KR20070098222A - Onpass service system and the method which use the certification - Google Patents

Abstract

A system and a method for providing a one-pass service by using an ID certificate are provided to enable a user to receive various services at once by issuing the ID certificate converted from a public certificate to the user and making the user connect to a plurality of service providing servers based on the ID certificate without input of a password. A user terminal(100) receives an ID certificate by connecting to an ID certificate issuance server(200) and receives various services by connecting to the service providing servers(600) through the ID certificate. The ID certificate issuance server issues the ID certificate to the user by requesting a certificate agency server to verify the public certificate to convert the public certificate into the ID certificate. An ID agency server(300) verifies an electronic signature of the user connected through the Internet, requests the ID certificate issuance server to verify the ID certificate, and provides an ID number of the user to the service providing server. An ID certificate verification server(520) provides validity data of the ID certificate to the ID agency server. The service providing server provides the service such as replacement of a resident registration number, adult authentication, and parent agreement to the connected user.

Description

OnPass service system and the method which use the certification}

1 is a view showing the overall configuration of a one-pass service system using an identification certificate according to an embodiment of the present invention.

2 is a block diagram illustrating the detailed block configuration of the one-pass service system according to the present invention.

3 is a diagram showing a method for converting and issuing an accredited certificate into an identification certificate according to another preferred embodiment of the present invention.

4 is a diagram illustrating a method for receiving a one-pass service using an identification certificate according to another preferred embodiment of the present invention.

*** Explanation of symbols for the main parts of the drawing ***

100: user terminal 110: identity verification generation module

120: digital signature generation module 130: certificate management module

140: certificate issuance module 200: identity verification certificate server

210: certificate issuance module 220: certificate management module

230: authentication D / B 300: identity verification institution server

310: digital signature verification module 320: certificate verification module

330: identity verification module 340: digital signature generation module

350: encryption module 360: identification number processing module

370: User D / B 400: Certificate Authority Server

500: identity verification certificate verification server 510: certificate verification module

520: Verification D / B 600: service providing server

610: decryption processing module 620: digital signature verification module

630: identification number storage module

The present invention relates to a one-pass service system and service method using an identification certificate.

More specifically, the identity verification certificate is converted and issued using an existing public certificate, and a number of services are connected to a plurality of service providing servers to verify identity without receiving a separate password by using the identity verification certificate at one time. It relates to a one-pass service system and service method using a certificate.

The social security number currently used has been used as the most common and convenient means of identification, but the social security number itself contains various personal information (age, gender, region, etc.), which implies a greater risk of personal information infringement than other information. Collected social security numbers of others can be used on the Internet to replace social security numbers or adult certifications, causing problems with the theft of social security numbers, and even if exposed or stolen by others, there are difficulties in changing, updating, and abolishing them. As it is stored and managed with an index key, it is possible to collect secondary personal information using collected social security numbers.

Although real name authentication is used as a universal identity verification method on the Internet, this also does not provide accurate identity verification, and the public certificate used for identity verification does not include an identification number, so every time a user enters his / her social security number There was a problem that it is difficult to use as a replacement of the social security number due to the inconvenience of performing the verification.

The present invention has been made in order to solve the problems as described above, by using the existing authentication certificate to convert the identity verification certificate issued, access to a number of service providing servers to use the identity verification certificate without entering a separate password The purpose is to provide a one-pass service system and service method using an identification certificate that can receive a variety of services at once.

As described above, in a service system using an accredited certificate, a user accesses an identification certificate issuing server through the Internet and receives an identification certificate, and then accesses a service providing server using the identification certificate. The user terminal receiving the service and the identification certificate for issuing the identification certificate of the user by requesting the verification of the validity of the existing certification certificate to the certification authority server for issuing the conversion of the existing certification certificate at the request of the user. A server that verifies the electronic signature of a user connected through the Internet, requests and performs the identification certificate verification to the identification certificate verification server, and provides the identification number of the user to the service providing server. At the request of the identity verification authority server Services such as social security number replacement, adult authentication, parental consent, etc. using the identification certificate verification server that provides the validation data of the identification certificate to the identity verification server and the user connected through the Internet Provides a one-pass service system using an identification certificate, including a service providing server that provides a,

In the method of issuing an identification certificate using a public certificate,

