KR20200020440A - Joint certification service system using application programming interface - Google Patents

Abstract

Disclosed is a joint authentication service system using an application program interface. According to an embodiment of the present invention, the joint authentication service system using an application program interface includes: a first affiliate server supporting the execution of a first application program in a mobile communication device of a user and conducting an authentication procedure through the first application program to issue an electronic certificate to the mobile communication device of the user; a second affiliate server supporting the execution of a second application program in the mobile communication device of the user and supporting an additional authentication procedure for the electronic certificate through the first application program; and an n^th affiliate server supporting the execution of an n^th application program in the mobile communication device of the user and supporting an additional authentication procedure for the electronic certificate through the n^th application program. Therefore, the joint authentication service system is capable of enhancing the security of an official certificate or private certificates such as an affiliate certificate and improving the quality of a service using a corresponding electronic certificate.

Description

Joint certification service system using application program interface {JOINT CERTIFICATION SERVICE SYSTEM USING APPLICATION PROGRAMMING INTERFACE}

The present invention relates to a joint authentication service system of affiliates using an application program interface that can increase the security level of the digital certificate (or digital certificate) authentication service and improve the quality of service.

As the Internet becomes popular and popularized, the public is receiving various services through the Internet. Internet services include Internet banking services of financial institutions, product purchase through electronic commerce, and information providing services such as portal sites. Users who want to receive these services can register their personal information in the system that provides the service or use the service. You must fill in every time.

Personal information authentication and security services to prevent personal information leakage are very important to users because it is necessary to enter or register personal information on the website or application in order to receive the Internet service.

As a method for checking and authenticating personal information by increasing the security level, ID / Password login method for checking ID and password for each user, a method for authenticating a private or public certificate issued by an individual, and random (Random) One Time Password (OTP) authentication method for generating a single-use random number for authentication, and a method for recognizing a living body such as an iris, a fingerprint, or a face is used.

Among the various security authentication methods described above, a method of issuing an accredited certificate and using it as an authentication means has been recognized as a high security level and has been most commonly used.

However, in recent years, the credibility of the accredited certificate authentication method has been improved, such as the decision to abolish the accredited certificate authentication method and the abolition of the use of security cards and OTP. Accordingly, there is an additional demand for authentication methods that are excellent in security and can be conveniently used by Internet users.

Recently, since the distinction and discrimination between private and public certificates are abolished and the same legal effect is proposed, the use of various types of private certificates as the means of authentication has been more highlighted. However, although the private certificate was easy to issue and the method of authentication was convenient, there was a problem that the security level was recognized to be lowered because it was not authenticated through an accredited institution such as KFTC.

An object of the present invention is to provide a joint authentication service system using an application programming interface (API), which can improve service quality while providing better security.

Specifically, the present invention allows a user to be issued an electronic certificate such as a public certificate or an affiliate certificate (or a private certificate) through the application of any one of a plurality of affiliates, and the issued electronic certificate of other affiliates Its purpose is to provide a co-authentication service system using an API that can improve the security level by supporting additional authentication through an application program to raise the security level.

The joint authentication service system using an application program interface according to an embodiment of the present invention for achieving the above object supports the first application program to be executed in a user mobile communication device and performs an authentication process through the first application program. A first affiliate server for issuing an electronic certificate to a user mobile communication device, a second affiliate server for supporting a second application running on the user mobile communication device and supporting an additional authentication process of the electronic certificate through the first application; And an n-th affiliate server that supports the n-th application running on the user mobile communication device and supports an additional authentication process of the electronic certificate through the n-th application.

The first affiliate server may include a first login authenticator configured to allow first application accessors to preset identification information and passwords, and to log in via the identification information and password, issue a user's electronic certificate through the first application program, or Secondary program certification unit that performs the user's personal information and preset authentication process in accordance with the digital certificate additional authentication request, and when the user requests the issuance of the electronic certificate, it issues the digital certificate to the user according to the authentication result of the secondary program authentication unit. Includes affiliate certificate issuer.

