KR20000024217A - A authentication system for electronic commerce in data center and an offer method of authentication service - Google Patents

Abstract

The present invention relates to an electronic transaction authentication system of a data center. The authentication system includes an authentication system distributed in a data center unit including at least one electronic transaction related company and an electronic transaction authentication authority. Electronic transaction certification authority server for issuing a certificate; And establish a secure channel with the purchaser terminal device based on the issued server certificate and the session key generated by the purchaser terminal device, and apply for electronic transaction authentication service registration with the purchaser's consent in the process of customer registration and renewal application of the buyer. The electronic trading certification server server generates a buyer's private key for digital signature and public key pair according to the buyer's request, encrypts the buyer's private key for electronic signature, and transmits the certificate to the buyer. It is characterized in that the buyer can store the certificate in the terminal device by sending a password for issuing and storing and decrypting the encrypted buyer's secret key for the electronic signature to the e-mail address specified by the buyer at the time of registration.

Description

A authentication system for electronic commerce in data center and an offer method of authentication service}

The present invention relates to an electronic transaction system, and more particularly, to provide the basic functions of authentication services such as confidentiality, integrity, non-repudiation, identity verification to buyers and sellers in electronic transactions in order to ensure the safety and reliability of electronic transactions, This is a technology for the construction and operation of optimized authentication system by developing certificate issuance and processing procedures that enhance the convenience of buyers and sellers, and by distributing authentication and directory servers in units of data centers that are responsible for the physical center functions of the electronic trading market. .

If there is a conventional technology related to the present invention in the existing electronic trading market, there may be a SET degree.

The technical problem to be achieved by the present invention is to provide the basic functions of the authentication service, such as confidentiality, integrity, non-repudiation, identity verification to buyers and sellers in the electronic trading unit to ensure the safety and reliability of electronic transactions, authentication in the electronic trading market In order to spread the service, the registration and use procedures of the authentication service are simplified to enhance the convenience of buyers and sellers, and to facilitate the construction of the public key infrastructure (PKI), which is the foundation of the authentication service. It is to provide a data center-centered electronic transaction authentication system and authentication service providing method to efficiently manage certificate management by distributing and interoperating authentication and directory servers in each data center unit that is in charge of central functions. .

1 illustrates a schematic system for an electronic transaction authentication service of a data center according to the present invention.

Figure 2 illustrates a specific embodiment of the electronic transaction authentication system of the data center according to the present invention.

The electronic transaction authentication system of the data center according to the present invention for solving the technical problem is in the authentication system distributed in units of data center including at least one electronic transaction associated operators and electronic transaction certification authority, An electronic transaction certification authority server that issues a certificate to the server; And establish a secure channel with the purchaser terminal device based on the issued server certificate and the session key generated by the purchaser terminal device, and apply for electronic transaction authentication service registration with the purchaser's consent in the process of customer registration and renewal application of the buyer. The electronic trading certification server server generates a buyer's private key for digital signature and public key pair according to the buyer's request, encrypts the buyer's private key for electronic signature, and transmits the certificate to the buyer. It is characterized in that the buyer can store the certificate in the terminal device by sending a password for issuing and storing and decrypting the encrypted buyer's secret key for the electronic signature to the e-mail address specified by the buyer at the time of registration.

In addition, when an electronic transaction occurs between any buyer and an electronic transaction related business entity within or outside the data center that has received the server certificate of the electronic transaction certification authority, the electronic transaction related business server confirms the purchase application signed by the buyer. After the digital signature of the electronic transaction provider, the electronic transaction certification authority server is programmed to request, and the electronic transaction certification authority server searches for a directory server distributed in data center units and validates the certificate of the buyer and the electronic transaction related operator. After confirming the certification and the electronic signature of the certification body, the program is issued to confirm the transaction occurrence and transaction history of the buyer and the electronic transaction related company, and based on this, related to billing, billing, mediation, logistics, etc. It is characterized by being programmed to allow the procedure to proceed.

