KR20090007525A - A system that provides virtual secure connections between a terminal and a web server on a relay server-based web browsing environment and operating method thereof - Google Patents

Abstract

A system for supporting virtual security connection between a terminal and a web server in a relay server type web browsing environment and an operation method thereof are provided to enable a terminal user to interact with the web server safely without exposing user information to the user terminal by supporting the virtual security connection in the relay server type web browsing environment capable of viewing a webpage of the web server through conversion of a relay server. A web server(100) distributes webpages. A relay server(130) converts the webpage downloaded from the web server to facilitate viewing in a terminal environment and transmits the converted webpage to a terminal. A portable terminal(160) displays a user interface for viewing the webpage and controlling web browsing. A connection relay unit(143) provides virtual connection between the portable terminal and the web server by downloading the webpage from the relay server, receiving connection with the portable terminal from the relay server, connecting with the web server, and transferring data between the connection with the portable terminal and the connection with the web server.

Description

System and provides a virtual secure connection between a terminal and a web server on a relay server-based web browsing environment and operating method in a relay server-based web browsing environment about}

The present invention relates to a system for supporting a virtual secure connection between a terminal and a web server in a relay server type web browsing environment for viewing a web page of a web server through a conversion of a relay server and a method of operating the same.

The present situation will be described below with an example of a mobile terminal such as a mobile phone in which a relay server-based web browsing environment is mainly adopted.

As the wireless Internet is activated, portable terminals such as mobile phones have established their position as information terminals that can be used at any place. Accordingly, there is a growing demand for using a mobile terminal for web browsing, which is a major user of the Internet. To meet this demand, the software industry and the mobile communications industry are introducing browser products that can browse web pages designed for PCs in mobile devices. However, the conventional mobile terminal is inferior in screen size, memory and disk capacity, network speed and cost compared to the PC targeted by the web page, so it is realistic to process the web page on the mobile terminal without conversion and view it. impossible.

In order to solve this problem, a relay server type web browsing environment that allows a web page to be reduced in size and simplified through conversion of a relay server and then viewed on a mobile terminal. However, in the relay server type web browsing environment, since the relay server performs a web browsing operation of receiving a web page and sending a response to the web server, information necessary for the web browsing operation must exist in the relay server. At this time, if the necessary information is a user's personal information, a security problem may occur.

In typical web browsing, if a user's personal information is required, the web browser and web server encrypts all the information by establishing an end-to-end encryption connection using security technologies such as SSL and TLS. A device such as a gateway or a proxy that relays a network connection between a mobile terminal and a web server in which a browser is operated may not know the contents of information transmitted between them. However, in the relay server type web browsing environment, since the relay server plays the role of the web browser side, the end-to-end is between the relay server and the web server. Although a secure connection between a web browsing terminal such as a mobile terminal and a relay server can be applied to pass user information in encrypted form, the relay server can process the user information in the same way as a web browser and transmit it to a web server. User information must be decrypted in the original form in the relay server, and security problems such as hacking or leakage of user information by insiders related to the relay server may occur at that time.

For example, if you need to enter a user ID and password on a web page, the user ID and password are entered on the mobile terminal, but the web browsing operation is performed on the relay server, so that the user uses a secure connection between the mobile terminal and the relay server. Even if the ID and password are encrypted and transmitted from the mobile terminal to the relay server, the relay server may perform web browsing, i.e., the normal web protocol (e.g. HTTP POST) between the relay server and the web server with the user ID and password as parameters. In order to do so, the relay server must first decrypt the user ID and password. Thereafter, even if a secure connection is used again between the web page and the web server through a secure web protocol such as HTTPS, the user ID and password are briefly decrypted at the relay server before the user ID and password are transmitted. In other words, end-to-end encryption is not possible between the mobile terminal and the web server.

Due to the above security problem, web browsing using important user information is not freely performed in the relay server type web browsing environment.

Accordingly, an object of the present invention is to provide a system for supporting a virtual secure connection between a mobile terminal and a web server in a relay server type web browsing environment in which a web page of a web server is viewed by a mobile terminal after conversion of a relay server and a method of operating the same In providing.

