KR20180001346A - Method for log-in without exposing the password in master web site and computer readable recording medium - Google Patents

Abstract

Disclosed is a method of logging in a web server without exposing a password in a master web site. According to one embodiment of the present invention, a method of logging in a web server (referred to as an individual web server) without exposing a password in a master web site comprises the following steps of: providing a computer terminal with a screen capable of inputting identification information of an individual web server desired to be logged in (web site address or web site name) and user ID, and capable of requesting identification; receiving the identification information of an individual web server, the user ID, and an identification request from the computer terminal; providing the computer terminal with an ARS phone number; checking if an ARS having the ARS phone number receives a call from a phone having a phone number of a user having the user ID; and if it is checked that the ARS having the ARS phone number receives a call from the phone having the phone number of the user, allowing a master web server to provide the computer terminal with a log in screen of the individual web server.

Description

[0001] The present invention relates to a method for logging into a web server without exposing a password from a master web site, and a computer readable recording medium for the method.

The present invention relates to a method for logging into a web server without exposing a password at a master web site, and a computer readable recording medium therefor.

With the development of trust and computer technology, various types of online services are being provided through the Internet. Most online services allow only users who have been authenticated to use the service normally.

The authentication of the user is performed by a method in which a user sets authentication information such as an ID and a password and inputs his / her authentication information when using the online service.

As the use of the Internet is becoming commonplace, the number of websites to which each user subscribes is increasing, and in order to access a member-only service by a user, it is inconvenient to log in separately for each website. If the ID and password that are required to login to each site are wrong, there are inconveniences to memorize multiple IDs and passwords for each site, and if the website is hacked, the risk of leakage of personal information will follow.

In the prior art, it relies on installation of a public certificate or a security program in order to prevent information leakage due to such hacking or virus infection.

According to an embodiment of the present invention, a method for logging in to a web server without inputting a password on a login screen for preventing information leakage and a computer readable recording medium on which a program for the login is recorded can be provided.

According to one embodiment of the present invention, there is provided a method of logging in to a web server (also referred to as " individual web server ") without exposing a password at the master web site,

Providing a computer terminal with a screen capable of inputting identification information of an individual web server to be logged in, a web site address, a name of a web site, and a user ID and requesting authentication of the user; Receiving individual web server identification information, a user ID, and a personal authentication request from a computer terminal; Providing an ARS telephone number to the computer terminal; Confirming whether the ARS having the ARS telephone number has received a telephone call from a telephone having a telephone number of the user having the user ID; And when the ARS having the ARS telephone number is verified as having received a telephone call from a telephone number of the user's telephone number, the master web server providing the computer terminal with a login screen of the individual web server; A method for logging in to the web server without exposing a password at the master web site may be provided.

According to an embodiment of the present invention,

Selecting an ARS telephone number to be provided to the computer terminal upon receiving the identification information of the individual web server from the computer terminal, the web site address, the name of the web site, the user ID, and the identity authentication request; Confirming whether the ARS having the ARS telephone number has received a telephone call from a telephone having a telephone number of the user having the user ID; And

Providing a login screen of an individual web server to the computer terminal when it is determined that the ARS has received a telephone call from a telephone number of the user as a result of the checking step; A computer program for executing a method for logging in to a web server without exposing a password from a master web site.

According to an embodiment of the present invention, in order to perform authentication of a user, a password is input on a web site screen to log in by using a voice network through a telephone (e.g., a smart phone) Therefore, there is an advantage in that the security is superior to the conventional login procedure through the Internet network.

According to an embodiment of the present invention, even when a database of an individual web server in which user information of individual web sites is managed is hacked by using a phone (e.g., a smart phone) The password is not leaked.

BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 illustrates a system for illustrating a method for logging into a web server (referred to as a " separate web server ") without exposing a password at a master web site according to one or more embodiments of the present invention;
FIGS. 2 and 3 are diagrams for describing databases necessary to implement a method for logging in to a web server (referred to as 'individual web server') without exposing a password at a master web site according to various embodiments of the present invention ,
Figures 4-6 illustrate an exemplary flow diagram for illustrating a method of logging in to a web server (referred to as an " individual web server ") without exposing passwords from a master web site according to one or more embodiments of the present invention;
Figures 7 and 8 illustrate the operation of a program installed in a login system for logging into a web server (referred to as an " individual web server ") without exposing passwords from a master web site according to one or more embodiments of the present invention Respectively.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features, and advantages of the present invention will become more readily apparent from the following description of preferred embodiments with reference to the accompanying drawings. However, the present invention is not limited to the embodiments described herein but may be embodied in other forms. Rather, the embodiments disclosed herein are provided so that the disclosure can be thorough and complete, and will fully convey the scope of the invention to those skilled in the art.

