KR20090037613A - Computing system and method for managing use information of the same, and smart card apparatus for computer security and security method of the same - Google Patents

Abstract

A computing system and a method for managing usage information of the same, and a smart card device for computer security and a security method of the same are provided to prevent a password from hacking by performing an authentication in a smartcard for a password inputted by an input device. A computing system comprises a smart card(10), an input unit(20), and a computing device(30). An input unit comprises card information input output equipment(25). The computing device runs software for recording the use information. If a connection of the smart card is acknowledged in the card information input output equipment, the computing device provides a log-in screen to the display unit(40). If a smart card is mounted on the card information input output equipment, the smart card performs authentication according to whether the password received from the input unit is same as the password stored in the smart card. If an authentication is performed by the smart card mounted on the card information input output equipment, the computing device is converted to the action mode. If the smart card is separated from the card information input output equipment, the computing device is converted to the login screen mode.

Description

COMPUTING SYSTEM AND METHOD FOR MANAGING USE INFORMATION OF THE SAME AND AND SMART CARD APPARATUS FOR COMPUTER SECURITY AND SECURITY METHOD OF THE SAME

The present invention relates to a computing system, a method of managing usage information thereof, a smart card device for computer security, and a security method thereof. In particular, the present invention relates to a password received through an input device after a connection of a smart card to a card information input / output device is recognized. Computing systems, methods of managing usage information, and computer security that make it easy to control children's computer use by providing authentication information stored on the smart card without exposing passwords to hacking risk by performing authentication on smart cards. Smart card device and its security method.

In recent years, as personal computers (Personal Computer) is rapidly spread, there is an increasing number of cases of creating a document using a computer or managing stored information. In such a case, the method of storing the information is to output the document using an output device (for example, a printer), and then to store the document, a hard disk or a floppy disk or other information. The method of storing and storing the information on the storage medium is mainly used.

In particular, in public institutions that handle confidential documents, and research institutes such as financial institutions and large corporations, the information security of such computers has become a very important factor, and thus the necessity of computer security devices has been highlighted. Moreover, when the user is away, there is a problem that is difficult to control even when an outsider uses a computer.

On the other hand, various homepages are established on the Internet, and users of personal computers can receive information by receiving homepages on the Internet, which are mainly used by students and young people. In addition, users of personal computers are exposed to harmful environments through Internet services related to services such as games, chatting, and pornography. This makes it difficult for parents to control how their children use computers because they are not skilled at work or on the Internet.

Therefore, even a parent who is not familiar with online services such as a computer or the Internet needs a means to easily control children's use of the computer and control exposure to various harmful environments.

An object of the present invention is to prevent the password from being exposed to hacking by performing authentication on the smart card received through the input device after the connection of the smart card to the card information input / output device is recognized.

Another object of the present invention is to easily provide children with usage information (e.g., usage time, remaining time, start time and end time, etc.) stored in a smart card and provide access to the UAL and the UEL connection keeping time stored in the memory. It also allows you to control your computer use.

Another object of the present invention is to maintain the computer security by switching the operation mode to the login screen mode when the smart card is separated from the card information input device.

In order to achieve the above object, a computing system according to an embodiment of the present invention comprises a smart card; An input device equipped with a card information input / output device; And a computing device for driving software for recording usage information and providing a login screen to a display unit when the connection of the smart card is recognized by the card information input / output device, wherein the smart card is connected to the card information input / output device. When installed, authentication is performed according to whether the password received from the input device matches the password stored in the smart card, and the computing device operates when authentication is performed by the smart card installed in the card information input / output device. Mode is switched, when the smart card is separated from the card information input and output device characterized in that the switch to the login screen mode.

Preferably the smart card, the storage unit for storing the use information and password, including the use time, remaining time, start time and end time; An authentication performing unit for performing authentication by comparing a password stored in the storage unit with a password received from the input device; And a transmission unit which transmits usage information stored in the storage unit to the computing device when authentication is performed by the authentication performing unit.

More preferably, the computing device is characterized by counting a usage time including a usage time, a UE connection holding time, and a remaining time from a time point when the operation mode is switched.

Even more preferably, the computing device is configured to record the counted usage time and remaining time in the smart card at a predetermined time interval, and stores the counted UEL connection holding time and the connected UEL in a memory. do.

In addition, the usage information management method of the computing system according to an embodiment of the present invention includes the steps of providing a login screen to the display unit when the computing device is connected to the smart card to the card information input and output device; Transmitting, by the computing device, a password input from an input device to a smart card connected to the card information input / output device; Switching, by the computing device, a login screen mode to an operation mode when authentication is performed by the smart card; And switching, by the computing device, an operation mode to a login screen mode when the smart card is detached from the card information input / output device.

