KR20100091059A - System and method for logging in game server using smart chip - Google Patents

Abstract

PURPOSE: A system and a method for logging in a game server using a smart chip are provided to protect personal information from hacking by using a smart chip medium for generating personal authentication data and an encoding statement. CONSTITUTION: A smart chip medium(220) creates personal authentication data and an encoding statement from the security data associated with a user through an encoding operation. A terminal(210) transmits the personal authentication data and the encoding statement through a wired/wireless network. A game server(100) receives the personal authentication data and the encoding data to authenticate a user. The smart chip medium includes a smart card, a USB(Universal Serial Bus) and a mobile phone.

Description

Game access system and method using smart chip media {SYSTEM AND METHOD FOR LOGGING IN GAME SERVER USING SMART CHIP}

The present invention relates to a game access system and a method thereof, and more particularly, to a game access system and a method using a smart chip medium.

The current login method of the game is to enter a username and password directly. Recently, a method of using mobile phone authentication and a security card has been introduced and utilized.

Direct ID and password input method is a method that if the personal user's PC is not secure, the ID and password can be leaked, causing not only personal information but also data in the game. Of course, the security device itself may be set by a program or game client that makes the keyboard input data unknown.

The login method through mobile phone authentication is a method similar to the existing mobile phone authentication payment method in which a secure login code number is received from a server through a registered mobile phone so that a user can enter a corresponding number and log in. This is not secure when a mobile phone number is registered as a hacking number in the game server and authenticated to log in. Of course, there is a difficulty in changing the information in the game basically. Recently, however, many cases of hacking have revealed a lot of personal information leakage, which makes this information an unsafe method.

Alternatively, a security card authentication method used in banknotes is used to authenticate the login by inputting data of the corresponding security card number in the security card contents in order. This is a safe method if you keep your security card safe and use it safely, but recently, there is a hacking case for the security card, which is also not safe from various attacks.

One way to deal with keyboard input is to log in automatically. In case of automatic login, it is a function to automatically log in to a site set through a program having an automatic login function. It has a function that saves ID and password in the program and automatically logs in when you access the site. It is possible to extract the ID and password in the program, which has a convenient function, but there is a weak point in security.

There is an authentication method through an OTP device. It is a device that can periodically generate data such as a server through an OTP device and inputs this data to authenticate. However, the part using the OTP device is more costly than other methods and cannot be used permanently due to battery life, so it needs to be reissued and the device is larger than the other, which causes inconvenience in storage.

In the case of mobile phone authentication, another person can log in by changing a mobile phone number of personal information. In addition, due to frequent cell phone changes, the inconvenience of having to register and authenticate a new cell phone every time follows. As a result, consumers are uncomfortable with cell phone authentication and the number of uses becomes less frequent.

The automatic login method stores data on the PC and logs in to websites or games based on this. This is a state where the ID and password are stored in the PC as it is stored outside. As a result, the PC data is not secure, and the ID and password are easily known by hacking.

Accordingly, an aspect of the present invention is to provide a game access system and method for preventing user information from leaking out due to hacking.

In order to solve the above technical problem, the game access method according to an aspect of the present invention comprises the steps of generating the personal authentication data and the cipher text through an encryption operation performed by a user owned smart chip medium, and the generated personal authentication data And transmitting a cipher text to a game server through a wired / wireless communication network and performing a user authentication and a key authentication process based on the transmitted personal authentication data and a cipher text to access the game server.

According to another aspect of the present invention, a method of accessing a game may include downloading item information obtained from a game server to a smart chip medium according to a user's request, and downloading the item information downloaded through an internal encryption operation of the smart chip medium. Encrypting and accessing the corresponding game server by performing the user authentication process and the key authentication process based on the encrypted item information.

According to another aspect of the present invention, a game access system includes a smart chip medium for generating personal authentication data and a cipher text from security data associated with a user through an encryption operation, and a wired / wireless communication network, wherein the individual is generated in the smart chip medium. And a terminal for transmitting authentication data and the cipher text to the wired / wireless communication network, and a game server for authenticating the user according to the personal authentication data and the cipher text transmitted through the wire / wireless communication network.

