WO2012108661A2 - System and method for security authentication of a bi-directional subscriber on a communication network, and recording medium on which the method is recorded - Google Patents

Abstract

The present invention relates to an authentication method for a subscriber accessing a network page provided on a communication network such as the internet. Generally, a method is used in which a user inputs information through a keyboard on a user's personal computer so as to access a website and log into the website. However, this method always has a risk that the confidential information can be leaked through a phishing tool that provides a function of intercepting typing performed on a keyboard. In order to solve the problem mentioned above, the present invention relates to a method for security authentication of a subscriber in a page accessed on a network without using tools in a user computer such as a keyboard and a mouse, and more particularly, a system and method for security authentication of a subscriber on a communication network, which fundamentally removes the risk of phishing by being able to authenticate a subscriber for accessing a network page throught the use of a smart phone operated by a predetermined operating system. The present invention also relates to a system and method for security authentication of a bi-directional subscriber on a communication network, wherein for performing an authentication of a subscriber on a communication network, a user is allowed to recognize whether a network page (website) which the user has accessed is a correct network page, by performing an authentication for the network page which the user is attempting to access.

Description

Interactive subscriber security authentication system and method in network communication network and recording medium recording the method

The present invention relates to a method for authenticating an access subscriber of a network page provided by a network communication network such as the Internet, and more particularly, to provide a security authentication process for a subscriber that is allowed to access. The present invention relates to a two-way subscriber security authentication system and method in a network communication network that enables a secure connection in a personal terminal device (PC) that a user uses for connection using a smartphone, and a recording medium recording the method.

In general, the website of the Internet performs the subscriber authentication process to check whether the accessor is a legitimate user and allow access.

For example, it is common to set subscriber ID and password in advance, and perform subscriber authentication by inputting a predetermined ID and password to a user to access.

In addition, when using Internet banking or online card payment, an authentication method using a certificate that allows access through a password set therein as well as a certificate verifying the subscriber's identity is used. (One-Time Password) A security authentication method is used to identify and authenticate secondary subscribers using a one-time password generated by the generator.

However, all of these methods use information input by a user through a keyboard on a user's personal computer, and there is always a risk of being leaked to the outside by a phishing tool that provides a keyboard typing interception function.

Recently, in order to solve such problems with the keyboard phishing tool, a method of displaying a virtual keypad on a screen and allowing a user to input user authentication information by clicking on it with a mouse has been suggested. There is always a risk of information leakage by a phishing tool that computes and intercepts the value of.

In this way, the authentication information input by the user can be leaked to the outside at any time by phishing the keyboard value or the mouse coordinate input value on the screen through the computer terminal device used by the user. Performing visitor authentication is no longer a secure access authentication method, and a new subscriber authentication method is required.

* Accordingly, a technique for preventing phishing by using an anti-phishing program to be installed in a user terminal is used.

However, since the anti-phishing program belongs to an expensive program, it is not easy to provide an anti-phishing program on all websites to the user terminal.

In addition, the types of phishing evolved from day to day, requiring a quick update of anti-phishing programs to respond quickly.

Therefore, every time the user accesses the page, the anti-phishing program must be updated, and the user has no choice but to inconvenience the update time for secure access security.

Above all, however, it is difficult for a user surfing a web site to determine whether or not the substance of the program that leads the installation on the connected website is an anti-phishing program or a phishing tool disguised as an anti-phishing program in order to phish. It is a problem.

In view of this, a predetermined graphic seal is set in advance to indicate that the website is legitimate, not a fake website, and a predetermined graphic seal is displayed upon login or authentication by input of a keyboard or mouse. So-called 'security seal' technology (Yahoo, Auction, etc.) has been proposed to indicate that it is a legitimate website.

However, even in such a method, as described above, a method of using one means of the user's computer such as a keyboard and a mouse may be a target of phishing and thus may not be recognized as a secure security authentication method.

In order to solve such a problem, the present invention is to propose a subscriber authentication method of a network access page that does not use a means in a user computer terminal such as a keyboard and a mouse, by using a smartphone operated by a predetermined operating system. By providing subscriber authentication for accessing network pages, it is intended to provide a subscriber security authentication system and method in a network communication network that fundamentally eliminates the risk of phishing.

In addition, the present invention, in performing the subscriber authentication in the network communication network, by authenticating the network page that the user attempts to access, it is possible for the user to recognize that the network page (site) to which he connected is a legitimate network page To provide a two-way subscriber security authentication system and a method in a network communication network.

Two-way subscriber security authentication system in the network communication network of the present invention,

A smartphone with a user terminal means for accessing a page of a service site system, a subscriber security authentication service application for logging in to a user terminal means using a 2D code provided by a service site system, and a 2D from a smartphone. It includes a service site system that judges and manages the login of the user computer by performing the subscriber security authentication process for the login request using the code.

The service site system includes a web server for managing access to a service site, and a security certificate management server for performing subscriber security authentication for a login request using 2D code.

The security authentication management server includes a password information generation unit for generating service site password information, a 2D code generation unit for generating a 2D code including password information to be displayed on the service site, and generation and management of information to be transmitted to a smartphone. Security authentication control unit that controls and controls the login of the page of the subscriber who requested the subscriber security authentication by checking the information replied from the smart phone by providing the edited information on the registered token information and the token information registration management and user management information (USER AGENT). Subscriber identification information management unit for registering and managing the code, and a database in which token information and user management information (USER AGENT CODE) are registered and managed,

Subscriber security authentication service application, the token information registration process for controlling the token information registration process for subscriber authentication by accessing the service site, and determines that the subscriber security authentication mode of the user is selected to drive the camera means provided by the service site system A scan management process for scanning 2D codes, a password information generation process for generating user password information for security authentication, and decrypted scanned 2D code information to generate response information and transmit the generated information And a login approval information providing process for providing the user with login approval information in the service site system and providing the user's login selection information to the service site system according to the user's selection. Should be .