The terms "transmission", "communication", "transmission", "reception", and the like, of a signal or information used herein are intended to encompass not only the direct transmission of signals or information from one component to another, And the like. In particular, "transmitting" or "transmitting" a signal or information to an element is indicative of the final destination of the signal or information and not a direct destination. This is the same for the 'reception' of a signal or information.

Although the terms first, second, etc. have been used in various embodiments of the present disclosure to describe various components, these components should not be limited by such terms. These terms have only been used to distinguish one component from another. The embodiments described and exemplified herein also include their complementary embodiments. Where an element, component, apparatus, or system is referred to as comprising a program or component, it is to be understood that the element, component, apparatus, or system, It should be understood to include the necessary hardware (e.g., memory, CPU, etc.) or other programs or software (e.g., drivers needed to drive an operating system or hardware).

It is also to be understood that the elements (or components) may be implemented in software, hardware, or any form of software and hardware, unless the context clearly dictates otherwise.

The terminology used herein is for the purpose of illustrating embodiments and is not intended to be limiting of the present invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification.

The terms "comprise" and / or "comprising" used in the specification do not exclude the presence or addition of one or more other elements.

Hereinafter, the present invention will be described in detail with reference to the drawings. In describing the specific embodiments below, various specific details have been set forth in order to explain the invention in greater detail and to assist in understanding it. However, it will be appreciated by those skilled in the art that the present invention may be understood by those skilled in the art without departing from such specific details. In some cases, it should be mentioned in advance that it is common knowledge in describing an invention that parts not significantly related to the invention are not described in order to avoid confusion in explaining the present invention.

In the following description of the embodiments, the same reference numerals are used for the same components for the sake of convenience.

FIG. 1 is a diagram illustrating a system for illustrating a method for logging into a web server (referred to as an 'individual web server') without exposing a password at a master web site according to one or more embodiments of the present invention.

A method for logging into a web server (referred to as an 'individual web server') without exposing a password from a master web site according to various embodiments of the present invention will be described with reference to FIG. 1, The functions of the elements will be described with reference to FIG. 1, and the components having different functions will be described in detail with reference to the drawings.

Referring to FIG. 1, a system (hereinafter referred to as a 'login service system') for logging into a web server (referred to as 'individual web server') without exposing a password from a master web site according to an embodiment of the present invention, A Web server 10, a computer terminal 20, a user telephone 30, an ARS server 40, a plurality of ARSs, a web server 50, and a service user information DB 70. These components are connected by a network. The network may be, for example, Wi-Fi, the Internet, a LAN (Local Area Network), a Wireless LAN (Local Area Network), a WAN Area Network), 3G, 4G, LTE, voice network or a combination of two or more thereof.

The master web server 10 may perform a role of interfacing with the web server 50 and providing a method of logging in to the web server without exposing the password from the master web site of the present invention.

In this login service system, the master web server 10 can input the identification information of the individual web server to which the master web server 10 intends to log-in, the web site address, the web site name, and the user ID, The computer terminal 20 receives the identification information and the user ID of the individual web server to be logged in from the user on the screen and receives the user authentication request. Identification information, a user ID, and a personal authentication request. When there is the individual web server identification information, the user ID, and the identity of the individual from the computer terminal 20, the master web server 10 acquires the ARS telephone number (hereinafter referred to as' ARS telephone number 'To the computer terminal 20.

The computer terminal 20 displays the telephone number provided from the master web server 10 on the screen.

Thereafter, the master web server 10 confirms whether the ARS having the ARS telephone number provided to the computer terminal 20 has received the telephone call from the user telephone 30, and if it is confirmed that the telephone call has been received, 20) to the web server.

More detailed functions of the master web server 10 will be described with reference to other drawings.

The plurality of ARSs are configured to include at least two ARSs assigned different telephone numbers. Although FIG. 1 shows three ARSs, this is an example, and more ARS can be implemented. In addition, three ARSs shown in FIG. 1 are assigned different telephone numbers, and in the present description, a reference numeral 41 is assigned to an ARS to which a telephone number 1111 is assigned for the purpose of description.

The ARS server 40 can arbitrarily select an ARS which is not currently used among a plurality of ARSs when there is a user's authentication request. According to one embodiment, the master web server 10 that has received the authentication request notifies the ARS server 40 that there is a request for authentication, and the ARS server 40, in response to the request, Selects an unused ARS (for example, ARS 41), and notifies the master Web server 10 of the telephone number of the selected ARS.

 The authentication parameter information means information that uniquely matches the authentication request of the user. If the ARS 41 telephone number is selected as authentication mediation information, the ARS 41 telephone number may be used as an access number in the ARS connection described later. For convenience of description, the description of the present specification assumes that the telephone number of the ARS 41 is '1111' as shown in FIG.