A system for providing a virtual secure connection in a relay server-based web browsing environment according to the present invention for achieving the above object, the web server for distributing the web page, requesting the web page to the web server using a conventional web protocol, A relay server for converting the web page downloaded from the web server and transmitting the web page downloaded to the terminal to facilitate reading in a terminal environment, and a portable terminal for displaying a web page and a user interface for controlling web browsing. Is included in a web page downloaded from a web server, downloaded to the relay server, and receives a connection with the mobile terminal from the relay server, connects with the web server, and then connects with the mobile terminal. Passes data sent across the connection between web servers As to provide a virtual connection between the mobile terminal and the web server.

The relay server may include a function of a general conversion relay server, and may further include a terminal connection providing unit configured to provide a connection with the mobile terminal to the connection relay unit.

In addition to the functions included in a general relay server type web browsing system, the user interface displayed on the portable terminal may include menus and screens provided to a user so that a virtual secure connection function can be used by the functions of the present invention. Do.

Meanwhile, a control method of a system for providing a virtual secure connection between a terminal and a web server in a relay server type web browsing environment according to the present invention includes a web server, a relay server, and a portable terminal connected to a communication network to enable mutual communication. In a system supporting a virtual secure connection in a relay server type web browsing environment, the relay server is a web page corresponding to a web page address transmitted from the portable terminal and the connection relay unit included in the web page from the web server Downloading, the relay server driving and registering the connection relay unit, and transferring an interface with a terminal connection providing unit for connection with the portable terminal to the connection relay unit; The mobile phone is converted into a form that can be processed by the terminal. Transmitting to the terminal a virtual connection request of the user requested from the portable terminal to the connection relay unit, and receiving the connection with the portable terminal through the terminal connection providing unit; And providing a virtual connection between the mobile terminal and the web server by transferring data transmitted from opposite sides between the connection with the mobile terminal and the connection with the web server after the connection relay unit connects with the web server. It includes a step.

In order to achieve the above object, the present invention provides a computer-readable recording medium recording a program for executing the method on a computer.

According to the present invention, it is possible to support a virtual secure connection between a terminal and a web server in a relay server type web browsing environment for viewing a web page of a web server through a conversion of a relay server.

Hereinafter, with reference to the drawings will be described the present invention in more detail.

1 is a view for explaining the configuration of a system for providing a virtual secure connection between a mobile terminal and a web server in a relay server type web browsing environment according to an embodiment of the present invention.

Referring to FIG. 1, the system includes a web server 100, a relay server 130 connected to the web server 100 and the Internet 40 to communicate with each other, and the relay server 130 and the Internet ( 40 and a mobile terminal 160 connected via a mobile communication network 50 to communicate with each other.

The web server 100 provides a typical web service, and is in charge of the original web page 110, the connection relay unit 113 included in the web page 110, and the terminal of the web server 100 side of the virtual connection. And a connection server unit 120 for interacting with the mobile terminal 160 to securely connect the virtual connection.

The relay server 130 serves as a relay server in a typical relay server type web browsing environment, and further provides a virtual secure connection of the present invention. The relay server 130 downloads the web page 110 from the web server 100, converts the web page 110 into a form that can be easily viewed by the mobile terminal 160, and transmits the web page 110 to the mobile terminal 160. It provides a virtual connection to the connection relay unit 143 included in the terminal connection providing unit 150 therein.

The mobile terminal 160 displays a user interface 163 for viewing a web page and controlling web browsing to a user, and interacts with the connection relay unit 143 of the relay server 130 to serve as a user side terminal of a virtual connection. And securely connects the virtual connection by interacting with the connection server unit 120 of the web server 100.

The connection relay unit 143 is implemented in the form of an extension module that can be included in a web page. The form of the extension module depends on the web page processing method of the relay server 130, and generally known forms include an ActiveX control provided by Internet Explorer and a plug-in provided by a Mozilla-based web browser. In addition, although the relay server 130 may define its own form specification, it is more preferable to use a generally known form in which the technology is verified and the burden of developer education can be minimized. As such, by implementing the connection relay unit 143 in the form of an extension module of the web page, a separate module can be used for each web page, and thus a unique function can be easily implemented for each web page related to the virtual secure connection.

