KR20040083945A - Encrypt e-mail Service to private users - Google Patents

Abstract

As the Internet-based infrastructure is formed, awareness of the use of e-mail is becoming an important form of new communication between individuals and individuals, companies and individuals, companies and enterprises in the concept of simple message exchange.

At this time, as the interest and importance of personal information protection is growing, the hacking damage of personal information is 67% (as of January 2003), as seen in the case of hacking damage that is increasing day by day. Korea Information Security Agency). Therefore, there is an urgent need for the use of secure mail, which encrypts and authenticates all email users, not only invading personal privacy but also protecting their valuable information.

The present invention is a user-centered secure mail service that allows ordinary users who use email via webmail and Outlook on the Internet to easily encrypt and send their own emails, as well as banks, securities companies, and card companies that use email bills. It is perfectly applied to financial institutions, mobile communication, wired and wireless telephone bills, etc., so it was developed to prevent personal information leakage.

The present invention can be used when the user who receives the secure mail bill downloads and uses the secure mail program, or when the email user installs the secure mail program on the PC as necessary, and uses a security protocol such as SSL or PGP currently in use. In addition, you can send 'passwords' and 'password hints' that only the recipient knows about yourself and your mail, and senders can view 'password hints' and fill in 'passwords' so that only important recipients can view them. It also guarantees confidential communication, and it also has a service function that sends an email sender's ID and password to the other's mobile phone using SMS (Short Message Service) when sending mail. In addition, users who use the secure mail program have their own passwords stored in their own mail locker, so even if their ID and password are hacked, they can use the locker to lock their mail. It provides a function to prevent information leakage.

Description

User-oriented secure mail service {Encrypt e-mail Service to private users}

An object of the present invention is to allow all users to send and receive e-mail on the web regardless of the type of e-mail used by everyone, so that anyone can easily and easily send and receive e-mail.

With the spread of the Internet, e-mail has become a major means of sending and receiving simple messages and increasingly important corporate information. This change has provided convenience for anyone who uses the Internet to easily exchange important information, but it has been acting as a side effect of leaking confidential information or personal information inside a company to third parties and causing enormous damage.

This security mail software adds security functions to the Internet mail service by providing various kinds of services such as ASP or download easy installation method, and can be perfectly applied to all e-mail providing Internet sites and Outlook programs on personal PCs. To provide. Using the keyboard input encryption included with the secure mail software, the mail is sent to the recipient along with a password hint and password. Users who have downloaded the secure mail software can use it on various kinds of Internet sites provided by the Internet or Outlook without subscribing to a separate authentication server or a separate certificate-based secure mail site. In addition, even for the novice Internet users who have a hard time thinking about security features, they can easily send mails with added security features through the GUI provided according to user convenience on email sites and Outlook programs.

Existing secure mail is an encryption technology such as PEM, S / MIME, and PGP, which provides information protection service between mail senders and receivers. However, these technologies are not compatible with each other because they are encrypted forms and algorithms, and although they are actually used in various webmail systems, encryption techniques such as PEM, S / MIME, and PGP have major limitations in protecting email between senders and receivers. Even if the above technology is used, it is difficult for general users to access it. In the case of using a secure mail having a web-based authentication server, the private key and the private key are signed by the authentication system itself. If you use a system that verifies other certificates issued with a public key, you must go through the complicated steps of signing up as a member of an email security certificate server company, and have a directory server, integrated management system, such as certificates and certificate revocation lists. Has a complex technical system for identification Technical difficulties and e-mail users that should have difficulties that need to totally trust the certificate server.

The present invention is to provide a user-centered secure mail service in the use of email on the Internet or email using a variety of individual Internet users. To do this, first of all, all sites that provide e-mail must be fully compatible with security programs, and all keyboard input information entered by e-mail users should not be disclosed to others by the recent hacking trend. Secure Mail software program should provide perfect security for keyboard input information, and it provides a small amount of software and user-oriented GUI so that anyone who is not familiar with the Internet can use Secure Mail simply by downloading. Should be available.

1 is a process of verifying an encrypted security mail bill when a bank, a card company, a securities company using a security mail bill, and a bill such as a mobile communication / wireline bill are received through an Internet email.

FIG. 2 is a flow chart of a user's use of a user who has downloaded a secure mail program from a service provider to transmit a mail using a secure mail program when sending a mail through an Internet email providing site to a third party.

3 is a flow chart of a user's use to check an email when an encrypted mail is received through an Internet email providing site.

4 is an example of applying a secure mail program to an Internet email providing site.

5 is a case where an encrypted mail is received at an Internet e-mail providing site and is applied when there is no initial secure mail program.

