 105. In this case, the subscriber stations 101 to 105 are entities for requesting a universal browser-based web service.

The welcome page non-subscriber terminal 101 may be provided with a web service composed of a web DB of a basic frame provided by an operator.

Subscriber terminals 102 and 103 subscribing to individual and group web services may additionally configure web DB information selected by a subscriber in a basic frame provided by an operator to receive web services.

Welcome page reject subscriber station 104 does not receive the welcome page itself.

The security service subscriber station 105 receives the security client in the welcome web page so that the security service can be provided even if a separate client for security is not installed in the subscriber terminal in advance.

The access device 200 is provided at the subscriber end as an AP (ACCESS POINT) or a wireless LAN switch and requests authentication to the authentication server 400 when the access request is received through the Internet network 600 from the user terminals 101 to 105. . To this end, the AAA client is preferably installed in the access device 200. In addition, when the access device 200 receives an internet network access request from the user terminal, the access device 200 includes the information (IP information) to the web service system 200 to transmit the access device 200 to the web service system 200. Regional classification can be made by reference. That is, the access device 200 controls the http message before access so that the web service system 300 configures a web page according to the authentication step by interworking with the web service system 300. In addition, the access device 200 is an AAA-based authentication client and receives a web DB configuration information configured for each subscriber from the authentication server and delivers it to the web service system.

The web service system 300 transmits an authentication request from the access device 200 to the authentication server 400, and configures a login page, a web page, and a logoff page for the request from the access device 200. do.

To this end, the web service system 300 includes a web server 310 and a web DB 320. The web server 310 classifies the http message transmitted from the access device 200 and provides a login, welcome, and logoff page to each user terminal. The web DB 320 stores page configuration information for providing a web service by dividing it into a login web DB, a welcome web DB, and a logoff web DB as shown in Table 1 below. In addition, the web service system 300 may use the IP information of the access device 200 to classify the region of the user terminal and provide a customized web page for each region.

Login web DB A area page A workplace, a workplace, a workplace, a workplace, a workplace B regional page Bar workplace, private workplace, child workplace, child workplace, car workplace C regional page Ka workplace, other workplaces, shops, workplaces, girls D area page Nya plant, 댜 plant, lia plant, 먀 plant, 뱌 plant Welcome web DB No subscriber A area page B regional page C regional page D area page Group subscribers A group Main page + group page B group Main page + group page C group Main page + group page An individual subscriber Hong Subscriber Default page + personal page Kim subscriber Default page + personal page Park subscribers Default page + personal page Logoff Web DB A area page A workplace, a workplace, a workplace, a workplace, a workplace B regional page Bar workplace, private workplace, child workplace, child workplace, car workplace C regional page Ka workplace, other workplaces, shops, workplaces, girls D area page Nya plant, 댜 plant, lia plant, 먀 plant, 뱌 plant

Table 1 illustrates web service DB information constructed in the web service system 200 based on the web DB configuration information 430 of the subscriber base 420 of the authentication system 400.

When the authentication system 400 receives an authentication request from the access device 200, the authentication system 400 performs authentication and transmits the result to the access device 200. To this end, the authentication system 400 is composed of an authentication server 410, authentication source unit 420, WebDB configuration information 430.

The authentication server 410 processes authentication and accounting according to the request of the access device 200, the authentication source unit 420 stores the information related to the authentication, Web DB configuration information 430 is the Web DB 320 Contains configuration information for the configuration of the.

Hereinafter, referring to FIG. 2, a method of providing a web service using subscriber network access authentication according to an embodiment of the present invention will be described in detail.

First, in the case of individual or group welcome page subscriber terminals 102 and 103, when an HTTP request is made to the access device 200 by driving a web browser, the access device 200 transmits an HTTP request to the web service system 300. (S11).

Accordingly, the web service system 300 configures a local / business page as a login page to provide a login page to the subscriber terminals 102 and 103 (S12), and the subscriber terminals 102 and 103 connect the ID / PWD to the access device 200. ), The connection device 200 transmits ID / PWD and its IP information to the authentication system 400 to request authentication (S13). In this case, the web service system 300 may identify the area information of the user terminals 102 and 103 using IP information of the access device 200 connected to the user terminals 102 and 103, and provide a corresponding area and a business site page as a login page. You can do that.

Thereafter, the authentication system 400 performs authentication using the personal or group page information (S14), and as a result of the authentication, the subscriber terminal 102 or 103 determines that the individual or group page subscriber is the individual or according to the result. The group page information is transmitted to the access device 200 (S15).

Accordingly, the web service system 300 configures a welcome page with a basic page and a personal page or a basic page and a group page (S16), and provides a welcome page to the subscriber stations 102 and 103 (S17).