The computer terminal 20 includes a display for providing a screen for inputting a user ID for requesting authentication such as a PC (Personal Computer), a smart phone, a smart watch, a tablet PC, a PDA phone, . Here, a smartphone refers to a mobile phone that provides advanced functions in addition to a function that is the same as a PC, a smart watch refers to an embedded system wristwatch equipped with functions that are more advanced than a general watch, And a PDA phone means a personal digital assistant (PDA) (Personal Digital Assistant) equipped with a mobile communication module.

The user telephone 30 is a telephone used for authentication, and includes a call function for using the ARS. The user telephone 30 in the present specification means a wired or wireless telephone having a telephone number of the user having the ID of the master web server 10 or the ID of the first web server. The wireless telephone may be, for example, a smart phone, but the invention is not limited thereto.

The web server 50 is capable of providing a web service and, when receiving a web page request from a user, provides a web page in response to the request, and is configured to include at least two web pages.

In this specification, the web server 50 is identified by the name or URL of the individual web server, and the web server 50 is sometimes referred to collectively as 'individual web servers'.

Although two individual web servers are shown in Fig. 1, this is exemplary and can be implemented by more than one individual web server. For example, the first web server 50a may be a server having a URL such as www.naver.com (hereinafter referred to as a "Naver server"), a second web server 50b having a URL such as www.daum.net Server (hereinafter referred to as a 'next server'), and information on a user using each individual web server can be stored and managed in each individual web site user DB. As used herein, the term " management " includes deletion, update, change, and addition.

In this specification, 'Web server 50' is a first web server 50a (a Naver server) which is one of 'individual web servers' for convenience of explanation, and a first web server 50a (a Naver server) Information on the user to be used is stored and managed in the first web server user DB 51. [

In the user information DB 70, 170 and 270, a user telephone number, a master website ID corresponding to the user telephone number, an ID and a password corresponding to at least one individual web server corresponding to the user telephone number, And can be managed by the master web server 10.

The login system described with reference to FIG. 1 may be implemented in various ways. Hereinafter, a login method applicable to the login system described with reference to FIG. 1 will be described in detail with reference to other drawings.

Figures 2 and 3 are diagrams for describing the databases required to implement a method for logging in to a web server (referred to as a " separate web server ") without exposing a password at a master web site according to various embodiments of the present invention .

The databases will be described in detail in each of the following embodiments.

1st Example

4 is an exemplary flowchart illustrating a method of logging in to a web server without exposing a password at a master web site according to the first embodiment of the present invention. The method can be applied to the login system described with reference to Fig. 1, for example.

Hereinafter, it is assumed that the present method is applied to the login system of FIG. 1, and the 'Web server 50' includes a first web server 50a (a Naver server), which is one of 'individual web servers' , Information on a user using the first web server 50a (a neighbors server) is stored and managed in the first web server user DB 51. [

4, in step S110, the master web server 10 can input the identification information of the individual web server to which the user wants to log-in, the address of the web site or the name of the web site, and the user ID, And provides the computer terminal 20 with a screen on which a request can be made.

Here, the user ID is input in order to utilize the method of logging in to the web server without exposing the password from the master web site of the present invention,

 I) ID of the master web server 10 registered when subscribing to the master web server 10 ii) ID of the first web server registered when subscribing to the first web server 50a (Naver server) iii) The user can input using any one of the telephone numbers of the registered users when joining the mobile terminal 10.

 For example, the user can access, via the computer terminal 20,

I) Enter the name 'Naver' or URL (www.naver.com) of the first web server as the identification information of the individual web server,

Ii) The ID of the master Web server 10 (for example, jjy@baro.com) or the ID of the first Web server 50a (Naver server) (for example, jjy0301) (For example, 010-7676-7676) of the user telephone 30 to be used for the user authentication request, and can request the user authentication.

The master web server 10 receives the individual web server identification information, the user ID, and the personal authentication request that the user inputs via the computer terminal 20 from the computer terminal 20 (step S120).

When the authentication request is received in step S120, the master web server 10 selects the ARS telephone number and provides it to the computer terminal 20 (step S130). Alternatively, if the authentication request is received in step S120, the master web server 10 receives the ARS telephone number selected by the ARS server 40 (step S121) and provides the ARS telephone number to the computer terminal 20 .

Whether or not the ARS server 40 has a request for authentication of the user is determined based on whether the authentication request is received from the master Web server 10 when the computer terminal 20 transmits the authentication request to the master Web server 10 Can be informed.

The ARS 41 displayed on the screen of the computer terminal 20 by using the user telephone 30 displays the telephone number 1111 of the ARS 41 provided by the computer terminal 20 in step S130. And dials the telephone number '1111' (step S131).

Then, the master Web server 10 confirms whether the ARS 41 has received a telephone call from the user telephone 30 (step S140).

For example, the ARS server 40 notifies the master web server 10 of the fact that the ARS 41 has received a telephone call from the user telephone 30, The master web server 10 performs step S150 if it receives the call from the telephone 30, and does not perform step S150 if it does not receive the call.