According to another aspect of the present invention, there is provided a method for accessing a server, the method including generating personal authentication data and a cipher text through an encryption operation performed by a user-owned smart chip medium, and generating the personal authentication data and cipher text through a wired / wireless communication network. Transmitting the server authentication data to the server, accessing the server by performing a user authentication and a key authentication process based on the transmitted personal authentication data and the cipher text, and the smart chip medium generating the server authentication data generated from the server. Receiving and verifying the server authentication data to determine whether the server is a corresponding server to which the user wants to access.

According to the present invention, by using a smart chip medium, such as a smart card for generating personal authentication data and cipher text through its own encryption operation, the risk of hacking of user information is prevented in advance, the game through key authentication as well as simple user authentication Since it is connected to the server, it provides an enhanced security environment when connecting to the game.

The present invention provides a game access system and method using a smart chip medium. In the existing game access method, the risk of hacking is large, and the user frequently sees damage. Accordingly, the present invention proposes a game access system and a game access method using a smart chip medium safe from hacking in order to prevent damage caused by such hacking. The access method using the smart chip medium transmits the authentication data and the cryptogram generated by using the data and the key stored in the smart chip to the server and performs the key authentication together with the user authentication in the server. ) How to enter into.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing a game access system using a smart chip medium according to an embodiment of the present invention.

As shown in FIG. 1, a game access system using a smart chip medium according to an embodiment of the present invention includes a client performing network communication with a game server 100 and a game server 100 through an internet network 150. 200.

The game server 100 receives the authentication data and the cryptogram generated from the smart chip medium 220 provided in the client 200 through the desktop 210, and the transferred authentication data and the cryptogram. Verifiy performs key authentication along with user authentication.

If the user authentication process and the key authentication process is successful, the game server 100 enters a secure session with the client 200. When there is a download request of item information from the user, the game server 100 transmits the item information of the user stored in the DB to the client 200.

The client 200 includes a desktop 210 and a smart chip medium 220. Here, the smart chip medium 220 may include all media such as a smart card, a USB, a mobile phone, and the like equipped with an IC chip.

The desktop 210 stores various application programs such as firmware for recognizing the smart chip medium 220, which may be implemented as a smart card, a USB, a mobile phone, and the like. The smart chip medium 220 may be indirectly connected to the desktop through an interfacing means such as a card reader (not shown), or may be directly connected directly through a USB port basically provided in the desktop 210. In the present embodiment, it will be described on the assumption that the smart chip medium is implemented as a card reader, and the smart chip medium 220 is replaced with the term of the smart card 220.

The smart card 220 includes a memory 222, a processor 224, and an input / output unit 226.

The memory 222 stores a key, data, an application service, a protocol, and a cryptographic algorithm. In addition, the memory 222 downloads and stores items acquired by the user during the game from the game server 100 through a PC.

The processor 224 performs an encryption operation according to the encryption algorithm to perform an encryption operation on the key and data stored in the memory 222, and generates an authentication data and a cryptogram as a result.

The input / output unit 226 transmits the authentication data and the cipher text encrypted by the processor to the game server 100 through the desktop 220. In addition, the input / output unit 226 uploads the downloaded item to the game server 100.

In the game access system according to the embodiment of the present invention, since the encryption operation of the input user information is performed inside the smart card 220 unlike the existing operation on the PC, there is no risk of leakage of user information due to hacking. In addition, since it is connected to the game server 100 through key authentication through a smart card as well as simple user authentication, it is possible to provide an enhanced security environment for user information.

In addition, in the existing game access system, all item information depends on the item information stored only in the DB of the game server, so that item loss due to hacking or damage to the DB could not be avoided. By downloading and storing the item information that is important to the user from the game server 100, it is possible to prevent the user's item loss that occurs when the DB server hack or damage of the game server.

