KR20140090012A - Variable password generation method and internet authentication system using the same - Google Patents

Abstract

The present invention relates to a variable password generation method and an internet authentication system using the same and, more specifically, to a method for preventing the leakage of personal information based on the exposure of a password in advance by generating a new password in each access by enabling a user to use information such as access date, time, and an IP address. Specially, the present invention prevents the reverse extraction of the password through the inference of a password generation method in advance by differently applying the password generation method to the generation of the password. In addition, the present invention improves the versatility of usage by being effectively applied to various systems provided on the Internet, a security system of various field, and the confirmation of electronic documents. Therefore, reliability and competitiveness in an internet authentication field, a security system field, and related fields are improved.

Description

Variable password generation method and Internet authentication system using the same

The present invention relates to a variable password generation method and an Internet authentication system using the same, and more particularly, to a system and method for generating a variable password by generating a new password every time a user accesses the information using date, time, So that the leakage of personal information can be prevented in advance.

In particular, the present invention provides a variable password generation method that can prevent a password generation method from being inferred through an inference of a password generation method through a password generation method that is applied differently to each user in generating a password, And an Internet authentication system.

Generally, in using an Internet site, a user performs login to a corresponding Internet site using an ID and a password stored and set by the user. In the Internet site, an ID and a password input by the user are checked, The validity of the user to be connected is confirmed.

Such an authentication method using a password is widely used for various purposes because it is simple in format and easy to memorize, but on the contrary, it has a problem that it is easily exposed to others.

In particular, in the case of authentication performed on the Internet, malicious codes such as Trojan horses can relatively easily leak, and it is difficult for the user to recognize the leakage.

In addition, the password set by the user has many problems in safety, for example, it may be predicted by the proprietor's propensity and the reasoning based on the analysis of the surrounding environment.

Moreover, most users use the same ID and password to register multiple sites for the sake of memorization. Therefore, even if one of a plurality of sites registered by the user is hacked or personal information is leaked , There is a problem in that a large number of sites registered by the user can be hacked.

In order to solve such a problem, Korean Patent Laid-Open Publication No. 10-2000-0066231 entitled "Variable Cipher System Variable Depending on Time and Location" (hereinafter referred to as prior art) A new password is generated each time the connection is made through the operation, thereby preventing a problem caused by the leakage of the password.

However, even in the case of the prior art, arithmetic operations of a certain pattern are applied. Therefore, when a password is hacked, an arithmetic operation applied to a method of generating a password can be backdrafted from the password itself and information on the time and place of generation of the password And knowing the arithmetic operations applied constantly, it is not possible to solve the conventional problems because the variable passwords can be continuously detected.

In particular, if an arithmetic operation is back-extracted from the password of any one user, the password of other users applying the method can be easily found.

Korean Patent Laid-Open Publication No. 10-2000-0066231 "Variable Cipher System Variable Depending on Time and Location"

In order to solve the above problems, the present invention generates a new password every time when accessing by using information such as time and an IP address, thereby generating a variable password And an Internet authentication system using the same.

In particular, the present invention provides a variable password generation method that can prevent a password generation method from being inferred through an inference of a password generation method through a password generation method that is applied differently to each user in generating a password, An object of the present invention is to provide an Internet authentication system.

In addition, the present invention provides a variable-type password generation method capable of visually providing a password generation method and allowing a user to memorize the password easily, thereby preventing a password generation method from being leaked to another person through a communication network, System. ≪ / RTI >

Further, in the present invention, when the password generation method set by the user is complicated and it is difficult to memorize the password, the password is generated by providing it as a program so that the user can easily use the password and the password can be generated only in the user terminal of the user, The present invention also provides a method of generating a variable password and an Internet authentication system using the same, in which a user does not know how to generate a password even if a program is leaked.

In order to achieve the above object, a variable-type password generating method according to the present invention is a method for generating at least one item from an identification item including at least one of a change item and a fixed item, Selection step; An object selecting step of selecting at least one of the objects of the selected individual items according to a set object selection method; An object placement step of positioning the selected object according to a set object arrangement method; And a creation method registration step of setting and registering a password generation method by the item selection step, the object selection step, and the object placement step.