In addition, the first affiliate server checks the CI information of the electronic certificate when the user requests the additional authentication of the electronic certificate, and issues an affiliate certificate certificate unit that authenticates the electronic certificate according to the authentication result of the secondary program authentication unit, and an affiliate certificate. And an authentication information transmission / reception unit configured to transmit and share the CI information according to the secondary electronic certificate issuance result and the additional authentication result of the affiliate certificate authentication unit to the second to nth application programs of the second to nth affiliate servers.

In the joint authentication service system using an application program interface according to an embodiment of the present invention having various technical features as described above, a user issues an electronic certificate such as an accredited certificate or a private certificate through an application program of one of a plurality of affiliates. It also allows you to receive additional electronic certificates from other affiliates' applications and increase their security level. Accordingly, the present invention can achieve an effect of improving the quality of service using an electronic certificate according to the security level while further improving the security of private certificates such as a public certificate or an affiliate certificate.

1 is a structural diagram showing in detail a joint authentication service system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a process of supporting joint authentication service of affiliate servers shown in FIG. 1 step by step.
FIG. 3 is a configuration diagram illustrating in detail the first affiliate server illustrated in FIG. 1.
4 is a diagram illustrating a background screen before connecting to an affiliated application program of the mobile communication device illustrated in FIG. 1.
FIG. 5 is a first affiliate application access screen of the mobile communication device shown in FIG. 4.
6 is an application program display screen for explaining a method for issuing a digital certificate through a first application program.
7 is another affiliated application selection screen of the user mobile communication device illustrated in FIG. 5.
8 is an application program display screen for explaining a method of authenticating a digital certificate through a second application program.
9 is an application program display screen for explaining a method of authenticating a digital certificate through a third application program.
FIG. 10 is a diagram illustrating a security level update method and an authority differential grant method according to an additional authentication procedure of an affiliate certificate.

The above objects, features, and advantages will be described in detail with reference to the accompanying drawings, and thus, those skilled in the art may easily implement the technical idea of the present invention. In describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description will be omitted.

Hereinafter, a joint authentication service system using an application programming interface (API) according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a structural diagram showing in detail a joint authentication service system according to an embodiment of the present invention. 2 is a diagram illustrating a process of supporting joint authentication service of affiliate servers shown in FIG. 1 step by step.

First, referring to FIG. 1, the joint authentication service system of the present invention includes at least one mobile communication device 10, a first affiliate server 100, a second affiliate server 200, and an n-th affiliate server 300. Include.

The mobile communication device 10 may be a personal computer, a notebook, a smartphone, a tablet mobile communication device, or the like. The mobile communication device 10 is wirelessly connected and connected to the first through n-th affiliate servers 100 through 300 through an internet network using Internet network communication such as LTE, 4G, and 5G.

The mobile communication device 10 may download and install the first to n-th application programs 100a to 300a from each of the first to n-th affiliate servers 100 to 300 according to user selection and control. In addition, at least one of the first to n-th application programs 100a to 300a may be executed according to a user selection. N is a natural number of 1 or more.

The first affiliate server 100 supports a source file and an executable file for the first application program 100a so that the first application program 100a can be installed and executed in the user's mobile communication device 10.

Referring to FIG. 2, when the first application program 100a is executed in the mobile communication device 10, the first affiliate server 100 confirms user personal information through the first application program 100a (ST2). The electronic certificate may be issued to the mobile communication device 10 by performing a preset authentication process (ST2).

When issuing an electronic certificate, the first affiliate server 100 may share personal information with a public institution server (for example, a CA certificate server) such as a financial settlement agency to perform an authentication process through a CA certificate server or the like (ST4). ).

If the user's mobile communication device 10 is equipped with an electronic certificate previously issued through other affiliated applications 200a and 300a, the user may further authenticate the electronic certificate to the first application 100a. You can request

After the user executes the first application 100a, the user may only log in by inputting user identification information (ID) and password (ST1) and receive an electronic certificate issued by the first affiliate server 100. It may also be (ST3). In addition, additional authentication for the electronic certificate of another affiliate server 200 and 300 issued in advance may be received (ST6).