(a) the user accesses the Internet using a personal terminal and inputs the social security number corresponding to the existing public certificate for the purpose of converting the existing public certificate into an identity certificate; and (b) Generating an electronic signature using an existing public certificate, and (c) Identity verification certificate contained in the existing public certificate, the entered social security number, the information generated by the digital signature and the encrypted private key. Transmitting to the issuing server, and (d) verifying the digital signature of the user with respect to the digital signature among the received information by the identification certificate issuing server, and performing the certification through the resident registration number, identity verification information, and public certificate. Requesting verification of the identity of the institution server; and (e) registering the user whose verification has been completed. Generating a registration number of the user and transmitting the registration number to the user terminal for checking by the user; and (f) the user generating a private key and requesting the identification certificate server to issue an identification certificate together with the received registration number. And (g) in accordance with the request, the identification certificate issuing server uniquely generates an identification number corresponding to the resident registration number, issues an identification certificate including the identification number, and transmits the identification certificate to the user terminal. It provides a one-pass service method using an identification certificate, including the step of storing the identification certificate in the terminal or stored in a portable memory,

In the method of using an identity certificate,

(A) inputting a certificate password of an identity verification certificate to use various services of a service providing server that a user accesses through the Internet with a user terminal; and (B) if the password is identical, Performing a signature, obtaining an identification number contained in the identity verification certificate, (C) transmitting the digital signature, identification number, and identity information to a identity verification authority server, and (D) the identity verification The institution server requests the identity verification certificate verification server to verify the validity of the received digital signature identity verification certificate, retrieves and extracts the resident registration number mapped to the identification number from the user D / B to the verified user. Verifying identity verification by comparing the extracted social security number and identity verification information and identity verification certificate, and (E) the electronic signature information. Storing in user D / B, and transmitting the identification number to the service providing server to replace the social security number, adult authentication, etc. in the service providing server; and (F) the service providing server using the received identification number. It is achieved by providing a one-pass service method using an identity verification certificate comprising the step of storing for use as a substitute for the user's social security number.

In particular, the identity verification certificate is characterized in that it provides stability and anonymity by further including an identification number mapped to the social security number one-to-one as an encrypted password and a randomly assigned 13-digit number.

Hereinafter, a one-pass service system and a service method using an identification certificate according to an exemplary embodiment of the present invention will be described in more detail with reference to the accompanying drawings.

1 is a view showing the overall configuration of a one-pass service system using an identification certificate according to an embodiment of the present invention. Referring to Figure 1 to describe the one-pass service system in more detail,

The present invention is a user terminal 100, identification certificate issuing server 200, identity verification server server 300, authorized certification authority server 400, identity verification certificate verification server 500 and service providing server 600 And the like.

The user terminal 100 may include a laptop, etc., which can be connected to the Internet as a general computer, and the user may use the identification certificate issuing server 200 to receive a newly issued identification certificate using an existing authorized certificate through the Internet. After receiving the identification certificate through the user terminal 100 or stored in a portable memory to access the service providing server 600, and then to receive a variety of services through social security number replacement, adult authentication, parental consent, etc. Using the identification certificate stored in the user terminal 100 or stored in a portable memory is used to receive the identity verification and provide a variety of services.

The identity verification certificate is randomly assigned with a unique 13-digit number that is uniquely mapped to the user's social security number, and also provides a plurality of services including an encrypted private key mapped with the certificate. It is characterized in that the server 600 can be used to replace the resident registration number.

The identification certificate issuing server 200 is a server that performs an overall function for issuing an identification certificate when the user first connects to the Internet and issues an identification certificate using an existing public certificate. Send the certificate of the certification to the authorized certification authority server 400 operated by the certification authority to request the validation of the user's public certificate, and if the validation of the user's public certificate is validated by the user It will convert the certificate into an identity certificate.

When the user wants to use various services using the identification certificate through the Internet, the identity verification authority server 300 verifies the electronic signature of the connected user and verifies the identity verification certificate with the identification certificate verification server. Request for verification of the identification certificate of the user by transmitting to the 500, verifying the identity of the user when the verification of the identification certificate of the user, and serves to provide the identification number of the user to the service providing server 600 Perform.

The identification certificate verification server 500 performs verification by searching and comparing previously stored verification D / B when the verification certificate verification request of the user is received from the identity verification institution server, and validates the identification certificate. Serves to provide the identity verification institution server (300).

The service providing server 600 is a server operated by Internet companies that provide various Internet services. The service providing server 600 requests the user to replace the resident registration number, adult authentication, parental consent, etc. The user performs a role of providing a variety of services after the verification process such as replacement of the social security number, adult authentication, parental consent using the verified identity verification certificate.