That is, when the ARS server 40 receives a notification from the ARS server 40 that the ARS 41 has received a telephone call from the ARS server 40, the master web server 10 displays the screen (the first web server 50a) Quot;) (step S150).

For example, when the ARS server 40 receives a notification from the ARS server 40 that the ARS 41 has received a telephone call from the user telephone 30, the master Web server 10 refers to the user information DB 170 and 270, (Password) and a user ID to the first web server 50a to request a login screen. Upon receiving the login screen from the first web server 50a, And provides it to the terminal 20.

Here, the user information DBs 170 and 270 will be described later with reference to FIG. 2 and FIG.

As described above, according to the present embodiment, since the user does not directly input the Naver password to login to the first Web server 50a (Naver server), only the user ID is input without exposing the password, (Naver server) from the first Web server 50a (Naver server).

Second Example

5 is an exemplary flowchart illustrating a method of logging in to a web server without exposing a password at a master web site according to a second embodiment of the present invention.

The method can be applied to the login system described with reference to Fig. 1, for example.

Hereinafter, it is assumed that the present method is applied to the login system of FIG. 1, and the 'Web server 50' includes a first web server 50a (a Naver server), which is one of 'individual web servers' , Information on a user using the first web server 50a (a neighbors server) is stored and managed in the first web server user DB 51. [

The second embodiment of the present invention is similar to the first embodiment except that the step S240 corresponding to the step S140 in the first embodiment, that is, when the master web server 10 receives the telephone number of the user whose user ID has the ARS with the ARS telephone number To the step of confirming whether or not a telephone call is received from the user telephone 30 having the same telephone number.

In the step S250 corresponding to the step S150 of the first embodiment, the master web server 10 provides the computer terminal 20 with the login screen of the first web server 50a (the naver server) Since the second embodiment differs from the first embodiment in that steps S241 and S243 are further included between step S240 and step S250 in the second embodiment, I will explain.

5, in the present embodiment, when the master web server 10 confirms that the ARS 40 having the ARS telephone number has received a telephone call from the telephone-user telephone 30 having the user's telephone number, In step S241, the master Web server 10 sends a first web server 50a (a neighbors server) to the first web server 50a (the neighbors server) And transmits the ID and the password of the user.

In step S243, the first web server 50a (the neighbors server) acquires the first web server 50a (the neighbber server) ID received from the master web server 10 and the first web server 50a Server) password is correct to be able to log in to the first web server 50a (the neighbors server), a screen logged in to the first web server 50a (the neighbors server) is provided to the master web server 10, The web server 10 receives a screen logged into the first web server 50a (a neighbors server).

In step S250, the master web server 10 provides the computer terminal 20 with a screen that is logged in to the first web server 50a (a neighbors server) provided from the first web server 50a (a neighbors server) do.

That is, since the user does not directly input the password of the first web server 50a (Naver server) in order to log in to the first web server 50a (Naver server), only the user ID is inputted without exposing the password, The web server 10 can be provided with a screen that is logged in to the first web server 50a (the neighbors server).

In one embodiment of the invention, the user may enter the ID of the master website 10 (e.g., jjy@baro.com) as the user ID.

In the present embodiment, the master web server 10 further includes a step of storing and managing the user information DB 170 including the master website ID, the user's telephone number, the individual website ID, and the individual website password Management " means to include deletion, update, change, and addition. Here, the individual websites may be configured to include a plurality of individual websites. In the case where a plurality of individual web sites are configured, they may include both the ID and the password corresponding to each individual web site.

2, the user information DB 170 includes an ID (jjy@baro.com) of the master web site 10, a user's telephone number 010-7676-7676, an individual website (e.g., , Next, Google), respectively.

5), the master web server 10 refers to the user information DB 170 and sends an ARS 41 having an ARS telephone number (e.g., 1111) It is checked whether or not the telephone is received from the user telephone 30 within the validity period of the authentication.

According to this embodiment, the first web server 50a (Naver server) ID transmitted from the master web server 10 to the first web server 50a (Naver server) in Step S241 The first web server 50a (Naver server) password is obtained by referring to the user information DB 170. The first web server 50a (Naver server) password is obtained by referring to the user information DB 170, The web server 50a (Naver server) ID (jjy0301) and the first web server 50a (Naver server) password 11111 ##.

In another embodiment of the present invention, the user may enter the ID (e.g., jjy0301) of the individual website as the user ID.

In this embodiment, the master web server 10 may further include a step of storing and managing the user information DB 270 including the telephone number of the user, the individual website ID, and the individual website password, Means including deletion, update, alteration, and addition. Here, the individual websites may be configured to include a plurality of individual websites. In the case where a plurality of individual web sites are configured, they may include both the ID and the password corresponding to each individual web site.

3, the user information DB 270 may include an ID and a password corresponding to a user's telephone number (010-7676-7676), an individual website (e.g., Naver, Next, Google) have.