The terminal connection providing unit 150 provides an interface through which the connection relay unit 143 may request a connection with the mobile terminal 160. A generally known form of this interface is an object or a document through a Document Object Model (DOM). There is a method exposure method. For example, a specific sub-object and a method of the object are defined in document.external, a sub-interface object that provides a DOM object including a connection relay unit 143 to access an object external to a web page. By registering, the connection relay unit 143 may call the method of the object to request a connection with the mobile terminal 160. In addition, the interface may further include a method in which the connection relay unit 143 registers its presence in the relay server 130. In addition to the method through the DOM, when the connection relay unit 143 is implemented in ActiveX, a method of using an interface object of an ActiveX object and a container including the same is an example of a generally known method. Explained separately.

The virtual secure connection is composed of two connections, one of which is a connection between the mobile terminal 160 and the connection relay unit 143, and the other is a connection between the connection relay unit 143 and the connection server unit 120. . The connection between the connection relay unit 143 and the connection server unit 120 may use a general network connection. The connection method between the mobile terminal 160 and the connection relay unit 143 varies depending on the network connection limit of the mobile terminal 160. When the portable terminal 160 is virtually unlimited in the number of network connections, such as a general PC class information device, the general network connection may be used in the same manner as the connection between the connection relay unit 143 and the connection server unit 120.

However, at present, a large number of terminals 160 allow only one network connection, and in this case, a virtual connection must be established using an existing connection between the mobile terminal 160 and the relay server 130 for general web browsing. do.

The virtual connection establishment method is to include the data of the virtual connection as a special type of packet in the data packet transmitted on the connection for general web browsing, such as the packet hierarchy of the existing network system. The mobile terminal 160 and the relay server 130 examine the type of packet to determine whether the packet is for general web browsing or virtual connection between the mobile terminal 160 and the connection relay unit 143. According to the appropriate data transfer of the packet. It is shown in Figure 4 to explain this method in detail. Referring to FIG. 4, in a typical network layer structure, the data portion of each layer packet carries the entire upper layer packet, that is, the header and the data portion. The application layer packet processed by the system of the present invention is loaded in the data portion of the TCP packet. The application layer packet is composed of a header and data similarly to the lower layer, and the ID is present in the header so that the packet is based on the value of the ID. Identify the type of. When the packet is transmitted from the mobile terminal 160 to the relay server 130, the relay server 130 refers to the ID value, and corresponds to an ID corresponding to a conventional protocol between the mobile terminal 160 and the relay server 130. If the values are processed for the operation between the two, if the value for the virtual connection, the header is removed and transferred to the connection relay unit 143. The case where the packet is transmitted from the relay server 130 to the mobile terminal 160 is similarly processed. In this way, a single network connection can be used to treat data for general use and data for virtual connections as if they were separate connections.

Therefore, the connection relay unit 143 does not establish a connection between the mobile terminal 160 and the relay server 130 using a conventional network system directly, and recognizes and processes all of the above-mentioned special situations. The terminal receives connection information through the connection providing unit 150. Thereafter, the connection relay unit 143 manages both connections, and performs a kind of software gateway function to transfer data transmitted from one connection to the other connection. As a result, a virtual connection is established between the mobile terminal 160 and the connection server unit 120, and a virtual secure connection is established between both by initializing a typical end-to-end secure connection on the virtual connection.

The connection relay unit 143 extracts the information of the web page 110 including its own by using a DOM or other method, and delivers the information to the connection server unit 120 so that the web server 100 and the connection server unit 120 It is possible to perform operations in the context of the appropriate web page 110.

2 and 3 are message sequence charts provided for explaining an operation method of a system for providing a virtual secure connection between a terminal and a web server in a relay server type web browsing environment according to an embodiment of the present invention.

First, FIG. 2 illustrates a process of requesting and downloading a web page and initializing a module related to a virtual security connection in an operation method of a system for providing a virtual security connection in a relay server type web browsing environment according to an embodiment of the present invention. Message sequence chart.