2 is a block diagram illustrating the detailed block configuration of the one-pass service system according to the present invention. Referring to Figure 2 in detail with respect to each component according to the present invention,

The user terminal 100 of the present invention is configured to further include a security identification generation module 110, an electronic signature generation module 120, certificate management module 130 and certificate issuance module 140,

The identity verification generation module 110 serves to process identity verification information generated by the identity verification technical standard of the user's digital signature authentication management system.

The digital signature generation module 120 generates a digital signature of the user with a public key cryptographic algorithm.

The certificate management module 130 interoperates with the certificate management module 220 of the identification certificate issuing server and manages and manages a life cycle of reissuance, revocation, and renewal of the identification certificate.

The certificate issuing module 140 serves to provide a function for the user to issue an identification certificate.

The identity certificate issuing server 200 is configured to further include a certificate issuing module 210, certificate management module 220 and authentication D / B (230),

The certificate issuing module 210 serves to issue and manage an identity verification certificate including the identification number of the user.

The certificate management module 220 is linked to the certificate management module 130 of the user terminal to manage the life cycle of the identification certificate of the user serves to reissue, abolish, renewal, and the like.

The authentication D / B 230 stores and provides authentication information of the user who has received the identification certificate.

The identity verification authority server 300 is a digital signature verification module 310, certificate verification module 320, identity verification verification module 330, digital signature generation module 340, encryption module 350, identification number processing module It further comprises a 360 and user D / B (370),

The digital signature verification module 310 verifies the digital signature generated by the user and the identity verification authority.

The certificate verification module 320 is linked with the certificate verification module 510 of the identity verification certificate verification server serves to verify the validity of the identity verification certificate that performed the electronic signature of the user.

The identity verification verification module 330 finds the identification number delivered by the user and the social security number corresponding to the user D / B, and performs verification by a method according to the identity verification technical standard.

The digital signature generation module 340 serves to generate the digital signature of the user as a public key cryptographic algorithm.

The encryption module 350 encrypts data securely by using encryption algorithms of the public key method and the common key method.

The identification number processing module 360 generates a unique identification number if there is no identification number corresponding to the first resident number, and if present, serves to transmit the identification number to the corresponding service providing server 600. do.

The user D / B 370 stores and provides the user's digital signature and related information.

The identity certificate verification server 500 further comprises a certificate verification module 510 and verification D / B 520,

The certificate verification module 510 verifies the validity of the identity verification certificate that has performed the electronic signature of the user.

The verification D / B 520 serves to store and provide information on the identification certificate that performed the digital signature of the user.

The service providing server 600 further includes a decryption processing module 610, an electronic signature verification module 620, and an identification number storage module 630.

The decryption processing module 610 decrypts the encrypted data using the encryption algorithm of the public key method and the common key method.

The digital signature verification module 620 is linked with the digital signature generation module 340 of the identity verification authority server to verify the validity of the identity verification certificate that performed the electronic signature of the user.

The identification number storage module 630 serves to store the identification number of the user transmitted from the identity verification authority server 300 for use as an alternative number of the resident registration number.

3 is a diagram showing a method for converting and issuing an accredited certificate into an identification certificate according to another preferred embodiment of the present invention. Referring to Figure 3 describes in detail a method of obtaining an identification certificate which is another preferred embodiment of the present invention,

After the user accesses the Internet using the user terminal 100,

In order to issue an identity verification certificate using an existing public certificate, after downloading and installing a separate ActiveX for issuing an identity verification certificate (S302),

When the user enters the resident registration number of the user corresponding to the existing authorized certificate used by the user (S304),

The user terminal 100 generates an electronic signature using the input of the resident registration number and the existing official certificate of the user (S306),

The identification information included in the existing public certificate, the resident registration number, the electronic signature, and the encrypted private key is transmitted to the identification certificate issuing server 200 (S308).

The identification certificate issuing server 200 performs an electronic signature verification of the user with respect to the electronic signature among the received information, and if the user is not verified (S310), it ends immediately.

When the user is verified by performing the digital signature verification of the user (S310), the identity verification verification is performed (S312).

The identity verification for the user is performed through the resident registration number, identity verification information and the existing public certificate. The information is transmitted to the public certification authority server 400 to request verification of identity verification and receive the result. If it is not confirmed that the identity (S312), it will end,

If it is confirmed that the user is the identity by performing the identity verification for the user (S312),

The identification certificate issuing server 200 registers the user and generates a registration number of the user (S314), and transmits it to the user terminal 100 so that the user can verify it (S316).

The user checks the received registration number, generates a private key using a public key encryption algorithm using an installed ActiveX, and requests the identification certificate issuing server 200 to issue an identity verification certificate (s318). ).

