KR20090117303A - Management apparatus for multi account and method thereof - Google Patents

Abstract

PURPOSE: A multiple account management device and method is provided to enable an administrator and a user to easily use/exchange the information with a single computer by managing log-in of the all accounts and information transmission of a guest account. CONSTITUTION: A multiuser login unit(201) is installed in OS(Operating System). The multiuser login unit provides the account use under the environment in which an administrator account and a guest account are simultaneously connected/disconnected according to the login information. An input bypass unit(204) enables the administrator account to control indirectly the user interface for the guest account according to the login status in the login part of the multiple users.

Description

MANAGEMENT APPARATUS FOR MULTI ACCOUNT AND METHOD THEREOF}

The present invention relates to a multi-account management apparatus and a method thereof, and more particularly, to a multi-account management apparatus and a method for providing a plurality of users with different rights and ways of using a single computer system using a computer operating system.

As the use of network-based computer systems has become common and the performance of computers has increased, systems for efficiently utilizing various versatility of computer systems have emerged. In particular, when creating a document using a computer, various information included in the content of the document can be utilized in various ways, thereby increasing the work efficiency based on the document, which is compared to the method of exchanging information using paper. It is high in speed and accuracy, does not incur the costs of using paper, and reduces the cost of managing and storing it.

Therefore, more and more companies are seeking to improve their cost and productivity by creating a paperless work environment that reduces the use of paper and does most of the work online through a computer.

On the other hand, in the case of a service business that welcomes users while working through a computer, the necessary information is written on a standardized paper, and the information obtained through the paper is input again through a computer to provide a service. During this time, users spend their time waiting for free or reading the information brochures provided. In particular, most service providers (eg, banking services) that have to obtain and enter a variety of information from users while consulting one-on-one or one-on-one with a service provider, process a database or process the inputted information. , Insurance services, securities services, sales services, and civil complaints services) provide services through this inefficient process.

Accordingly, a system has been introduced to improve service quality for a user by providing information on related services while waiting for a user to reduce boredom and providing service processing results through a display device.

1 is a block diagram of a user service system used in a financial sector such as a bank. As shown, a display 11 for providing a screen for the administrator using a single computer 10 and a display 12 for providing the user with information selected for the user under the control of the manager 11. As a configuration for simultaneously controlling the single computer 10 is connected to the banking server 14 and the portal server 15 via a communication network (13).

That is, using the computer 10, an administrator can access the banking server 14 and the portal server 15, and the portal server 15 provides the user with the display 11 by controlling the display 11 for the user. Provide only information. In this case, the computer 10 regards the display 12 for the user as a simple control object and provides only a predetermined information to the display 12, and the user unidirectionally provides the information provided by the display 12. You can only be provided.

For this reason, there is a limit in improving the service to the user because the user cannot participate, and there is still the inconvenience that a paper sheet of a predetermined standard must be used to obtain predetermined information from the user.

That is, since information is obtained using paper sheets, it is necessary for the administrator's effort to recalculate the information, and if the administrator makes a mistake, wrong information may be input. During this time, the user may feel uncomfortable.

FIG. 2 illustrates a system configuration for inducing a user to improve the problems of the system described with reference to FIG. 1 and obtaining necessary information as digital information directly from the user. This is the case with the system.

The administrator may log in with administrator authority by securely accessing the administrator computer 20, and the computer 20 may access the banking server 41 and the portal server 42 through the communication network 40. In addition, the computer 30 for the user may log in with guest privileges and access the portal server 42 only through the computer 30. However, since it is a separate computer system that constitutes an independent interface, the user can freely use the computer, and can utilize various services provided by the portal server 42, and the electronic format provided by the manager computer 20 can be utilized. By directly inputting the information required for the document, the digital information can be transferred to the manager computer 20.

This allows the user to provide the information input by the administrator to the administrator without distortion, the administrator can immediately utilize the necessary information without additional input time, while the user is a computer (30) ) May utilize a service provided by the portal server 42. On the other hand, the use of such a system can greatly reduce the use of paper sheets.