Also, the change item may include at least one of a date item, a time item, and an IP address item as a line item, and the fixed item may include at least one of a character item and a numeric item as a line item, Selecting objects in a specific location from a placement order of a plurality of objects included in the individual items according to the object selection method, and the object placement step relocates the positions of the selected objects according to the object placement method, The method registration step may register, in the password generation method, how to relocate objects disposed at a certain position with respect to the objects of the individual item.

At least one of the object selecting method and the object placing method may be selected and set by the user.

In addition, the object selection method may be configured to select objects at specific locations based on today's date.

Also, the object selection method may be configured to select an object of the fixed item using a number per object of the variation item selected by the user.

Also, the object selection method may be configured to select the object of the fixed item using at least two sums of the object-by-object numbers of the variation item.

In addition, an Internet authentication system using a variable-type password generation method according to the present invention includes an Internet authentication system including a user terminal requesting authentication on the Internet and a vendor server determining whether to authenticate by the request of the user terminal , The user terminal registers the password generation method set by the variable password generation method and stored in itself in the business server, and if authentication is required, generates a password for authentication according to the registered password generation method, And the business server generates an authentication password based on the registered password generation method when the authentication is requested from the user terminal, and transmits the authentication password, which is transmitted from the user terminal, The password is compared to decide whether or not to authenticate.

The Internet authentication system using the variable-type password generation method according to the present invention includes an authentication server storing a password generation program for executing the variable-type password generation method and generating a confirmation password in accordance with the password generation program; A password generating program is downloaded from the authentication server and the password generating program is executed to register the password generating method in the authentication server. When authentication is required, the user terminal ; And determining whether or not to authenticate the user terminal by comparing the authentication password received from the user terminal with the verification password when the authentication is requested from the user terminal, Lt; / RTI > servers.

The Internet authentication system using the variable password generation method according to the present invention further includes an authentication server storing a password generation program for executing the variable password generation method; A user terminal for downloading the password generating program from the authentication server, registering a password generating method by executing the password generating program, and executing the password generating program to generate an authentication password when authentication is required; And receiving the password generation program from the authentication server, receiving the password generation method from the user terminal and registering the user ID, and when authentication is requested from the user terminal, And compares the authentication password transmitted from the user terminal with the verification password to determine whether or not to authenticate the user ID.

According to the above solution, the present invention has an effect of preventing the leakage of the personal information due to the exposure of the password by generating a new password every time the connection is made.

In particular, the present invention has an advantage in that it is possible to infer the password generation method and the reverse extraction of the password through the password generation method applied differently for each user in generating the password.

In addition, the present invention provides an advantage that the password generation method can be prevented from being leaked to other people through a communication network by visually providing a password generation method and allowing a user to memorize the password easily.

Further, in the present invention, when the password generation method set by the user is complicated and it is difficult to memorize it, it is programmed and provided so that it can be easily used by the user, so that the convenience of use can be improved.

Particularly, in generating a password by using a program, a password of a user can be generated only in a user terminal of a corresponding user, so that a user can not know how to generate a password even if a program is leaked. There is an advantage that it can be greatly improved.

In addition, the present invention can be applied not only to various systems provided on the Internet, but also to verification of electronic documents and security systems in various fields, thereby improving general versatility in use.

Accordingly, it is possible to improve the reliability and competitiveness in the Internet authentication field and the security system field as well as the similar or related field.

1 is a flowchart for explaining an embodiment of a variable-type password generating method according to the present invention.
2 is a view for explaining an embodiment of the identification item shown in Fig.
FIG. 3 is a view for explaining an embodiment of a process of generating a secret balloon according to FIG. 1 from the identification item of FIG. 2. FIG.
FIG. 4 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.
FIG. 5 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.
FIG. 6 is a view for explaining another embodiment of the process of generating a secret valence by the FIG. 1 from the identification item of FIG. 2. FIG.
FIG. 7 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.
FIG. 8 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.
FIG. 9 is a block diagram for explaining an embodiment of an Internet authentication system using a variable password generation method according to the present invention.
10 is a flowchart illustrating an embodiment of an authentication method performed in FIG.
11 is a configuration diagram illustrating another embodiment of the Internet authentication system using the variable-type password generation method according to the present invention.
12 is a flowchart illustrating an embodiment of the authentication method performed in FIG.

The variable-type password generation method according to the present invention and the Internet authentication system using the same can be variously applied, and the most preferred embodiments will be described below with reference to the accompanying drawings.

1 is a flowchart for explaining an embodiment of a variable-type password generating method according to the present invention.