The identification certificate issuing server 200 uniquely generates and stores an identification number corresponding to the user's resident registration number randomly with 13 digits according to the user's request (S320), and receives the received private key. Issuing an identification certificate containing an identification number is transmitted to the user terminal 100 and delivered to the user (S324),

The user can store the received identification certificate in the user terminal 100 or in a portable memory, and then access and use various service providing servers 600 at step S326.

4 is a diagram illustrating a method for receiving a one-pass service using an identification certificate according to another preferred embodiment of the present invention. Referring to Figure 4 describes in detail a method of receiving a one-pass service using an identification certificate which is another preferred embodiment of the present invention,

The user accesses the service providing server 600 through the Internet as a user terminal in order to use an identification certificate stored in the user terminal 100 or stored in a portable memory by receiving a conversion issue using an existing authorized certificate. .

In order to use the various services of the service providing server 600 which the user accesses through the Internet, the user performs a process of confirming the resident number substitution, adult authentication, or parental consent, and the service providing server 600 performs the above. The user's identification certificate is requested, and the user enters a certificate password (S402).

If there is no or incorrect password input of the identification certificate of the user, the process is terminated (S402),

If the user enters the password of the identification certificate (S402),

The user terminal 100 generates an electronic signature with a user identification certificate (S404), and obtains an identification number contained in the user identification certificate stored in the user terminal 100 or stored in a portable memory. (S408).

The user terminal 100 transmits the electronic signature, identification number, identity verification information generated and obtained in the process to the identity verification institution server 300 (S408).

The identity verification authority server 300 is terminated if not verified by performing a verification on the electronic signature of the received information (S410),

If the digital signature is verified by performing verification (S410), the identification certificate verification server 500 is requested to verify the validity of the digitally signed identity verification certificate (S412).

If the validity check on the identification certificate of the user is not verified by the identification certificate verification server 500, and terminates, and if the verification is verified, the social security number of the user mapped to the identification number in the user D / B using the identification number Search and extract (S414).

The identity verification authority server 300 checks the identity of the user by searching for the resident registration number mapped to the identification number in the user D / B and comparing the extracted resident registration number and identity verification information and identity verification certificate (S416).

If the user is not confirmed that the identity is terminated, if the identity is confirmed to store the digital signature information in the user D / B to be used as evidence in future disputes (S418),

The service providing server 600 transmits an identification number to be used for social security number replacement, adult authentication, parental consent, etc. to the service providing server 600 (S420).

The service providing server 600 is to use and store the resident registration number of the user by using the received identification number (S422).

By going through the above process, the user can use various services after accessing the service providing server using only the identification certificate.

Herein, while the present invention has been described with reference to the preferred embodiments, those skilled in the art will variously modify the present invention without departing from the spirit and scope of the invention as set forth in the claims below. And can be changed.

As described above, the one-pass service system and method using the present inventor's identification certificate fundamentally solve the problem of the social security number, provide a safe and reliable system, and the parental consent, replacement of the social security number that requires identity verification on the Internet. By providing complete identity verification, adult authentication, etc., the service is effective as one of the means of replacing the social security number,

Another effect is that it can be issued online through the conversion and issuance of the existing certificate, which enables rapid spread and replacement of the social security number, provides the same safety as the certificate, and can be used as a reliable identity verification means. It is effective.

Claims (10)