In addition, the electronic transaction-related service provider server establishes a secure channel with the buyer terminal device based on the server certificate issued from the electronic transaction certification authority server, and authenticates the electronic transaction with the purchaser's consent during the customer registration and renewal application process. Authentication registration application means for the service registration application; And when the electronic transaction-related business operator makes an electronic transaction with the buyer, confirms the purchase application for the electronic transaction with the electronic transaction certification authority after the electronic signature with the private key of the electronic transaction-related business with respect to the purchase information electronically signed with the electronic signature of the buyer. Characterized in that it comprises a transaction confirmation application means requesting.

In addition, the server of the electronic transaction certification authority may include: certificate issuing means for issuing a certificate to a server of the electronic transaction related company according to a predetermined procedure; A key pair generating means for generating a secret key and a public key pair for an electronic signature of a buyer according to a registration request in the server of the electronic transaction certification authority; Directory management means for storing and managing the certificate, and distributing and establishing based on a relative subscriber path when requesting a transaction confirmation of an electronic transaction unit; An electronic transaction verification means for searching a distributedly constructed directory based on a relative subscriber path when requesting a transaction confirmation of the electronic transaction unit, confirming validity of a certificate, and sending a confirmation letter to a buyer and an electronic transaction related company; Search the directory server distributed by data center unit from the server of the electronic transaction certification authority to check the validity of the certificate of the buyer and the electronic transaction related company, and then deal with the buyer and the electronic transaction related company after the electronic signature of the electronic transaction certification authority. Additional service interworking means for issuing a confirmation on the occurrence and transaction details and performing related procedures such as billing, billing, brokerage, logistics, etc., associated with the electronic transaction; And an authentication service interlocking means interoperating between authentication systems distributed and constructed in units of data centers to provide authentication services in units of electronic transactions.

In addition, the certificate issuing means encrypts and transmits the secret key for the electronic signature of the buyer generated in the server of the electronic transaction certification authority, and transmits a password for decrypting the encrypted secret key to the e-mail address specified when registering the authentication service. It characterized in that to perform.

According to another aspect of the present invention, there is provided a method for providing an authentication service for an electronic transaction in a data center according to the present invention. (A) An electronic transaction related operator based on a session key generated by a purchaser terminal connected to an electronic transaction related server. Establishing a secure channel between a server and the purchaser terminal device; (b) the electronic transaction related service provider server applying for the authentication service registration to the electronic transaction certification authority with the purchaser's consent during the customer registration and update processing of the buyer; (c) In accordance with the purchaser's application for registration of the authentication service, the electronic transaction certification authority server generates a buyer's private key for public signature and public key, encrypts the subscriber's private key for electronic signature, and transmits the encrypted private key to the buyer. Issuing and storing a certificate, and transmitting a password for decrypting the encrypted buyer's private key to the e-mail address specified by the purchaser when registering the authentication service; (d) storing the encrypted electronic signature secret key of the buyer transmitted from the electronic transaction certification authority server in the buyer terminal device, decrypting the password sent to the designated e-mail address and storing in the buyer terminal device; (e) When an electronic transaction occurs between a buyer who has issued a certificate from the electronic transaction certification authority server and any electronic transaction related business entity that has issued a server certificate of an electronic transaction certification authority in or outside the data center, the electronic transaction after the buyer's electronic signature Transmitting the order history to a related service provider server; (f) the electronic transaction related operator server requesting confirmation from the electronic transaction certification authority server after the electronic signature with respect to the order history transmitted from the purchaser terminal device; (g) The electronic transaction certification authority server searches the directory server distributed in data center units to confirm the validity of the buyer and electronic transaction related business certificate, and after the electronic signature of the electronic transaction certification authority, the buyer terminal device and the electronic transaction. Transmitting a confirmation to a related service provider server; And (h) conducting related procedures such as billing, billing, brokerage, logistics, etc., associated with electronic transactions, based on the confirmation of the electronic transaction certification authority server.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

The present invention enables to provide an effective electronic transaction unit authentication service by constructing a backbone for interworking authentication and directory servers in a data center unit that serves as a physical hub of a network in a virtual space in which electronic transactions occur. It also allows for easy hierarchical infrastructure for PKI construction of certification services.

Figure 1 shows a schematic system for a data center-centric authentication service.

1 is a distributed authentication system for each data center to issue a certificate to a server of an electronic transaction-related provider, to establish a PKI by becoming an authentication service registration agency for the general public, and to establish an electronic transaction between B2C and B2B. It shows a system for providing authentication services in units.