Referring to FIG. 1, a user selects at least one line item in an identification item including at least one of a variation item and a fixed item made up of at least one line item (step S110). For example, when a user requests registration of a password generation method by accessing a specific site using a terminal such as a PC or a smart phone, the site provides a screen displaying identification items to the user terminal, You can choose.

When the individual item is selected by the user, at least one of the objects of the selected individual item is selected according to the set object selection method (step S120).

When the object is selected, the selected object is positioned according to the object arrangement method (step S130).

Here, the object selection method may be set such that the object is selected by the user, or the object is selected by the date of today, and the object arrangement method may be similarly applied.

The object selecting method and the object placing method will be described in more detail below.

The user sets a password generation method by the item selection step, the object selection step, and the object placement step by the above-described method and registers them in the corresponding site (step S140). Here, the site can register the position of the objects placed at a certain position with respect to the objects of the individual items to a position by the password generation method.

Then, when the user accesses the site and requests authentication, the user inputs a password to the site according to the password generation method set by the user, and the site stores the password in accordance with the password method registered by the user It is possible to confirm whether or not the generated password matches the input password, and determine whether or not to authenticate the user.

The setting and registration of the password generation method described above can be executed by an application program, and the application program can be stored and executed in a user terminal, a server of the site, and an authentication server.

For example, a user can execute an application program for password generation in a user terminal carried by the user, set a password generation method and register the program in his / her user terminal, execute the application program in the user terminal, The password can be generated according to the method.

Also, the password generation method registered in the user terminal is registered in the server and the authentication server of the site in the same manner, and the application program can be executed according to the registered method at the time of the authentication request to generate the password for authentication confirmation.

Hereinafter, an object selection method and an object placement method will be described in detail with reference to FIGS. 2 to 8. FIG.

2 is a view for explaining an embodiment of the identification item shown in Fig.

2, the identification item may include a variation item (A), a fixed item (B) and a combination item (C), wherein the variation item (A) And the fixed item B may include information that is constantly determined, such as a character item and a numerical item, as individual items. In addition, the combination item C may include calculation items such as arithmetic operations as shown in Fig. 2 (c). Here, the combination item (C) may further include various methods capable of combining the objects of the variation item (A) and the fixed item (B) in addition to the arithmetic operation.

In addition, the date item may be composed of eight objects of the year as shown in (a1) of Fig. 2, and the time item may be composed of four objects of time and minute as shown in (a2) And the IP address item may be composed of 12 objects as shown in (a3) of FIG.

Also, the character item may be composed of alphabetic characters as shown in (b1) of FIG. 2, and the numeric item may be composed of one digit as shown in (b2) of FIG.

FIG. 3 is a view for explaining an embodiment of a process of generating a secret balloon according to FIG. 1 from the identification item of FIG. 2. FIG.

In Fig. 3, when the user selects a date item (step S110), the date of today can be displayed. Then, the user selects a desired object (for example, the last digit of the year, the last digit of the month, and the two digits of the day) among the eight objects included in the date (step S120) (Step S130). Here, the selection and rearrangement of the object can be performed by dragging the object using a mouse or the like.

Therefore, if the user has memorized only his / her selected location and relocation method among the date and time of the date, the user can easily input and authenticate the password according to the date of requesting authentication later.

FIG. 4 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.

4, when the user selects both the date item and the character item (step S110), the user selects some of the date items in the object selection step (step S120), selects some objects of the character items, To determine a password generation method (step S130).

3, if the user has memorized only the position and the relocation method selected by him / her of the date of the date, the user can easily input the password and authenticate the user according to the date of requesting the authentication.

FIG. 5 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.

5, when the user selects a date item (step S110), the application program that executes the site or the password generating method according to the present invention automatically calculates the password (step S120) The generation method can be determined (step S130).

In this case, as shown in FIG. 5, when the number included in the month is 9, the total number exceeds 8 objects of the date. In this case, the object corresponding to the number obtained by subtracting 8 from the number can be selected.

FIG. 6 is a view for explaining another embodiment of the process of generating a secret valence by the FIG. 1 from the identification item of FIG. 2. FIG.

6, when the user selects a date item and a character item (step S110), the application program that executes the site or the password generation method according to the present invention divides the four digits of the year by two digits, And the four character objects corresponding to the two digits of the day (step S120), thereby determining the password generation method (step S130).