However, in order to provide such an effective service, a plurality of separately separated computer systems are required as shown, and various softwares for enabling the computer system to operate are additionally required. In other words, since the physically separated computer system as shown in the figure is required in order to give the user freedom to use the computer interface while maintaining security, the initial installation cost is high, and the space for configuring multiple systems is increased. The cost of introduction and management is too high, including the need to purchase additional software to run the system.

In order to solve the above problems, an object of the present invention is to provide a single computer with a plurality of accounts having different privileges, so that individual computers can be used, but the administrator can manage the logins of all accounts and guest. It is to provide a multi-account management device and method that allows administrators and simple users to freely use and exchange information using a single computer without suddenly increasing load or threatening security by managing information transmission and reception for accounts. .

Another object of the embodiment of the present invention is to use a single computer in a system operated by individual accounts with different privileges, different autorun programs that are performed for each authority or when additional program installation is required, the process is not duplicated or exposed to simple users. It is possible to provide a multi-account management apparatus and a method which are most suitable for the service of a hospitality service composed of an administrator and a simple user.

Another object of the embodiment of the present invention is to configure a system that is simultaneously connected to the account of the administrator and a simple user using the account service provided by the Windows-based operating system, while the administrator integrates the login of all accounts to suit the hospitality service Multi-account management device optimized for hospitality service in terms of security and use, even by using a single computer, by allowing administrators to control the exchange of screens and information, and to enable separate management of programs that are automatically executed or automatically installed. And a method thereof.

Another object of the embodiment of the present invention is to inconvenience the use of paper, so that general users can freely use the portal or the Internet provided through a computer, and directly input digital information when necessary information, while minimizing cost generation It is to provide a multi-account management device and a method to reduce the, and to maximize the user's convenience.

In order to achieve the above object, the multi-account management device according to an embodiment of the present invention is a multi-account management device for simultaneously operating a plurality of accounts using a computer with a separate interface for a plurality of accounts, installed in a computer operating system A multi-user login unit providing simultaneous access of the administrator account and the guest account according to the login information and the use of an account using a separate interface in a separate environment; And an input bypass unit configured to circumvent control of the user interface for the guest account in the administrator account according to the login state of the multi-user login unit.

The apparatus may further include a multi-monitor manager configured to control a screen to be displayed on the guest account according to the user's control of the administrator account, and to provide the administrator account with information input from the guest account.

It further includes an autorun program manager for managing the autorun program executed after the administrator account and the guest account to be executed differently according to the account.

In addition, the multi-account management method according to another embodiment of the present invention is a multi-account management method for simultaneously operating a plurality of accounts using a computer with a separate interface for the administrator account and the guest account, the administrator account when starting the operating system of the computer An administrator login step of authenticating the administrator by activating the login and activating the administrator account; A bypass login step of, while the login of the guest account bypasses the login information input device from the interface for the guest account to the interface for the administrator account, the administrator who logs in provides the login information of the guest account instead; And a guest login step of activating the guest account after restoring the bypassed interface back to the guest account when the account use is authenticated using the login information of the guest account.

The bypass login step may further include automatically providing the administrator login information as login information of the guest account.

If the administrator account is activated, the method may further include selecting and executing an autorun program only for the administrator account using the autorun program information set by the operating system.

If the guest account is activated, the method may further include selecting and executing an autorun program only for the guest account using the autorun program information set by the operating system.

And providing information on the guest account from the administrator account to the guest account and sharing the guest input information.

The method may further include a monitoring step of providing an operation state of the guest account to the administrator account according to the selection of the administrator.

The apparatus and method for managing multiple accounts according to an embodiment of the present invention allow an individual computer to be accessed by accessing a single computer with a plurality of accounts having different privileges, while the administrator integrates and manages the login of all accounts and manages the guest account. By managing information transmission and reception, there is an effect that administrators and simple users can freely use and exchange information while using a single computer without a sudden increase in load or a threat of security.

