KR20090022493A - Recording medium recording device authentication method, apparatus and program executing the method - Google Patents

Abstract

According to one aspect of the invention, a device authentication method is disclosed. The device authentication method according to an embodiment of the present invention receives a recombinant authentication key including a software authentication key and a device authentication key from a terminal on which software is installed, and determines whether an authentication attempt corresponding to the software of the terminal is the first, As a result of the determination, when the authentication attempt is the first time, the software authentication key is extracted from the recombinant authentication key, the software is authenticated using the software authentication key and the pre-stored first authentication information, and the second authentication information corresponds to the recombinant authentication key. While setting the terminal, the device is authenticated using the second authentication information when the terminal attempts to reauthenticate. According to the present invention, a device can be authenticated using a recombinant authentication key which is a combination of an existing device authentication key and a software authentication key, and there is an advantage in that an authorized device such as software resale can be changed.

Description

Device authenticating apparatus, method and computer readable record-medium on which program for executing method

The present invention relates to a device authentication method, an apparatus and a recording medium on which a program for executing the method is recorded. Specifically, a device authentication method and apparatus for authenticating a device using a recombinant authentication key including a device authentication key in a terminal. And a recording medium having recorded thereon a program for executing the method.

Recently, with the development of digital technology, the use of the Internet has surged and the spread of software has been active.

In the case of using the Internet service on the Internet, the ID (ID) and password (PW) are commonly used by service providers for service user identification. Of course, there is an advantage that you can easily prove that you are, but when the ID and PW is exposed, even personal information of the client is easily leaked.

In addition, as the spread of software increases, the use of illegal copying of software increases, which is a social problem. Accordingly, an authentication technology has been developed for distributing an authentication key when using the software so that only the right user can use the software.

However, the above-described user authentication and software authentication methods have disadvantages due to theft of ID and password or the loss of a software authentication key.

In addition, when a company allows access to an internal network using only an ID and password, it is impossible to prevent an individual from accessing a computer using a laptop or the like.

Therefore, recently, a hardware authentication method has emerged, rather than a software authentication method. In other words, the device authentication method is an authentication method in which a computer using a device identification number is authenticated so that only a computer permitted to be in the company network can be connected or only a terminal installed by a purchaser who purchased the software can execute the software.

However, the conventional device authentication method has a problem of having to use a new code by connecting to an authentication server through a combination centering on about five devices (RAM or CPU).

In addition, when there is a reason for reselling the software or replacing the computer, there is a problem in that the software cannot be used according to device authentication.

Accordingly, the present invention has been made to solve the above-described problems, the present invention provides a device authentication method, an apparatus and a recording medium in which a program for executing the method is a combination of the existing device authentication key and software authentication key is provided. .

It is still another object of the present invention to provide a device authentication method, an apparatus, and a recording medium on which a program for executing the method for retransmitting a recombinant authentication key through a reset operation when changing an authenticated device.

According to an aspect of the present invention, a device authentication method is disclosed.

A device authentication method according to an embodiment of the present invention comprises the steps of receiving a recombinant authentication key including a software authentication key and a device authentication key from a terminal on which software is installed; Determining whether an authentication attempt corresponding to the software of the terminal is the first; Extracting the software authentication key from the recombinant authentication key when the authentication attempt is the first time as a result of the determination; Authenticating the software using the software authentication key and first stored authentication information; And setting second authentication information corresponding to the recombinant authentication key, wherein the device is authenticated using the second authentication information when the terminal attempts to reauthenticate.

The device authentication key may be generated by the software for encrypting in a preset manner using a combination of the device identification number and access time information.

The authenticating the device may include decrypting the encrypted recombinant authentication key using the stored preset method; And authenticating the device using the decrypted recombinant authentication key and second authentication information.

The device authentication method includes receiving a setting signal for changing a recombinant authentication key from the authenticated terminal; And deleting the second authentication information, after which the authentication request of the terminal on which the software is installed is determined as the first authentication request and the authentication is performed using the first authentication information.

The device authentication method includes receiving an update signal requesting an update from the authenticated terminal; And providing update information provided from a software providing server to a terminal including the authenticated device.

According to an aspect of the present invention, a device authentication apparatus is disclosed.