Then, the security authentication control unit of the present invention selects any one of the token information of the registered user to configure the partial information of the token information as the subscriber confirmation edit information, the subscriber confirmation edit included in the response information from the smartphone And a process for authenticating the subscriber with token information to fill the information.

Two-way subscriber security authentication method in the network communication network of the present invention,

Token information registration process in the smartphone to register the token information for subscriber authentication by accessing the service site through the application installed on the smartphone,

A primary 2D code generation and display process in a service site system for judging the user's attempt to secure the security authentication mode and displaying a 2D code including service site password information on a service site page;

It determines whether the user selects the subscriber security authentication mode, scans the primary 2D code that is checked and the scan input is confirmed, checks the service site password information, generates the user password information, and generates the service site password information and the generated user password information and A process of generating and transmitting the first 2D code response information in the user's smartphone for transmitting the user management information to a preset location information (URL);

When the response information for the 2D code is received from the smartphone through the 2D code response information generation and transmission process of the smartphone, the first 2D code generation and display process of the service site from the response information for the received 2D code Check the password information transmitted to the service site, load the token information matching the user management information (USER AGENT CODE), edit the loaded token information, and edit the user password information and the edited token information included in the response information for the 2D code. A second 2D code generation and display process in a service site system for generating a second 2D code including a location information (URL) for receiving end user information and displaying the same on a user's access page;

After checking the user's scan selection input, the user checks the user's password information sent from the information contained in the second 2D code by checking the second 2D code and judges the corresponding token information from the edited token information. Create response information for the edited token information and create new replacement user management information (NEW_USER AGENT CODE) to respond to the 2D code for user password information, generated response token information and user management information to be replaced Generating and transmitting second 2D code response information from the user's smartphone to transmit the information;

When the second 2D code response information is received from the user's smartphone, the token information is checked from the received second 2D code response information to determine whether the response token information is the correct token information transmitted. In the service site system that registers and replaces user management information (USER AGENT CODE) registered with the corresponding user with newly received user management information (NEW_USER AGENT CODE) and transmits login approval information to the application of the user's smartphone. Access authorization and certification process,

Create and display a login selection means for the user to log in from the login approval information transmitted from the service site system, and if the user enters the login selection means, the login process on the user's smartphone that transmits the login selection information to the service site; ,

When the login selection information is input from the user's smart phone, the access completion process in the service site system for completing the access authentication by allowing the login of the web page of the service site system is characterized in that it is made.

According to the present invention, it is possible to simply access the page of the service site by using a smartphone without using the device of the user's computer terminal, it is possible to further increase the convenience, and also to reduce the anxiety about authentication on the network Security authentication can be performed.

In addition, by providing a two-way security authentication between the service site system and the subscriber to the user, it is possible to provide a secure dual security system.

In the subscriber security authentication process, by providing customized advertisement information and notification information of the subscriber to the smartphone, effective advertisement information provision and notification guidance are possible, and the user can easily access and store appropriate guidance information on the smartphone. have.

1 is a view showing a schematic configuration of a two-way subscriber security authentication system in a network communication network of the present invention.

Figure 2 is a block diagram showing the configuration of a two-way subscriber security authentication system in the network communication network of the present invention.

3 is a chart showing a subscriber security authentication process in the present invention.

4 is a flowchart illustrating a token registration process performed in a smartphone in the present invention.

5 is a flowchart illustrating a token registration process performed in a service site system according to the present invention.

6 is a view showing an example of a user computer login screen displaying a 2D code in the present invention.

7 is a view showing a state of scanning a 2D code displayed on a user computer using a user smartphone in the present invention.

8 is a view showing an example of the login permission displayed on the user's smartphone with respect to the login permission of the service site system in the present invention.

9 is a view showing an example of a user computer logged in by performing a login service using a smart phone according to the present invention.

10 is a block diagram showing another embodiment of a two-way subscriber security authentication system in a network communication network of the present invention.

The configuration and operation of the two-way subscriber security authentication system and method in the network communication network according to the present invention will be described with reference to the embodiments shown in FIGS. 1 to 5.

The subscriber security authentication service application for logging in to the user computer 100 for accessing the web page of the service site system 300 and the user computer 100 using the 2D code provided by the service site system 300 is provided. Installed service smartphone 200, and service site system 300 for performing the subscriber security authentication process for the login request using the 2D code from the smartphone 200 to determine and manage the login of the user computer 100 It is configured by.

The service site system 300 includes a web server 310 for managing access to a service site, and a security authentication management server 320 for performing and managing subscriber security authentication for a login request using a 2D code. ,

The security certification management server 320 includes an OTP generator 321 for generating service site OTP information (OTP_S), a 2D code generator 322 for generating 2D codes to be displayed on the service site, and generated OTP information. And a security authentication control unit 323 for transmitting and managing 2D codes and checking information received from the smartphone 200 to manage and control webpage logins of subscribers who have requested subscriber security authentication, token information registration management and user management information (USER). The subscriber identification information management unit 324 for registering and managing AGENT CODE, and a database 325 for registering and managing token information and user management information (USER AGENT CODE).