Multi-account management apparatus and method according to an embodiment of the present invention using a single computer in a system operated by a separate account of different rights, the process is different if the auto-run program that is performed according to each authority or additional program installation required By not being duplicated or being exposed to simple users, it is possible to economically implement an ideal hospitality service system that satisfies both managers and simple users.

An apparatus and method for managing multiple accounts according to an embodiment of the present invention are configured to be connected to an account of an administrator and a simple user using an account service basically provided by a Windows-based operating system, and to be suitable for hospitality services. Administrators integrate login of accounts, enable administrators to control the exchange of screens and information, and enable separate management of programs that are automatically run or automatically installed. The software can be used, and the environment of the administrator and the simple user is separated in terms of security, and in terms of use, it is possible not only to freely perform appropriate tasks for one's own authority, but also to exchange information under the control of the administrator. Optimized economic system implementation There are possible advantages.

The multi-account management apparatus and method thereof according to an embodiment of the present invention allow a general user to freely use a portal or the Internet provided through a computer and directly input digital information when necessary information, while minimizing costs. The inconvenience caused by the use of paper is reduced, and the convenience of the user can be maximized.

The present invention as described above will be described in detail with reference to the accompanying drawings and embodiments.

Figure 3 shows a simple block diagram of a multi-account management system according to an embodiment of the present invention, an example of a configuration for a bank teller service that provides a representative hospitality service as shown.

First, input and output means (102, 103, 110) for the administrator and the user is connected to a single computer 100, security authentication means 101 is connected for a secure connection of the administrator. Meanwhile, the computer 100 is connected to the banking server 130 and the portal server 140 through the communication network 120. The communication network 120 may include a local area network (LAN) and the Internet. In this case, the communication network 120 may also be connected to external servers. However, for the sake of security and management of the user, the communication network 120 may be limited to the local network or the guest account for the user may be accessible only to the portal server 140 through the local network.

Such a configuration first requires a function that allows a plurality of users to access a single computer 100 to a single account at the same time to use the computer 100 in a separate state from each other. However, since the simultaneous use of a simple independent account is sharing the computer 100 for independent work, it is difficult to apply it as a device for a hospitality service to provide a service while actually facing the user.

For example, software such as Tinsoft's BeTwin leverages the multi-account functionality built into a computer operating system (e.g., Windows XP) to allow multiple users without installing a separate server operating system. Allow different accounts to use the computer at the same time. However, this computer sharing software simply uses each account independently, providing the same effect as having multiple computers, but virtually simultaneously using accounts that were not supposed to be used at the same time. Interworking is not supported by the operating system, so the administrator cannot manage other accounts.

In this embodiment, using the configuration as shown in FIG. 3, the manager processes banking through a plurality of displays 102 and 103, and the user is separated from the manager using the tablet monitor 110 assigned to the user. As a result, information provided by the portal server 140 may be checked, or Internet browsing may be enjoyed, and one of the programs installed in the computer 100 may be used. For separation in consideration of such security, the administrator uses the computer 100 by accessing the administrator account, and the user uses the computer 100 by accessing the guest account. On the other hand, all services must be concentrated on the administrator for the hospitality service, so even when logging in with a guest account, the administrator uses his or her user interface (102, 103 and input devices such as keyboard and mouse not shown) to the guest account. You must log in instead. This is not possible with traditional simple computer sharing software.

On the other hand, for the hospitality service, the manager should be able to provide certain information (for example, financial product information, finance calculated by assuming the user, example information of insurance products, etc.) to the guest account, and the user for paperless banking. In order to obtain information from the user, the form must be provided directly to the guest account interface, and then the user inputs the information inputted by the user, so that the digital information input by the user can be obtained without any manual input procedure.

In addition, due to the limitations of a single computer and operating system, programs that are automatically run automatically regardless of the account should be configured to run differently according to administrator and guest accounts when the computer starts up (ie, programs for work). Should only run under an administrator account, a dedicated browser program to provide advertisement information provided by the portal server should be run under a guest account only), and patch programs or updates that are updated online while using the computer are not known to the guest account. Should only be installed. In addition, if a particular program is installed under either an administrator account or a guest account, since the corresponding program is actually installed on the computer, a function for managing other programs is not required to be installed repeatedly.