In the service system using a certificate, A user terminal accessing an identification certificate issuing server through the Internet to receive an identification certificate and then accessing a service providing server using the identification certificate to provide various services; An identity verification certificate issuing server that performs verification of the validity of the existing public certificate to the public certification authority server for issuance and conversion of the existing public certificate according to the user's request; An identity verification institution server that verifies the electronic signature of the user connected through the Internet, requests and performs the identity verification certificate verification to the identity verification certificate verification server, and provides the identification number of the user to a service providing server; An identification certificate verification server for providing validation data of the identification certificate to the identity verification institution server at the request of the identity verification authority server; And A service providing server that provides services such as social security number replacement, adult authentication, and parental consent to the user connected through the Internet using the identification certificate; One-pass service system using an identification certificate that comprises a. The method of claim 1, wherein the user terminal A certificate issuing module providing a function to allow the user to issue an identification certificate; Certificate management module for managing and in charge of the life cycle of the re-issue, revocation, renewal of the identification certificate; An electronic signature generation module for generating the electronic signature of the user with a public key cryptographic algorithm; And An identity verification generation module for processing identity verification information generated by the identity verification technical standard of the electronic signature authentication management system of the user; One-pass service system using an identity verification certificate further comprising. According to claim 1, wherein the identification certificate issuing server A certificate issuing module for issuing and managing an identification certificate including the identification number of the user; A certificate management module which is linked with a certificate management module of the user terminal and manages a life cycle of the identification certificate of the user and is responsible for reissuance, revocation, and renewal; And Authentication D / B for storing and providing authentication information of a user who has received the identification certificate; One-pass service system using an identity verification certificate further comprising. The method of claim 1, wherein the identification certificate verification server Certificate verification module for checking the validity of the identity verification certificate that performed the electronic signature of the user; And A verification D / B for storing and providing information of an identification certificate for performing the digital signature of the user; One-pass service system using an identity verification certificate further comprising. According to claim 1, wherein the identity verification institution server An electronic signature verification module for verifying an electronic signature generated by the user and the identity verification institution; A certificate verification module for verifying the validity of the identity verification certificate which has been executed with the electronic signature of the user by interworking with the certificate verification module of the identification verification certificate verification server; An identity verification module for verifying the identification number delivered by the user and the social security number corresponding to the user D / B by the method according to the identification technology standard; An electronic signature generation module for generating the electronic signature of the user with a public key cryptographic algorithm; An encryption module for securely encrypting data using the encryption algorithm of the public key method and the common key method; An identification number processing module for searching for and extracting an identification number corresponding to the first social security number, generating a unique identification number if the identification number does not exist, and transmitting a corresponding identification number if present; And A user D / B for storing the user's digital signature and related information; One-pass service system using an identity verification certificate further comprising. The method of claim 1, wherein the service providing server A decryption processing module for decrypting the encrypted data using the encryption algorithm of the public key method and the common key method; An electronic signature verification module for confirming the validity of the identity verification certificate that performs the electronic signature of the user in association with the electronic signature generation module of the identity verification authority server; And Identification number storage module for storing the identification number sent by the identity verification authority server for the purpose; One-pass service system using an identity verification certificate further comprising. 7. The method of any one of claims 1 to 6, wherein the identity certificate is One-pass service system using an identification certificate, characterized in that it further comprises an identification number mapped to the social security number one-to-one as an encrypted password and randomly assigned 13-digit number. In the method of issuing an identification certificate using a public certificate, (a) inputting a social security number corresponding to an existing accredited certificate in order for a user to access the Internet using a personal terminal and convert the existing accredited certificate into an identity verification certificate; (b) generating an electronic signature using the entered social security number and the existing public certificate; (c) transmitting the identification information included in the existing public certificate, the entered social security number, the electronic signature, and the encrypted private key to the identification certificate issuing server; (d) the identification certificate issuing server performs verification of the user's digital signature on the electronic signature among the received information, and requests verification of identity verification to the authorized certification authority server through the resident registration number, identity verification information, and a certificate. Doing; (e) registering the user whose identity verification has been completed, generating a registration number of the user, and transmitting the generated registration number to the user terminal to confirm by the user; (f) the user generating a private key and requesting the identification certificate server to issue an identification certificate together with the received registration number; (g) In accordance with the request, the identification certificate issuing server uniquely generates an identification number corresponding to the social security number, issues an identification certificate including the identification number, and transmits it to the user terminal, and the user is stored in the user terminal. Storing the identification certificate in a portable or portable memory; One-pass service method using an identification certificate that comprises a. In the method of using an identity certificate, (A) inputting a certificate password of the identity verification certificate in order for the user to use various services of the service providing server connected to the user terminal through the Internet; (B) performing an electronic signature with an identification certificate if the input password matches, and obtaining an identification number contained in the identification certificate; (C) transmitting the digital signature, identification number, identity verification information to the identity verification institution server; (D) The identity verification authority server requests the identity verification certificate verification server to verify the validity of the received digitally signed identity verification certificate, and the resident registration number mapped to the identification number in the user D / B for the verified user. Verifying identity by searching and extracting the resident registration number and comparing the extracted identification number and identity verification certificate; (E) storing the digital signature information in the user D / B, and transmits the identification number to be used for the social security number replacement, adult authentication, etc. in the service providing server to the service providing server; (F) storing the service providing server so as to use the received identification number to replace the social security number of the user; One-pass service method using an identification certificate that comprises a. 10. The method of claim 8 or 9, wherein the identification certificate is The one-pass service method using an identification certificate, characterized in that it further comprises an identification number mapped to the social security number one-to-one as an encrypted password and randomly assigned 13-digit number.

Images