The first affiliate server 100 may be an internet banking service support server of a financial institution, a credit card company or an Internet e-commerce server, a mobile communication company server, or the like.

When the first affiliate server 100 is an internet banking service support server of a financial institution, the first application 100a may be an internet banking program of the financial institution. Accordingly, the first affiliate server 100 logs in with the identification information (ID) and password through the first application (100a), or receives and logs in with an electronic certificate, or uses the electronic certificate of another affiliate when logging in. Can be supported. After logging in, it supports the Internet banking service according to the security level of the certificate.

When the first affiliate server 100 first issues the electronic certificate, the first affiliate server 100 sets the security level to the lowest level, for example, the third level. Then, the CI information about the first issued electronic certificate is transmitted to the second to n-th application programs 200a to 300a and the second to n-th affiliate servers 200 to 300 together with the security key. Here, the CI information is closed personal connection information (or connection number) for the user who has issued the corresponding electronic certificate.

Accordingly, when the second to n-th affiliate servers 200 to 300 receive the CI information on the user who has issued the electronic certificate for the first time, the security level is set to the lowest three level, and the corresponding electronic certificate is logged according to the CI information. Can be made available as information.

The second affiliate server 200 supports a source file and an executable file for the second application program 200a so that the second application program 200a can be installed and executed in the user mobile communication device 10.

When the second application program 200a is executed in the mobile communication device 10, the second affiliate server 200 confirms the user's personal information through the second application program 200a (ST2). In addition, the electronic certificate previously issued to the mobile communication device 10 may be additionally authenticated by performing a preset authentication process (ST5). If the mobile communication device 10 has not been issued an electronic certificate, it may be issued (ST2).

The second affiliate server 200 may be an internet e-commerce server or a card company server. When the second affiliate server 200 is a card company server, the second application program 200a may be a card company using program.

The second affiliate server 200 logs in with the identification information (ID) and password through the second application 200a, or is issued with an electronic certificate to log in, or adds an electronic certificate of another affiliate previously issued. It supports authentication and can be used as login information.

When the electronic certificate is not issued to the mobile communication device 10, the user may request issuance of the electronic certificate through the second application program 200a of the second affiliate server 200. Accordingly, the second affiliate server 200, through the second application 200a, the user's personal information, card information, credit card information (card number, CVC number, expiration date), card password, preset private key Checking at least one of the can issue the electronic certificate.

Like the first affiliate server 100, the second affiliate server 200 sets the security level to the lowest level when the electronic certificate is first issued. The CI information about the first issued electronic certificate is transmitted to the first and n-th affiliate servers 100 and 300 through the first and n-th application programs 100a and 300a, respectively. In this case, the first and n-th affiliate servers 100 and 300 set the security level of the electronic certificate according to the initially received CI information to the lowest 3 level, etc., and use the electronic certificate as login information according to the CI information. Support.

On the other hand, when the mobile communication device 10 is equipped with an electronic certificate previously issued through the application (100a, 300a) of the other affiliate, the user was previously issued through the login menu, etc. of the second application (200a) The registration of the digital certificate and further authentication may be requested (ST5). Accordingly, the second affiliate server 200 checks at least one of the user's personal information and credit card information (card number, CVC number, expiration date), card password, preset private key through the second application (200a) In this way, the previously issued digital certificate can be registered and further authenticated (ST6).

When the second affiliate server 200 additionally authenticates the electronic certificate first, the second affiliate server 200 sets the security level to an intermediate level, for example, a second level, which is increased by one step from the lowest three levels. Then, the CI information about the electronic certificate whose security level is increased to the intermediate level is transmitted to the first and n-th affiliate servers 100 and 300 through the first and n-th application programs 100a and 300a, respectively (ST7). When changing the security level of a digital certificate, the CI information may be transmitted by including a class change code.

Accordingly, the first and n-th affiliate servers 100 and 300 may also set the security level of the corresponding electronic certificate to the second level, which is increased by one step according to the cumulative result of CI information or the grade change code included in the CI information. Supports the application by granting additional permissions according to the level.