In this invention,

The user computer 100 is a user terminal means for accessing a service site through a network, and may include a desktop, a notebook, a tablet PC, etc. including a network access means and a web page display means.

* The smartphone 200 is a personal portable communication terminal means operating by a predetermined operating system, and comprises a wireless Internet access means, a camera means for scanning and obtaining an external image, subscriber security authentication that is operated by the operating system The service application is installed.

The subscriber security authentication service application may be installed by a user provided by an application for a corresponding operating system or a system operated by the service site system 300, which is called an 'application'.

The subscriber security authentication service application is connected to the service site, the token information registration process for controlling the token information registration process for subscriber authentication, and determines that the subscriber security authentication mode of the user is selected to drive the camera means service site system 300 Scan management process for scanning 2D code provided by the CRT), OTP information generation process for generating user OTP information for security authentication, and decrypted scanned 2D code information to generate response information and generate the generated information. A process for generating and transmitting response information for managing the transmission of a message, and a process for providing login authorization information to a service site system that provides the user with login authorization information on the service site system and provides the user's login selection information to the service site system according to the user's selection. do.

Web server 310 is a server means for access management of a general web page, the security authentication management server 320 is a server for performing and managing subscriber security authentication using the smart phone 200 for the login request using the 2D code Means.

Shown authentication management server 320 may be configured to integrate into the security authentication management means in the web server (310).

The OTP generation unit 321 is a means for generating one-time password information for performing security authentication. In the present embodiment, the OTP generation unit 321 is configured as an OTP generation process as a password information generation means. It can be implemented using the password generation process.

The OTP generating unit 321 is a means for generating service site OTP information OTP_S when generating 2D code.

The generation of the OTP information can be implemented by various conventional techniques based on a random number generation technique.

The 2D code generation unit 322 generates a primary 2D code and a secondary 2D code in performing a subscriber authentication service under the control of the security authentication controller 323 as a means for generating a 2D code to be displayed on a service site. do.

The 2D code is a generic term for graphic tags displayed on the screen, and information is represented by graphic tags.

Such a 2D code may include a conventional barcode, QR code, MS_Tag, as well as any code or tag to be implemented in the future, and represents information represented by graphic elements on the screen.

The security authentication controller 323 is a control means for controlling the overall execution of the subscriber security authentication service, and controls the 2D code generator 322 and the OTP generator 321 to generate and generate OTP information OTP_S. It provides a process of managing the generation and transmission management of the 2D code including the information (OTP_S), and checks the information received from the smart phone 200 to manage the web page login of the subscriber requesting security authentication.

The subscriber identification information management unit 324 is a means for registering and managing token information registered by a subscriber using the subscriber security authentication service app of the smartphone 200 and user management information (USER AGENT CODE) assigned to the app.

The database 325 registers and manages token information and user management information (USER AGENT CODE).

The present invention having the configuration as described above performs the two-way subscriber security authentication through the following process.

Token information registration process in the smartphone 200 to register the token information for subscriber authentication by accessing the service site through the application installed on the smartphone 200 in order to use the subscriber security authentication service using the smartphone 200 and,

A primary 2D code generation and display process in the service site system 300 for determining a user's subscriber security authentication mode attempt and displaying a 2D code including a service site OTP information (OTP_S) on a web page;

The service site OTP information (OTP_U) is generated by checking the service site OTP information (OTP_S) by scanning the primary 2D code that is driven and checked by the scan input. ) And the process of generating and transmitting the primary 2D code response information in the user smartphone 200 which transmits the generated user OTP information (OTP_U) and user management information (USER AGENT CODE) to preset location information (URL). and,

When the response information for the 2D code is received from the smartphone 200 through the process of generating and transmitting the 2D code response information of the smartphone 200, the primary 2D code of the service site from the response information for the received 2D code. Check if the service site OTP information (OTP_S) is transmitted through the creation and display process, and load token information matching the user management code (USER AGENT CODE) to edit only a part of the loaded token information to respond to the 2D code. In the service site system 300 for generating a 2D 2D code including the user OTP information (OTP_U) and part of the token information and the location information (URL) to receive the end user information to be displayed on the access page of the user Second 2D code generation and display process,

By checking the user's scan selection input, the user checks the user's OTP information (OTP_U) transmitted from the information included in the second 2D code by scanning the second 2D code, and the corresponding token information from a part of the received token information. To generate the remaining token information transmitted, and to generate a new replacement user management information (NEW_USER AGENT CODE) to generate the user OTP information (OTP_U), the remaining token information and the new user management information to be replaced 2nd 2D code A second 2D code response information generation and transmission process in the user's smart phone 200 to transmit as response information for,

When the second 2D code response information is received from the user's smartphone 200, the remaining token information is checked from the received second 2D code response information to determine whether the remaining token information is information that can fill the transmitted token information. If it is determined that the information can be found, the user management information (USER AGENT CODE) registered in the user corresponding to the token information is replaced with the newly replaced user management information (NEW_USER AGENT CODE) to be registered and approved to log in with the application of the user's smartphone. Determination and authentication process of the access permission in the service site system 300 for transmitting information,

Create and display a login selection means for the user to log in from the login approval information transmitted from the service site system 300, and if the user inputs the login selection means, the user provides login selection information indicating that the user has entered the login selection means. Login process in the user's smart phone 200 to transmit to the site system 300,

When the login selection information is input from the user smartphone 200, a connection completion process is performed in the service site system 300 which permits login of a web page of the corresponding service site system 300 and completes the access authentication.

In the present invention consisting of such a process,

The token information registration process in the smartphone 200 is a process for registering the token information as the identification information of the subscriber in the service site system 300 and the smartphone 200.