Preferably after the step of transmitting to the smart card, the smart card receiving a password from the input device; Verifying, by the smart card, whether the received password matches a stored password in the storage unit; And transmitting, by the smart card, information indicating an authentication success or authentication failure to the computing device according to whether the password matches.

More preferably, after the step of switching to the operation mode, the computing device receives usage information including the usage time, remaining time, start time and end time from the smart card; And displaying, by the computing device, the received usage information on a display unit.

Even more preferably, after the step of switching to the operation mode, further comprising the step of counting the use time, including the use time, the UE connection holding time, the remaining time from the time when the computing device is switched to the operation mode It features.

Even more preferably, after the counting, the computing device records the counted usage time and remaining time on the smart card; And storing, by the computing device, the counted UAL connection holding time and the connected UEL in a memory.

In addition, a smart card device for computer security according to an embodiment of the present invention comprises a smart card; And an input device equipped with a card information input / output device, wherein the smart card performs authentication according to whether the password received from the input device matches the password stored in the smart card when mounted in the card information input / output device. It is characterized by.

Preferably, the smart card may receive a password input by operating the input device through a login screen provided from a computer.

More preferably, the smart card, the storage unit for storing the use information and password, including use time, remaining time, start time and end time; An authentication performing unit for performing authentication by comparing a password stored in the storage unit with a password received from the input device; And a transmission unit which transmits usage information stored in the storage unit to the computer when authentication is performed by the authentication performing unit.

In addition, the security method of a computer security smart card device according to an embodiment of the present invention comprises the steps of receiving a password from the smart card input device; Comparing, by the smart card, whether the received password matches a password stored in the smart card; And transmitting the information indicating the authentication success to the computer if the smart card matches, and transmitting the information indicating the authentication failure to the computer if the smart card does not match.

Preferably, after transmitting the information indicating the successful authentication to the computer, the smart card further comprises the step of transmitting the usage information stored in the smart card to the computer.

According to the exemplary embodiment of the present invention, the authentication of the password is performed in the smart card, thereby preventing the password from being exposed to the hacking risk. In particular, even if the computing device is hacked it can prevent the exposure of the password.

In addition, according to an embodiment of the present invention provides the computer usage information (e.g., usage time, remaining time, start time and end time) recorded on the smart card, and provides the connected UAL and the UAL connection holding time stored in the memory Not only can you see which sites you've accessed, but you can also easily control the amount of time you spend using the computer.

In addition, according to the embodiment of the present invention, when the smart card is detached from the card information input / output device, the operation mode is changed to the login screen mode, thereby maintaining the computer security. In particular, when a company uses a smart card as an employee card, not only does the smart card have an access control function, but also a smart card must be separated from the card information input / output device for entry and exit. Can be obtained.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating a computing system according to an embodiment of the present invention, FIG. 2 is a block diagram illustrating the smart card illustrated in FIG. 1, and FIG. 3 illustrates the computing device illustrated in FIG. 1. It is a block diagram for that.

Referring to FIG. 1, a computing system according to an embodiment of the present invention includes a smart card 10, an input device 20 equipped with a card information input / output device 25 to which the smart card 10 is connected, and an input device ( It is configured to include a computing device 30 is connected to the 20 and receives the information input through the input device 20, and outputs the information recorded on the smart card (10).

As shown in FIG. 2, the smart card 10 is a storage unit that stores usage information (hereinafter referred to as 'computer usage information') (for example, usage time, remaining time, start time, and end time), and a password. (11) and the password stored in the storage unit 11 and the password received from the computing device 30 is compared to the authentication performing unit 12 for performing authentication according to whether or not, and the authentication performing unit 12 After the authentication is performed by the transmission unit 13 for transmitting the computer usage information stored in the storage unit 11 to the computing device (30).

In this case, when the password does not match, the transmission unit 13 transmits information indicating the authentication failure to the computing device 30, and when the password matches, transmits the information indicating the authentication success to the computing device 30.

The computing device 30 counts software for recording computer usage information (e.g., computer management software), furthermore, usage time (hereinafter referred to as "computer usage time"), remaining time, and UAL connection holding time. Store software for recording. In response to the operation of the computer management software, when the authentication is performed by the smart card 10, the computing device 30 counts the computer usage time, remaining time, and UAL connection holding time, and connects to UEL (URL: Uniform Resource Locator) and The counted UAL connection holding time is temporarily stored in the memory 36.