Meanwhile, in the present embodiment, the smart chip medium is described as a contact smart card used by inserting a smart chip medium into a card reader according to a communication method with an external device. However, the smart chip medium may be implemented as a contactless smart card that communicates by RF signal using an internal antenna. have. In addition, in the present embodiment, a smart chip medium capable of selecting either contact or contactless may be used. For example, a switching means attached to an IC chip of a smart card may be provided so that any one of a contact type and a non-contact type may be selected in a manner to enable / disable an RF antenna connected to the IC chip.

2 is a flowchart illustrating a game access method using the game access system shown in FIG. 1.

First, the owner of the smart card enters a personal identification number (PIN), sign, fingerprint, password, etc. for user authentication through the desktop, so that the owner of the smart card attempts to access the game.

When the owner of the smart card inputs a PIN for user authentication, a PIN PAD may be mounted on the smart card to input the PIN. In this case, the smart card may be locked / unlocked through the PIN input through the PIN PAD. When the smart card is operated, the corresponding lock / unlock state is checked to determine whether to proceed. An unlocked smart card is safe from card theft if the card is lost. In addition, when a fingerprint is used for user authentication, a small terminal in which a fingerprint recognition device for mounting a smart card is designed is provided, and user authentication may be performed by recognizing a user's fingerprint when a game is connected.

When there is a game connection attempt from the owner of the smart card, the game server 100 transmits the server authentication data to the smart card 220 through the desktop 210 (S210).

The smart card 220 verifies the server authentication data to check whether the user is a normal game server to be connected to (S220).

When the game server 100 is determined to be a normal server to which the user wants to connect, various data and keys stored in the internal memory 222 using encryption operations performed by a processor included in the smart card 220 may be used. Personal authentication data and a cipher text are generated from (S230). The generated personal authentication data and cipher text are transmitted to the game server 100. If the user is a game server 100 that has not previously joined or is an abnormal game server 100 that has previously been unsubscribed, the smart card 220 is an abnormal game server to which the user does not subscribe. Inform the user through (S240).

The game server 100 checks the personal authentication data and the cipher text generated through the internal encryption operation of the smart card 220 and performs a user authentication process for the owner of the smart card 220 attempting to access the game ( S250).

If the user authentication is successful, the game server 100 generates authentication completion data and transmits the generated authentication completion data to the user's desktop 210 (S260).

The desktop 210 finally checks the authentication completion data and notifies the user that user authentication is completed, so that the game connection is completed (S280). If the user authentication fails, the game server 100 transmits a game connection denied message to the desktop 210 of the client 200, and the desktop 210 notifies the user that the game connection is denied (S270).

The smart card 220 may use a public certificate used to generate personal authentication data. An accredited certificate may be utilized by an already existing accredited certificate. Although the existing public certificate is used, the actual encryption operation for generating personal authentication data is performed inside the smart card. When the personal authentication data is transmitted to the game server, the game server performs a user authentication process through a personal authentication SAM (Secure Application Module). An accredited certificate can also be further verified by a certified certification authority (CA).

The item information acquired by the user in the game may be used as the personal authentication data. For this purpose, a downloading process and an uploading process of item information are performed.

3 is a flowchart illustrating a downloading process of item information using the game access system of FIG. 1.

Referring to FIG. 3, the downloading process of item information starts after the game connection shown in FIG. 2 is completed (S280).

First, the client 200 requests the game server 100 to download the item information (S310).

The game server 100 encrypts item information corresponding to a download request from the client 200 (S330). Thereafter, the encrypted item information is transmitted to the smart card 220 through the desktop 210 provided on the client 200 side. At this time, the game server 100 backs up the recovery information for item recovery when a request for the recovery of the item information of the user from the client (S350). Thereafter, the smart card 220 stores the encrypted item information transmitted from the game server in the memory 222 provided therein.

When the item information due to hacking or server instability is lost in the game server 100 through the downloading process of such item information, the smart card 220 uploads the downloaded item information to the game server, thereby allowing the user to download the item information. Item information can be recovered.