Device authentication apparatus according to an embodiment of the present invention comprises a communication unit for receiving a recombinant authentication key including a software authentication key and a device authentication key from a terminal where the software is installed; An extraction unit for extracting the software authentication key from the recombinant authentication key when the authentication attempt corresponding to the software of the terminal is first; An authentication unit for authenticating a device of the terminal by using the software authentication key and first stored authentication information; And setting second authentication information corresponding to the recombinant authentication key, wherein the device is authenticated using the second authentication information when the terminal attempts to reauthenticate.

The device authentication key may be generated by the software for encrypting in a preset manner using a combination of the device identification number and access time information.

The authentication unit may further perform decryption using the preset method of storing the encrypted recombinant authentication key.

The device authentication device determines that an authentication request of a device on which the software is installed after the setting unit for deleting the second authentication information according to a setting signal for changing a recombinant authentication key received from the authenticated terminal is an initial authentication request. To perform authentication using the first authentication information.

The device authentication device may further include an update manager that provides update information provided from a software providing server to a terminal including the authenticated device according to an update signal for requesting an update received from the authenticated terminal.

According to another aspect of the present invention, a recording medium in which a program consisting of typed instructions for executing a device authentication method is recorded.

A recording medium on which a program comprising typed instructions for executing a device authentication method according to an embodiment of the present invention is recorded, the method comprising: receiving a recombinant authentication key including a software authentication key and a device authentication key from a terminal on which software is installed; ; Determining whether an authentication attempt corresponding to the software of the terminal is the first; Extracting the software authentication key from the recombinant authentication key when the authentication attempt is the first time as a result of the determination; Authenticating the software using the software authentication key and first stored authentication information; And setting second authentication information corresponding to the recombination authentication key, wherein the recording medium records a program to authenticate the device using the second authentication information when the terminal attempts to reauthenticate. Is provided.

The device authentication key may be a recording medium recorded by a program, which is generated by the software encrypting in a preset manner using a combination of the device identification number and access time information.

The authenticating the device may include decrypting the encrypted recombinant authentication key using the stored preset method; And authenticating the device by using the decrypted recombinant authentication key and the second authentication information.

The device authentication method includes receiving a setting signal for changing a recombinant authentication key from the authenticated terminal; And deleting the second authentication information, after which the authentication request of the terminal on which the software is installed is determined as the first authentication request and the authentication is performed using the first authentication information. have.

The device authentication method includes receiving an update signal requesting an update from the authenticated terminal; And providing update information provided from a software providing server to a terminal including the authenticated device.

Therefore, the present invention has been made to solve the above-described problem, the present invention can authenticate the device using a recombinant authentication key which is a combination of the existing device authentication key and software authentication key.

In addition, the present invention has the advantage that it is possible to change the authenticated device, such as software resale by retransmitting the recombinant authentication key through a reset operation when changing the authenticated device.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention. In describing the drawings, similar reference numerals are used for similar elements.

Terms including ordinal numbers, such as second and first, may be used to describe various components, but the components are not limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the second component may be referred to as the first component, and similarly, the first component may also be referred to as the second component. The term and / or includes a combination of a plurality of related items or any item of a plurality of related items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, action, component, part, or combination thereof described in the specification, and one or more other It is to be understood that the present invention does not exclude the possibility of the presence or the addition of features, numbers, steps, operations, components, parts, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, and the same or corresponding components will be denoted by the same reference numerals regardless of the reference numerals and redundant description thereof will be omitted.

1 is a block diagram illustrating a device authentication system according to an embodiment of the present invention.

As shown in FIG. 1, the device authentication system may include a terminal 110, a network 120, a software providing server 130, and a device authentication device 140.

The terminal 110, the software providing server 130, and the device authentication device 140 communicate electronically via the network 120.

Terminal 110 may be any computing device that stores and executes software applications 114. The terminal 110 communicates with not only a personal computer (PC) but also a personal digital assistant (PDA), a mobile phone, two-way pagers, etc., capable of performing communication via the network 120. It includes all of the terminals 110.

In addition, in the present invention, the device is a component of the terminal 110, in particular, means a device that performs a specific function, such as a CPU among the computer system.

