KR20020020520A - operation method of system for perform login and system for the same - Google Patents

Abstract

PURPOSE: A method for operating system performing log-in is provided to prevent a unauthorized user from accessing to a predetermined site by authenticating or rejecting a log-in to the site according to a position of a computer system or a connection method of the computer system. CONSTITUTION: A server displays a screen for making a request for selecting one item among selection items in order for a user to be authorized to selectively perform a log-in according to each connection method to the server in the process of setting up information on the user's log-in. In case that the user terminates a selection according to the connection method, the item selected is stored in a database for storing log-in information. In case that the user performs a log-in to a relevant site using a computer system designated by the user, the user's information stored in the database is compared with information according as the user presently performs a log-in. It is judged whether the log-in is performed.

Description

Operation method of system for perform login and system for the same}

The present invention relates to a method of operating a system for logging in to a specific site, and more specifically, access to a corresponding site only by performing a login corresponding to the set method based on a login access method set by a user. It is about how one system operates so that it can be tolerated.

In general, each company that provides services through a computer based on the Internet provides each user (individual, company, government, etc.) with services according to their respective contents.

At this time, the service provider prevents the user from leaking personal information by setting each user ID and password, and the user communicates with other users (mainly, e-mail, etc.). For differentiation.

That is, a user must log in using an ID and password of an individual who has been assigned to receive a desired service in the corresponding site.

In particular, when the service provided by the company's site is used for exchanging information such as resources or data, the above-described ID and password become more necessary items for security.

At this time, such an ID is a name given to identify each subscriber, and a password is a password for confirming whether a user using the ID has a right to access a file or a device.

However, in the related art, when the ID may be easily leaked and the password may be hacked, there is a problem that the user may have anxiety about security.

The present invention has been made to solve the above problems, the login to the site is approved according to the location of the user's computer system or access method using the computer system to access the site for receiving the service or It is an object of the present invention to provide a system and an operation method for logging in to the system that can be denied to prevent unauthorized users from accessing the service provided by a specific user.

1 is a schematic view showing a general service system

2 is a schematic view showing a service system constructed for performing selective login according to the present invention;

Figure 3 is a flow chart schematically showing the operation of the system according to the present invention

4 is a flowchart schematically showing a process of operating a system when setting login information during an operation process of a system according to the present invention;

5 is a block diagram showing a state of the screen for setting the login information during the fare process of the system according to the present invention

Explanation of symbols for main parts of the drawings

100. Your computer system 200. Server

210. DB for storing login information 220. DB for storing authentication files

The present invention for achieving the above object is to allow the server operating the site in the process of setting the information for the user login to be selectively allowed to log in to the user according to each access method to the server Displaying a screen requesting selection of any one of a plurality of selection items; Storing the selected item in a DB for storing login information for each user when the selection according to the login access method by the user is completed; When the user logs in to the corresponding site using a computer system designated by the user in the state where the setting is completed, the information of the user previously stored in the DB for this login and the state in which the user currently logs in. Comparing the step of determining whether to allow the login: provides an operating method of the system for performing a login, characterized in that proceeds sequentially.

In addition, the service system of the present invention for realizing the method comprises a user computer system installed or stored a file for confirming whether to allow login; A DB storing information for various logins designated by the user; Manage and operate the service site, store information on the ID and password selected by the user for login and information related to the access method desired by the user on the DB, and allow the user to use a specific computer system When the initial login is performed in the set state, a system is provided that includes a server: delivering a file on the user's computer system to confirm whether the user is allowed to log in according to a user's desired access method.

Hereinafter, preferred embodiments according to the configuration and method of the present invention as described above will be described in more detail with reference to FIGS. 2 to 5.

First, FIG. 2 is a block diagram schematically showing a service system constructed for performing selective login according to the present invention.

That is, the system according to the present invention includes a computer system 100 of a user having a file installed or stored therein for checking whether LOGIN is allowed, a DB (Data Base) storing information for various logins designated by the user; In addition, it is largely composed of a server (Server) 200 which is linked with the DB to perform the input and storage of various information and to operate and manage the site.

At this time, the server 200 stores the information on the ID (ID) and password (Password) selected by the user and the information related to the access method desired by the user on the DB 210, When the user performs the initial login, the user also plays a role of delivering a file on the user's computer system to confirm whether the login is allowed according to the access method specified by the user.