5), the master Web server 10 refers to the user information DB 270 and the ARS 41 calls the user telephone 30 within the authentication validity time (step S 240) Is received or not.

According to this embodiment, the first web server 50a (Naver server) ID transmitted from the master web server 10 to the first web server 50a (Naver server) in Step S241 The first web server 50a (Naver server) password is found by referring to the user information DB 270. The first web server 50a (Naver server) password is the first web server 50a corresponding to the first web site ID (Naver server) ID (jjy0301) and the first web server 50a (Naver server) password 11111 ##.

In the second embodiment, the master web server 10 further includes a step of storing and managing the user information DBs 170 and 270. However, in the above-described first embodiment, May further include a step of storing and managing the user information DB.

Third Example

6 is an exemplary flowchart illustrating a method of logging in to a web server without exposing a password in a master web site according to a third embodiment of the present invention.

The method can be applied to the login system described with reference to Fig. 1, for example.

Hereinafter, it is assumed that the present method is applied to the login system of FIG. 1, and the 'Web server 50' includes a first web server 50a (a Naver server), which is one of 'individual web servers' , Information on a user using the first web server 50a (a neighbors server) is stored and managed in the first web server user DB 51. [

6, a third embodiment of the present invention includes steps S341 to S345 between steps S340 and S350 corresponding to steps S140, S150 of the first embodiment, Which is different from the first embodiment. Hereinafter, differences will be mainly described.

If the master Web server 10 confirms that the ARS 41 has received a telephone call from the user telephone 30 in step S340 of the present embodiment, then in step S341 the ARS 41 transmits the telephone number of the user telephone 30 ) To voice input.

The password means a password corresponding to the user ID input by the user via the computer terminal 20, and may be the password of the master web site or the password of the first web server 50a (Naver server). For example, when the user inputs the ID of the master web site as the user ID, the user must input the password of the master web site. When the user inputs the ID of the first web server 50a (the neighbors) as the user ID The password of the first web server 50a (Naver server) must be input.

When the user inputs a password using the user telephone 30 in step S343, the master web server 10 confirms whether or not the password inputted by the user is correct in step S345.

Here, the master web server 10 confirms whether the password is correct by: i) checking whether the password corresponding to the user ID input by the user via the computer terminal 20 has been input, ii) And confirming whether or not the password matches the password stored in the information DB.

As will be described later, the password may be stored in the temporary DBs 180 and 280. The master Web server 10 refers to the temporary DBs 180 and 280 to determine whether or not the password matches the password input by the user, You can check whether it is correct or not.

If the master web server 10 confirms that the password input from the user telephone 30 is correct, then in step S350, the master web server 10 accesses the first web server 50a (the naver server) And provides the computer terminal 20 with a screen logged in.

Meanwhile, although the third embodiment of FIG. 6 is implemented by including the steps S341 through S345 in the first embodiment, the steps S341 through S345 are also performed in the second embodiment described above But it can also be implemented by including more.

Fourth Example

The fourth embodiment can be applied, for example, to the login system described with reference to Fig. Hereinafter, the method will be described assuming that the method is applied to the login system of FIG.

In the fourth embodiment of the present invention, steps corresponding to step S120, step S121 and step S140 of the first embodiment are performed in steps S420, S421, and S440 for the purpose of explanation. Is different from the first embodiment in that the master web server 10 further includes a step of generating temporary DBs 180 and 280 between step S410 and step S421. I will explain it mainly.

In this embodiment, when the master web server 10 receives the user ID and the authentication request from the computer terminal 20 in step S420, the master web server 10 sends the authentication request to the computer terminal 20 before performing step S421. (180, 280) using the user ID received from the temporary database (20).

According to the present embodiment, the provisional DBs 180 and 280 generated by the master web server 10 include, as temporary information, a master website ID, at least one of individual website IDs, a user's phone number, And the temporary information may be acquired from the user information corresponding to the user ID received from the computer terminal 20 in the user information DB 170 or 270. [

The authentication valid time can be set to 30 seconds, 60 seconds, and so on, so that the authentication operation is not performed if the ARS 41 does not receive a telephone call from the user telephone 30 for a predetermined authentication valid time.

According to the present embodiment, in step S440, the master web server 10 can confirm whether or not the ARS 41 has received a telephone call from the user telephone 30. [

Here, the confirmation of whether or not the master web server 10 has received the telephone call from the user telephone 30 is made by referring to the temporary DBs 180 and 280 generated in the present embodiment so that the ARS 41 has the user telephone number It can be implemented to check whether or not the telephone 30 has received a telephone call within the authentication validity time.

In the meantime, although the fourth embodiment is implemented by a method including the step of generating temporary DBs 180 and 280 in the first embodiment, in other embodiments described above (for example, the second and third embodiments For example, it may be possible to implement a method of further including a step of generating temporary DBs 180 and 280. [

Hereinafter, with reference to FIG. 7 and FIG. 8, a program for executing a method for logging in to a web server without exposing a password from a master web site will be described, and it is assumed that such a program is installed in the login system described with reference to FIG. 1 Let's assume and explain.