FIG. 7 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.

7, when the user selects a date item and a character item (step S110) and selects some numerical object from the date item (step S120), the application program that executes the site or the password generation method according to the present invention, The numbers selected by the user are sequentially accumulated and added, and a character object is selected by the summed value (step S120), and a password generation method can be determined (step S130).

FIG. 8 is a view for explaining another embodiment of the process of generating a secret balloon by the FIG. 1 from the identification item of FIG. 2. FIG.

8, when a user selects a date item, a character item, and an arithmetic item (step S110) and selects some objects in each item (step S120), the selected numeric object is operated on by an arithmetic object, To determine a password generation method (step S130).

When the password generation method is determined by the method as shown in FIGS. 3 to 8, the determined password generation method can be memorized by a user, registered in a user terminal, a site vendor server, an authentication server or the like, The password can be generated and confirmed.

The variable-type password generating method according to the present invention described above can be used in various types of Internet-based authentication systems. Various embodiments of the Internet-based authentication system will be described below.

FIG. 9 is a block diagram illustrating an embodiment of an Internet authentication system using the variable-type password generation method according to the present invention, and FIG. 10 is a flowchart illustrating an embodiment of an authentication method performed in FIG.

The Internet authentication system of FIG. 9 describes a case where a company that operates an Internet site manages authentication for a user without using a separate authentication company. In this case, a user terminal 100 carried by a user and a specific site And a business server 200 for operating the business server 200. Here, the user terminal 100 may include a PC 110, a smart phone 120, and a tablet PC 130.

10, when the user accesses the company server 200 through the Internet using the user terminal 100, the company server 200 transmits the variable password generation method according to the present invention only to the first user (user) May be transmitted to the user terminal 100 of the corresponding user (step S210). Here, the initial connecter may include a user who does not use the password generating program.

After downloading the password generating program from the company server 200 (step S210), the user can register the password generating method in his / her user terminal 100 according to the method shown in FIG. 1 (step S220).

Also, the user terminal 100 can transmit the registered password generation method to the company server 200 and register the generated password in the corresponding site. At this time, the vendor server 200 maps and registers a unique number (for example, a MAC address) of the user terminal 100 in addition to the password generation method, so that a terminal other than the registered user terminal 100 registers the corresponding user And can not be generated or authenticated.

When the user intends to log in to the site, the password generation program downloaded to the user terminal 100 is executed to generate an authentication password in accordance with the method registered in the user terminal 100, and the generated password is used (Authentication) to the vendor server 200 (step S230).

When authentication is requested from the user terminal 100, the vendor server 200 generates a confirmation password based on the pre-registered password generation method and compares it with the transmitted authentication password (step S240). In accordance with the comparison result And determines whether to authenticate the user (step S250).

The authentication password and the confirmation password generated as described above can be generated at a time when the user requests login through the user terminal 100 and can be used only once.

FIG. 11 is a block diagram illustrating another embodiment of the Internet authentication system using the variable-type password generation method according to the present invention, and FIG. 12 is a flowchart illustrating an embodiment of the authentication method performed in FIG.

The Internet authentication system of FIG. 11 describes the case where authentication is performed using a separate authentication company. The authentication is performed by the user terminal 100 carried by the user, the business server 200 operating a specific site on the Internet, and authentication And an authentication server 300 that performs authentication. Of course, the user terminal 100 may include a PC 110, a smartphone 120, and a tablet PC 130.

Further, the authentication server 300 stores a password generating program for executing the variable password generating method of Fig.

12, the user accesses the authentication server 300 through the Internet using the user terminal 100, downloads the password generating program from the authentication server 300 (step S310) In the user terminal 100 and the authentication server 300 (step S320).

When the user logs in the business server 200 using the user terminal 100, the user executes a password generating program downloaded to the user terminal 100 to generate an authentication password, and requests the business server 200 to log in (Step S330).

Hereinafter, the authentication process includes a method in which the vendor server 200 performs authentication in cooperation with the authentication server 300, and a method in which the vendor server 200 downloads and generates a password generation program from the authentication server 300.

In a preferred embodiment, when the login (authentication) is requested from the user terminal 100 (step S330), the vendor server 200 transmits the user ID of the login information of the user to the authentication server 300, And requests the authentication server 300 for the confirmation password (step S341).