Token information is information that is registered to identify the subscriber, consisting of information such as number combinations, sentences (text), images (image), the user registers through the smartphone 200 as necessary.

4 is a flowchart illustrating a token registration information registration process performed in a smartphone.

When the token information registration mode is selected by the user, a login request process for requesting a subscriber ID and password of the service site system 300 to request access to the service site system;

When connected to the service site system 300, the user token information input process for providing a token information selection menu that can be registered with the token information to allow the user to select and enter the token information to register,

A token information generation process of storing token information selected by a user and generating token information for transmission to a service site system based on the selected token information;

Token information transmission process for transmitting the generated token information to the location information (URL) of the specified service site system 300,

When the user management information (USER AGENT CODE) is received from the service site system 300, the new user management information (USER AGENT CODE) is replaced with the new user management information (USER AGENT CODE). It consists of a user management information management process.

The method may further include a user setting registration mode setting process of checking whether the initial driving state is performed and performing a subscriber setting registration mode required for driving an application in the first driving state.

In other words, even if the token information registration process is not performed, the process of configuring the subscriber setting registration mode may be performed when the subscriber security authentication service application is initially driven.

The user setting registration mode includes a password setting for driving and deleting a subscriber security authentication service application and location information use consent information that enables the application to use location information of a smartphone. It can be performed by running the subscriber security authentication service application regardless of the connection with the service site system 300.

The user setting registration mode may be configured by further setting various user option items in using the application.

5 illustrates a token information registration process performed in a service site system.

When token information to be registered is received from the subscriber security authentication service application of the connected smartphone 200, token information registration process of matching and registering token information according to the ID and password of the connected smartphone 200,

It includes the user management information transmission process for generating and transmitting new user management information (USER AGENT CODE) of the subscriber security authentication service application of the access smartphone 200 matched the token information.

Instead of the user token information registered in this way, it is possible to automatically configure the information registered in the service site system 300, such as the subscriber's mobile phone number, Mac address.

The process of generating and displaying the primary 2D code of the service site system 300 is performed on the user computer 100 so as to be scanned by the smartphone 200 in order to perform a login through the secondary code for the user's access attempt. This is the process of providing the displayed access page.

In the process of generating and displaying the primary 2D code of the service site system 300, the primary 2D code displayed in the login web page login window on the user computer 100 is the OTP information of the service site system 300. OTP_S) only.

The process of generating and transmitting primary 2D code response information in the user smartphone 200 is a process of transmitting response information for the primary 2D code provided by the service site system 300.

The smartphone 200 checks the OTP information (OTP_S) of the service site system 300 from the scan input for the primary 2D code displayed on the web page, and according to the URL information set in the subscriber authentication service application. Send response information about 2D code.

 The transmitted response information includes the generated user OTP information (OTP_U), service site OTP information (OTP_S) included in the primary 2D code, and user management information (USER AGENT CODE) of the subscriber security authentication service application.

The user management information (USER AGENT CODE) is information for the security of the subscriber as registered in the recognition of the access application and token information in the exchange of information between the service site system 300 and the smartphone 200. This information is replaced after one login or authentication procedure.

Second 2D code generation and display process in the service site system 300, by using the response information from the smartphone 200 to confirm whether the response information for the primary 2D code information transmitted by the subscriber, This is a process of generating a 2D 2D code including user OTP information (OTP_U), part of token information, and location information (URL) to receive end user information and displaying it on a user's access page.

Secondary 2D code response information generation and transmission process in the user smartphone 200,

By scanning the secondary 2D code to determine the user's scan selection input, check the user OTP information (OTP_U) transmitted from the information contained in the secondary 2D code, and responds to the remaining token information about the received token information This is a process for receiving subscriber certification.

Generate new user management information (NEW_USER AGENT CODE) to be replaced and send user OTP information (OTP_U), remaining token information and newly created user management information (NEW_USER AGENT CODE) as response information for secondary 2D code. .

The access permission determination and authentication process in the service site system 300 is a process for performing subscriber security authentication by determining whether the user is a legitimate user by checking the remaining token information in the response information received by the user smartphone 200.

If it is determined that the remaining token information transmitted from the user's smartphone 200 is information that can fill the transmitted token information, the user management information (USER AGENT CODE) registered to the user corresponding to the token information To replace with new received user management information (NEW_USER AGENT CODE).

The login process in the user smartphone 200 is a process of allowing the user to log in by displaying a login selection means (login button) selected by the user from the login approval information transmitted from the service site system 300.

The connection completion process in the service site system 300 is a process of determining whether the user selects a login from the user smartphone 200 in the service site system 300 and approves the login of the corresponding service site.

Referring to the operation of the present invention characterized by such a configuration in detail as follows.

In order for a user to use a subscriber security authentication service for logging in to a corresponding website page using the smartphone 200 proposed in the present invention, a subscriber security authentication service application (hereinafter referred to as 'application') on the smartphone 200 is used. Should be installed).

The user may request a login using the 2D code of the service site system 300 by using the application such as to receive subscriber authentication.

In the service site system 300

As described above, the user must first register the token information in the service site system 300 in order to use the subscriber security authentication service for logging in the web page using the smart phone 200.

The registration process of the token information is as shown in the flowcharts shown in Figs.

When the user executes the application and selects registration for the token information, the application for accessing the service site system 300 for the token registration requests the ID and the password.

At this time, if the application is installed and initially run, the application is executed first, and the user setting registration mode for setting whether to make the password setting and current location information available for the application execution and deletion prevention is performed first. .