Thereafter, when the subscriber station 102 or 103 requests a logoff (termination) page request to the web service system 300 through the access device 200 (S18), the logoff area / business site in the web service system 300 is requested. The phase is configured as an end page (S19) and provided to the subscriber stations 102 and 103 (S20).

On the other hand, when the secure service subscriber station 105 drives the web browser to make an HTTP request to the access device 200, the access device 200 transmits an HTTP request to the web service system 300 (S21).

Accordingly, the web service system 300 configures the area / business page as the login page (S22), provides the login page to the subscriber terminal 105 (S23), and the subscriber terminal 105 connects the ID / PWD to the device. In step S24, the access point 200 transmits the ID / PWD and its IP information to the authentication system 400 to request authentication (S24).

Thereafter, the authentication system 400 performs authentication (S25), and determines that the subscriber station 105 is a security service subscriber as a result of the authentication, and transmits the security service subscriber page information according to the result to the access device 200. (S26).

Accordingly, the web service system 300 configures a welcome page with a basic page, a subscription page, and a security client page (S27), and provides a welcome page to the subscriber terminal 105 (S28).

Thereafter, when the security service subscriber 105 requests the security service (S29), the security solution 500 provides the security service and counts the number of times of use thereof (S30).

On the other hand, in the case of the welcome page non-subscriber terminal 101, when the HTTP request is made to the access device 200 by driving the web browser, the access device 200 transmits the HTTP request to the web service system 300 (S31). ).

Accordingly, the web service system 300 configures a region / business page as a login page (S32), provides a login page to the subscriber terminal 105 (S33), and the subscriber terminal 105 accesses the ID / PWD. In step 200, the access point 200 transmits the ID / PWD and its IP information to the authentication system 400 to request authentication (S34).

Thereafter, the authentication system 400 performs authentication (S35), and as a result of the authentication, the subscriber station 101 determines that the welcome page is not a subscriber, and transmits the security service subscriber page information according to the result to the access device 200. (S36).

Accordingly, the web service system 300 constructs a basic page (S37) and provides it to the subscriber station 101 as a welcome page.

On the other hand, in the case of the welcome page rejection subscriber terminal 104, if the HTTP request to the access device 200 by driving the web browser, the access device 200 transmits an HTTP request to the web service system 300 (S41). ).

Accordingly, the web service system 300 configures a local / business page as a login page (S42), provides a login page to the subscriber terminal 105 (S43), and the subscriber terminal 105 connects the ID / PWD to the device. In step S44, the access point 200 transmits the ID / PWD and its IP information to the authentication system 400 to request authentication (S44).

Thereafter, the authentication system 400 performs authentication (S45), and as a result of the authentication, the subscriber station 104 determines that the welcome page rejects the subscriber, and transmits the result to the access device 200 (S46). That is, the welcome page does not provide a welcome page when the subscriber rejects the welcome page.

Hereinafter, referring to FIG. 3, a web service providing method using internet access authentication according to an embodiment of the present invention will be described in detail.

First, when the user terminal 100 drives a web browser (S101) and makes an HTTP request to the access device 200 (S102), the access device 200 transmits an HTTP request to the web service system 300. (S103). In this case, the access device 200 includes the user terminal 100 information and its own IP information when the HTTP request is delivered, and distinguishes that the web service type is login, and redirects to the web service system 300. Or proxy.

Accordingly, the web service system 300 classifies the region of the corresponding user terminal 100 by using the IP information of the access device 200, and configures the region-based login page in real time (S104). That is, the web service system 300 searches the web DB 320 to search for information corresponding to the IP information of the corresponding access device 200 to classify the region.

Thereafter, the web service system 300 provides the configured login page to the corresponding user terminal 100 through the access device 200 (S105).

Thus, the user terminal 100 receives the ID and password in the login page (S106), and transmits to the access device 200 (S107).

Thereafter, the access device 200 requests AAA based subscriber authentication with respect to the authentication system 400 using the ID / PWD received from the web service system 300 (S108). Accordingly, the authentication system 400 authenticates the subscriber by searching the authentication master by the ID / PWD received from the access device 200 (S109).

Accordingly, the web DB configuration information 430 is obtained based on web service subscription information divided into web service subscription, non-subscription, and rejection. At this time, the web DB configuration information 430 is the content of the web page frames that will constitute the welcome web page as a component that the subscriber applied for when subscribing to the web service. Web DB configuration information 430 of the authentication unit 420 is configured by signing between the two systems to be connected to the Web DB 320 of the web service system.

The authentication system 400 transmits the authentication result to the access device 200 as an AAA-based message to the authentication client. In this case, if authentication is successful, the web service information (web DB configuration information) of the subscriber is included in the Filter-ID AVP. To transmit (S110). At this time, if the authentication is successful and successful, the web DB component is delivered together. This configuration information is configured as information obtained from the authentication source of the authentication system 400 by the authentication client which is the connection device 200 in the AAA-based message.