7 is a diagram for explaining operations of a program installed in a login system according to an embodiment of the present invention.

Referring to FIG. 7, a program installed in a login system according to an exemplary embodiment of the present invention, which executes a method of logging in to a web server without exposing a password at a master website, is stored in a computer-readable recording medium.

The computer-readable recording medium may include program commands, data files, data structures, etc., alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as a hard disk, a floppy disk and a magnetic tape, optical media such as CD-ROM and DVD, a floptical disk, And hardware devices that are specially configured to store and execute program instructions such as magnetic-optical media, ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like.

7, a method for logging into a web server without exposing a password from a master web site executed in a login system by a program according to an embodiment of the present invention includes:

To the computer (master web server 10 and / or ARS server 40)

Upon receiving the identification information of the individual web server 50 from the computer terminal 20, the website address or the name of the website, the user ID, and the identity authentication request, the ARS telephone number to be provided to the computer terminal 20 is selected Step S510: It is checked in step S520 whether the ARS 41 having the ARS telephone number selected in step S510 has received a telephone call from the telephone 30 (hereinafter referred to as "user telephone") having the telephone number of the user having the user ID, ; When the ARS 41 having the ARS telephone number selected in step S510 determines that the telephone is received from the user telephone 30 as a result of performing the checking step Providing a login screen of the web server (S530); . ≪ / RTI >

For example, a method for logging in to a web server without exposing a password at a master web site by a program according to an embodiment of the present invention includes steps S510, S520, and S530 both of which are performed by the master web server 10 As shown in FIG.

As another example, a method for logging into a web server without exposing a password at a master web site by a program according to an embodiment of the present invention includes steps S510 and S530 executed at the master web server 10, May be implemented to execute in the ARS server 40. [

As another example, a method for logging into a web server without exposing a password at a master web site by means of a program according to an embodiment of the present invention is characterized in that step S510 is executed in the ARS server 40, steps S520 and S530 May be implemented to run on the master web server 10.

As another example, a method for logging in to a web server without exposing a password from a master web site by a program according to an embodiment of the present invention includes steps S510 to S510 executed in the master web server 10, (S40), and S530 may be implemented to be executed in the web server 50. [

In the above-described embodiments, when the master Web server 10 executes step S520, the operation of the master Web server 10 is the same as the operation of the master Web server 10 in the above- As described in more detail below.

According to another embodiment of the present invention, a method for logging into a web server without exposing a password from a master web site by a program according to an embodiment of the present invention includes: , The master web server 10 provides the ARS telephone number selected in step S510 to the computer terminal 20 between step S510 and step S520 upon receiving the user ID of the user S513); As shown in FIG.

Here, the step S513 may be performed by the master web server 10, which is described in more detail by the operation of the master web server 10 in the first embodiment described above, and therefore it should be referred to.

According to another embodiment of the present invention, a method for logging into a web server without exposing a password at a master web site by a program according to an embodiment of the present invention includes: after step S520, The master web server 10 transmits individual web site IDs and individual website passwords that can be connected to the respective web servers to the respective web servers 10 when it is confirmed that the mobile phone 41 has received a telephone call from the user telephone 30, Receiving a login screen from an individual web server (S521); As shown in FIG.

In this embodiment, the step S530 of providing the logged-in screen of the individual web server includes:

And the master web server 10 provides the logged-in screen received from the individual web server to the computer terminal.

Although not shown, according to another embodiment of the present invention, a method for logging in to a web server without exposing a password from a master web site by a program according to an embodiment of the present invention includes the steps of: Storing and managing a user information DB 170 including a website ID, a user's phone number, an individual website ID, and an individual website password; As shown in FIG.

In the present embodiment, the user ID is the master website ID, and the individual website ID and the individual website password transmitted by the master web server 10 to the individual web server refer to the user information DB 170 do.

The step S520 of checking in this embodiment is a step in which the master web server 10 refers to the user information DB 170 and the ARS 41 calls the user telephone 30 To determine whether or not it has been received.

Although not shown, according to another embodiment of the present invention, a method of logging in to a web server without exposing a password from the master web site is a method in which the master web server 10 sends the user's telephone number, Storing and managing a user information DB 270 including a website password; As shown in FIG.

In the present embodiment, the user ID is an individual web site ID, and the individual web site ID and the individual web site password transmitted by the master web server 10 to the individual web server refer to the user information DB 270 do.

The step of confirming the step S520 in the present embodiment is a step in which the ARS server 41 refers to the user information DB 270 from the master web server 10 or the ARS server 40 Means a step of confirming whether or not the telephone has been received within the authentication valid time.