If the user wants to use a password when running the application, the user can set a password in the user setting registration mode.

Most users do not need to set a password for the application alone because most of them use the smartphone 200 as a whole to lock (LOCK), but the user can set as needed.

If the token information is not registered, the application can automatically perform the token information registration mode even when it is first started.

Token information can be registered and managed in the service site system 30 and the application by performing the token information registration mode in the app as needed.

 When the token information registration mode is executed, the application requests the user with an ID and password for accessing the service site system 300.

The user inputs an ID and password registered in the service site system 300 to the smartphone 200 to request a login.

The service site system 300 confirms whether the user is a legitimate user by checking the input ID and password to approve the connection of the smartphone 200.

After that, the application provides a token information selection menu so that the user can select and input the token information to register.

The user takes a picture of himself or herself by using a desired number combination or smart phone 200, or selects pre-recorded image or text information and inputs it as token information.

The application stores the token information entered by the user and generates transmission data for registering in the service site system 300 based on the token information.

The generated token information is transmitted to the location information (URL) of the predetermined service site system 300.

When the service site system 300 receives the token information to be registered from the subscriber security authentication service application of the connected smartphone 200, by checking the ID of the connected smartphone 200 to match the token information according to the corresponding ID Register.

When the registration of the token information is completed, the new user management information (USER AGENT CODE) of the subscriber security authentication service application of the smartphone 200 registered the token information is generated and transmitted.

When the user management information (USER AGENT CODE) is received from the service site system 300, the received user management information (USER AGENT CODE) is replaced and stored instead of the existing user management information (USER AGENT CODE).

Token information is registered in such an operation process.

The token information registration mode includes a deletion mode of registered token information, and allows a user to manage deletion of previously registered token information and registration of new token information.

Meanwhile, the subscriber security authentication service process consists of the following operations.

Referring to Figure 3 as follows.

When the user requests the subscriber security authentication through the 2D code to the website page of the service site system 300 through the user computer 100, the OTP generation unit 321 of the service site system 300 in the service site OTP information (OTP_S) is generated, and the 2D code generation unit 322 generates a primary 2D code including the service site OTP information OTP_S generated as described above.

The security authentication controller 323 transmits the first 2D to the web server 310 to display the web page on the web page and provide the same to the user computer 100.

6 shows a 2D code on a web page displayed on the user computer 100.

At this time, irrespective of the subscriber security authentication request of the user's computer 100, the primary 2D code is generated and displayed on the service site web page at a predetermined time unit, and the corresponding primary 2D code is used when the user wants to log in. Can be configured to

The user runs the application installed in the smartphone 200 to run the subscriber security authentication mode.

In the application, when the subscriber security authentication mode is executed, the camera of the smartphone 200 is driven to wait to scan the primary 2D code of the web page displayed on the user computer 100.

7, when the user places the primary 2D code of the web page on the camera, the smartphone 200 inputs the primary 2D code.

As such, when the primary 2D code is input, response information is generated and transmitted to the URL information predetermined in the application. First, the user OTP information (OTP_U) is generated, and the service site OTP information included in the primary 2D code is generated. The response information is generated by including (OTP_S), the generated OTP information (OTP_U), and the user management code (USER AGENT CODE) of the application.

When the response information for the primary 2D code is received from the application of the smartphone 200 as described above, it is checked whether the service site OTP information (OTP_S) is transmitted from the response information for the received 2D code.

As a result of the check, if the service site OTP information (OTP_S) transmitted from the service site system 300 is correct, the token information matching the user management information (USER AGENT CODE) received through the response information is loaded and processed into information for subscriber verification. .

Only part of the loaded token information is edited and processed into information for subscriber confirmation.

The 2D code generation unit 322 generates a second 2D code including the user OTP information (OTP_U) received as the response information, a part of the processed token information, and URL information to receive the end user information. Displayed on the web page you are connected to.

Then, the user scans the secondary 2D code with the smartphone 100 to read the information included in the secondary 2D code.

The application checks the user OTP information (OTP_U) sent by him and prepares the response information for the second 2D code.

The corresponding token information is determined from a part of the scanned input token information, and the remaining token information is generated from the stored token information.

Then, the user management information (NEW_USER AGENT CODE) to be replaced is generated and transmitted as a response information for the secondary 2D code together with the user OTP information OTP_U and the remaining token information.

In the service site system 300, when the second 2D code response information is received from the user's smartphone 200, the remaining token information may be checked from the received second 2D code response information and filled with the token information transmitted by the remaining token information. Determine if the information is present.

If it is determined that the remaining token information can be filled, the user management information (USER AGENT CODE) registered in the user corresponding to the token information is replaced with newly received user management information (NEW_USER AGENT CODE).

Then, the login approval information for allowing the login to the application of the user smartphone 200 is transmitted.

When the login authorization information is received in the application of the smartphone 200, a login button is displayed to allow the user to select a login, and when the user selects the login button, the login selection indicating that the user has selected the login button is selected. The information is sent to the service site system 300.

When the login selection information is received, the service site system 300 allows the user to log in by authenticating the subscriber to the web page to which the user computer 100 is connected.

8 is an example of a screen displayed on the user smartphone 200 when the login is allowed.

Therefore, the user can log in as shown in FIG. 9 requested by the user computer 100 only by selecting the login of the smartphone 200.

Here, the service site system 300 may not only transmit the login approval information to the smartphone 200 but also transmit the login approval information to the corresponding web page so that the user may select and log in.