In other words, the guest account should allow a certain level of free user operation for the convenience of the user, while not exposing security or maintenance-related parts.

Therefore, the configuration as shown in FIG. 3 is configured to provide the above-described functions, so that a new configuration as shown in FIG. 4 is required to be used for the service.

4 illustrates a configuration of a multi-user management apparatus installed in the computer 100, and the configuration operates in conjunction with an operating system installed in the real computer 100. The configuration is preferably installed on the operating system mainly in software, but may be applied in the form of hardware or external memory.

First, the illustrated multi-user login unit 201 provides a function to support the use of a computer through a plurality of accounts at the same time using a plurality of account functions of the operating system installed in the computer. On the other hand, the multi-user login unit 201 also manages the login of the administrator account and the guest account and the activation of the corresponding account while performing a function to centralize the management of the guest account to the administrator account.

In order to assist this, an authentication unit 203 which performs authentication for an administrator or authentication for a guest, and an interface for a guest account among individual interfaces for each account user managed by a device manager of an operating system are provided for an administrator account. Bypass, the input bypass unit 204 allows the administrator to operate the user's interface to manage the guest account on behalf of the account, and between the account so that the administrator account and the guest account can exchange information under the control of the administrator The multi-monitor manager 205 for controlling and transmitting information and the auto-launch program manager 202 for managing different programs to be executed according to each account are further configured instead of the auto-run program management function of the operating system. At least one of them is combined with the multi-user login unit 201, it is possible to implement a multi-account management device to focus the administrator to the administrator account for the hospitality service.

It looks at in more detail with respect to the configuration.

The multi-monitor manager 205 provides a basic information exchange function for allowing a manager account to control the screen displayed on the guest account or for obtaining information input from the guest account to the manager account. To provide the necessary information and to obtain the necessary information in a digital state. This can be done via remote computer control or messenger-based modules, but can also be done through a new information exchange module that exchanges information based on shared memory or storage using a single computer. It can be used in various ways, such as using a dot, but the system-specific condition of sharing software using a single computer rather than a general remote computer control or messenger-based module can be utilized in terms of execution speed, load reduction, and resource efficiency. desirable.

Meanwhile, the multi-monitor manager 205 may provide the manager screen with the manager account to monitor the screen state of the guest account under the control of the manager account. This enables the administrator to find out what information the user is currently watching, so that seamless hospitality services can be provided. For example, if a user checks the information provided by the portal server and asks the administrator for a specific part, the administrator may check the screen of the guest account to find out what the content is and provide an appropriate answer accordingly.

As such, since the administrator should be able to perform a dedicated account-specific operation such as exchanging information with the guest account or monitoring the screen, the administrator preferably uses a plurality of monitors 102 and 103 as shown in FIG. The multi-monitor manager 205 allows one of these monitors to exchange information with a guest account or to display information with relatively low security, and then share the screen with the guest account to exchange information as necessary. The shared mode provider may be further configured.

On the other hand, when the screen of the administrator account is provided to the guest account in the shared mode through the multi-monitor manager 205, it is preferable to provide an expression to the administrator interface indicating that information is shared to confirm the status to the administrator. Do. For example, as shown in FIG. 6, when a shared manager screen is in a shared state, a border of a specific color is displayed so that the administrator can intuitively and continuously check the shared state, thereby inadvertently leaking internal information to the guest account. Can be prevented.

The automatic execution program manager 202 prevents execution of a program that is automatically executed by an operating system regardless of an account, and manages a program suitable for each account to be executed by allowing different programs to be automatically executed according to an account. To this end, the operating system may move information managing the auto-launch program to a predetermined location, and then use the corresponding information to select a file to auto-execute for each account. For example, if the operating system is Windows, back up a batch file for automatic execution with a different name in a different folder, classify the contents by account, log in to each account, and run the classified program when the account is activated. You can modify the information in the registry and run the program using the original information.

