KR20030060658A - Method and System of Automatically Authenticating Web Site using Log in Information of Operating System - Google Patents

Abstract

The present invention can perform the login process automatically while maintaining the security of the user information by using the operating system login information that must be entered when the user visits a specific website of the Internet, the initial startup of the terminal, such as a computer It relates to a web site automatic authentication system and method using the operating system login information. Such a method of the present invention comprises the steps of performing an authentication procedure for using an operating system (Operating System) in the user terminal; Registering as a member on at least one specific web site at the user terminal; Generating, storing and managing an authentication code in the user terminal according to the instruction of the web server; If the user terminal wants to move to a specific web page, the web application of the web server requesting an authentication code from the user terminal; Checking, by the user terminal, whether the user terminal has been authenticated by comparing the operating system information stored in a storage medium; If it is determined that normal authentication has been performed, the user terminal transmits an authentication code for the corresponding web site of the current user to the web server; The web server transferring the transmitted authentication code to the web application to extract a current user ID and password from the received authentication code; The web application is characterized in that the step of comparing the extracted data and the data of the user ID and password already stored in its database.

Description

Method and System of Automatically Authenticating Web Site using Log in Information of Operating System}

The present invention relates to a web site automatic authentication system and method of the Internet, in particular, when the user visits the site registered as a member of the various types of web sites provided on the Internet operating system (Operating System) login of the system itself It is an object of the present invention to provide an automatic web site authentication system and method using operating system login information suitable for automatically authenticating a user using information.

The twenty-first century is an era in which information and communication technology has revolutionized with the development of the Internet. Throughout the Internet, the world is connected to one another, and many Internet contents including e-commerce are continuously developed.

In order to use such Internet service, user terminal must have basic hardware aspect. Terminal user of Windows9x / Me / 2000 / XP, Linux, Mac, Solaris, X-Window, etc. can search the information provided by each web site. In order to use the website, you need to install a program called Web Browser that displays the contents in text or graphic. Examples include Netscape's Netscape Navigator or Microsoft's Internet Explorer.

Recently, however, users can enjoy wired and wireless Internet using various user terminals such as PDAs, mobile phones, landlines, smart phones, Internet TVs, as well as personal PCs.

In general, a computer user can access a particular web site after connecting to the Internet while in a normal computer state. In this case, when the web site requires a login procedure, each user must first register as a member and receive a user ID and password necessary for the login procedure from the system before entering the web site. When signing up for membership, personal information such as name, address, telephone number, e-mail, social security number, user ID and password should be entered. In this case, user ID and password should not be duplicated with other users. Therefore, when a user enters his or her own user ID and password to visit the website, the web server of the website compares the entered user ID and password with data previously stored in the system at the time of membership registration. If the two data match, the web site is allowed to enter. If the two data do not match, it is judged not to be a member, and the initial screen for new sign-up or the preset initial screen is displayed.

However, in order to access such a general Internet web site, users must register for all web sites that require user authentication. After receiving their own user ID and password, they log in each time they visit the web site. You should run Also, users visiting many websites have had to manage various types of user IDs and passwords.

In order to alleviate such inconvenience and hassle, an Internet service site (password management site) that manages user IDs and passwords for members of many Internet web sites is providing services. That is, after an Internet user registers as a member on a password management site, in order to access a specific website registered as a member, the Internet user first selects the corresponding website already bookmarked to the password management site. The password management site will then automatically enter the member's user ID and password. Therefore, the Internet user can conveniently receive the Internet service without having to manage user IDs and passwords for all registration sites.

However, this technique allows each user to visit a website without entering a user ID and password, but the password management site must bookmark all websites that are registered as members and securely protect personal information about the user. There is a problem that cannot be guaranteed.

In addition, Korean Patent Application No. 10-2001-0013279 (a method for automatically logging in when accessing an Internet site and a terminal device employing the same) discloses a method for automatically logging in to an Internet web site. That is, this method captures the login data and encrypted data when the user first accesses a specific website and enters the login data, and asks the user to log in automatically without the login page as the next step. When deciding to use a login, the captured data is saved on the user's computer, and the login information is sent directly to the login page on the site to display the result of the logged on page.

However, such a conventional technology has a convenience that a user registered as a member of a specific website does not need to remember or manage the user ID and password of the website, but can still secure personal information about the user. Had no problems.