The n-th affiliate server 300 supports source files and executable files for the n-th application program 300a so that the n-th application program 300a may be installed and executed in the user mobile communication device 10.

When the n-th application 300a is executed in the mobile communication device 10, the n-th affiliate server 300 checks the user's personal information through the n-th application 300a and performs a preset authentication process to move. The electronic certificate previously issued to the communication device 10 may be further authenticated. If the mobile communication device 10 does not have an electronic certificate, the electronic certificate may be newly issued.

The n-th affiliate server 300 may be a communication company server supporting a mobile communication network. When the n-th affiliate server 300 is a communication company server, the n-th application program 300a may be a service provider service using program.

The n-th affiliate server 300 logs in with the identification information (ID) and the password through the n-th application 300a, or receives and logs in with an electronic certificate, or adds an electronic certificate of another affiliated company previously issued. Authenticate by using the login information.

In the state where the electronic certificate is not issued to the mobile communication device 10, the user may request issuance of the electronic certificate through the third application program 300a of the n-th affiliate server 300. Accordingly, the n-th affiliate server 300 checks and authenticates at least one of a user's personal information, a phone number, a one-time authentication number, and a preset private key through the n-th application 300a to issue an electronic certificate. Can be.

Like the first and second affiliate servers 100 and 200, the n-th affiliate server 300 sets the security level to the lowest level when the electronic certificate is first issued. The CI information of the electronic certificate is transmitted to the first and second affiliate servers 100 and 200 through the first and second application programs 100a and 200a, respectively.

On the other hand, if the mobile communication device 10 is equipped with a pre-issued electronic certificate, through the login menu of the n-th application (300a) registration of the previously issued electronic certificate, and additional authentication may be requested (ST8) ). Accordingly, the n-th affiliate server 300 may further authenticate the electronic certificate by checking at least one of a user's personal information, a phone number, a one-time authentication number, and a preset private key through the n-th application 300a. (ST9).

When the n-th affiliate server 300 additionally authenticates the electronic certificate secondly, the n-th affiliate server 300 sets the security level to the first level, which is the highest level, which is increased by one step from the middle level, two levels. In addition, the CI information about the electronic certificate whose security level is increased to the first grade is transmitted to the first and second affiliate servers 100 and 300 through the first and second application programs 100a and 200a, respectively (ST10). The n-th affiliate server 300 may also transmit the grade change code in the corresponding CI information when the security grade of the electronic certificate is changed.

Accordingly, the first and second affiliate servers 100 and 200 may also set the security level of the electronic certificate of the user to one level which is increased by one step according to the cumulative result of CI information or the grade change code included in the CI information. In addition, by granting additional privileges according to security level 1, the application can be used.

As described above, each of the first to n-th affiliate servers 100 to 300 is a login screen when a user selects and connects an application program that is operated by one of the first to n-th application programs 100a to 300a. Instruct the user to perform the login process through the electronic certificate through the menu of.

Thus, when a user requests issuance of an electronic certificate through a menu of a login screen, after checking whether the electronic certificate is issued by CI information, the user may issue an electronic certificate by checking personal information. The relevant CI information is shared with affiliate servers through other applications.

The lowest security level digital certificate or CI information first issued may be publicly used to log in to the first to nth applications 100a to 300a. In this case, the application service may be used with the authority according to the lowest security level. Is set to.

Subsequently, when additional authentication of the electronic certificate is requested through the login menu of any one application other than the application in which the electronic certificate is issued among the first to n-th applications 100a to 300a, the affiliate server is personalized through the application. Supports additional authentication by checking information and preset additional information.

The CI information of additional authenticated digital certificates is shared with other affiliate servers through other applications. The security level of the first additionally authenticated digital certificate is set to the same level on each affiliate server as the intermediate level (for example, the second level), so that the application service can be used with the authority according to the intermediate security level.