6 is a window in which a user having a secure mail program checks an encrypted mail at an Internet e-mail providing site, a password input window and an encrypted form of a mail, a warning window when a password does not match, and a message decryption when a password is matched. It shows the form.

7 is a process of verifying the encrypted security mail bill when receiving a bill, such as financial information and mobile communication / wired telephone bills, such as banks, card companies, securities companies using the secure mail bill through the Outlook program of the personal PC.

8 is a flow chart of a user's attempt to transfer mail using a secure mail program in an Outlook program on a personal PC.

9 is an example of applying an encrypted mail program through an Outlook program of a personal PC.

10 is a case in which encrypted mail is received through an Outlook program of a personal PC and is applied when there is no first secure mail program.

11 is a window in which a user having a secure mail program checks encrypted mail through Outlook on a personal PC, a password input window and an encrypted form of a mail, a warning window when a password does not match, and a message when a password is matched. This shows the form of decryption.

When sending a bill using a secure mail program with reference to the accompanying drawings, when a general user wants to exchange e-mails by using a secure mail program and a configuration for receiving a secure mail bill, an Internet e-mail providing site and an Outlook program on a personal PC This will be explained in detail based on the case applied to.

FIG. 1 is a flowchart illustrating a process in which a bank, a card company, a securities company, etc., and a service for transmitting a bill, such as a mobile communication / wireline bill, to a user who uses Internet e-mail through a secure mail program. In the process of verifying the encrypted secure mail bill, the first user accesses the Internet e-mail site (100) and selects the bill mail (110). If you choose a secure mail bill you can see a banner and instructions 120 to download the installation of the secure mail program to check the secure mail. If you install a secure mail program, you will be able to enter your password. The user inputs the password 130 according to the service provider's request (password hint), and if the password is the same, the user checks the secure mail bill 140 charged to the user.

2 is a process in which a user who has downloaded a secure mail program through an invoice transmits an encrypted mail to another person through an internet email using a secure mail program. After starting the encryption system (automatic start at system boot) 200, the user accesses 210 his or her Internet e-mail providing site. The user who accesses the e-mail providing site writes an e-mail through the secure mail program (220) or checks the e-mail in his or her mail storage box (230). ) And decide whether to send to the recipient or to the unencrypted email 250. If you want to send a mail using a secure mail program, a text window will appear in the user interface where you can enter your password and a password hint. If the text window is left blank and the mail is transmitted (250), the mail is transmitted in an unencrypted state.

3 illustrates a method of checking encrypted mail when an encrypted mail transmitted using a secure mail program is received. Recipients who access the e-mail-providing Internet site (300) and select encrypted mail (310) can check the message sent by the sender only in encrypted content. The message window includes the download banner and the contents of the password hint and the password. A window and an encrypted form sentence of the message sent by the sender appear, and the receiver is asked whether the encrypted e-mail is received and whether the program is downloaded 320. If you want to check the encrypted secure mail, you must install the program. If you do not install it, you can never check the encrypted mail. When the program is installed, the caret of the password window appears, and when the proper password required by the sender is input 350 through the password window, the encrypted mail is decrypted through the password verification 360 to confirm the mail sent by the sender ( 370).

Figure 4 shows a secure mail is applied to the Internet site that provides a user e-mail security bills or security program download. The user-centric password and password hint input window that appears when sending an encrypted message of e-mail appears naturally in the GUI window.

5 is a case where an encrypted mail is received, and there is no initial secure mail program, and an image banner that randomly guides the user to download a program for checking the encrypted mail is randomly displayed. The encrypted message is displayed in the window as it is. During this process, the encrypted mail recipient must download the program to check the mail.

6 is a view when the encrypted message is sent to a user who has already downloaded the secure mail program, and the password is input by looking at the password hint requested by the sender. If the password is not correct, as shown in FIG. 6, a message warning window indicating that the password does not match appears. If the password is matched, the sender's encrypted mail is decrypted to check the contents.

7 is a flowchart illustrating a process of checking an e-mail through an Outlook program of a personal PC when a bank, a credit card company, a securities company, etc., transmits a financial information and a bill such as a mobile communication / wireline charge through a secure mail program.

In the process of verifying the encrypted secure mail bill, the first user selects the bill mail through the Outlook of the personal PC (710). If you select a secure mail bill, you can see a banner and instructions 720 to download the installation of the secure mail program to check the secure mail. If you install a secure mail program, you will be able to enter your password. The user inputs a password 730 according to the service provider's request, and if the password is the same, the user checks the security mail bill charged to the user 740.