In addition, Korean Patent Application No. 10-2001-0023037 (website automatic log-in system and automatic log-in processing method) is a storage that can store personal information including a user ID and password that can be detachably connected to the computer Disclosed is a web site automatic log-in system and an automatic log-in processing method capable of automatically logging in when visiting a web site to which a user subscribes, regardless of which computer is used as a portable medium.

However, such a conventional technology allows a user to access a member web site more conveniently and securely by connecting a portable storage medium to a computer that can connect to the Internet so that the user can automatically log in when visiting a web site he subscribes to. In addition, each user must carry a portable storage medium such as a disk or a memory card, and solve a number of subsequent problems such as setting compatibility and specifications between the storage medium and a computer.

In addition, Korean Patent Application No. 10-1999-0060477 (Method and apparatus for logging in to a plurality of Internet sites with one login) configures the information of all members of a plurality of Internet sites as a database, and registers them on a specific site. When a member logs in to any one of a plurality of Internet sites, a database is used to verify that the user is a member of a site included in the plurality of Internet sites, and the user automatically logs in to other sites when the user logs in to one site. Is disclosed. That is, such a conventional method comprises the steps of constructing a database of member information including IDs and passwords of all members of a plurality of Internet sites, and wherein a member of one of the plurality of Internet sites is a member thereof. When the user accesses and logs in to one of the plurality of Internet sites using a registered ID and password, the step of confirming that the member is a member of a site included in the plurality of Internet sites by referring to the data of the database. Is done.

However, such a conventional technology requires a separate device for logging into Internet sites on an existing computer, and still has a problem in that personal information about a user cannot be securely secured.

An object of the present invention is to solve the above-mentioned problems of the prior art, and when the user visits a specific website of the Internet, the user automatically inputs the operating system login information that must be entered when the terminal such as a computer is initially started. To provide a web site automatic authentication system and method using the operating system login information that can be performed while maintaining the security of the user information.

1 is a block diagram of a communication system for explaining the web site automatic authentication procedure using the operating system login information according to the present invention.

2 and 3 is a control flow chart for explaining the Web site automatic authentication procedure using the operating system login information according to the first and second example of the present invention, respectively.

* Description of the symbols for the main parts of the drawings *

11, 13: terminal 20: communication network of the Internet service provider

30: Internet Network 41: Web Server

42: web application 43: database

51, 53: website server

In order to achieve the above object, the web site automatic authentication system using the operating system login information according to the present invention, a user terminal capable of a plurality of wired and wireless Internet, and provides a communication path connected to the user terminal to enable the Internet A server of a plurality of web sites that provide various contents to a network connected to the communication network, an internet network connected to the communication network, a web server executing a response to a file or through a predetermined operation according to a request of the terminal, and A web application for generating an encrypted authentication code using the operating system information of the user terminal according to a request, decrypting the authentication code, and executing an automatic login function when checking the authentication code of the user, and storing the authentication code It is characterized by consisting of a database to manage.

In addition, the automatic website authentication method using the operating system login information according to the present invention, comprising the steps of performing an authentication procedure for using the operating system (Operating System) in the user terminal; Registering as a member on at least one specific web site at the user terminal; Generating, storing and managing an authentication code in the user terminal according to the instruction of the web server; If the user terminal wants to move to a specific web page, the web application of the web server requesting an authentication code from the user terminal; Checking, by the user terminal, whether the user terminal has been authenticated by comparing the operating system information stored in a storage medium; If it is determined that normal authentication has been performed, the user terminal transmits an authentication code for the corresponding web site of the current user to the web server; The web server transferring the transmitted authentication code to the web application to extract a current user ID and password from the received authentication code; The web application is characterized in that the step of comparing the extracted data and the data of the user ID and password already stored in its database.

Such a feature of the present invention is to automatically execute the login process of a pre-registered web site by using the login information required by the operating system of the wired / wireless Internet-enabled terminal while moving to a desired web site while enhancing the security of the user information. There is an advantage to doing this.

Hereinafter, with reference to the accompanying drawings will be described in detail the configuration and operation of the present invention.

1 is a block diagram of a web site automatic authentication system using the operating system login information according to the present invention.

1, the automatic website authentication system using the operating system login information according to the present invention is connected to the user terminal (11, 13) capable of a plurality of wired and wireless Internet, and the user terminal (11.13) to enable the Internet In accordance with the request of the communication network 20 for providing a communication path, the servers 51 and 53 of a plurality of web sites for providing various contents to the Internet network 30, and the terminals 11 and 13; The web server 41 that executes the response through a predetermined operation, and when the user registers, the authentication code encrypted by combining the operating system login name, password, OS information, network environment, personal terminal hardware information, personal terminal unique information, etc. Generate and issue it to the user, the user decrypts the authentication code upon authentication request for using the web service, and based on the extracted information, Check is late, and informs the user whether the confirmation of the authentication is configured as a Web application 42, a database 43 for management by storing the identification code to execute the automatic login feature.