In addition, a second additional authentication may be requested for the electronic certificate through a login menu of any one application other than the application in which the electronic certificate is issued and primary authenticated among the first to nth applications 100a to 300a. . At this time, the affiliate server that has been requested for the second authentication checks the personal information and the preset additional information through the application and supports the second authentication. The CI information of the second additionally authenticated digital certificate is shared with other affiliate servers through other applications. The security level of the second additionally authenticated digital certificate is the highest level (for example, the first level), which is set identically to each affiliate server, so that the application service can be used with the authority according to the highest security level.

The first to n-th affiliate servers 100 to 300 are provided with the same detailed components and programs for issuing or additionally authenticating an electronic certificate. Thus, in order to describe the same components in detail, the configuration of the first affiliate server 100 will be described as an example.

FIG. 3 is a configuration diagram illustrating in detail the first affiliate server illustrated in FIG. 1.

The first affiliate server 100 illustrated in FIG. 3 includes an application support unit 111, a first login authentication unit 112, an affiliate certificate issuer 113, a secondary program authentication unit 114, and an affiliate certificate authentication unit. 115, an authentication information transmission and reception unit 116, a security level setting unit 117, a database 118, a differential authority applying unit 119, and an exclusion target setting unit 120.

The application program support unit 111 supports a source file and an executable file for the first application program 100a so that the first application program 100a can be installed and executed in the user's mobile communication device 10. In addition, after logging in, the Internet banking option and the bank transaction execution menu of the first application 100a may be performed to support the overall operation of the first application 100a.

The first login authentication unit 112 may access the first access to the first application 100a by setting the identification information (ID) and password in advance, and log in primarily through the user identification information (ID) and password. To help.

The secondary program authenticator 114 performs a user's personal information and a predetermined authentication process according to a user's electronic certificate issuance or a digital certificate additional authentication request through the first application program 100a.

When the secondary program authenticator 114 has an Internet banking service support characteristic, the secondary program authenticator 114 may perform an authentication process by confirming an account number, an account password, a security card number, etc. of a financial institution, as well as personal information of the user.

On the other hand, if the secondary program authentication unit 114 has the service support characteristics of the credit card company, the user's personal information, card usage information, credit card information (card number, CVC number, expiration date), card password, in advance At least one of the set private keys may be checked and authenticated.

In addition, when the secondary program authenticator 114 has a mobile carrier service characteristic, the secondary program authenticator 114 may check and authenticate at least one of a user's personal information, a phone number, a one-time authentication number, and a predetermined private key.

The affiliate certificate issuer 113 requests the electronic certificate and CI information to the user according to the authentication result of the second program authenticator 114 when the user requests for issuance of the electronic certificate through the login screen and menu of the first application 100a. And a private security key.

The affiliate certificate issuing unit 113 may allow electronic certificates, CI information, personal security keys, and the like to be issued not only through a financial institution account number or a financial transaction, but also according to an affiliate authentication result of a credit card company or a mobile communication company.

When authenticating card or authenticating mobile device information, at least one of card usage information, credit card information (card number, CVC number, expiration date), card password, telephone number, one-time authentication number, and preset private key Check it.

The partner certificate issuing unit 113 shares the personal information with a CA certificate server such as a financial settlement agency, performs an authentication process through a CA certificate server, etc., and then receives and delivers an electronic certificate, CI information, and a personal security key. It may be.

The affiliate certificate authentication unit 115 checks the CI information of the electronic certificate and requests the electronic program according to the authentication result of the secondary program authenticator 114 when the electronic certificate additional authentication request is made through the login screen menu of the first application 100a. Further authenticate and approve the certificate.

Specifically, the affiliate certificate authentication unit 115 confirms the CI information accumulation result or the grade change code of the CI information of the electronic certificate for which additional authentication is requested, and confirms the authentication result of the secondary program authentication unit 114 and adds it. Approve the certification.

In addition, the affiliate certificate authentication unit 115, when additional authentication approval, so that the corresponding CI information is further transmitted to the security level setting unit 117, or by additionally changing the grade change code of the corresponding CI information security level setting unit ( 117).