The network 120 is a computer network 120, which is a coaxial cable, a fiber optic or wirelessly connected local area network (LAN), or an Internet information network using TCP / IP, a packet switched network (PSTN), an integrated service digital network (ISDN), and broadband synthesis. It may be a local area network (WAN) such as an information communication network (B-ISDN), and includes a cable TV network, a satellite network that enables the Internet connection, a wireless internet network, and an internet network of a mobile communication company.

The software providing server 130 distributes the software and manages all the software that manages the software, such as a server that allows the execution of the software to the terminal 110 connected through the distributed software, as well as a server providing update information of the distributed software. Include a server.

In addition, the software providing server 130 may transmit the requested first authentication information and software update information from the device authentication device 140.

Here, the software may include a recombinant program. The recombination program may read the identification number of the device in the terminal 110 when the software is installed.

In this case, the identification number of the device may include an identification number for identifying the device, such as a central processing unit (CPU) serial number and a MAC address (Media Access Control address).

Also, the recombination program may generate a recombination authentication key by combining a device authentication key including a read identification number and a preset software authentication key.

In this case, the device authentication key can be encrypted in real time using the read identification number and the connection time 420 while connecting to the device authentication device 140 of the terminal 110.

The encryption may use the basic time combination 430, the sequential time combination 440, the modified time combination 450, and the free time combination 460, which will be described in more detail with reference to FIG. 4.

In addition, the recombination program transmits the generated recombination authentication key when the terminal 110 is connected to the device authentication device 140. In this case, when the encryption including the access time 420 is performed, the recombination authentication key reflecting the access time 420 may be transmitted in real time.

The device authentication device 140 performs authentication of the device by using the recombinant authentication key received from the connected terminal 110.

In more detail, the device authentication device 140 receives a recombinant authentication key. Here, the recombinant authentication key is generated including a software authentication key and a device authentication key.

When the terminal 110 installs the software and accesses the device authentication device 140 for the first time to request authentication, the device authentication device 140 may extract the software authentication key from the received recombination authentication key.

In this case, the device authentication device 140 determines whether the connected terminal 110 is authenticated using the first authentication information.

In this case, the first authentication information may be preset authentication information according to the distributed software, and may be stored in the device authentication device 140. Alternatively, the device may be transmitted from the software providing device 130 according to the request of the device authentication device 140.

In addition, when the device authentication apparatus 140 is authenticated using the first authentication information, the device authentication apparatus 140 may determine that the connected device is a device suitable for using the installed software and allow execution of the software.

In addition, the device authentication device 140 resets the second authentication information according to the recombination authentication key received from the first access terminal 110.

Here, the second authentication information may be recombination recombination authentication key information including software and device authentication key, or may be authentication information having a 1: 1 correspondence with the recombination authentication key.

In addition, the device authentication device 140 may receive a recombination authentication key at the time of subsequent connection of the terminal 110 to determine whether the connected terminal 110 is authenticated using the second authentication information.

Accordingly, the device authentication device 140 may not only authenticate that the user is a legitimate user of the distributed software, but also determine whether the distributed software is connected through a device that is legitimately installed.

This is because the recombinant authentication key includes the device authentication key as well as the distributed software authentication key.

Here, the device authentication key may include an identification number for identifying a device such as a CPU serial number and a MAC address of the terminal 110 in which the software is installed.

In addition, the device may be an authentication key encrypted by including the identification number and the access time 420 described above. In this case, the encryption may be performed according to the basic time combination 430, the sequential time combination 440, the modified time combination 450, and the free time combination 460.

Here, the basic time combination 430 may be implemented by connecting the identification number and the access time as they are. In addition, the sequential time combination 440 may be implemented by changing the order of the year and month in the portion representing the basic time combination 430 to the connection time 420, the modified time combination 450 is the basic time combination 430 May be implemented by changing the numbers excluding 0 from the portion representing the access time 420 into small numbers one by one. The free type combination may include a device identification number 410 as well as a portion representing the access time 420 in advance. It can be implemented by changing the order in a set manner, that is, a certain pattern.

This will be described in more detail in the description of FIG. 4.