On the other hand, the characteristic system operation method of the present invention for logging in to the site operated by the system is to allow a user to be provided with services from the site to be selectively logged in according to each access method to the server. Displaying a screen for requesting selection of any one of a plurality of selection items, and storing the selected item in a DB for storing login information for each user when the selection according to the login connection method by the user is completed; Step and, when the user performs initial login to the site through the computer system designated by the user, obtains information according to the user's system access method from the login information storage DB for each user, and obtains the corresponding file according to the acquired information. To be transmitted to the location designated by the user. And, so this suggests that the respective steps are conducted sequentially.

Hereinafter, the method of operating the system for performing the login as described above will be described in more detail with reference to the flowcharts of FIGS.

First, in order for a user to log in to the site, the user's login information must be stored in advance on the DB 210 of the system that operates the site.

This process is basically similar to the method of storing login information through membership of a general site.

However, in the present invention, in addition to the above method, it is suggested that the user can directly select the access method for the user's login.

That is, the user can log in to the site using any computer system with which the user can communicate, or the user can selectively specify an unspecified computer system, or use a predetermined (user-specified) computer system. It is a feature of the present invention to enable the user to improve the reliability of the security by allowing the user to perform a selection such as enabling the login to the corresponding site.

To this end, the server 200 that manages and operates the site in the process of setting the login information by the user displays each of the selection items as described above, so that the user selects one of the selection items. Ask to choose.

Fig. 5 shows the screen configuration in this state.

In addition, the above selection items are classified into “free”, “file”, “PC fix”, etc., but are not necessarily limited thereto, and include two items among the minimum items. It is enough.

In this case, the “free” item designates a selection item that enables the user to log in wherever possible to communicate with the site regardless of the computer system or the authentication file, and the “file” item when logging in to the site. An authentication file refers to an optional item, and the “PC Fix” item refers to an optional item configured to log in only when a specific computer system is used, although a separate authentication file is not required when logging into the site.

Therefore, when the user selects any one of the above items, the operation server 200 of the corresponding site confirming the information is stored in the DB 210 and allowing the user to log in using the stored information. Judgment will be performed.

When the user logs in while the login setting of the user is completed as described above, the server performs each task for setting the selected item.

When the process of the operation is described in more detail as follows.

First, when the user logs in to the site with the “Free” item selected, the login process is the same as when the general site is registered. After confirming the ID and password, the user simply checks the ID and password. Provide information about the service.

That is, when the user inputs his or her ID and password, the server 200 operating the corresponding site searches for the input contents from the DB 210 and checks whether the login is allowed. As a result, the login is allowed or disallowed.

In addition, when the user logs in to the site while selecting the “File” item, the server 200 creates an authentication file for the user's ID and stores the generated file for the authentication file. Stored on the DB (220).

At this time, the authentication file storage DB is not limited to the state as shown clearly by being able to separately build or as shown in Figure 2 DB 210 that stores the login information for each ID.

Thereafter, when the user logs in, the server operating the site checks the number of logins of the user, and when it is confirmed that the user is the first login, uploads the generated authentication file to the user's computer system.

Accordingly, the user downloads the authentication file and stores the file in a predetermined data storage location on the computer system.

In addition, the authentication file stored as described above, when the login to the site is performed again later, the server 200 operating the site communicates with the computer system requesting the login to check the authentication file, and the authentication file Through the provision of services to the user.

At this time, the verification of the authentication file is made by the user directly specifying the storage location.

However, the authentication file transmitted from the server may not be stored only on the computer system used by the user for logging in, and may be stored in a data storage medium such as a diskette in the process of receiving a download of the file. You can download the file.

In this case, the user can use the computer system at any place, so that the authentication check can be performed by specifying the location of the file stored on the diskette when requesting the confirmation of the authentication file from the server. Any system that can communicate has the advantage of being usable.

In addition, it has the advantage that security can be obtained when considering that the authentication file must be provided to access the site.

If the user loses the authentication file while the system is operating by the method described above, the user is notified of the fact by calling the administrator who manages the site, and re-issuing the authentication file after initializing the information. Must be used.

In addition, when a user logs in to a site with the “PC Fix” item selected, the site is located in a directory of the user's computer system (usually the directory where each cookie is stored). In addition to storing a cookie file having various information about the site, information about the stored cookie file is stored on a DB.

In this state, when the user logs in to the site again to receive the service from the site, the server operating the site accesses the user's computer system and searches for the cookie file corresponding to the site. It is determined whether the cookie file matches the information stored on the DB 210 to determine whether the computer system is allowed to log in.

In this case, the cookie is a value that changes every time a user is provided with the service at the site, and the cookie value is copied according to each computer system and user to which the cookie value is transmitted while the cookie is transmitted from the website. The cookie value may not be associated with the copying computer system even though.