That is, a service subscriber of an electronic transaction-related provider in a data center is registered as an authentication service customer of an electronic transaction certification authority, and the registered customer is authenticated in the same way in electronic transactions between any electronic transaction-related providers who have received a certificate from the certification authority. The service can be provided, and the electronic transaction-related service provider can perform the electronic transaction that guarantees safety and reliability to any buyer registered in the PKI of the authentication service.

2 illustrates a specific embodiment of an electronic transaction authentication system of a data center according to the present invention, and includes a buyer terminal device 210, an electronic transaction related service provider server 220, and an electronic transaction authentication authority server 230.

The buyer terminal device 210 stores the buyer secret key for the electronic signature transmitted from the electronic transaction certification authority server 230, and uses the password received through the e-mail from the electronic transaction certification authority server 230. Decrypt the key and store the buyer's certificate.

The electronic transaction-related business server 220 receives a customer registration and renewal request for electronic transactions from the purchaser terminal device 210 and requests the electronic transaction certification authority to generate a secret key and public key pair for the electronic signature of the buyer and issue a certificate. The certification registration application means 222 and the transaction confirmation application means 221 at the time of the electronic transaction with the buyer who issued the certificate in accordance with the above procedure.

The certification registration application means 222 establishes a secure channel with the purchaser terminal 210 based on the server certificate issued from the electronic transaction certification authority, and authenticates the electronic transaction by obtaining the consent of the buyer during the customer registration and renewal application process. It performs the function of subscribing for service registration.

The transaction confirmation application means 221 is a digital signature of the electronic transaction associated with the electronic transaction, when the electronic transaction associated with the buyer when the electronic transaction with the buyer occurs, electronically signed to the electronic transaction certification authority Performs a function to request confirmation of a purchase application for a transaction.

The electronic transaction certification authority server 230 generates a digital signature secret key and public key pair, issues a certificate, and generates the generated electronic signature secret according to the authentication service registration application for the customer of the electronic transaction related service provider server 220. Encrypts and transmits the key, transmits a password for decrypting the encrypted electronic signature for the electronic signature to the e-mail address specified at the time of customer registration, and obtains a certificate from the electronic transaction certification authority from the buyer terminal device 210. When electronic transaction occurs between related service provider servers, when the purchase confirmation information, which is electronically signed by the secret key for the electronic signature of the buyer and the related business operator, is transmitted from the transaction confirmation application means 221 of the e-commerce service provider server 220, the data is distributed and built into the data center unit. Search the directory server to verify the validity of the buyer and e-business related certificate, and It is a system to send confirmation of the occurrence of electronic transactions and transaction details to related businesses and to carry out additional services such as billing, billing, brokerage, logistics, etc. associated with electronic transactions, including additional service interworking means 231 and key pair generation means ( 232, directory management means 233, certificate issuing means 234, electronic transaction confirmation means 235 and authentication service interlocking means 236.

The supplementary service interworking means 231 provides an interworking function with the supplementary service system 240 that is in charge of processing procedures such as billing, billing, mediation, and logistics associated with electronic transactions.

The key pair generating means 232 generates a digital signature secret key and public key pair according to the certificate issuance request of the purchaser and the electronic trading operator and stores them in the directory server.

The directory management means 233 stores and manages the certificate, and searches the distributedly constructed directory based on the relative subscriber path when requesting a transaction confirmation of the electronic transaction unit to check the validity of the certificate.

The certificate issuing means 234 encrypts and transmits the secret key for digital signature, and transmits a password capable of decrypting the encrypted secret key to an e-mail address specified when registering an authentication service.

The electronic transaction confirmation means 235 performs a function of checking the validity of a certificate by searching a distributedly constructed directory based on a relative subscriber path when requesting a transaction confirmation of an electronic transaction unit, and sending a confirmation to a buyer and an electronic transaction related company. .

The authentication service linkage means 236 provides an interworking function of the authentication system distributed and built in units of data centers to provide authentication services in units of electronic transactions.

Based on the configuration described above, a procedure for distributing an authentication system in each data center and providing an authentication service for an electronic transaction unit will be described in detail.