In addition, when the connection of the smart card 10 is recognized by the card information input / output device 25, for example, the card reader / writer, the computing device 30 provides a login screen to the display unit 40. In this case, the login screen is a screen for inputting a password for user authentication, for example, a personal identification number (PIN).

In the present embodiment, it is described as receiving a password for authentication, but the present invention is not limited thereto, and information (for example, ID, social security number, mobile phone number, etc.) for user authentication is also possible.

In addition, in the present exemplary embodiment, the smart card 10 is connected to the card information input / output device 25 in a contact manner in which a connection is recognized. However, the present invention is not limited thereto and may be implemented in a non-contact manner.

Thereafter, the computing device 30 receives the password inputted from the input device 20 equipped with the card information input / output device 25, for example, a keyboard, and sends the received password to the smart card connected to the card information input device 25. To 10. As described above, the smart card 10 compares the password stored in the storage unit 11 with the password received from the computing device 30 and performs authentication on the password according to whether the smart card 10 matches and confirms the result of the authentication (for example, Authentication success or authentication failure) is sent to the computing device 30. As such, as authentication of the password is performed in the smart card 10, the exposure of the password may be prevented even when the computer device is hacked.

The computing device 30 includes an interface unit 31, a mode switching unit 32, a counter unit 33, a recording processing unit 34, and a display processing unit 35 as shown in FIG. 3.

The interface unit 31 interfaces with the input device 20 and the card information input / output device 25.

When the information indicating the authentication success is received by the smart card 10, the mode switching unit 32 switches to an operation mode in which a computer can be used, and when the information indicating the authentication failure is received by the smart card 10. You are switched to the login screen mode. Here, the login screen mode is a login screen displayed according to a login request for using a computer, and means a locked state in which the computer cannot be used.

Meanwhile, when the smart card 10 is separated from the card information input / output device 25, the computing device 30 switches the operation mode to the login screen mode. Accordingly, when the user does not use the computer or leaves the computer, the smart card 10 may be separated from the card information input / output device 25 to maintain computer security.

The display processing unit 35 of the computing device 30 that has been switched to the operation mode displays computer usage information including computer usage time, remaining time, start time, and end time recorded in the storage unit 11 of the smart card 10. It is displayed on the display part 40. Accordingly, the computer controller or administrator can control the computer usage time by viewing the computer usage information displayed on the display unit 40, and read any connected UAL and UEL connection holding time stored in the memory 36 to connect to any site. You can check whether

The counter unit 33 counts the computer operation time from the time when the operation mode is switched. In addition, the counter unit 33 may count the time for each connection of the UEL input from the user and count the corresponding UEL connection time. Furthermore, the counter unit 33 may count the remaining time using the user time limit stored in the smart card 10.

The recording processing unit 34 allows the computer operating time, remaining time, start time, and end time counted by the counter unit 33 to be recorded in the storage unit 11 of the smart card 10. In this case, the computer use time, remaining time, start time and end time are preferably recorded in the storage unit 11 at a predetermined time interval (for example, 3 seconds, 5 seconds, etc.).

In addition, the recording processing unit 34 stores the UEL inputted through the input device 20 and the UEL connection holding time counted by the counter unit 33 in the memory 36.

A usage information management method of a computing system having such a configuration will be described with reference to FIGS. 4 and 5 as follows.

4 is a flowchart illustrating a method of managing usage information of a computing system according to an exemplary embodiment of the present invention, and FIG. 5 is a flowchart illustrating a process of performing authentication in a smart card of a computing system according to an exemplary embodiment of the present invention. to be.

Referring to FIG. 4, the computing device 30 drives software for recording usage information, for example, computer usage information (S101). In other words, the computing device 30 drives the software for counting the computer usage time, remaining time, and UAL connection holding time and recording them on the smart card 10.

Next, the computing device 30 determines whether the connection of the smart card 10 to the card information input / output device 25 is recognized (S103).

As a result of the determination in step S103, when the connection of the smart card 10 is not recognized by the card information input / output device 25, the computing device 30 maintains a standby state for a predetermined time.

As a result of the determination in step S103, when the connection of the smart card 10 is recognized by the card information input / output device 25, the computing device 30 provides a login screen to the display unit 40 (S105).

Next, the computing device 30 receives a password from the input device 20 (S107). That is, when a user operates a button provided in the input device 20 to input a password for authentication, the computing device 30 receives the password input through the input device 20.

Next, the computing device 30 transmits the received password to the smart card 10 connected to the card information input and output device 25 (S109).

Next, the computing device 30 determines whether the authentication result received from the smart card 10 is authentication success or authentication failure (S111).