Therefore, if the server system of the user who requested the login is the same as the computer system that performed the previous login, the server permits the login and displays a page for providing the corresponding service. If it is not the same as the computer system that performed the previous login, the login is rejected.

As described above, the user can log in to the site only by using a specific computer, so that an unauthorized user cannot obtain information of the user by using another computer system. Will have

If the user loses the cookie file while formatting the computer system or reinstalling the various programs of the system while the system is operating by the method described above, call the administrator who manages the site. You should be notified of this and perform an initialization for the system again.

In addition, this invention is not limited only to the method mentioned above.

That is, the user may be configured to log in to the corresponding site only within a specific local network.

In this case, the server of the site can check whether the computer system used by the user is connected with the proxy server set in the DB.

In addition, it is possible that there is a way for the server operating the site to determine whether to allow login by checking the IP of a specific computer system that the user has specified.

As described above, the operating method of the system for performing a login according to the present invention enables the user to set a method for allowing the user to directly log in so that the service provided to the user can be delivered to the correct user. The reliability of security is improved.

In addition, the present invention also has the effect that the method of allowing the login is made through the method of confirming the computer system used by the user can be more accurately determine the user having authority.

Claims (9)

In the process of setting the information for the user's login, the server operating the site selects one of a plurality of selection items to allow the user to be selectively allowed to log in according to each access method to the server. Displaying a screen requesting a request; Storing the selected item in a DB for storing login information for each user when the selection according to the login access method by the user is completed; When the user logs in to the corresponding site using a computer system designated by the user in the state where the setting is completed, the information of the user previously stored in the DB for this login and the state in which the user currently logs in. And determining whether to allow the login by comparing the steps with each other. The method of claim 1, There are a number of options to allow selective login for each access method to the server running the site. Items that allow you to access the server anywhere you can access the Internet, regardless of the location of the computer system of the user who wants to access the server, and items that allow selective login of the user according to the computer system specified by the user who wants to access the server. Operating method of the system for performing a login, characterized in that it comprises a. The method of claim 2, The computer system you specify At least one unspecified computer system, which may be selectively designated by the user as needed, or which is one of the specified computer systems, each of which is classified as a computer system that cannot be changed to another system in the state originally specified by the user. A method of operating a system for performing a login. The method of claim 2, When the user accesses the site and requests a login in a state where login information is set to selectively allow login according to the computer system designated by the user, the server operates the site. Checking the number of times of login based on the information of the user; When the login is performed for the first time, the server transmits data for confirming the permission of the login to the computer system designated by the user. When the login count is not the first time, the server transmits the data to the computer system of the user who requested the login. Checking the existence and matching of data transmitted from the server and selectively performing the allowance of the login according to the result: further comprising the step of operating the system for performing the login. The method of claim 2, When a user attempting to connect to the server running the site performs the first login to the site with the item selected to allow selective login according to the computer system specified by the user. The server may install an authentication key file on the computer system designated by the user, and when login is performed again later, the server may determine the permission of the login by checking the authentication key file installed on the computer system. Operating system for performing login. The method of claim 5, The authentication key file is set to be downloadable so that it can be stored on the diskette. If the user wishes to use an unspecified computer system located elsewhere as needed, the user can log in to the site by installing the authentication key file stored on the diskette. Operating a system for performing a login, characterized in that enabled. The method of claim 2, When the user who wants to connect to the server that operates the site performs the first login to the site with the item selected to allow selective login of the computer system specified by the user. The server stores the cookie of the site on the specified computer system designated by the user, and if the login is performed again later, the site checks the cookie installed on the computer system to allow the login. A method of operating a system for performing a login, characterized in that to enable the determination. The method according to any one of claims 5 to 7, If the authentication key file or cookie value stored on the computer system specified by the user is lost due to a user's mistake, error, or unexpected error, or the user wants to specify another computer system. A user requesting an administrator who manages a server of a corresponding site to initialize his login information; Receiving, by the server administrator, initializing login information of the corresponding user stored in the DB and notifying the user of the login information; When the user who has confirmed that the login information has been initialized, accessing the corresponding site and re-installing the authentication key file or the cookie file for the login on the designated computer system: operates a system for performing a login, characterized in that the process proceeds sequentially . A user's computer system with a file installed or stored therein for checking whether login is permitted; A DB storing information for various logins designated by the user; Manage and operate the service site, store information on the ID and password selected by the user for login and information related to the access method desired by the user on the DB, and allow the user to use a specific computer system And a server for delivering a file on the user's computer system to confirm whether to allow the login according to a user's desired access method when performing initial login in the set state.