Meanwhile, the login web page of the user terminal 100 requesting subscriber authentication automatically makes an http request after several seconds. That is, the user terminal 100 requests a welcome page to the access device 200 (S111).

Accordingly, the access device 200 redirects the http request from the user terminal 100 that is requesting access authentication to the web service system 300 according to the authentication result received from the authentication system 400, or redirects the proxy. (S112). At this time, the web service type is welcome and delivers both the authentication result (success or failure) and the web DB configuration information and authentication client information transmitted from the authentication server when the authentication succeeds. In addition, when the access device 200 receives the individual or group web service subscription and web DB configuration information, the access device 200 delivers the information to the web service system to provide a web service.

Thus, the web service system 300 transmits the authentication failure page to the web browser of the user terminal 100 when the web service type transmitted from the authentication client of the access device 200 is welcome and the authentication result is failed. On the other hand, if the web service system 300 is a welcome web service type and the authentication result is successful, the web service system 300 constructs a welcome web page based on the delivered web DB configuration information and delivers it to the web browser of the user terminal 100 (S113, S114). At this time, the logoff page is transmitted together. If the authentication is successful, that is, individual or group welcome subscribers, a web service is provided as shown in S11 to S20 of FIG. 2.

However, when it is determined that the subscriber of the user terminal 100 is an unsubscriber from the authentication result, the access device 200 transmits information for constructing a welcome page to the web service system 300 as in steps S31 to S37 of FIG. 2. Rather than delivering, a basic web page is delivered to a web browser of the subscriber terminal 100.

In addition, if it is determined that the subscriber of the user terminal 100 is a web service denial subscriber from the authentication result, the access device 200 passes through the web service system 300 to the user terminal 100 as in steps S41 to S46 of FIG. 2. The authentication request is automatically processed without redirecting or proxying the http request that is automatically transmitted from the login page of the web service system 300.

Accordingly, the subscriber who receives the welcome page after successful authentication receives various customized Internet services by using the welcome page. Thereafter, the access device 200 requests an accounting for the authentication system 400 (S115). Accordingly, the authentication system 400 starts the account processing (S116).

On the other hand, when the subscriber disconnects from the Internet during the Internet service, that is, when receiving a logoff page request from the user terminal 100 (S117), the web service system 300 configures a logoff page (S118), The service system 300 requests the service termination for the access device 200 (S119), and provides a logoff page for the user terminal 100 (S120). Thus, the user terminal 100 terminates normally.

Thereafter, the access device 200 transmits an AAA based accounting termination message for the accounting termination request to the authentication system 400 (S122), and recovers the resources allocated to the user terminal 100. In response, the authentication system 400 terminates the accounting process (S123).

Hereinafter, a security service providing method using Internet access authentication according to an embodiment of the present invention will be described in detail with reference to FIG. 4.

First, when the user terminal 100 drives a web browser (S201), and makes an HTTP request to the access device 200 (S202), the access device 200 transmits an HTTP request to the web service system 300. (S203). In this case, the access device 200 transmits the user terminal 100 information (ID and password, etc.) and its own IP information when the HTTP request is transmitted, and distinguishes that the web service type is login. Redirect or proxy to the server. In this case, the access device 200 may transmit its own information to the web service system 300 so that the web service system 300 may locally distinguish the subscriber station 100 based on the access device 200. Make sure

Accordingly, the web service system 300 classifies regions of the corresponding user terminal 100 by using IP information of the access device 200, and configures a region-based login page in real time (S204). That is, the web service system 300 searches the web DB 320 to search for information corresponding to the IP information of the corresponding access device 200 to classify the region.

Thereafter, the web service system 300 provides the configured login page to the corresponding user terminal 100 through the access device 200 (S205).

Thus, the user terminal 100 receives the ID and password in the login page (S206), and transmits to the access device 200 (S207).

Thereafter, the access device 200 requests AAA based subscriber authentication with respect to the authentication system 400 using the ID / PWD received from the web service system 300 (S208). Accordingly, the authentication system 400 searches for the authentication master by ID / PWD received from the access device 200, authenticates the subscriber, and retrieves the web service subscription information (S209).

Accordingly, the web DB configuration information 430 is obtained based on web service subscription information divided into web service subscription, non-subscription, and rejection. At this time, the web DB configuration information 430 is the content of the web page frames that will constitute the welcome web page as a component that the subscriber applied for when subscribing to the web service. Web DB configuration information 430 of the authentication unit 420 is configured by signing between the two systems to be connected to the Web DB 320 of the web service system.

The authentication system 400 transmits the authentication result to the access device 200 as an AAA-based message to the authentication client. In this case, if authentication is successful, the web service information (web DB configuration information) of the subscriber is included in the Filter-ID AVP. To transmit (S210).