On the other hand, the selection of the auto-run program for each account may allow the administrator to designate the auto-run program manager 202 by providing a setting interface accessible from the administrator account.

In addition, the automatic execution program manager 202 may restrict the installation of the program of the guest account to prevent the arbitrary installation of any program in the guest account, and may also prevent the program installed automatically.

In addition, the automatic execution program manager 202 may allow the operation to be performed only in an administrator account in the case of program installation such as software patch, OS update, security update, installation of ActiveX program generated when surfing the Internet. However, in order to smoothly utilize the guest account, if some of these tasks are set to be performed in the guest account, the auto-executing program manager 202 provides the information when the above program is installed so that the same program installation is not duplicated on a single computer. Remembers that you can block the recurring task of reinstalling the pre-installed program so that the same task is not repeated in the administrator account. This works even when the above program is installed in the administrator account first so that the same task is not duplicated in the guest account.

The authentication unit 203 may be a function unit for verifying authentication based on simple login information, but for an effective authentication of an administrator performing a highly secure operation such as banking, an authorized certificate or a bank-specific certificate, It may have a function of performing authentication using biometric information such as a fingerprint and providing the result. By utilizing the authentication unit 203, it is possible to prevent the guest login from being unsafely activated if a problem occurs in the authentication by making the guest login impossible if the administrator authentication is impossible.

FIG. 5 is a flowchart illustrating an operation process according to an exemplary embodiment of the present invention, and is an example of a case where a hospitality service is performed using the multiple account management apparatus shown in FIG. 3.

First, when the administrator starts up the computer, the operating system of the computer boots to log in to the administrator account.

When the administrator inputs the administrator login information, authentication of the login information is performed, and if necessary, a user account is activated, and a more secure level authentication process is performed through the authentication unit 203 shown in FIG. If authentication fails, repeat the administrator login process without proceeding to the subsequent procedure.

When the administrator login is normally performed, as the login procedure for the guest account is performed, input (or display content) is bypassed to the user interface assigned to the administrator account instead of the user interface assigned to the guest account.

In this case, the administrator may input the login information to log in to the guest account, and in some cases, the administrator login information may be automatically provided as the login information of the guest account even if there is no input by the administrator.

Thereafter, as the administrator account and the guest account are activated, an autorun program is separately performed for each account so that appropriate programs can be used.

The manager account and the guest account activated in this way are operated separately, and the manager account monitors the screen of the guest account through the multi-monitor manager 205 or shares one or more screens managed by the manager account with the guest account. can do. In this process, information input from the guest account can be obtained as digital information and used as user information. This process is restored when the administrator turns off screen sharing.

6 illustrates an example in which an administrator using a plurality of screens shares his or her screen with a user. The administrator must obtain information from the user while performing banking through the administrator screen 1 301 and the manager screen 2 302. If there is information to be provided to the user, the information is displayed on the manager screen 2 (302) and the multi-monitor manager 205 is operated to share the screen. In this case, the administrator screen 2 302 is displayed on the screen 401 provided in the guest account. In this case, a band having a predetermined color may be displayed on the screen border so that the administrator can confirm that the corresponding manager screen 2 302 is shared. It can be modified in various ways.

FIG. 7 illustrates an example of application of a device for actual hospitality service. In this case, the manager 505 is using a single monitor 501, and the guest 605 using the keyboard 511 and the mouse 520. In this case, the management of the account for) is also performed.

As shown, the simple monitor 601 and the tablet 602 can be applied without using the tablet monitor, and some of the touch screen, keyboard, and mouse can be replaced or added. However, it is desirable to apply digitally possible sign information, which means approval, by applying a means for possible writing.

In this manner, the manager 505 and the guest 605 may separately perform necessary or interesting tasks by using a computer, and information may be exchanged by the manager 505 when information is required or needs to be provided.

In the above, certain preferred embodiments of the present invention have been illustrated and described. However, the present invention is not limited to the above-described embodiment, and various modifications can be made by those skilled in the art without departing from the gist of the present invention attached to the claims. .