For example, assume that the device identification number is XQ123456 and the access time 420 is 18:16:33 seconds on July 12, 2007. The basic time combination 430 is XQ123456200707121833. Accordingly, the sequential time combination 440, the modified time combination 450, and the free time combination 460 may be implemented as XQ123456071220071833, XQ123456100606010722, and XQ20071207123418165633.

In addition, the device authentication device 140 may reset the recombinant authentication key. In more detail, when the device authentication device 140 receives a reset signal from the authenticated terminal 110, the device authentication device 140 may delete the second authentication information.

In this case, the device authentication device 140 may later determine that the terminal 110 that installs and accesses the corresponding software is initially connected and authenticates using the software authentication key and the first authentication information.

Accordingly, the software user can request resetting the recombinant authentication key for redistribution of the software.

For example, if a user who purchases genuine software installs and uses the purchased software on his or her desktop PC, the user cannot install and use the software on another PC through device authentication of the desktop PC.

Therefore, when a buyer wants to install a new software on a new desktop PC or his laptop PC because of a failure of the desktop PC, the purchaser may request the device authentication device 140 to reset the recombinant authentication key.

As another example, when the buyer wants to resell the software through a used site rather than an illegal distribution channel, the purchaser may sell the reset authentication key after resetting it. Therefore, there is an advantage that a legal resale of the software is possible even though the device is authenticated.

In addition, the device authentication device 140 may receive an update request signal of software from the authenticated terminal 110. When the device authentication apparatus 140 receives the update request signal, if the requested update information is stored, the device authentication device 140 may read and provide the stored update information.

Alternatively, if not stored, the update information may be requested to the software providing server 130 and transmitted to the authenticated terminal 110.

In short, the device authentication device 140 authenticates not only the software but also the device using the device identification number 410 of the terminal 110 in which the software is installed. In this case, security can be enhanced through device authentication, and redistribution of software can be made possible by providing reset of the recombinant authentication key.

Although the software providing server 130 and the device authentication device 140 have been described as being separately implemented, it will be apparent to those skilled in the art that the device authentication device 140 may be implemented by being included in the software providing server 130.

Hereinafter, the present invention will be described consistently by way of example, which are separately implemented for convenience of understanding.

So far, a device authentication system according to an embodiment of the present invention has been described with reference to FIG. 1. Hereinafter, the configuration of the device authentication device 140 will be described in more detail with reference to FIG. 2.

2 is a block diagram illustrating a configuration of a device authentication device 140 according to an embodiment of the present invention.

As shown in FIG. 2, the device authentication device 140 includes a communication unit 210, an extraction unit 220, an authentication unit 230, a reset unit 240, an update manager 250, and a storage unit 260. It may include.

The communication unit 210 transmits and receives data and signals transmitted or received through the network 120 in a general configuration.

In the present invention, the communication unit 210 receives a recombinant authentication key including a software authentication key and a device authentication key from the terminal 110 in which the software is installed.

In addition, the communication unit 210 may transmit and receive authentication related data such as update information with the software providing server 130.

The extraction unit 220 checks whether or not the first attempted authentication of the connected terminal 110 is the first attempt, and extracts the software authentication key from the received recombination authentication key.

In more detail, the extraction unit 220 may receive the recombination authentication key through the communication unit 210 together with the authentication request signal of the connected terminal 110. In this case, the extraction unit 220 determines whether there has been a previous authentication attempt using the received recombinant authentication key.

In addition, although the extraction unit 220 has attempted to authenticate before, it determines whether to attempt authentication for the first time after the above-described reset operation. At this time, the extraction unit 220 may determine that the first authentication attempt after the reset as the first authentication attempt. This is because the second authentication information is deleted due to the reset, and it is necessary to reset the authentication using the first authentication information.

The extracted software authentication key is transmitted to the authentication unit 230 and used for authentication of the connected terminal 110.

When the authentication unit 230 determines that the authentication unit 220 is the first authentication attempt, the authentication unit 230 may be provided with determination information, a recombinant authentication key, and a software authentication key.

The authenticator 230 calls the first authentication information according to the corresponding software stored in advance. The authenticator 230 determines whether a device of the connected terminal 110 is suitable by using the first authentication information and the software authentication key to perform authentication.