First, the electronic transaction certification authority issues a certificate according to a separate procedure to the server 220 of the electronic transaction related operator using the authentication system 230, and the electronic transaction related operator receives the issued server certificate and the purchaser terminal device. Based on the session key generated in step 210, a secure channel is established between the electronic transaction related service provider and the purchaser's terminal device.

The electronic transaction related business operator performs a buyer's electronic transaction authentication service registration application with the electronic transaction certification authority with the purchaser's consent in the process of registering and updating the customer's customer.

According to the request of the certificate registration requesting means 221 of the electronic transaction-related business server 220, the key pair generating means 232 generates a secret key, a public key pair and a certificate for the buyer's electronic signature, and stores it in a directory server. In addition, the generated secret key for the electronic signature of the buyer is encrypted by the certificate issuing means 234 and transmitted to the buyer, and a password capable of decrypting the password is sent to the e-mail address specified by the purchaser when registering for the authentication service.

The buyer stores the encrypted electronic signature secret key of the buyer transmitted from the authentication system 230 of the electronic transaction certification authority in the buyer terminal device 210, and decrypts the secret key using the password sent to the designated email address. Store the certificate in the purchaser terminal device.

When an electronic transaction occurs between a buyer who has issued a certificate of an electronic transaction certification agency and any electronic transaction related company that has issued a server certificate of an electronic transaction certification institution in or outside the data center, the buyer orders the electronic transaction related server after the electronic signature of the buyer. When the details are transmitted, the transaction confirmation application means 221 of the electronic transaction-related operator requests the confirmation from the transaction confirmation means 235 of the electronic transaction certification authority after the electronic signature on the order details.

The transaction confirmation means 235 of the electronic transaction certification authority searches the directory server distributed by the data center unit through the authentication service interlocking means 236 to confirm the validity of the certificate of the buyer and the electronic transaction related business operator, After the digital signature, a confirmation letter is sent to the buyer and the business operator concerned.

Based on the confirmation of the electronic transaction certification authority, the additional service interworking means 236 proceeds with related procedures such as billing, billing, brokerage, logistics, and the like associated with the electronic transaction.

The drawings and specification are merely exemplary of the invention, which are used only for the purpose of illustrating the invention and are not intended to limit the scope of the invention as defined in the meaning or claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

According to the present invention, by developing an electronic trading unit authentication system to provide the safety and reliability of electronic transactions to contribute to the growth of the entire electronic trading market, and the certificate issuance process linked to the electronic transactions of buyers and sellers in the electronic trading market It is easy to construct a wide range of PKI through development, and it is possible to provide stable authentication service and efficient operation of authentication service by distributing authentication system in each data center unit which is the center of virtual e-commerce market.

In addition, the authentication service model of the electronic transaction unit between the buyer and the electronic transaction-related provider presented in the present invention is equally applicable to providing the authentication service of the electronic transaction unit between the electronic transaction-related operators.

Claims (6)