Referring to FIG. 2, a web page address is input to the mobile terminal 160 (S200), and the mobile terminal 160 transmits the web page address to the relay server 130 to make a request (S205). The relay server 130 requests the web page to the web server 100 indicated by the web page address (S210), and relays the web page and the connection relay unit 143 included in the web page to the relay server 130. Download (S215).

Thereafter, the relay server 130 drives the connection relay unit 143 included in the web page (S220), and the driven connection relay unit 143 is registered in the relay server 130 (S225), and the relay server ( The terminal 130 transmits the terminal connection providing unit 150 to the connection relay unit 143 so that the connection relay unit 143 may receive a connection with the terminal (S230). In this way, the operation preparation of the connection relay unit 143 is completed. Here, the driving of the connection relay unit 143 is driven by the general method of driving the corresponding module when the connection relay unit 143 is implemented in the above-described general extension module form, otherwise defined in the relay server 130. Is driven in the old way. In addition, when the connection relay registration function is included in the terminal connection provider interface, the connection relay registration may be performed after the interface transfer.

Thereafter, the relay server 130 converts the web page (S235) and transmits the converted web page to the terminal 300 (S240). The mobile terminal 160 displays the received converted web page on the screen (S245).

FIG. 3 is a message sequence chart illustrating a process of establishing and using an actual virtual security connection after initialization in an operation method of a system for providing a virtual security connection in a relay server type web browsing environment according to an embodiment of the present invention.

Referring to FIG. 3, the mobile terminal 160 requests a virtual connection for a virtual secure connection to the relay server 130 (S300), and the relay server 130 transmits the request to the connection relay unit (registered in an initialization sequence). 143) (S305).

The connection relay unit 143 requests the terminal connection providing unit 150 to connect with the mobile terminal 160 (S310), and the terminal connection providing unit 150 connects to the terminal based on the network connection limit of the terminal. In addition, a virtual connection using an existing connection between the terminal 160 and the relay server 130 for general web browsing is established and provided to the connection relay unit 143. Thereafter, the connection relay unit 143 makes a connection request to the connection server unit 120 indicated by the web page or information defined therein (S320), and receives a connection request response (S325). The connection relay unit 143 establishes a virtual connection using two connections received from both sides (S330), and transmits the result to the mobile terminal 160 (S335).

In this case, the information transmitted from the connection relay unit 143 to the mobile terminal 160 may include information for accessing the web server 100 in relation to the web page including the current connection relay unit 143. Examples of such information include session information, login IDs, one-time authentication keys required for access, and the like. The mobile terminal 160 uses this information to access the contents of the web server 100 through a virtual secure connection, or the mobile terminal 160 establishes a separate connection with the web server 100 to establish a web server 100. You can access the relevant content of the.

After receiving the virtual connection, the mobile terminal 160 exchanges information through the virtual connection with the connection server unit 120 to initialize the secure connection (S340), and then exchanges the necessary security information (S345), and the secure connection is furthermore. When it is no longer necessary, the connection relay unit 143 requests the virtual connection termination (S350). The virtual connection termination may also be requested by the connection server unit 120. In this case, the request may be made through a special packet in the virtual connection, or in the case of the mobile terminal 160, through an existing connection with the relay server 200 for general web browsing. The connection relay unit 143, which has been requested to terminate the virtual connection, terminates the virtual connection (S355).

By such a process, it is possible to support a virtual secure connection between the terminal and the web server in a relay server type web browsing environment that allows the web page of the web server to be viewed by the terminal after conversion of the relay server.

Now, the above process will be described in detail by taking an example in which the connection relay unit 143 is implemented as ActiveX.

The connection relay unit 143 is included in the web page in the same manner as the ActiveX control is included in the web page used in the Microsoft Internet Explorer. That is, the reference information of the connection relay unit 143 ActiveX control is included in the web page using the OBJECT tag, and the relay server 130 downloads and executes the connection relay unit 143 based on the reference information. .

An example of a specific tag is as follows.