Here, the first authentication information may be the same as the software authentication key granted for each software, or in general, may be a kind of authentication information capable of decrypting the encrypted software authentication key for authentication.

In the same case, the authentication unit 230 simply compares to determine whether to authenticate, and if the software authentication key is encrypted, the authentication unit 230 may decrypt it and authenticate using the decrypted authentication key and the first authentication information. have.

The encryption algorithm has a symmetric key encryption algorithm with large encryption and decryption keys and a public key encryption algorithm with different encryption and decryption keys. In the present invention, the encryption of the software authentication key uses a conventional encryption method, and a description thereof will be omitted for a clear understanding of the present invention.

In addition, when the authentication attempt of the connected terminal 110 is not the first time, the authentication unit 230 performs authentication using the recombinant authentication key and the second authentication information.

In this case, the second authentication information may be the same as the corresponding recombination authentication key to compare the received recombination authentication key and the stored second authentication information to determine whether the connected terminal 110 is authenticated.

Alternatively, if the device authentication key included in the recombinant authentication key is encrypted, it may be decrypted and authenticated.

Here, the device authentication key may be encrypted by including device identification number 410 and access time 420 information such as a CPU serial number. In this case, as described above, the device authentication key may be generated by the basic time combination 430, the sequential time combination 440, the modified time combination 450, and the free time combination 460.

The setting unit sets the second authentication information using the recombination authentication key received from the terminal 110 authenticated in the initial authentication attempt. Here, the second authentication information is used for authentication using the recombinant authentication key after the initial authentication attempt, and may be the same as the recombinant authentication key of the corresponding software and device, or information for decryption (decryption) when the recombinant authentication key is encrypted. Key, etc.).

In addition, the setting unit deletes the second authentication information according to a reset signal for changing the recombination authentication key received from the authenticated terminal 110.

In more detail, the setting unit receives a setting request signal from the authenticated terminal 110. Here, the setting request signal is a signal for requesting the setting of the recombination authentication key for reasons such as device replacement of the terminal 110.

In this case, the setting unit deletes the authentication information according to the recombinant authentication key by deleting the second authentication information.

Therefore, the user who uses the corresponding software later needs to reset the second authentication information by transmitting the recombinant authentication key after authentication again using the software authentication key. That is, the device authentication device 140 performs the process of the initial authentication attempt of the connected terminal 110 described above again.

Therefore, by resetting the second authentication information, the software purchaser can use the device authentication without inconvenience even in the case of replacing or reselling the PC where the software is installed.

The update manager 250 receives an update signal for requesting an update received from the authenticated terminal 110. The update manager 250 may provide the stored update information to the terminal 110 including the authenticated device according to the request signal.

The stored update information may be information stored by being transmitted from the software providing server 130. In addition, the device manager may request update information from the software providing server 130 according to the request signal and transmit the received information to the authenticated terminal 110.

The storage unit 260 stores various data such as data for controlling the device authentication device 140 in a general configuration.

In addition, the present invention can store the received recombinant authentication key, the first authentication information, the second authentication information and the like.

So far, the configuration of the device authentication device 140 according to an embodiment of the present invention has been described with reference to FIG. 2. Hereinafter, the device authentication method and the encryption method of the device authentication key will be described with reference to FIGS. 3 and 4.

3 is a flowchart illustrating a device authentication method according to an embodiment of the present invention.

The device authentication device 140 receives a recombinant authentication key from the connected terminal 110 (S310). Here, the recombination authentication key includes a device authentication key such as a software authentication key installed in the connected terminal 110 and a CPU serial number of the connected terminal 110, as described above.

The device authentication device 140 determines whether the connected terminal 110 is the first authentication request according to the installed software (S320).

The device authentication device 140 extracts a software authentication key from the recombinant authentication key in the case of the initial authentication attempt (S330).

The device authentication device 140 determines whether the user of the connected terminal 110 is a legitimate software user by using the extracted software authentication key and the previously stored first authentication information (S340).

For example, a purchaser who purchases genuine software can install the software on his or her own PC. At this time, the authentication key program of the software is driven to read the device identification number 410 (CPU serial number, etc.) of the PC and automatically generates a recombinant authentication key by combining with the software authentication key.