Herein, a process of performing authentication by the smart card 10 will be described with reference to FIG. 5, and the smart card 10 receives a password for authentication from the computing device 30 (S201).

Next, the smart cart 10 determines whether the received password and the password stored in the storage unit 11 match (S203).

As a result of the determination in step S203, when the received password and the password stored in the storage unit 11 match, the smart card 10 transmits information indicating the successful authentication to the computing device 30 (S205).

As a result of the determination in step S203, when the received password and the password stored in the storage unit 11 do not match, the smart card 10 transmits information indicating the authentication failure to the computing device 30 (S204).

In FIG. 4 again, when the authentication result received from the smart card 10 is the authentication result, the computing device 30 switches the login screen mode to an operation mode in which the computer can be used (S113). ).

As a result of the determination in step S111, when the authentication result received from the smart card 10 is an authentication failure, the computing device 30 performs the login screen mode (S112). Even when the smart card 10 is separated from the card information input / output device 25, the operation mode is switched to the login screen mode. Accordingly, computer security can be maintained even when the computer user is away.

Next, the computing device 30 receives the computer usage information recorded in the smart card 10, and provides the received computer usage information to the display unit 40 (S115). Here, the computer usage information includes computer usage time, remaining time, start time and end time.

Next, the computing device 30 counts the computer usage time (S117). In more detail, the computing device 30 uses the computer operation time counting from the time when the operation mode is switched, the UEL connection holding time counting from the time of the UAL connection, and the use recorded in the storage unit 11 of the smart card 10. The remaining time is counted using the time limit.

Next, the computing device 30 supports the computer usage information including the computer usage time, remaining time, start time and end time to be recorded on the smart card 10, and the UEL including the connected UAL and the UAL connection holding time. The information is supported to be stored in the memory 36 (S119).

In this way, the computer usage information recorded in the smart card and the UEL information stored in the memory are provided on the display unit, so that not only the computer usage can be controlled, but also which site is accessed. As a result, access to harmful sites can be prevented.

A smart card device for computer security according to an embodiment of the present invention will be described with reference to FIG. 6.

As shown in FIG. 6, the smart card device for computer security according to the present invention includes a smart card 100 and an input device 200 equipped with a card information input / output device 250. In this case, the input device 200 equipped with the card information input / output device is connected to the computer 300. The computer 300 displays a login screen on the display unit 400 when the smart card 100 is connected to the card information input / output device 250.

The smart card 100 stores a password and authenticates the password received from the input apparatus 200.

In more detail, the smart card 100 includes a storage 110, an authentication performer 120, and a transmitter 130.

The storage unit 110 stores computer usage information (eg, computer usage time, remaining time, start time, and end time), password, and UAL to be connected to a memory (not shown) of the computer 300. And UAL connection holding time.

The authentication performing unit 120 receives the input password by operating the input device 200 through the login screen provided from the computer 300, compares the received password with the password stored in the storage unit 110 to determine Perform authentication accordingly.

The transmission unit 130 transmits the information indicating the authentication success to the computer 300 when the received password and the password stored in the storage unit 110 match, and transmits the information indicating the authentication failure to the computer 300 when the password is not matched. do.

In addition, the transmission unit 130 transmits the information indicating the successful authentication to the computer 300, and then transmits the computer usage information stored in the storage unit 110 to the computer 300. Thereafter, the computer 300 displays the computer usage information received from the transmission unit 130 on the display unit 400.

In this way, the authentication of the password is performed within the smart card, so that even if the computer is hacked, the exposure of the password can be prevented.

A security method of a computer security smart card device having such a configuration will be described with reference to FIG. 7 as follows.

The smart card 100 receives a password from the input device 200 (S301).

Next, the smart card 100 determines whether the received password and the password stored in the storage unit 120 match (S303).

As a result of the determination in step S303, when the received password and the password stored in the storage unit 110 match, the smart card 100 transmits information indicating the successful authentication to the computer 300 (S305). At this time, the computer 300 switches the login screen mode to the operation mode.

Next, the smart card 100 transmits the computer usage information stored in the storage unit 110 to the computer 300 (S307). In this case, the computer 300 displays the received computer usage information on the display unit 400.

As a result of the determination in step S303, when the received password and the password stored in the storage unit 110 do not match, the smart card 100 transmits information indicating the authentication failure to the computer 300 (S305). At this time, the computer 300 performs the login screen mode.

The present invention is not limited to the embodiments described above, and various modifications and changes can be made by those skilled in the art, which are included in the spirit and scope of the present invention as defined in the appended claims.