The authentication information transmission / reception unit 116 may share the CI information with the second to third application programs 200a so that the CI information according to the additional authentication result of the affiliate certificate authentication unit 115 may be shared by other affiliate servers 200 and 300. To 300a).

The security level setting unit 117 is a result of the electronic certificate issuance of the affiliate certificate issuer 113, the additional authentication result of the affiliate certificate certificate 115, and CI information received through other affiliate applications 200a to 300a. According to the analysis result, the security level for the digital certificate is set and changed.

In detail, the security level setting unit 117 previously classifies the security level into a low 3 level, a middle 2 level, and a highest 1 level, and sets the security level of the digital certificate to a low 1 level at the step of issuing the electronic certificate. If the lower first level digital certificate is additionally authenticated by one of the other affiliate servers, it is set to middle second level. If the middle second level digital certificate is additionally authenticated by another affiliate server, it is set to the highest first level.

The differential right application unit 119 differentially sets the use rights of the first application 100a according to the security level of the digital certificate, and supports the right to be executed differentially according to the security level of the digital certificate. do.

In detail, when the differential right application unit 119 has the Internet banking service support characteristic, the differential right may be set to set and change the account transfer limit and fee in the third level according to the security level of the electronic certificate. And in security level 2, differential authority can be set to set and change interest rates, interest rates, and inheritance scope. In addition, in the security level 1, it is possible to set and execute the differential authority in the order of whether to replace the security card / OTP and change the credit rating.

The database 118 stores and shares at least one of user's personal information, primary login information, secondary authentication information, electronic certificate, and CI information.

The exclusion target setting unit 120 supports a change in the security level of the electronic certificate when the user requests a change, fixation, non-application, or real time monitor exclusion of the electronic certificate security level.

In addition, the exclusion target setting unit 120 may also support to change the security level of the electronic certificate according to a preset management exclusion target condition.

That is, the exclusion target setting unit 120 may exclude the change in the security level of the electronic certificate for a preset period of management exclusion target conditions according to an accident occurrence, insurance rate reset, credit rating reset period, and the user's request. To help.

Through the components of the first to n-th affiliate server 100 to 300 as shown in FIG. 3, a series of processes for issuing or additionally authenticating an electronic certificate will be described in more detail as follows.

FIG. 4 is a diagram illustrating a background screen before accessing an affiliated application program of the mobile communication device illustrated in FIG. 1. 5 is a first application program access screen of the mobile communication device shown in FIG. 4.

As shown in FIG. 4, when the first to n-th application programs 100a to 300a operated by the first to n-th affiliate servers 100 to 300 are installed in the mobile communication device 10, the mobile communication device ( On the background screen of 10), connection icons of the first to nth application programs 100a to 300a are disposed.

Thus, if the user selects and connects any one icon of the first to n-th application programs 100a to 300a, the login access screen as shown in FIG. 5 may be displayed first.

For example, when the first application program 100a is an Internet banking service program, an input window for inputting personal information of a user, identification information (ID) and a password for each user may be displayed. In addition, an electronic certificate issuance request menu and an electronic certificate additional authentication request menu may be additionally displayed. Accordingly, the user may log in with ID and password, or may log in by issuing an electronic certificate. Alternatively, the user may request registration and additional authentication of a previously issued electronic certificate.

When the user requests the issuance of the electronic certificate or additional authentication for the previously issued electronic certificate, the personal information and additional information confirmation screen shown in FIG. 6 is displayed.

6 is an application program display screen for explaining a method for issuing a digital certificate through a first application program.

As shown in FIG. 6, when the user requests issuance of an electronic certificate or additional authentication for a previously issued electronic certificate, the secondary program authenticator 114 displays a personal information and additional information confirmation screen so that the user is displayed. Prompts you to enter your bank's account number, account password, and security card number.

Accordingly, the secondary program authenticator 114 performs a user's personal information and a predetermined authentication process according to the user's electronic certificate issue or the electronic certificate additional authentication request through the first application program 100a. The affiliate certificate issuing unit 113 may issue an electronic certificate, CI information, and a personal security key to the user according to the authentication result of the secondary program authenticator 114. On the other hand, in the case of the affiliate certificate authentication unit 115, the CI information of the electronic certificate may be checked according to the digital certificate additional authentication request, and the electronic certificate may be additionally authenticated and approved according to the authentication result of the secondary program authentication unit 114. have.