According to another embodiment of the present invention, a method for logging into a web server without exposing a password from a master web site by means of a program according to an embodiment of the present invention includes receiving a user ID and a user authentication request from the computer terminal 20 Upon receipt, a step (S511) of creating temporary DBs 180, 280; And the temporary DB 180, 280 includes at least one of a master website ID and an individual website ID, a user's phone number, an individual website password, and an authentication validity time.

In this embodiment, the step S520 of confirming whether or not the ARS 41 has received a telephone call from the user telephone 30,

The ARS 41 may be configured to check whether or not the ARS 41 has received a telephone call from the user telephone 30 within the authentication valid time by referring to the temporary DBs 180 and 280 generated in step S511.

The embodiments described with reference to FIG. 7 are described in detail by the operations of the master Web server 10 and the ARS server 40 in the first, second, and fourth embodiments described above. Please.

8 is a diagram for explaining the operation of a program installed in the login system according to another embodiment of the present invention.

Referring to FIG. 8, a program installed in a login system according to another embodiment of the present invention, which executes a method of logging in a web server without exposing a password at a master web site, is stored in a computer-readable recording medium.

The steps S610 to S620 of the embodiment described later with reference to Fig. 8 are the same as the steps S510 to S520 described above with reference to Fig. 7, that is, when the master web server 10 receives the ARS 41, Is the same as the step of confirming whether or not the telephone is received from the user telephone 30, and the steps thereafter are different. Therefore, the following description will focus on the differences.

According to an embodiment of the present invention, a method of logging in to a web server without exposing a password from a master web site by a program according to an embodiment of the present invention is a method in which, when a password is input from the user telephone 30, Confirming whether the password input from the telephone 30 is correct (S621); As shown in FIG.

For example, if the master web server 10 determines in step S620 that the ARS 41 has received a telephone call from the user telephone 30, the ARS 41 sends a password to the user telephone 30 Guide the user to voice. Here, the password means a password corresponding to the user ID input by the user via the computer terminal 20. When the password is inputted by using the user telephone 30, the master web server 10 in step S621 Check whether the password entered by the user is correct.

Here, the master web server 10 confirms whether the password is correct by: i) checking whether the password corresponding to the user ID input by the user via the computer terminal 20 is input; ii) And checking whether the password matches the password stored in the information DB (70, 170, 270).

Also, it can be performed by the master web server 10 or the ARS server 40 to confirm whether or not the password is right here.

The password may be stored in the temporary DBs 180 and 280. The master Web server 10 or the ARS server 40 refers to the temporary DBs 180 and 280 and determines whether the password matches the password input by the user It is possible to confirm whether or not the password is correct.

In this embodiment, step S630 of providing a login screen to the individual web server is performed when the ARS 41 receives a telephone call from the user telephone 30 and confirms that the password input from the user telephone 30 is correct, The master web server 10 may be implemented to provide the computer terminal 20 with a logged-in screen of the individual web server.

The embodiments described with reference to FIG. 8 are described in detail by the operation of the master web server 10 in the third embodiment described above, and therefore, it should be referred to.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, Various modifications and variations are possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined by equivalents to the scope of the appended claims, as well as the appended claims.

10: Master Web Server
20: Computer terminal
30: User telephone
40: ARS server
50: first web server
60: Internet network
70: User information DB

Claims (16)