Meanwhile, the login web page of the user terminal 100 requesting subscriber authentication automatically makes an http request after several seconds. That is, the user terminal 100 requests a welcome page to the access device 200 (S211).

Accordingly, the access device 200 redirects the http request from the user terminal 100 that is requesting access authentication to the web service system 300 according to the authentication result received from the authentication system 400, or redirects the proxy. (S112). At this time, if the authentication result service type is a security service subscriber, all of the web DB configuration information, authentication client information, and security service subscription information delivered from the authentication system 400 are delivered.

Accordingly, the web service system 300 generates SSO information between the secure service subscriber station 100 and the security solution 500 (S213), and the subscriber station 100 includes a security client that is a component of a welcome page. It delivers (S214), and delivers SSO information to the security solution 500 (S215).

Thereafter, when the access device 200 requests an accounting start for the authentication system 400 (S216), the authentication system 400 starts accounting (S217), and the user terminal 100 is a security solution 500 If a request for a security service (S218), the security solution 500 performs subscriber verification (S219).

As described above, the present invention configures the security client in the welcome page so that the wireless page or the wired section can be secured without installing a separate security client in the subscriber terminal 100 in the case of a security service. In addition, for SSO between the security client and the security solution of the welcome page, the web service system 100 generates a preshared key and delivers the preshared key to the terminal and the security solution, respectively.

As described above, the present invention is not simply an access authentication service for the purpose of accessing the Internet, but it is possible to provide an extended and dynamically configurable web service to provide a personalized web service. It is effective to increase the convenience of the user by providing personalized customized web service using the procedure and subscriber subscription information.

In addition, the preferred embodiment of the present invention for the purpose of illustration, those skilled in the art will be able to various modifications, changes, replacements and additions through the spirit and scope of the appended claims, such modifications and changes are the following claims Should be seen as belonging to.

Claims (14)

A first step of constructing and providing a login page when a web page request is generated from a user terminal; A second step of requesting authentication after receiving the ID and password; And Performing authentication on the authentication request and providing a welcome page when the user terminal is a welcome page subscriber or a non-subscriber as a result of the authentication, and not providing the welcome page when the user terminal is a welcome page rejected subscriber. Web service providing method using the Internet access authentication, characterized in that it comprises a process. The welcome page of the third process, If the user terminal is a welcome page non-subscriber, a web service providing method using the Internet access authentication, characterized in that the basic page is configured to provide the welcome page. The welcome page of the third process, And providing a basic page and a personal page or a basic page and a group page as a welcome page when the user terminal is a welcome page subscriber. The method of claim 1, wherein the third process comprises: And, if the user terminal is a security service subscriber, constructs a welcome page with a basic page, a subscription page, and a security client page, and provides the welcome page to the user terminal. The method of claim 1, A fourth process of providing a welcome page to the user terminal by including a security service subscription information when the user terminal is a security service subscriber; And Receiving a security service request from the user terminal, performing a subscriber verification in a security solution and providing a result to the user terminal; and a web service providing method using internet access authentication. The method of claim 1, A fourth step of requesting an accounting in the access device when the user terminal is provided with the welcome page; A fifth step of starting an accounting process in the authentication system and providing a logoff page to the user terminal when a logoff page request is generated from the user terminal; And And a sixth process of terminating the accounting after the logoff is completed. The method of claim 1, wherein the first process comprises: A method of providing a web service using Internet access authentication, wherein the area information of the user terminal is grasped using IP information of the access device connected to the user terminal, and the corresponding area and business page is provided as a login page. A connection device for transmitting a request with IP information when receiving a web page request from a user terminal; An authentication system for performing authentication of the user terminal at the request of the access device; And Upon receiving the web page request from the access device, a login page is configured and provided, and if the user terminal is a welcome page subscriber or a non-subscriber according to the authentication result, a welcome page is provided and the user terminal is a welcome page rejected subscriber. And a web service system that does not provide the welcome page. The method of claim 8, wherein the web service system, And, when the user terminal is a security service subscriber, providing a welcome page including a security client to the user terminal. The method of claim 9, Receiving a security service request from the user terminal Web service providing system utilizing the Internet network authentication, characterized in that it further comprises a security solution for performing a subscriber verification. The method of claim 8, wherein the web service system, When a logoff page is requested from the user terminal, a logoff page is configured to provide a web service providing system utilizing Internet access authentication. The method of claim 8, wherein the web service system, If the user terminal is a welcome page subscriber web service providing system using the Internet access authentication, characterized in that the basic page and personal page or the basic page and group page configured to provide a welcome page. The method of claim 8, wherein the web service system, And, if the user terminal is a security service subscriber, constructs a welcome page with a basic page, a subscription page, and a security client page, and provides the welcome page to the user terminal. The method of claim 8, wherein the web service system, And, if the user terminal is not a welcome page, constructing a welcome page as a basic page and providing the welcome page to the user terminal.

Images