7 is another affiliated application selection screen of the user mobile communication device illustrated in FIG. 5.

As shown in FIG. 7, each of the first to n-th application programs 100a to 300a may be linked to an application program 100a to 300a of another affiliated company set in advance according to a pre-affiliated affiliate agreement. To provide.

In addition, each of the first to n-th application programs 100a to 300a is a screen for selecting an electronic certificate addition authentication window access menu included in applications 100a to 300a of other affiliated companies that are preset according to a pre-affiliated affiliate agreement. To provide.

Thus, after the user receives the electronic certificate through one application program, the user may directly access the authentication window of another application program to perform an additional authentication process for the electronic certificate. That is, the user may be connected to the second application program 200a linked through the first application program 100a to request additional authentication for the electronic certificate.

8 is an application program display screen for describing a method of authenticating an electronic certificate additionally through a second application program.

As shown in FIG. 8, when additional authentication for the electronic certificate is requested in connection with the second application 200a, the second affiliate server 200 may provide the user's personal information and credit card information (card number, CVC number). , Expiration date), card password, etc. are provided.

The second affiliate server 200 checks at least one of the user's personal information and credit card information (card number, CVC number, expiration date), card password, and preset private key according to the user's input, and issues in advance. You can further authenticate the digital certificate that was already present and verify the certificate.

Thereafter, after the user additionally authenticates the electronic certificate through any one application program, the user may access the authentication window of another application program through a selection window as shown in FIG. 7 to perform an additional authentication process for the electronic certificate. . That is, the user may be connected to the n-th application program 300a which is linked through the second application program 100b and may request additional authentication for the electronic certificate.

9 is an application program display screen for explaining an electronic certificate additional authentication method through a third affiliate application.

As shown in FIG. 9, when additional authentication for the electronic certificate is requested in connection with the third application 300a, the third affiliate server 300 includes a user's personal information, a phone number, and a one-time authentication number. It provides an input window for inputting a preset private key.

The third affiliate server 300 checks at least one of a user's personal information, a telephone number, a one-time authentication number, and a preset private key according to the input contents of the user, and further adds an electronic certificate previously issued. You can authenticate and verify your certification.

Thus, the security level setting unit 117 provided in each affiliate server 100 to 300 respectively, the electronic certificate issuance result, the additional authentication result of the affiliate certificate authentication unit 115, and other affiliate applications 200a to 300a. Set and change the security level of the digital certificate to a preset level according to the analysis result of the received CI information.

FIG. 10 is a diagram for describing a security level update method and an authority differential grant method according to an additional authentication procedure of an affiliate certificate.

Referring to FIG. 10, the differential permission application unit 119 provided in each affiliate server 100 to 300 respectively sets the usage rights of the corresponding applications 100a to 300a according to the security level of the electronic certificate. In addition, the authority can be executed differentially according to the security level of the digital certificate.

For example, the digital certificate is issued through one of the first to n-th applications 100a to 300a, and the first is additionally authenticated through another application, and through another application. Secondly, the digital certificate can be additionally authenticated. Through this process, up to the second additionally authenticated CI certificate CI information is shared with all affiliate servers through all affiliated applications. The security level of the second additionally authenticated digital certificate is the highest level and is set to be the same on each affiliate server so that the application service can be used with the authority according to the highest security level.

As described above, the joint authentication service system using the application program interface according to an embodiment of the present invention allows a user to be issued a public certificate or an affiliate certificate through an application of one of a plurality of affiliates. The certified certificate or affiliate certificate received can be further certified through other affiliate's applications to increase the security level.

Accordingly, the present invention can achieve an effect of improving the quality of service using a private certificate according to the security level while increasing the security of private certificates such as an affiliate certificate.