In the present embodiment, not only the item information downloaded to the smart card is used for recovery purposes, but also the personal information may be generated through an encryption operation inside the smart card by using the item information as authentication data. For example, in operation S220 of FIG. 2, the encrypted item information is transmitted to the game server 100, and the game server performs the authentication process as the personalized authentication information and encrypts the item information, and confirms whether the user is a legitimate user. In this case, if the game server is not connected to a general web site, the game server may use the data of the game server to store the data on a smart card and use the data as authentication data and recovery data.

In addition, in the present embodiment, the item information downloaded to the smart card may be transferred to another user. For example, when the item information is to be transferred, the item information downloaded to the own smart card may be uploaded to the smart card owned by another user through the desktop. In this case, the other user may generate personal authentication data from the item information transferred through the encryption operation of the smart card owned by the other user and access the game server of the original user. At this time, the original user informs the game server of the transfer of item information in advance.

4 is a flowchart illustrating a process of uploading item information using the game access system of FIG. 1.

Referring to FIG. 4, item information downloaded in the smart card through the desktop is displayed to the user, and one of them is selected by the user (S410). The selected item information is uploaded to the corresponding game server through the Internet (S420). When the uploading process of the selected item information is completed, the recovery information backed up to the existing game server is deleted (S430).

On the other hand, if the loss (theft) of the smart card occurs, the lost smart card is registered in the game server lock and lost processing, then a new smart card is issued to the lost user. Thereafter, new item information is downloaded to the smart card using the recovery information stored in the game server. At this time, the existing recovery information backed up to the game server is deleted, and the new recovery information is backed up. Therefore, when an illegal user accesses the game server with the lost smart card, the item information stored in the lost smart card is different from the recovery information stored in the game server, and thus it is impossible to upload and use the game server.

As described above, in the game access system and method according to the embodiment of the present invention, since the user information is input and encrypted from the existing desktop, there is a risk of leakage of user information due to hacking, but the game connection according to the present embodiment In the system and its method, by using a smart chip medium such as a smart card that generates a cipher text through its own operation, the risk of hacking of user information is prevented and connected to the game server through key authentication as well as simple user authentication. It can provide an enhanced security environment.

Although the present invention has been described in detail with reference to the embodiments illustrated in the drawings, it is merely an example, and those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. . For example, in the present embodiment, an authentication process using a smart card in which an authorized certificate and item information are stored as authentication data is described. However, the authentication process may be performed using a smart card in which various security related data are stored. have. For example, a personal authentication process may be performed using OTP data. That is, the OTP number may be generated inside the smart card and transferred to the game server to perform a personal authentication process. Each time the OTP data changes, the game server can authenticate and verify the individual.

In addition, the smart card proposed in this embodiment can be used for various purposes. For example, electronic money (hereafter value information) can be stored and used in a game. You can make payments through mobile phones, credit cards, bankbooks, ARS, convenience store cards, etc. that are traded on the Internet, store value information in smart cards, and purchase item information in games using the stored value information. You can further use this value information to give gifts to others. This value information can be synchronized with data on the game server to preserve value by mutually authenticating the value within the game server or smart card.

In addition, the smart card proposed in this embodiment may be implemented as a family card. When implemented as a family card, the first issued card may be a master card to coordinate the functions of other family cards. When you access the game server through the personal authentication process using the master card, you can set and check the functions of other family cards. Family cards can use the same basic functions as master cards. If you create and use a family card instead of using a real master card, you can limit the card back to a master card even if you lose it. Meanwhile, in the present embodiment, a transmission method using a desktop connected to the Internet is described as a transmission method of personal authentication data, but personal authentication data can be transmitted according to an SMS transmission method using a mobile phone. In addition, you can send and authenticate to the mobile phone server through the Internet function supported by the mobile phone. If you use a smart card and a USB token together, you can store larger data. It can also be used when authentication data or customer personal data is large.

In the above, the case of connecting to the game server has been described as an example, but the present invention is not limited thereto. The present invention can be applied not only to accessing a general content providing server but also to all cases of accessing a conventional wired / wireless web server using an ID and a password.

As such various modifications and equivalent other embodiments are possible, the true technical protection scope of the present invention should be determined by the technical spirit of the appended claims.