Here, each of the user terminals 11 and 13 may be selected from a personal computer incorporating an operating program such as Windows 95, Windows 98, Windows NT, Windows XP, Unix, Linux, MAC, PDA, Palm, or the like.

In addition, the storage medium such as the hard disk of each user terminal (11, 13) is preferably embedded with authentication software (Plug In) for performing the automatic website authentication procedure using the operating system login information of the system according to the present invention Do. The authentication software checks whether the user operating system is authenticated, responds to the request of the web application 42, and executes an authentication code management operation issued by the web application 42.

Here, the storage medium or the database 43, such as the hard disk of each user terminal, 1) a service code table including a service code and an authentication code; 2) an authentication software table including an authentication software, an authentication software name, an authentication software version, an installation date, an installation URL, an effective date, related file information, and an authentication software file checksum; 3) It is preferable to selectively configure the authentication code table including the authentication code, operating system name, operating system version, user ID, CPU information, BIOS information, LAN information, Network information, HDD information, web browser information, and authentication software information. . That is, when the web server 41 issues an authentication code, the service code table and the authentication software table are stored in a storage medium in the user terminal, and the authentication code table is embedded in the database 43 of the web server 41. . On the other hand, when the authentication code is issued by the user terminal, the service code table, the authentication software table, and the authentication code table are all stored in the storage medium of the user terminal.

Hereinafter, a web site automatic authentication procedure using the OS login information of the system according to the present invention will be described in detail with reference to the accompanying drawings.

In the automatic authentication system using the operating system login information according to the present invention, the Internet user is automatically issued an authentication code by using the operating system login information when registering for a specific site, the user can be authenticated without logging in to the corresponding website Can be.

In the embodiment of the present invention, there are two authentication code issuing methods. One is that the web application 42 in the web server 41 receives operating system information and operating system login name from the authentication software of the user terminal 11 (client). The authentication code is generated by receiving authentication code, password, unique user hardware information, user network information, etc., and the authentication software is generated by the authentication software. This is a method of directly generating an authentication code using information. The difference between these two methods is that one generates the authentication code is the web server 41 and the other is the user terminal 11.

In the first and second embodiments of the present invention, a case in which the user terminal 11 accesses the server 51 of the web site and its web site will be described by way of example.

First embodiment

First, a first embodiment of the present invention will be described with reference to FIGS. 1 to 2 based on a method of issuing an authentication code from the web server 41.

The user powers on his user terminal 11 (S1). Then, the microprocessor (not shown) of the user terminal shows an authentication screen for using an operating system. At this time, the user enters a user name and password set in advance (S2). The microprocessor compares the currently entered username and password with a preset user ID and password through authentication software built into the hard disk (S3), and allows the operating system to be used if the two data are the same (S4). .

Subsequently, the user terminal 11 connects to the Internet network 30 via the communication network 20 for the Internet service. Therefore, the user terminal 11 can access the specific web site server 51 previously registered as a member through the following authentication procedure. However, if the user terminal 11 is not registered in the site provided by the web site server 51, the member registration is performed by the general member registration method, so that the web server 41 sends the member registration information to the web application 42. ) To be stored in a table operated in the database 43. Therefore, the user can be connected through the following authentication procedure after receiving the unique user ID and password from the web site server 51.

First, the web server 41 instructs the web application 42 to issue an authentication code (S5).

Then, the web application 42 is unique to the authentication software installed on the hard disk of the user terminal 11 to generate an authentication code, such as an operating system, a name used to log in to the operating system, a password, user hardware specific information, and user network information. Request information for generating an authentication code (S6).

The authentication software transmits data obtained by reading the operating system of the current user, operating system login name, password, user hardware specific information, user network information, etc. previously stored in a specific storage location of the user terminal 11 to the web application 42. (S7).

Accordingly, the web application 42 generates an encrypted authentication code using the data transmitted from the user terminal 11 and transmits the encrypted authentication code to the authentication software of the user terminal 11 through the web server 41 (S8).

Then, the authentication software of the user terminal 11 stores and manages the authentication code sent from the web server 41 in a specific storage area of the user terminal 11 (S9).