In a method for logging into a web server (referred to as " individual web server ") without exposing passwords from the master web site,
Providing a computer terminal with a screen capable of inputting identification information of an individual web server to be logged in, a web site address, a name of a web site, and a user ID and requesting authentication of the user;
Receiving the individual web server identification information, the user ID, and the identity authentication request from the computer terminal;
Providing an ARS telephone number to the computer terminal;
Confirming whether the ARS with the ARS telephone number has received a call from a telephone having a telephone number of the user having the user ID; And
Providing a login screen of the individual web server to the computer terminal when the ARS having the ARS telephone number is confirmed to have received a telephone call from a telephone having the telephone number of the user; To log into the web server without exposing the password from the master web site. The method of claim 1, wherein
If the ARS with the ARS telephone number is verified to have received a call from a telephone with the telephone number of the user, the master web server sends to the respective web server an individual web site ID that can access the individual web server, Transmitting a site password and receiving a login screen from the individual web server; Further comprising:
Wherein providing the logged-in screens of the individual web servers comprises:
Wherein the master web server is providing the login screen received from the individual web server to the computer terminal without logging the password in the master web site. The method according to claim 2, wherein
The master web server storing and managing a user information DB including a master web site ID, a phone number of a user, an individual web site ID, and an individual web site password; Further comprising:
The user ID is a master website ID,
Wherein the individual web site ID and the individual web site password transmitted to the individual web server by the master web server are found by referring to the user information DB without logging the password in the master web site. The method according to claim 2, wherein
The master web server storing and managing a user information DB including a user's telephone number, an individual website ID, and an individual website password; Further comprising:
The user ID is an individual website ID,
Wherein the individual web site ID and the individual web site password transmitted to the individual web server by the master web server are found by referring to the user information DB without logging the password in the master web site. 5. The method according to any one of claims 3 to 4,
Wherein the verifying step comprises:
Referring to the user information DB, checking whether the ARS having the ARS telephone number has received a telephone call from the telephone having the user's telephone number within the authentication valid time, How to log in to the web server without. The method according to claim 1,
If the ARS having the ARS telephone number receives a call from a telephone having the telephone number of the user, voice instruction to the telephone having the telephone number of the user to input a password;
Confirming whether or not the password input from the telephone having the telephone number of the user is correct; Further comprising:
Wherein the step of providing the login screen of the individual web server comprises the steps of: when the ARS receives a call from a telephone having the telephone number of the user, and if the password input from the telephone is correct, Wherein the step of providing the login screen to the computer terminal comprises the step of providing a login screen of the master web site to the computer terminal. The method according to claim 1,
Generating a temporary DB upon receiving the user ID and the identity authentication request from the computer terminal; Further comprising:
The temporary DB
A method for logging into a web server without exposing a password from a master website, the master web site comprising at least one of a master web site identity and an individual web site identity, a user's telephone number, an individual website password, and an authentication validity time. 8. The method of claim 7,
Wherein the verifying step comprises:
Referring to the provisional DB, checking whether the ARS with the ARS telephone number has received a call from the telephone having the telephone number of the user within the authentication validity time, at the master website, How to log in to the web server without. On the computer,
Selecting an ARS telephone number to be provided to the computer terminal upon receiving the identification information of the individual web server from the computer terminal, the web site address, the name of the web site, the user ID, and the identity authentication request;
Confirming whether the ARS with the ARS telephone number has received a call from a telephone having a telephone number of the user having the user ID; And
Providing a login screen of the individual web server to the computer terminal when the master web server determines that the ARS has received a telephone call from the telephone having the telephone number of the user as a result of the checking step; A method of logging in to a web server without exposing a password on a master web site, comprising the steps of: 10. The method of claim 9,
If the ARS with the ARS telephone number is verified to have received a call from a telephone with the telephone number of the user, the master web server sends to the individual web server an individual web site ID that can access the web server, Transmitting a password and receiving a login screen from the individual web server; Further comprising:
Wherein providing the logged-in screens of the individual web servers comprises:
Wherein the master web server is a step of providing a login screen received from the individual web server to the computer terminal, the computer program being executable to execute a method of logging into a web server without exposing a password Recording medium. 11. The method of claim 10,
The master web server storing and managing a user information DB including a master web site ID, a phone number of a user, an individual web site ID, and an individual web site password; Further comprising:
The user ID is a master website ID,
Wherein the individual web site ID and the individual website password transmitted by the master web server to the individual web server are found by referring to the user information DB by executing a computer program for executing a method of logging in to the web server without exposing a password A computer-readable recording medium having recorded thereon a computer program. 11. The method of claim 10,
The master web server storing and managing a user information DB including a user's telephone number, an individual website ID, and an individual website password; Further comprising:
The user ID is an individual website ID,
The individual web site ID and the individual web site password transmitted to the individual web server by the master web server are found by referring to the user information DB, and a computer program for executing a method of logging into the web server without exposing a password Recorded on a computer readable recording medium. 13. The method according to any one of claims 11 to 12,
Wherein the verifying step comprises:
Referring to the user information DB, checking whether the ARS having the ARS telephone number has received a telephone call from the telephone number of the user's telephone number within the validity period of the authentication, without exposing the password to the web server A computer-readable recording medium having recorded thereon a computer program for executing a method of logging in. 10. The method of claim 9,
Confirming whether the password input from the telephone having the telephone number of the user is correct if the ARS having the ARS telephone number has received the password from the telephone having the telephone number of the user; Further comprising:
Wherein providing the logged-in screen of the individual web server comprises: if the ARS receives a call from a telephone having the user's telephone number and if the password entered from the telephone is correct, And a step of providing a login screen of the server to the computer terminal. A computer-readable recording medium having recorded thereon a computer program for executing a method for logging into a web server without exposing a password. 10. The method of claim 9,
Generating a temporary DB upon receiving the user ID and the identity authentication request from the computer terminal; Further comprising:
The temporary DB
A computer program for executing a method for logging in to a web server without exposing a password, the password including at least one of a master web site ID and an individual web site ID, a user's telephone number, an individual website password, Recorded on a computer readable recording medium. 16. The method of claim 15,
Wherein the verifying step comprises:
Referring to the temporary DB, checking whether the ARS having the ARS telephone number has received a telephone call within the authentication validity time from a telephone having the telephone number of the user, without exposing the password to the web server A computer-readable recording medium having recorded thereon a computer program for executing a method of logging in.

Images