<OBJECT

classid = "clsid: A21FE9D5-2FF6-4CE9-8595-4D02BCDE35E1"

width = 350

height = 250

align = center

hspace = 0

vspace = 0

>

</ OBJECT>

The connection relay unit 143 is provided with an interface for requesting connection with the mobile terminal 160 provided by the terminal connection providing unit 150 as follows. According to Microsoft's convention of ActiveX, when a container program that contains an ActiveX-implemented module as an extension module dynamically loads and runs the module, a COM interface describing the container itself is added to the ActiveX module. This COM interface allows the ActiveX module to request and use other COM interfaces in the container. More specifically, the container obtains a COM interface named IOleObject from an ActiveX module using the Microsoft Windows COM API, and then calls the SetClientSite () function of the interface as a parameter using the IOleClientSite COM interface provided by the container itself. The ActiveX module calls the GetContainer () function of the IOleClientSite interface to obtain the container's main interface, the IOleContainer COM interface, and calls the QueryInterface () function of the interface, which the ActiveX module itself retrieves from the container. Will be available. In the case of the present patent, the relay server 130 corresponds to a container, the connection relay unit 143 corresponds to an ActiveX module, and can request a connection with the mobile terminal 160 provided by the terminal connection providing unit 150. The interface in question corresponds to the additional COM interface. Similarly, an ActiveX module can extract a COM interface with DOM information from a web page.

The actual additional COM interface can be defined as follows. The following is a grammar description of Borland Delphi's grammar. Anyone with active X-related knowledge can easily convert to other computer languages.

ISXContainer = interface (IUnknown)

    ['{F81FA7E1-5010-4db2-90BC-19971B6E6503}']

    function Advise (pIntf: ISXObject; out pdwCookie: DWORD): HResult;

      stdcall;

    function Unadvise (dwCookie: DWORD): HResult; stdcall;

    function OpenConnection (pdwHandle: PDWORD): HResult: stdcall;

    function CloseConnection (dwHandle: DWORD): HResult: stdcall;

function SendConnectionResult (dwHandle; PDWORD; pData: PChar; dwDataSize: DWORD

    function Send (dwHandle: DWORD, pData: PChar; dwSize: DWORD): HResult: stdcall;

end;

The functions of each function of the above COM interface are as follows.

Advise () and Unadvise () are functions that the connection relay unit 143, which is an ActiveX module, registers and releases itself with the relay server 130 which is a container. The connection relay unit 143 obtains the additional COM interface as described above, registers itself by calling Advise (), and unregisters itself by calling Unadvise () when all functions are terminated.

OpenConnection () and CloseConnection () are functions that the connection relay unit 143 requests connection with the mobile terminal 160 and terminates, respectively.

SendConnectionResult () establishes both the connection established by the connection relay unit 143 with OpenConnection () and the connection with the web server 100, and the result is accessible to the web server 100 as described above. This function is called to deliver data including information to the mobile terminal 160. Since the data is separate from the data from the web server 100 to be sent by Send () below, it is preferable to transmit the data in a separate manner.

Send () is a function used by the connection relay unit 143 to transmit data received from the web server 100 to the mobile terminal 160 connected with OpenConnection (). When this function is called, the terminal connection providing unit 150 of the relay server 130 transmits data transmitted as a parameter to the portable terminal 160. For reference, Receive () does not exist, and data is passively received through a function of the ISXObject COM interface delivered to the relay server 130 which is a container through Advise (). By receiving data asynchronously like this, the gateway function can be easily implemented without creating a separate thread.

The following is the implementation of the connection relay unit 143, which is a definition of the COM interface delivered through the Advise () function. It is also described in Borland Delphi's syntax.

ISXObject = interface (IUnknown)

    ['{F81FA7E0-5010-4db2-90BC-19971B6E6503}']

function OnConnectionOpenRequest (): HResult; stdcall;

function OnConnectionCloseRequest (); HResult; stdcall;

    function OnData (pData: PChar; dwSize: DWORD): HResult; stdcall;

end;

OnConnectionOpenRequest () and OnConnectionCloseRequest () are functions that the relay server 130 calls when the mobile terminal 160 requests the relay server 130 to connect with the connection relay unit 143 or terminate the existing connection. In this case, the connection request and the connection termination request of the mobile terminal 160 are considered to be made through separate data packets between the mobile terminal 160 and the relay server 120. When these functions are called, the connection relay unit 143 calls OpenConnection () and CloseConnection (), respectively, to actually establish or terminate the connection. As such, the actual processing of the connection between the mobile terminal 160 and the connection relay unit 143 is performed by the terminal connection providing unit 150 through the COM interface, so that the other part of the relay server 130 implements the virtual connection. Try to be minimally affected by the method. Here, the connection may be a general network connection or a virtual connection using an existing connection as described above.