In this case, when the device authentication device 140 is accessed using a PC on which software is installed, the generated recombination authentication key is transmitted.

The device authentication device 140 determines that it is the first authentication attempt, and extracts the software authentication key from the transmitted recombination authentication key. The device authentication device 140 may authenticate that the user of the connected computer is a legitimate user by using the extracted software authentication key.

If it is determined that the user of the connected terminal 110 is not a legitimate user, the device authentication device 140 transmits a software execution disable message (S380).

Therefore, in this case, the connected terminal 110 user cannot execute the installed software because the authentication fails.

When the authentication is performed with the software authentication key according to the initial authentication attempt, the device authentication device 140 sets the second authentication information according to the received recombination authentication key (S350).

Here, the second authentication information is the same as the above-described authentication information capable of decrypting the same or encrypted recombinant authentication key.

In addition, the device authentication device 140 transmits an execution key for executing the corresponding software to the authenticated terminal 110 (S360). Accordingly, the user of the authenticated terminal 110 can execute the corresponding software.

Subsequently, when the terminal 110 installed with the same software is connected, that is, when the device authentication apparatus 140 determines that the connected terminal 110 is not the first authentication attempt, the received recombination authentication key and the stored second key are received. Using the authentication information, it is determined whether the user of the connected terminal 110 is a legitimate software user (S370).

In this case, unlike the initial authentication, the authentication includes the device authentication key in the terminal 110 to determine whether the software and the device are partyly used.

If it is determined that the authentication is inappropriate, the software execution disable message is transmitted (S380).

In addition, if it is determined that the party is used as a result of determination, the device authentication device 140 transmits an execution key for executing the corresponding software to the authenticated terminal 110 (S360). Accordingly, the user of the authenticated terminal 110 can execute the corresponding software.

Subsequently, when the user of the terminal 110 wants to change the terminal 110 or the device in which the corresponding software is installed, the user of the terminal 110 may request resetting the recombinant authentication key.

The device authentication device 140 may receive a reset request signal (S390). In this case, the device authentication device 140 may delete the second authentication information according to the corresponding recombinant authentication key (S391).

Thereafter, the device authentication apparatus 140 may perform steps S320 to S350, such as extracting a software authentication key, by determining that the first authentication attempt is made when the terminal 110 on which the corresponding software is installed is connected.

4 is an exemplary view for explaining a method of encrypting a device authentication key according to an embodiment of the present invention.

The encrypted device authentication key may include a device identification number 410 and an access time 420.

Here, the device identification number 410 includes a unique identification number for identifying the device, such as a CPU serial number and MAC address.

In addition, the connection time 420 is a concept including the year, month, day, hour, minute, and second, and is time information while the terminal 110 connects to the device authentication device 140.

The encryption algorithm may be, for example, a basic time combination 430, a sequential time combination 440, a variant time combination 450, and a free time combination 460.

Here, the basic time combination 430 may be implemented by connecting the identification number and the access time as they are. In addition, the sequential time combination 440 may be implemented by changing the order of the year and month in the portion representing the basic time combination 430 to the connection time 420, the modified time combination 450 is the basic time combination 430 May be implemented by changing the numbers excluding 0 from the portion representing the access time 420 into small numbers one by one. The free type combination may include a device identification number 410 as well as a portion representing the access time 420 in advance. It can be implemented by changing the order in a reset manner.

For example, assume that the device identification number is XQ123456 and the access time 420 is 18:16:33 seconds on July 12, 2007. The basic time combination 430 may be XQ123456200707121833 in which the identification number and the access time 420 are connected without changing the order.

In addition, the sequential time combination 440 may be XQ123456071220071833 which sequentially changes the order of the year and the month.

In addition, the modification time combination 450 may be XQ123456100606010722 as a combination obtained by deforming each number one by one at the connection time 420.

In addition, the free time combination 460 may be implemented as XQ20071207123418165633 by changing the order including the device identification number 410 in a preset manner. Here, the preset method may be, for example, a method of changing the order by inserting a year, month, day and hour between two numbers from the left of the identification number and inserting a second at the end. This may be set in various ways and is not limited to the above examples.