In this case, the login selection button is displayed on the login screen of the web page so that the user can log in even when the login selection button of the web page is selected.

On the other hand, in another embodiment of the present invention, the smart phone 200 may be configured to provide customized advertisement information and guidance information to the authentication subscriber when the login is permitted.

10 is a block diagram showing another embodiment of a two-way subscriber security authentication system in a network communication network of the present invention.

In another embodiment of the present invention, the security authentication management server 320 of the service site system 300, when the login authentication of the security authentication control unit 323 is confirmed, the subscriber information and the smartphone 200 provided by the web server 310 The advertisement control unit 326a provides a process for generating customized information according to the subscriber according to the location information obtained from the subscriber, and the notification data of the service site for providing the authenticated subscriber from the web server 310 is received. Guidance information generating means 326 for generating guidance information to be provided together with login approval information including a notification control unit 326b providing a process for generating notification information to be provided, and advertisement information in which advertisement information is stored and managed. The database 327 may be further included.

This is because the smartphone 200 is always a means that the user possesses and can be easily found and confirmed, so that providing the information to the smartphone 200 is expected to be an effective information transfer and increase its valid period. .

According to this, the access permission determination and authentication process in the service site system 300 checks the ID of the subscriber when the access permission is determined, requesting the subscription information and notification information of the service site to the web server 310, Generates guide information including advertisement information and notification information to be provided to the subscriber by checking whether or not the location information provided from the subscriber is added to the login approval information, and generates guide information to be transmitted to the application of the user's smartphone 200. And further comprising the transmission process,

The login process in the user's smart phone 200 may be generated when the login selection means is created so that the user can log in from the login approval information transmitted from the service site system 300, or the user may input the login selection means. The method further includes a guide information display process for displaying the guide information.

Such an embodiment of the present invention, when the login authentication is determined by the security authentication control unit 323 of the service site system 300, the guide information control means 326 is added to the login approval information to send to the smartphone 200 guide Will generate information.

The advertisement control unit 326a makes a request to the web server 310 to check whether the member registration information of the corresponding subscriber registered on the service site and the location information are provided from the smartphone 200, and the advertisement information database 327 ) To generate advertising information.

That is, according to the registration information of the member to generate advertising information to provide advertisement information about the current location of the subscriber according to the advertisement information according to gender, age, occupation and location information of the smart phone 200, To provide personalized advertising.

In addition, the notification control unit 326b receives and provides a request to the web server 310 to determine whether there is notification information registered in the service site system 300 and provides the guide information.

Such guide information may be prepared by including various information such as useful life information to be provided to the subscriber, answer information for questions requested by the subscriber, and news.

The guide information generated as described above is added to the login approval information to be provided as an application of the user smartphone 200 and transmitted to the user smartphone 200.

 When the login approval information is received from the service site system 300 as described above, as described above, while displaying the login button so that the user can select the login, the guide information is displayed or only a part (title) of the guide information is displayed. .

Alternatively, the guide information may be displayed when the user selects the login button.

The application of the user's smartphone 200 provides the user with the ability to check, edit or delete these guide information as needed.

Accordingly, the user can check the stored advertisement information and notification information by executing the application of the smartphone 200, and can be edited and deleted as necessary.

In the embodiment of the present invention as described above, but simply described in relation to the security authentication of the service site, when applying the present invention system and method to a system that requires security, such as a two-way security authentication is possible, trusted banking system In addition to providing a user can also be provided with a convenient and secure way to secure authentication.

In particular, as it can provide advertisement information and notification information to smartphones as information that can be stored on smartphones, it is necessary to guide continuous products such as banks, insurance and securities, and if the notices for each subscriber are needed separately, The invention can be usefully applied.

Claims (26)