In the authentication system distributed in units of data center including at least one electronic transaction associated company and an electronic transaction certification body, An electronic transaction certification authority server for issuing a certificate to the electronic commerce related company; And Set up a secure channel with the buyer terminal device based on the issued server certificate and the session key generated by the buyer terminal device, and apply for electronic transaction authentication service registration with the purchaser's consent in the process of customer registration and renewal application. Including an e-commerce-related business server, The electronic transaction certification authority server Upon purchaser's request, a buyer's private key for digital signature and public key can be generated, encrypted and transmitted to buyer's private key for digital signature, issued and stored to the buyer, and the encrypted private key for buyer's digital signature can be decrypted. An electronic transaction authentication system for a data center, characterized in that a password can be sent to an e-mail address specified by a buyer at the time of registration. The method of claim 1, When an electronic transaction occurs between any purchaser and any electronic transaction related business entity in or outside the data center that has received the server certificate of the electronic transaction certification authority, The electronic transaction-related business server After the electronic signature of the electronic transaction provider to confirm the purchase application signed by the buyer electronically, it is programmed to request the server of the electronic transaction certification authority, The electronic transaction certification authority server To verify the validity of the certificate of buyers and e-businesses by searching the distributed directory server by data center unit, and to issue the confirmation of transaction occurrence and transaction history of the buyers and e-businesses after the electronic signature of the certification authority. The electronic transaction authentication system of the data center, characterized in that programmed to enable the related procedures such as billing, billing, brokerage, logistics, etc. associated with the electronic transaction based on this. The server of claim 1, wherein the electronic transaction related service provider server Based on the server certificate issued from the electronic transaction certification authority server, establish a secure channel with the buyer terminal device, the authentication registration application for the electronic transaction authentication service registration application with the consent of the buyer during the customer registration and renewal application process of the buyer Way; And When the electronic transaction-related business operator makes an electronic transaction with the purchaser, the electronic signature on the purchase information electronically signed by the purchaser's electronic signature secret key with the electronic business-related business secret key is confirmed, and the electronic transaction certification authority confirms the purchase application for the electronic transaction. Electronic transaction authentication system of a data center, characterized in that it comprises a request for requesting transaction confirmation. According to claim 1, wherein the server of the electronic transaction certification authority Certificate issuing means for issuing a certificate to a server of the electronic transaction related company according to a predetermined procedure; A key pair generating means for generating a secret key and a public key pair for an electronic signature of a buyer according to a registration request in the server of the electronic transaction certification authority; Directory management means for storing and managing the certificate, and distributing and establishing based on a relative subscriber path when requesting a transaction confirmation of an electronic transaction unit; An electronic transaction verification means for searching a distributedly constructed directory based on a relative subscriber path when requesting a transaction confirmation of the electronic transaction unit, confirming the validity of a certificate, and sending a confirmation letter to a buyer and an electronic transaction related company; Search the directory server distributed by data center unit from the server of the electronic transaction certification authority to check the validity of the certificate of the buyer and the electronic transaction related company, and then deal with the buyer and the electronic transaction related company after the electronic signature of the electronic transaction certification authority. Additional service interworking means for issuing a confirmation on the occurrence and transaction details and performing related procedures such as billing, billing, brokerage, logistics, etc., associated with the electronic transaction; And And an authentication service interlocking means interworking between authentication systems distributed and constructed in units of data centers to provide authentication services in units of electronic transactions. The method of claim 4, wherein the certificate issuance means Encrypting and transmitting the buyer's electronic signature secret key generated by the server of the electronic transaction certification authority, and transmitting a password for decrypting the encrypted secret key to an e-mail address specified in the authentication service registration. Center's e-commerce authentication system. In the method of decentralizing authentication system by data center and providing authentication service by electronic transaction unit, (a) establishing a secure channel between the electronic transaction related service provider server and the buyer terminal device based on a session key generated by the buyer terminal device connected to the electronic transaction related service provider server; (b) the electronic transaction related service provider server applying for the authentication service registration to the electronic transaction certification authority with the purchaser's consent during the customer registration and update processing of the buyer; (c) In accordance with the purchaser's application for registration of the authentication service, the electronic transaction certification authority server generates a buyer's private key for public signature and public key, encrypts the subscriber's private key for electronic signature, and transmits the encrypted private key to the buyer. Issuing and storing a certificate, and transmitting a password for decrypting the encrypted buyer's private key to the e-mail address specified by the purchaser when registering the authentication service; (d) storing the encrypted electronic signature secret key of the buyer transmitted from the electronic transaction certification authority server in the buyer terminal device, decrypting the password sent to the designated e-mail address and storing in the buyer terminal device; (e) When an electronic transaction occurs between a buyer who has issued a certificate from the electronic transaction certification authority server and any electronic transaction related business entity that has issued a server certificate of an electronic transaction certification authority in or outside the data center, the electronic transaction after the buyer's electronic signature Transmitting the order history to a related service provider server; (f) the electronic transaction related operator server requesting confirmation from the electronic transaction certification authority server after the electronic signature with respect to the order history transmitted from the purchaser terminal device; (g) The electronic transaction certification authority server searches the directory server distributed in data center units to confirm the validity of the buyer and electronic transaction related business certificate, and after the electronic signature of the electronic transaction certification authority, the buyer terminal device and the electronic transaction. Transmitting a confirmation to a related service provider server; And (h) a method for providing an electronic transaction authentication service for a data center, comprising the steps of: performing billing, billing, brokerage, logistics, and the like, associated with an electronic transaction, based on the verification of the electronic transaction certification authority server; .