As described above, encryption may be performed using the access time 420 included in the concept of seconds, thereby preventing hacking such as data acquisition by the unauthorized terminal 110.

Because the access time 420 information is included, since the recombinant authentication key (including the device authentication key) is changed in units of 1 second, since the recombinant authentication key must be decrypted within 1 second, hacking is considered when considering the data transmission rate. it's difficult.

However, the encryption of the device authentication key is not limited to the above-described example, and includes all encryptions that can be encrypted in a predetermined manner commonly known by the device authentication device 140 and decrypted by the device authentication device 140.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and changes can be made.

1 is a block diagram illustrating a device authentication system according to an embodiment of the present invention.

2 is a block diagram illustrating a configuration of a device authentication apparatus according to an embodiment of the present invention.

3 is a flowchart illustrating a device authentication method according to an embodiment of the present invention.

4 is an exemplary view for explaining a method for encrypting a recombinant authentication key according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

110: terminal 120: network

130: software providing server 140: device authentication device

210: communication unit 220: extraction unit

230: authentication unit 240: reset unit

250: update management unit 260: storage unit

410: device identification number 420: connection time

430: basic time combination 440: sequential time combination

450: transformation time combination 460: free time association

Claims (11)

In the device authentication method performed in the device authentication device, Receiving a recombinant authentication key including a software authentication key and a device authentication key from a terminal on which software is installed; Determining whether an authentication attempt corresponding to the software of the terminal is the first; Extracting the software authentication key from the recombinant authentication key when the authentication attempt is the first time as a result of the determination; Authenticating the software using the software authentication key and first stored authentication information; And Setting second authentication information corresponding to the recombinant authentication key; And authenticating the device using the second authentication information when attempting to reauthenticate the terminal. The method of claim 1, The device authentication key, And a device generated by the software for encrypting in a preset manner using a combination of the device identification number and access time information. The method of claim 1, The step of authenticating the device of the terminal, Decrypting the encrypted recombinant authentication key using the stored preset method; And Authenticating the device using the decrypted recombinant authentication key and second authentication information. The method of claim 1, Receiving a setting signal for changing a recombinant authentication key from the authenticated terminal; And And deleting the second authentication information, after which the authentication request of the terminal on which the software is installed is determined as the first authentication request, and the authentication is performed using the first authentication information. The method of claim 1, Receiving an update signal requesting an update from the authenticated terminal; And And providing update information provided from a software providing server to a terminal including the authenticated device. In the device authentication device, A communication unit for receiving a recombinant authentication key including a software authentication key and a device authentication key from a terminal on which software is installed; An extraction unit for extracting the software authentication key from the recombinant authentication key when the authentication attempt corresponding to the software of the terminal is first; An authentication unit for authenticating a device of the terminal by using the software authentication key and first stored authentication information; And Setting second authentication information corresponding to the recombinant authentication key; And device for authenticating the device by using the second authentication information when the terminal attempts to reauthenticate. The method of claim 6, The device authentication key, Device generated by the software for encrypting in a preset manner using a combination of the device identification number and access time information. The method of claim 6, The authentication unit, And decrypting the encrypted recombination authentication key using the stored preset method. The method of claim 6, After the setting unit for deleting the second authentication information according to a setting signal for changing the recombination authentication key received from the authenticated terminal, the first authentication information is determined as an initial authentication request for the authentication request of the device where the software is installed. And perform authentication using a device authentication apparatus. The method of claim 6, And an update management unit for providing update information provided from a software providing server to a terminal including the authenticated device according to an update signal requesting an update received from the authenticated terminal. What is claimed is: 1. A recording medium readable by an electronic device on which a program comprising typed instructions for executing a device authentication method is recorded. Receiving a recombinant authentication key including a software authentication key and a device authentication key from a terminal on which software is installed; Determining whether an authentication attempt corresponding to the software of the terminal is the first; Extracting the software authentication key from the recombinant authentication key when the authentication attempt is the first time as a result of the determination; Authenticating the software using the software authentication key and first stored authentication information; And Setting second authentication information corresponding to the recombinant authentication key; And a program comprising typed instructions for executing the device authentication method, wherein the device is authenticated using the second authentication information when the terminal attempts to reauthenticate.

Images