1 is a block diagram illustrating a computing system in accordance with an embodiment of the present invention.

FIG. 2 is a block diagram illustrating the smart card shown in FIG. 1. FIG.

3 is a block diagram illustrating the computing device shown in FIG. 1.

4 is a flowchart illustrating a usage information management method of a computing system according to an exemplary embodiment of the present invention.

5 is a flowchart illustrating an authentication process in a smart card of a computing system according to an embodiment of the present invention.

6 is a block diagram illustrating a smart card device for computer security according to an embodiment of the present invention.

7 is a flowchart illustrating a security method of a computer security smart card device according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

10: smart card 11: storage

12: authentication unit 13: transmission unit

20: input device 25: card information input and output device

30: computing device 31: interface unit

32: mode switching unit 33: counter unit

34: recording processing section 35: display processing section

36: memory 40: display unit

Claims (14)

Smart card; An input device equipped with a card information input / output device; And And a computing device for driving software for recording usage information and providing a login screen to a display unit when the smart card is connected to the card information input / output device. When the smart card is installed in the card information input / output device, the smart card performs authentication according to whether or not the password received from the input device matches the password stored in the smart card. The computing device is switched to an operation mode when authentication is performed by the smart card mounted in the card information input / output device, and is switched to a login screen mode when the smart card is separated from the card information input / output device. Computing system. The method according to claim 1, The smart card, the storage unit for storing the usage information and password, including the use time, remaining time, start time and end time; An authentication performing unit for performing authentication by comparing a password stored in the storage unit with a password received from the input device; And And a transmission unit which transmits usage information stored in the storage unit to the computing device when authentication is performed by the authentication performing unit. The method according to claim 1, And the computing device counts a usage time including a usage time, a UE connection holding time, and a remaining time from the time point at which the operation mode is switched to the operation mode. The method according to claim 3, The computing device is configured to record the counted usage time and remaining time on the smart card at a preset time interval, And storing the counted UEL connection holding time and the connected UEL in a memory. A usage information management method of a computing system including a smart card, an input device equipped with a card information input / output device for inputting / outputting card information of the smart card, and a computing device for recording usage information. Providing, by the computing device, a login screen to a display unit when a connection of the smart card is recognized to the card information input / output device; Transmitting, by the computing device, a password input from the input device to a smart card connected to the card information input / output device; Switching, by the computing device, a login screen mode to an operation mode when authentication is performed by the smart card; And And if the smart card is detached from the card information input / output device, the computing device to switch an operation mode to a login screen mode. The method according to claim 5, After the step of transmitting to the smart card, The smart card receiving a password from the input device; Verifying, by the smart card, whether the received password matches a stored password in the storage unit; And And transmitting, by the smart card, information indicating the successful or failed authentication to the computing device according to whether the password matches. The method according to claim 5, After the step of switching to the operation mode, Receiving, by the computing device, usage information including usage time, remaining time, start time, and end time from the smart card; And And displaying, by the computing device, the received usage information on a display unit. The method according to claim 5, After the step of switching to the operation mode, And counting a use time including a use time, a UE connection holding time, and a remaining time from the time when the computing device is switched to the operation mode. The method according to claim 8, After the counting step, The computing device recording the counted usage time and remaining time on the smart card; And And storing, by the computing device, the counted ULA connection holding time and the connected UEL in a memory. In the smart card device for computer security used for computer security, Smart card; And Including an input device equipped with a card information input and output device, When the smart card is installed in the card information input / output device, the smart card device for computer security, characterized in that the authentication is performed according to whether the password received from the input device matches the password stored in the smart card. The method according to claim 10, The smart card is a smart card device for computer security, characterized in that for receiving the password entered by operating the input device through the login screen provided from the computer to the display unit. The method according to claim 10, The smart card, the storage unit for storing the usage information and password, including the use time, remaining time, start time and end time; An authentication performing unit for performing authentication by comparing a password stored in the storage unit with a password received from the input device; And And a transmission unit for transmitting the usage information stored in the storage unit to the computer when authentication is performed by the authentication performing unit. In the security method of a smart card device for computer security comprising an input device equipped with a smart card and card information input and output device, The smart card receiving a password from the input device; Comparing, by the smart card, whether the received password matches a password stored in the smart card; And And transmitting the information indicating the authentication success to the computer if the smart card matches, and transmitting the information indicating the authentication failure to the computer if the smart card does not match. Security method. The method according to claim 13, And transmitting, by the smart card, the usage information stored in the smart card to the computer, after transmitting the information indicating the authentication success to the computer. .

Images