OnData () is called when the terminal connection providing unit 150 of the relay server 130 receives data from the mobile terminal 160 to deliver the data to the connection relay unit 143. The connection relay unit 143 transmits the data transmitted as a parameter to the web server 100.

In the above case, since the connection relay unit 143 provides only one connection, there are no parameters describing the connection in the functions. In the case of providing multiple connections, a parameter such as a handle may be added. have.

As such, the terminal connection providing unit 150 of the connection relay unit 143 and the relay server 130 supports virtual connection by exchanging data through a COM interface.

For reference, the connection implemented in this example is limited to the connection between the relay server 130 and the mobile terminal 160, and the connection between the connection relay unit 143 and the connection server unit of the web server 100 is not mentioned. Since this is a connection on a general network irrelevant to the mobile terminal 160 in the case of the connection, as described above, the connection relay unit 143 may not use the socket API provided by the operating system without the help of the relay server 130. This is because it can be implemented by accessing the web server 100 by itself using a network function. In addition, the above COM interface definition is merely an example of an implementation, and detailed functions and usages may be implemented differently.

For reference, the implementation method shown in this example is not an original method specifically designed and used by this patent, but is generally used in an ActiveX module. Therefore, if you have sufficient knowledge in the active X-related field, It is a method that can be implemented without difficulty based on the X convention, and the use of this method is not a core element of the patent itself, but only one of several methods that can be used to implement the patent system. Put it. Therefore, implementation outside of the example of document.external and the example of an ActiveX module will not deviate from the basic idea of this patent.

In addition, as described above, the connection relay unit 143 by applying a process for transferring the information to access the web server 100 to the mobile terminal 160, without establishing a virtual secure connection, the mobile terminal ( 160 may be configured to access related content of the web server 100. That is, the relay server 130 transmits only the information that can access the web server 100, for example, session information or a login ID, a one-time authentication key required for access, to the portable terminal 160, thereby providing a portable terminal ( The 160 may establish a separate connection with the web server 100 by using the information to access related content of the web server 100.

If the virtual secure connection between the mobile terminal 160 and the connection server unit 120 of the web server 100 is common across all web sites, the information transmitted from the connection relay unit 143 to the mobile terminal 160 is If it is common across all web pages, the connection relay unit 143 may be a module fixedly included in the relay server 130, but in reality, the internal protocol of the virtual secure connection may be different for each website, and the information to be delivered is also corresponding. Since the purpose or implementation method of the web page may vary, it is necessary to configure the connection relay unit 143 as an extension module that can be downloaded from the web server as in the present invention. Meanwhile, since the interaction module with the connection relay unit 143 operating in the mobile terminal 160 may also be different for each connection relay unit 143, this module also becomes a module that can be dynamically added to the mobile terminal 160. It would be desirable. The dynamic addition method will depend on the programming environment of the mobile terminal 160. If the dynamic addition of the mobile terminal 160 itself is not possible, it is possible to take a workaround such as statically including an interaction module with the connection relay unit 143 of several famous websites, or to make a terminal program for a specific site. Could be For all these cases, the relay server would still be able to support all web servers through the downloadable connection relay 143 without any change in itself.

On the other hand, the present invention can also be embodied as computer readable codes on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet). Include. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

In addition, although the preferred embodiment of the present invention has been shown and described above, the present invention is not limited to the specific embodiments described above, but the technical field to which the invention belongs without departing from the spirit of the invention claimed in the claims. Of course, various modifications can be made by those skilled in the art, and these modifications should not be individually understood from the technical spirit or the prospect of the present invention.

1 is a diagram showing the configuration of a system for providing a virtual secure connection in a relay server-based web browsing environment according to an embodiment of the present invention.