1 is a block diagram showing a game access system using a smart chip medium according to an embodiment of the present invention.

2 is a flowchart illustrating a game access method using the game access system of FIG. 1.

3 is a flowchart illustrating a downloading process of item information using the game access system of FIG. 1.

4 is a flowchart illustrating a process of uploading item information using the game access system of FIG. 1.

Claims (16)

Generating personal authentication data and a cipher text through an encryption operation performed by a user-owned smart chip medium; Transmitting the generated personal authentication data and cipher text to a game server through a wired or wireless communication network; And And accessing the game server by performing the user authentication and key authentication process based on the transmitted personal authentication data and cipher text. The method of claim 1, Transferring server authentication data generated from the game server to the smart chip medium; And And checking, by the smart chip medium, the server authentication data to determine whether the game server is a corresponding game server that the user wants to access. The method of claim 1, wherein generating the personal authentication data and the cipher text, Pre-storing security data and keys in the smart chip medium; And And generating the personal authentication data and the cipher text from the stored secure data and key through the encryption operation. The game access method of claim 3, wherein the security data includes an authentication certificate, sign data of the user, OTP data, and item information obtained from the game server. The method of claim 4, further comprising: encrypting, by the game server, item information selected by a user among item information registered in the game server; Backing up recovery information for the selected item information; And And downloading, by the smart chip medium, the encrypted item information from the game server through the wired / wireless communication network. According to claim 5, If the item information stored in the game server is lost, Encrypting item information downloaded to the smart chip medium; Uploading the encrypted item information to the game server through the wired / wireless communication network; Determining whether the uploaded item information is legal based on existing recovery information backed up to the game server; And And if it is determined that the uploaded item information is legitimate, deleting the existing recovery information. The method of claim 1, wherein the encryption operation is performed by the smart chip medium including a smart card, a USB, and a mobile phone. A smart chip medium generating personal authentication data and cipher text from secure data associated with a user through an encryption operation; A terminal connected to a wire / wireless communication network and transmitting the personal authentication data and the cipher text generated in the smart chip medium to the wire / wireless communication network; And And a game server receiving the personal authentication data and the cipher text transmitted through the wired / wireless communication network to authenticate the user. The game connection system of claim 8, wherein the smart chip medium comprises a smart card, a USB, and a mobile phone. The method of claim 8, wherein the smart chip medium, A memory in which a key, secure data, an application service, a protocol, and a cryptographic algorithm are stored; A processor for generating personal authentication data and a cipher text by performing an encryption operation on a key and security data stored in the memory according to the encryption algorithm; And And an input / output unit for transmitting the personal authentication data and the cipher text generated by the processor to the game server through the wired / wireless communication network. The game of claim 10, wherein the processor performs an encryption operation on the secure data including an authentication certificate, sign data of the user, OTP data, and item information obtained from the game server. Connection system. The smart chip medium of claim 11, wherein the smart chip medium is configured to download the item information from the game server through the input / output unit, and to upload the downloaded item information to the game servo. Game connection system. The game access system according to claim 12, wherein the game server encrypts the item information selected by the terminal and transmits the item information selected by the terminal to the smart chip medium when a download request for the item information is received from the terminal. Downloading item information obtained from the game server to the smart chip medium according to a user's request; Encrypting the downloaded item information through an internal encryption operation of the smart chip medium; And And accessing the corresponding game server by performing the user authentication process and the key authentication process based on the encrypted item information. 15. The method of claim 14, further comprising the step of recovering the lost item information by the game server using the encrypted item information when the item information of the user is lost by the corresponding game server by hacking. The game connection method characterized by the above-mentioned. Generating personal authentication data and a cipher text through an encryption operation performed by a user-owned smart chip medium; Transmitting the generated personal authentication data and cipher text to a web server through a wired or wireless communication network; Accessing the web server by performing a user authentication and a key authentication process based on the transmitted personal authentication data and a cipher text; And And receiving, by the smart chip medium, server authentication data generated from the web server and verifying the server authentication data to determine whether the web server is a corresponding server to which the user wants to access. Connection method.

Images