Although specific embodiments have been described above, the present invention is not limited to the above embodiments, and many modifications are made by those skilled in the art within the essential spirit of the present invention as set forth in the appended claims. Of course it is possible. Various other modifications should be considered to be within the scope of the present invention, without departing from the basic spirit of the invention.

10: user mobile communication device
100a: first application
100: first affiliate server
200a: second application
200: second affiliate server
300a: control application
300: nth affiliate server

Claims (8)

A first affiliate server for supporting a first application program to be executed in the user mobile communication device, and performing an authentication process through the first application program to issue an electronic certificate to the user mobile communication device;
A second affiliate server that supports executing a second application program on the user mobile communication device and supports an additional authentication process of the electronic certificate through the first application program; And
And an n-th affiliate server that supports an n-th application to be executed in the user mobile communication device and supports an additional authentication process of the electronic certificate through the n-th application.
Co-authentication service system using application program interface.
The method of claim 1,
The first affiliate server
A first login authenticator configured to allow the first application accessors to preset identification information and a password and to log in through the identification information and a password;
A second program authenticator configured to perform a user's personal information and a predetermined authentication process according to a user's electronic certificate issue or an electronic certificate additional authentication request through the first application program;
At the request of the user to issue the electronic certificate, the secondary program authentication unit includes an affiliate certificate issuer for issuing the electronic certificate to the user according to the authentication result,
Co-authentication service system using application program interface.
The method of claim 2,
The first affiliate server
An affiliate certificate certification unit configured to verify CI information of the electronic certificate and additionally authenticate the electronic certificate according to the authentication result of the secondary program authenticator when the user requests the electronic certificate additional authentication; And
The authentication information transmitting and receiving unit for transmitting and sharing the electronic certificate issuing result of the affiliate certificate issuing unit, and the CI information according to the additional authentication result of the affiliate certificate authentication unit to the second to n-th application program of the second to n-th affiliate server. Included,
Co-authentication service system using application program interface.
The method of claim 3, wherein
The first affiliate server
Security level for the electronic certificate according to the result of issuing the electronic certificate of the affiliated certificate issuing unit, the additional authentication result of the affiliated certificate authentication unit, the CI information received through the second to n-th application of the second to n-th affiliate server Security level setting unit for setting and changing to at least one to three grades; And
Further comprising a differential authority applying unit for differentially setting the use rights of the first application according to the security level for the electronic certificate, and to execute the authority differentially according to the security level for the electronic certificate. ,
Co-authentication service system using application program interface.
The method of claim 3, wherein
The secondary program authentication unit
Verify and authenticate the user's account number, account password, and security card number;
Verify and authenticate at least one of the user card information, credit card information (card number, CVC number, expiration date), card password, and preset private key, or
Check and authenticate at least one of a user's telephone number, one-time authentication number, and a preset private key,
The affiliate certificate issuing unit issues the electronic certificate, CI information, and personal security key to the user's mobile communication device according to the authentication result of the secondary program authentication unit.
Co-authentication service system using application program interface.
The method of claim 4, wherein
The security level setting unit
The security level is classified into low level 3, middle level 2 and highest level 1 in advance.
In the step of issuing the digital certificate, the security level of the electronic certificate is set to a low three level,
If the lower 3rd grade digital certificate is additionally authenticated by another affiliate server, the middle 3rd level is set.
If the intermediate second-grade digital certificate is further authenticated by another affiliate server, the highest level is set to one.
Co-authentication service system using application program interface.
The method of claim 4, wherein
The differential authority application unit
If you have the Internet banking service support, the right to differentiate according to the security level of the electronic certificate in the order of bank transfer limit, fee, interest rate, interest rate, inheritance scope, whether to replace the security card / OTP, and whether to change the credit rating To help get this set up and running,
Co-authentication service system using application program interface.
The method of claim 1,
Each of the first to nth applications
Provide a connection menu selection screen that can be linked to other pre-set affiliated applications according to a pre-affiliated affiliate agreement;
Providing a screen for selecting the electronic certificate additional authentication window access menu included in the application of the other affiliated company,
Co-authentication service system using application program interface.

Images