Therefore, the automatic authentication system using the operating system login information according to the present invention, when the user is issued an authentication code for the site registered as a member, when the user visits the site of the screen of the user terminal 11 After performing the login procedure, the user is directed to the page of the desired website.

That is, when the user wants to go to the web page of the server 51 of the web site while surfing the web (S10), the web application 42 sends an authentication code to the authentication software of the user terminal 11 through the web server 41. (S11).

The authentication software of the user terminal 11 confirms whether the user has authenticated the operating system by comparing and searching the user operating system information stored in the storage medium (S12).

If it is determined that the user operating system information coincides with the normal authentication procedure, the authentication software of the user terminal 11 transmits the corresponding web site authentication code of the current user to the web server 41 (S13).

The web server 41 transmits the transmitted authentication code to the web application 42, and the web application 42 decrypts the received authentication code to extract the current user ID and password (S14).

Subsequently, the web application 42 compares the extracted data with data of the user ID and password already stored in the table operated in the database 43 (S15).

As a result of the comparison, if the two data match, the web application 42 sets user information (Cookie, Session) necessary for entering the web site, or moves to the page of the web site desired by the user after user authentication (S16).

Second embodiment

Next, a second embodiment of the present invention will be described with reference to FIGS. 1 to 3 based on a method for issuing an authentication code in the user terminal 11.

The user powers on his user terminal 11 (S21). Then, the microprocessor (not shown) of the user terminal shows a screen for authenticating an operating system. Therefore, the user inputs the user name and password set in advance (S22). The microprocessor compares the currently input user name and password with a preset user name and password through authentication software built into the hard disk (S23), and allows the operating system to be used if the two data are the same (S24). .

Subsequently, the user terminal 11 connects to the Internet network 30 via the communication network 20 for the Internet service. Therefore, the user terminal 11 can access the specific web site server 51 registered as a member through the following authentication procedure. However, if the user terminal 11 is not registered in the site provided by the website server 51, membership registration is performed by the general membership registration method, and a unique user ID and password are given from the website server 51. Receive. Subsequently, the web server 41 stores the membership information in a table operated by the database 43 through the web application 42 and then accesses the specific website server 51 registered as a member through the following authentication procedure. Can be.

That is, the web application 42 informs the authentication software of the user terminal 11 of the current user's user ID and password through the web server 41 (S25).

Then, the authentication software reads and encrypts the information transmitted from the web server 41 and the operating system, operating system login name, password, hardware specific information, network information, etc. of the current user previously stored in a specific storage medium of the user terminal 11. The authentication code is generated and stored in a specific storage location to be managed (S26).

Therefore, the automatic authentication system using the operating system login information according to the present invention, when the user is issued an authentication code for the site registered as a member, when the user visits the site of the screen of the user terminal 11 After performing the login procedure, the user is directed to the page of the desired website.

That is, when the user wants to go to the web page of the server 51 of the web site while surfing the web (S27), the web application 42 sends an authentication code to the authentication software of the user terminal 11 through the web server 41. It is required (S28).

The authentication software of the user terminal 11 confirms whether the user has authenticated the operating system by comparing and searching the user operation information stored in the storage medium (S29).

If it is determined that the user operating system information matches the normal authentication procedure, the authentication software of the user terminal 11 transmits the web site authentication code of the current user to the web server 41 (S30).

The web server 41 transmits the transmitted authentication code to the web application 42, and the web application 42 decrypts the received authentication code and extracts the current user ID and password (S31).

Subsequently, the web application 42 compares the extracted data with data of the user ID and password already stored in the table operated in the database 43 (S32).

As a result of the comparison, if the two data match, the web application 42 sets user information (Cookie, Session) necessary to enter the web site, or after the user authentication to move to the page of the web site desired by the user (S33).

In the first and second embodiments according to the present invention as described above, after storing the web page registered as a member in the 'favorites' provided in the existing browser, if necessary, by performing the authentication procedure described above The web page can be moved automatically.

In addition, if the user's terminal changes its operating system environment, the microprocessor of the user's computer analyzes the authentication code data and compares it with the current user terminal state. Discard it and prompt the user to get a new verification code. In addition, even if you copy the verification code and move to another location, it is determined that the hacked. In other words, the authentication code according to the present invention means that only one system exists.

In addition, if a user changes the authentication software of the user terminal to a new encryption method, it is preferable that the microprocessor of the user terminal discards the existing authentication code while automatically downloading its own terminal.