2 to 3 are message sequence charts provided for explaining a method of operating a system for providing a virtual security connection in a relay server type web browsing environment according to an embodiment of the present invention.

4 is a diagram illustrating a structure of a packet including data of a virtual connection according to an embodiment of the present invention.

Explanation of symbols on the main parts of the drawings

100: Web server 120: Connection server unit 130: Relay server 143: Connection relay unit

150: terminal connection providing unit 160: portable terminal

163: user interface diagram

Claims (15)

In a system supporting a virtual secure connection in a relay server type web browsing environment, A web server for distributing web pages; A relay server converting the web page downloaded from the web server and transmitting the web page downloaded to the terminal to facilitate reading in a terminal environment; A mobile terminal displaying a user interface for viewing web pages and controlling web browsing; Including; The web page downloaded from the web server includes a connection relay unit, which is downloaded to the relay server, receives a connection with the mobile terminal from the relay server, connects with the web server, and then connects with the mobile terminal. Providing a virtual connection between the mobile terminal and the web server by transferring data transmitted on opposite sides between a connection and a connection with the web server. The method of claim 1, The web server, the relay server, and the terminal is connected to a wired or wireless network, characterized in that the mutual communication is possible. The method of claim 1, The connection relay unit is implemented in any one of a general form including an ActiveX or a Mozilla plug-in, and a form based on a standard defined in the relay server and included in the web page. system. The method of claim 1, When the relay server cannot establish an additional connection with the portable terminal, the relay server carries a special type of packet for recognizing a virtual connection to an existing connection between the portable terminal and the relay server to the portable terminal and the connection relay unit. By transmitting, the system characterized in that for supporting the virtual connection between the mobile terminal and the connection relay. The method of claim 1, And the portable terminal and the web server securely use the virtual connection by performing secure connection initialization on the established virtual connection. A method of operating a system supporting a virtual secure connection in a relay server type web browsing environment having a web server, a relay server, and a portable terminal connected to a communication network and capable of mutual communication, Downloading, by the relay server, a web page corresponding to a web page address transmitted from the portable terminal and a connection relay unit included in the web page from the web server; The relay server driving and registering the connection relay unit and transferring an interface with the terminal connection providing unit for connection with the portable terminal to the connection relay unit; Converting, by the relay server, the web page into a form that can be processed by the terminal and transmitting the web page to the portable terminal; Transmitting, by the relay server, a virtual connection request of the user requested from the portable terminal to the connection relay, and receiving the connection with the portable terminal through the terminal connection providing unit; And Providing a virtual connection between the mobile terminal and the web server by transferring data transmitted from the opposite side between the connection with the mobile terminal and the connection with the web server after the connection relay connects with the web server. Operation method characterized in that it comprises a. The method of claim 6, And transmitting, by the connection relay unit, the virtual connection establishment result to the mobile terminal. The method of claim 7, wherein The virtual connection establishment result includes information for accessing the web server associated with the web page including the connection relay unit, And accessing, by the portable terminal, the related content of the web server through any one of the virtual security connection and a separate connection from the web server by using the information. The method of claim 8, And transmitting, by the relay server, the information to the portable terminal, the portable terminal establishes a separate connection with the web server based on the information to access related contents of the web server. Operation method. The method of claim 9, The information may include at least one of session information, a login ID, and a one-time authentication key required for access. The method of claim 6, And receiving, by the portable terminal, the web page processed from the relay server and displaying the web page on the screen. The method of claim 6, The virtual connection request is requested through a user interface displayed on the portable terminal or an interface in the displayed web page. The method of claim 6, And the connection relay unit is connected to the mobile terminal through any one of a virtual connection and an actual connection based on an existing connection with the mobile terminal. The method of claim 6, The mobile terminal interacts with the connection server unit by using a virtual connection and transmits secure connection start related information to each other to establish a virtual secure connection. And transmitting and receiving security information between the connection server unit and the terminal through the established virtual security connection. The method of claim 14, When the virtual secure connection is no longer needed, either the connection server unit or the terminal requests termination of the virtual secure connection, And receiving, by the connection relay unit, the virtual security connection termination request for terminating the virtual security connection.

Images