A user terminal means for accessing a page of a service site system, a smartphone with a subscriber security authentication service application for performing a login of the user terminal means using a 2D code provided by a service site system, a 2D from the smartphone It includes a service site system for determining and managing the login of the user computer by performing the subscriber security authentication process for the login request using the code. The service site system includes a web server for managing access to a service site, and a security authentication management server for performing and managing the subscriber security authentication for a login request using a 2D code. The security authentication management server includes a password generation unit for generating service site password information, a 2D code generation unit for generating a 2D code including password information to be displayed on the service site, generation and management of information to be provided to a smartphone. Security identification control unit that controls and controls the page login of the subscriber who requested the subscriber security authentication by checking the information responded from the smartphone, subscriber identification information management unit that registers and manages the token information registration management and user management code (USER AGENT CODE); Token information and the user management information (USER AGENT CODE) is configured to include a registration management database , The authentication control unit of the security authentication management server generates a 2D code through the 2D code generation unit according to the security authentication mode request of the connected user terminal, and controls the display on the user terminal and responds to the 2D code received by the smartphone. Checking the password information generated by the password generation unit included in the information to determine whether the scan response information for the 2D code of the service site system, the subscriber according to the user management information (USER AGENT CODE) included in the primary response information By judging and loading the token information registered in the database of the subscriber, editing it with the editing token information for subscriber confirmation, generating the 2D code including the editing token information for subscriber confirmation and the user password information included in the primary response information. Generated by the user to display on the user terminal, the response contained in the second 2D code response information for the second 2D code A process of verifying the token information and verifying the subscriber by verifying that the correct response token information is included in the edit token information for subscriber verification, The access security authentication service application, it is determined that the registration process token information registration process, the user of the subscriber security authentication mode to control for the token information for performing user identity connected to said service site selected by operating a camera means A scan management process for scanning 2D codes provided by the service site system, a password information generation process for generating user password information for security authentication, and password information included in the primary 2D code information scanned through the scan management process Generation and transmission process of the primary 2D code response information including the user password information and the user management information (USER AGENT CODE) generated in the password information generation process, for the subscriber confirmation included in the secondary 2D code displayed on the user terminal Token for Edit Token Information Beam second 2D code responses, but generation information including the service site, the password information included in the 2D code on with response information, the second 2D code generates response information to generate the second 2D code response information to be transmitted and transmission process, wherein A login approval information providing process for providing the login approval information provided by the service site system to the user and providing the login selection information of the user to the service site system according to the user's selection. Interactive subscriber security authentication system. The method of claim 1, The token information registered in the database is composed of information registered in one or more of a number combination, text information, and image information. The security authentication controller selects any one of them and edits token information for subscriber verification to be included in the secondary 2D code. Two-way subscriber security authentication system in a network communication network, characterized in that the configuration. The method of claim 1, The token information registered in the database is composed of at least one of a subscriber's mobile phone number and MAC address information registered in the service site system, and the security authentication controller selects any one of them and is included in the secondary 2D code. A two-way subscriber security authentication system in a network communication network, comprising: subscriber token edit token information. The method of claim 2, The security authentication controller, in configuring the subscriber token edit token information, selects any one of the registered token information, cuts out a part of the selected token information, and configures the subscriber token edit information, and the secondary from the smartphone. The subscriber is authenticated by judging whether the remaining token information of the response token information included in the 2D code response information is the remaining token information of the editing token information for subscriber confirmation, which may constitute the token information. In generating the response information for the subscriber token edit token information in the second 2D code response information generation and transmission process of the subscriber security authentication service application, the corresponding token information is determined from the subscriber token edit token information and is truncated. Two-way subscriber security authentication system in a network communication network, characterized in that to generate the remaining token information other than the response information. The method of claim 1, The security authentication management server of the service site system is configured to further include guide information generation means for generating guide information to be provided with login approval information, and an advertisement information database storing and managing advertisement information. The guide information generating means comprises an advertisement control unit for providing a process for generating customized information according to the subscriber according to the subscriber information provided from the web server and the location information obtained from the smart phone when the login authentication of the security authentication control unit is confirmed Interactive subscriber security authentication system in a network communication network, characterized in that the. The method according to claim 1 or 5, The security authentication management server of the service site system is configured to further include a guide information generating means for generating guide information to be provided with the login approval information, The guide information generating means is configured to include a notice control unit for providing a process for generating a notice information to be provided by receiving the notice information of the service site for providing to the authenticated subscriber from the web server, the network communication network Interactive subscriber security authentication system in. The method of claim 1, The password generation unit is composed of OTP information generation means, the password information included in the 2D code is OTP information generated from the OTP information generation means, Password information generated through the password information generation process of the subscriber security authentication service application is a two-way subscriber security authentication system in a network communication network, characterized in that the OTP information. Installed on the smartphone users secure authentication token register for the service through the application process smartphone users secure authentication token information registration process performed in the service of the application to register the token information to connect to the service site, By judging the user's attempt to secure the authentication mode of the subscriber, a 2D code including the service site password information generated by the password generation unit of the security authentication management server is generated through the 2D code generation unit, and the generated 2D code is displayed on the service site page. Primary 2D code generation and display process through security certification management server of service site system, It is determined whether the user has selected the subscriber security authentication mode, and the service site password information included in the primary 2D code that is checked by the scan input is checked through a scan management process that is driven, and the user password information is generated through a password information generation process. Generate primary 2D code response information to generate primary 2D code response information including user management information (USER AGENT CODE), the confirmed service site password information, and the generated user password information. The process of generating and transmitting the first 2D code response information made by the subscriber security authentication service application of the user's smartphone which transmits the response information to the preset location information (URL), When the primary 2D code response information is received from the smartphone, confirm whether the service site password information is transmitted from the received primary 2D code response information through the process of generating and displaying the primary 2D code of the service site, and the user management information. To load the token information matched with the information and configure the loaded token information as the editing token information for subscriber verification, the location for receiving the editing token information for subscriber verification, user password information included in the first 2D code response information, and end user information. Second 2D code generation and display process made through the security certification management server of the service site system that generates the 2D code including the information (URL) through the 2D code generation unit to display on the user's access page, Determine the user's scan selection input, scan the confirmed secondary 2D code, confirm the user password information transmitted from the information contained in the secondary 2D code, and confirm the edit token information for subscriber verification included in the secondary 2D code. To generate response token information, generate new management information (NEW_USER AGENT CODE), and generate a second 2D code including user password information, the generated response token information, and the newly replaced user management information; Second 2D code response information generation and transmission process made in the subscriber security authentication service application of the user smartphone to generate and transmit the response information , When the second 2D code response information is received from the smart phone, the response token information is confirmed from the received second 2D code response information, and the correct token information for the edit token information for subscriber confirmation in which the response token information is included in the second 2D code. In case of correct token information, the user management information (NEW_USER AGENT) to be newly replaced by the user management information (USER AGENT CODE) of the subscriber registered in the database with respect to the token information used as the editing token information for the subscriber identification is determined. CODE) to register in the database and to send the login authorization information to the subscriber security authentication service application of the user smartphone access authorization determination and authentication process made through the security authentication management server of the service site system , Create and display a login selection means for the user to log in from the login approval information transmitted from the service site system through the access authorization determination and authentication process made through the security authentication management server of the service site system, and the user selects the login. A login process performed in a subscriber security authentication service application of a user smartphone performed by a login approval information providing process of transmitting login selection information to the service site by inputting a means ; When the login selection information is input from the user's smart phone is characterized in that the connection is completed through the security authentication management server of the service site system to complete the access authentication by allowing the login of the web page of the service site system A two-way subscriber security authentication method in a network communication network. The method of claim 8, In the token registration process, the token information is information registered to identify a subscriber, and bidirectionally in a network communication network, characterized in that a registration is configured through a smartphone among a number combination, a text, and an image. Subscriber Security Authentication Method. The method of claim 8, And the token information comprises at least one of a subscriber's mobile phone number and MAC address information registered in the service site system instead of user registration token information. The method of claim 8, Secondary 2D code generation and display process through the security authentication management server of the service site system , the partial information of the token information is cut out and composed of edit token information for subscriber confirmation, In the process of generating and transmitting the second 2D code response information in the subscriber security authentication service application of the user smartphone of the user smartphone , the corresponding token information is determined from the received edit token information for subscriber identification and corresponding token information. To generate the remaining token information of the truncated token information of the subscriber token edit token information as the response token information of the subscriber token edit token information, In the access authorization determination and authentication process made through the security authentication management server of the service site system, the remaining token information consisting of response token information is checked so that the remaining token information can be used for editing token information for subscriber confirmation. The two-way subscriber security authentication method in a network communication network, characterized in that to determine the remaining token information to approve the subscriber's security authentication request. The method of claim 8, The token information registration process performed in the subscriber security authentication service application in the smart phone, when the token information registration mode is selected from the user, requests access to the service site system by requesting a subscriber ID and password of the service site system. The login request process, A user token information input process of providing a token information selection menu for registering token information when the user is connected to the service site system, and allowing the user to select and input token information for registration; A token information generation process of storing token information selected by the user and generating token information for transmission to the service site system based on the token information selected by the user; A token information transmission process of transmitting the token information generated through the token information generation process to location information (URL) of a predetermined service site system; When the user management information (USER AGENT CODE) is received from the service site system, the user who replaces the existing user management information (USER AGENT CODE) with the new user management information (USER AGENT CODE) with the new user management information (USER AGENT CODE). A two-way subscriber security authentication method in a network communication network, characterized in that the management information management process. The method of claim 8 or 12, The subscriber security authentication service application installed in the smartphone checks the initial driving state when the user's execution command is input, and in the first driving state, the subscriber setting registration mode is performed in the subscriber security authentication service application of the smartphone required for driving the application. And a user setting registration mode setting process for performing the method. The method of claim 13, The user setting registration mode includes a password setting for driving and deleting a subscriber security authentication service application and location information use consent information for enabling the use of location information of a smartphone in a subscriber security authentication service application. A two-way subscriber security authentication method in a network communication network, wherein the subscriber security authentication service application is executed and executed as needed regardless of the connection with the service site system. The method of claim 8 or 11, And the service site password information and the user password information are OTP information. The method of claim 8 or 11, The access permission determination and authentication process made through the security authentication management server of the service site system checks the ID of the corresponding subscriber when the access permission is determined, requests membership information from the web server, and receives location information provided from the corresponding subscriber. It further includes a process of generating and transmitting the guide information for generating the guide information including the advertisement information to be provided to the subscriber to confirm whether or not to add to the login approval information to transmit to the subscriber security authentication service application of the user's smartphone, The login process performed in the subscriber security authentication service application of the user's smart phone, guide information for displaying the guide information when generating and displaying a login selection means for the user to log in from the login approval information transmitted from the service site system. A two-way subscriber security authentication method in a network communication network, characterized in that it further comprises a display process. The method of claim 8 or 11,  The access permission determination and authentication process performed through the security authentication management server of the service site system generates a guide information including the notice information provided by requesting the notification information to the web server when the access permission is determined and adds it to the login approval information. Further comprising the guide information generation and transmission process to transmit to the subscriber security authentication service application of the user smartphone, The login process performed in the subscriber security authentication service application of the user's smart phone, guide information for displaying the guide information when generating and displaying a login selection means for the user to log in from the login approval information transmitted from the service site system. A two-way subscriber security authentication method in a network communication network, characterized in that it further comprises a display process. The method of claim 17, The guide information includes the living information to be provided to the subscriber, the answer information for the question requested by the subscriber, news information, characterized in that the two-way subscriber security authentication method in a network communication network. The method of claim 16, In the login process performed in the subscriber security authentication service application of the user's smart phone, the guide information display process displays the guide information when the user inputs a login selection means. Authentication method. The method of claim 17, In the login process performed in the subscriber security authentication service application of the user's smart phone, the guide information display process includes displaying the guide information when the user inputs a login selection means. Way. A recording medium recording a method for authenticating two-way subscriber security in a computer-readable network communication network in which a program including a process for performing the process of any one of claims 8 to 10 or 12 is recorded. A recording medium recording a method for authenticating a two-way subscriber security in a computer-readable network in which a program including a process for performing the process of claim 14 is recorded. A recording medium recording a method for authenticating a two-way subscriber security in a computer-readable network in which a program including a process for performing the process of claim 16 is recorded. A recording medium recording a method for authenticating a two-way subscriber security in a computer-readable network in which a program including a process for performing the process of claim 17 is recorded. 20. A recording medium recording a method for authenticating two-way subscriber security in a computer-readable network in which a program including a process for performing the process of claim 19 is recorded. A recording medium recording a method for authenticating a two-way subscriber security in a computer-readable network in which a program including a process for performing the process of claim 20 is recorded.

Images