1 is a configuration diagram of a conventional user service system.

2 is a configuration diagram of another type of conventional user service system.

3 is a configuration example of a multi-account management apparatus according to an embodiment of the present invention.

4 is a detailed configuration example of a multi-account management apparatus according to an embodiment of the present invention.

5 is a flow chart showing an operation process according to an embodiment of the present invention.

6 is an example showing a screen sharing method according to an embodiment of the present invention.

7 is an exemplary view showing a configuration according to an embodiment of the present invention.

** Description of symbols for the main parts of the drawing **

201: Multi-user login unit 202: Autorun program manager

203: authentication unit 204: input bypass unit

205: multiple monitor management unit

Claims (17)

In the multiple account management apparatus for simultaneously operating multiple accounts using a computer with a separate interface for multiple accounts, A multi-user login unit installed in the computer operating system to provide simultaneous access of the administrator account and the guest account according to the login information, and to provide an account using a separate interface in a separate environment; And an input bypass unit configured to circumvent control of a user interface for the guest account from the administrator account according to a login state of the multi-user login unit. The multi-account management apparatus of claim 1, further comprising a multi-monitor manager configured to control a screen to be displayed on a guest account according to a user control of the administrator account, and provide information input from the guest account to the manager account. The apparatus of claim 2, wherein the multiple monitor manager further comprises a monitoring unit configured to monitor a screen displayed on the guest account. The apparatus of claim 2, wherein the multi-monitor managing unit further includes a sharing mode providing unit configured to provide an administrator screen and input information to a screen of a guest account, obtain an input from the guest account, and share the input with the screen. The multi-account management apparatus of claim 4, wherein the multi-monitor manager further expresses information indicating an information sharing state on the manager screen when the screen and the input are shared with a guest account. The apparatus of claim 1, further comprising an autorun program manager configured to manage an autorun program executed after the administrator account and the guest account log in differently according to an account. The apparatus of claim 6, wherein the autorun program manager moves the autorun program management information of the operating system and selects and executes different autorun programs according to an account. The multi-account management apparatus of claim 6, wherein the auto-executing program manager further includes a duplicate installation prevention unit that prevents redundant installation using installation information so that programs automatically installed online are not duplicated for each account. The multi-account management apparatus of claim 6, wherein the autorun program manager provides a setting interface only to the administrator account, and manages program installation and registration of an autorun program and registered autorun programs through the setup interface. The apparatus of claim 1, further comprising: an authentication unit configured to authenticate an administrator based on administrator identification information and to provide the authentication information to the multi-user login unit when logged in with an administrator account, wherein the multi-user login unit is authenticated by the authentication unit. The multi-account management device that screens the login process of the guest account according to. The multi-account management apparatus of claim 1, wherein the user interface installed for the guest account is a tablet monitor capable of display and input. In the multiple account management method of operating multiple accounts at the same time by using a computer with separate interfaces for the administrator account and the guest account, An administrator login step of authenticating the administrator by activating the administrator account and activating the administrator account when the operating system of the computer is started; A bypass login step of bypassing the login information input device from the interface for the guest account to the interface for the administrator account while the guest account is logged in; And a guest login step of activating a guest account after restoring the bypassed interface back to a guest account when the use of the account is authenticated using the login information of the guest account. The method of claim 12, wherein the bypass login step further comprises automatically providing the administrator login information as login information of the guest account. The multi-account management method of claim 12, further comprising, if the administrator account is activated, selectively executing the auto-run program only for the administrator account by using the auto-run program information set by the operating system. The multi-account management method of claim 12, further comprising: selectively executing the auto-launch program for the guest account only by using the auto-launch program information set by the operating system when the guest account is activated. The method of claim 12, further comprising: sharing information for providing screen information to the guest account from the administrator account and obtaining guest input information. The method of claim 12, further comprising a monitoring step of providing an operation state of the guest account to the administrator account according to the selection of the administrator.

Images