8 is a process in which a user who has downloaded a secure mail program through an invoice transmits an encrypted mail to another person through an Outlook program of a personal PC using the secure mail program, and runs a secure mail program that has already been downloaded. After starting the system to encrypt the keyboard input information (automatically at system boot) (800), start the Outlook program on the personal PC (810) and compose an email through the secure mail program (820), or use the mail in your mailbox. Confirmation 830 may be made. When composing an e-mail, first, an e-mail content is created, and then an e-mail 840 is used to determine whether to send the e-mail to a recipient or an unencrypted e-mail 850. If you try to send mail using a secure mail program, a text window will appear in the interface of Outlook and you can enter your password and password hint. After entering all the information in the text window (860), the mail will be encrypted after sending. If the mail is sent with a blank text window (850), the mail is sent unencrypted.

Figure 9 shows how a user who downloaded a security mail bill or security program is applied to the security mail through the Outlook of the personal PC. The user-centric password and password hint prompts that appear when sending e-mail encrypted appear naturally in the GUI.

FIG. 10 shows an image banner that randomly guides a user to download a program for checking an encrypted mail without receiving the first secure mail program. The encrypted message is displayed in the window as it is. During this process, the encrypted mail recipient must download the program to check the mail.

11 is a view of when an encrypted message is sent to a user who has already downloaded the secure mail program, and the password is requested by the sender. If the password is not correct, as shown in Fig. 11, a message warning window is displayed that the password does not match. If the password is matched, the sender's encrypted mail is decrypted to check the contents.

In addition to the above technology, the secure mail program also has a service function of transmitting an email sender's ID and password to a mobile phone of the other party using a short message service (SMS).

The effect of the present invention is that beginners can easily send and receive e-mails safely and easily without breaking the existing interface through the web browser in all e-mails and e-mails sent through the Outlook program of a personal PC user on the Internet. help.

The recent increase in the input of personal information on the Internet due to the activation of electronic commerce, the leakage of personal information on invoices through Internet mail, and the protection of personal privacy have become a major issue, leading to increased awareness of the importance of information protection. When using e-mail invoices with high risk of personal information leakage such as financial information of credit card companies, securities companies, mobile telecommunications and fixed-line telephone bills, or relying on mailings with high costs By encrypting the keyboard input information, which is an add-on program for all users who use the Internet, you can receive not only e-mails but also secure e-mails that allow you to view your invoices. Gradually use encrypted email bills It is possible the creation of additional benefits, such as increased postal charges, such as more number of customers (members) attracts a reduced expenditure of unnecessary portions as the image of the security of enterprise customers (members).

Claims (5)

Encrypting keyboard input information is provided for users, individuals who send e-mail invoices, and users who want to send e-mails encrypted in the Outlook program on personal PCs and all sites that provide e-mails on the Internet to send and receive important confidential information. In a method of exchanging encrypted messages of a sender and a receiver by using a program of ASP method or a download method basically, Generating a text window for inserting a password hint and a password value in the same form as an existing GUI in a mail sending input window in a site providing an email and an Outlook program; Additionally or optionally, sending a mail using a short message service (SMS) function, a user ID of the person who sent the mail, and a password encrypted with the mail; As a part of the viral communication technique, the first recipient of an encrypted mail sent through the secure mail program service is provided in the email window provided by the recipient's Internet for recognition and guidance on the secure mail, or in an Outlook message window. Displaying download instructions and banners using intuitive and visual effects, passwords and password hints, and encrypted and unverifiable messages; A step in which a user who has already installed the secure mail program does not have a download banner but only an input window for inputting a password hint and a password; Decrypting when a password for recognizing the encryption value or a password received by an additional SMS is input by a hint or an implicit message for the sender / receiver encrypted mail; Reading the encrypted secure mail and storing the encrypted contents even when storing the encrypted mail; At this time, when reading and decrypting the mail stored and encrypted in the mail storage box consistently and conveniently again, even if each password is lost can be decrypted by the master password value; The method of claim 1 Generating revenue by providing a secure mail billing service differentiated from other companies by using a secure mail service method; The method of claim 1 Securing a number of site members and generating additional revenue according to a premium service due to a partnership with a site providing an e-mail on the Internet; The method of claim 3 Recognizing the user in real time that the security function of the secure mail is not provided to the secure mail user at the e-mail providing Internet site that neglects the information security of the large customer, that is, does not provide the encrypted mail service; Encrypting the keyboard first from the keyboard input step as a protective measure against viruses or hacks that can be hacked from the input step, or leakage of personal information of the user's PC when the keyboard is input for the e-mail;