According to the automatic web site authentication system and method using the operating system login information according to the present invention described above, when the user visits a specific web site that is already registered as a member of the Internet, the operating system that must be input when the user terminal is initially started The login information can be used to automatically perform the login procedure while ensuring the security of the user information. In addition, since web site automatic authentication is performed using an existing terminal system without any additional hardware, the software can be downloaded and used immediately without any additional installation cost.

Claims (10)

A user terminal capable of a plurality of wired and wireless internets, A communication network connected to the user terminal to provide a communication path enabling the Internet; A server of a plurality of web sites providing various contents to an internet network connected to the communication network; A web server executing a response to a file or through a preset operation according to a request of the terminal; A web application for generating an encrypted authentication code using the operating system information of the user terminal, decrypting the authentication code, and executing an automatic login function when checking the authentication code according to a request of the web server; Automatic website authentication system using the operating system login information, characterized in that the database is configured to store and manage the authentication code. The web application of claim 1, wherein the web application generates an encrypted authentication code by selectively combining an operating system login name, password, OS information, network environment, personal terminal hardware information, personal terminal information, and the like when the user registers. Issuing to the user, the user decrypts the authentication code when the authentication request for the use of the web service, based on the extracted information to confirm that the terminal used to issue the authentication code, informs the user whether the authentication code is confirmed, automatic login Web site automatic authentication system using the operating system login information, characterized in that for executing the function. The system of claim 1, wherein the user terminal is selected from a personal computer incorporating one of Windows 95, Windows 98, Windows NT, and Windows XP, Unix, Linux, MAC, PDA, Palm, and the like. Web site automatic authentication system using information. The storage medium or the database of each user terminal, A service code table including a service code and an authentication code; An authentication software table including an authentication software, an authentication software name, an authentication software version, an installation date, an installation URL, an effective date, related file information, and an authentication software file checksum; Operating system, characterized in that to selectively configure the authentication code table including the authentication code, operating system name, operating system version, user ID, CPU information, BIOS information, LAN information, Network information, HDD information, Web browser information, authentication software information Web site automatic authentication system using login information. The method of claim 4, wherein when the authentication code is issued by the web server, the service code table and the authentication software table are stored in a storage medium in the user terminal, and the authentication code table is stored in a database of the web server. And when the user terminal issues an authentication code, the service code table, the authentication software table, and the authentication code table are stored in a storage medium of the user terminal. In a communication network in which one or more user terminals, a web server, and a web site can transmit and receive data to and from each other through the Internet, Performing an authentication procedure for using an operating system in a user terminal; Registering as a member on at least one specific web site at the user terminal; Generating, storing and managing an authentication code in the user terminal according to the instruction of the web server; If the user terminal wants to move to a specific web page, the web application of the web server requesting an authentication code from the user terminal; Checking, by the user terminal, whether the user terminal has been authenticated by comparing the operating system information stored in a storage medium; If it is determined that normal authentication has been performed, the user terminal transmits an authentication code for a corresponding web site of the current user to the web server; The web server transferring the transmitted authentication code to the web application to extract a current user ID and password from the received authentication code; And the web application compares the extracted data with data of a user ID and password already stored in its database. The method of claim 6, wherein the generation of the authentication code, Instructing the web server to issue an authentication code to the web application; The web application requesting information for generating an authentication code from an authentication software installed in a storage medium of the user terminal; The authentication software transmitting data to the web application that reads information for generating an authentication code previously stored in a storage medium of the user terminal; Generating, by the web application, the encrypted authentication code using the data transmitted from the user terminal and transmitting the encrypted authentication code to the authentication software of the user terminal; The authentication software of the user terminal is a web site automatic authentication method using the operating system login information, characterized in that the step of storing and managing the authentication code. The method of claim 7, wherein the information for generating the authentication code includes an operating system, a name used to log in to the operating system, a password, user hardware specific information, and user network information. Authentication method. The method of claim 6, wherein the generation of the authentication code, The web application transmitting a user ID and password of a current user to authentication software of the user terminal; The authentication software reads the information transmitted from the web application and the information for generating the authentication code prestored in the storage medium of the user terminal, generates an encrypted authentication code, and stores the information in the storage medium. Web site automatic authentication method using the operating system login information, characterized in that. The method of claim 6, wherein the user's terminal is determined to be hacked when its operating system environment is changed, the authentication code is copied and stored in another place, or the authentication software of the user terminal is changed to a new encryption method. Automatic website authentication method using the operating system login information, characterized in that for automatically discarding the authentication code.