The authentication server 300 generates a confirmation password according to the registered password generation method mapped to the received user ID, and transmits the generated password to the business server 200 (step S342).

The vendor server 200 compares the confirmation password transmitted from the authentication server 300 with the authentication password transmitted from the user terminal (step S343), and determines whether or not the user using the user terminal 200 is authenticated (Step S344).

In another embodiment, the vendor server 200 can download the password generation program from the authentication server 300 before the login request, and can register a unique password generation method for each user even if the same password generation program is used .

In addition, the vendor server 200 may request or register a method of generating a password for each user from the authentication server 300, or may register a method of generating a password of the corresponding user from the user terminal 100. At this time, the user's password generation method is mapped to the user ID used by the user and registered.

Thereafter, the vendor server 200 executes the password generation program downloaded from the authentication server 300 (step S351), and transmits the registered password generation method (Step S352), compares the authentication password transmitted from the user terminal 100 with the verification password (step S353), and determines whether or not the user ID is authenticated.

Therefore, even if the password is leaked due to the hacking, the other person can not perform the authentication using the password, so that the problem caused by the password leakage can be prevented in advance.

The variable password generation method and the Internet authentication system using the variable password according to the present invention have been described above. It will be understood by those skilled in the art that the technical features of the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof.

Therefore, it is to be understood that the embodiments described above are intended to be illustrative, and not restrictive, in all respects, and that the scope of the invention is indicated by the appended claims rather than the foregoing description, And all equivalents and modifications that come within the meaning and range of equivalency of the claims are to be embraced within their scope.

100: User terminal 200: Business server
300: authentication server

Claims (9)

An item selection step of selecting at least one line item in an identification item including at least one of a variation item and a fixed item made up of at least one line item;
An object selecting step of selecting at least one of the objects of the selected individual items according to a set object selection method;
An object placement step of positioning the selected object according to a set object arrangement method; And
And a creation method registration step of setting and registering a password generation method by the item selection step, the object selection step, and the object placement step.
The method according to claim 1,
Wherein the change item includes at least one of a date item, a time item, and an IP address item as a line item, the fixed item includes at least one of a character item and a numeric item as a line item,
Wherein the object selection step comprises:
Selecting objects in a specific location from the arrangement order of the plurality of objects included in the individual item according to the object selection method,
Wherein the object placement step comprises:
Rearranges the positions of the selected objects according to the object arrangement method,
Wherein the generating method registration step comprises:
And registering, in the password generation method, how to relocate the objects located at certain positions to the positions of the objects of the individual items.
3. The method of claim 2,
Wherein at least one of the object selecting method and the object placing method is selected and set by a user.
3. The method of claim 2,
The object selection method includes:
And to select objects at a specific location based on today's date.
3. The method of claim 2,
The object selection method includes:
And the object of the fixed item is set to be selected using the number of objects of the variation item selected by the user.
6. The method of claim 5,
The object selection method includes:
And the object of the fixed item is selected using at least two sums of the numbers of the objects of the variation item.
1. An Internet authentication system including a user terminal requesting authentication on the Internet and a vendor server determining whether to authenticate by the request of the user terminal,
The user terminal comprises:
A password generating method set by the variable-type password generating method according to any one of claims 1 to 6 and stored in the server is registered in the business server, and when authentication is required, And requests authentication from the vendor server,
The business server,
When the authentication is requested from the user terminal, generates a confirmation password based on the registered password generation method, and compares the authentication password transmitted from the user terminal with the confirmation password to determine whether to authenticate Internet authentication system using variable password generation method.
An authentication server storing a password generating program for executing the variable type password generating method according to any one of claims 1 to 6 and generating a confirmation password in accordance with the password generating program;
A password generating program is downloaded from the authentication server and the password generating program is executed to register the password generating method in the authentication server. When authentication is required, the user terminal ; And
When authentication is requested from the user terminal, the authentication server requests and transmits a confirmation password to the authentication server, compares the authentication password received from the user terminal with the confirmation password, and determines whether the user terminal is authenticated Internet authentication system using variable password generation method including company server.
An authentication server in which a password generating program for executing the variable password generating method of any one of claims 1 to 6 is stored;
A user terminal for downloading the password generating program from the authentication server, registering a password generating method by executing the password generating program, and executing the password generating program to generate an authentication password when authentication is required; And
Wherein the password generating program is downloaded from the authentication server, receives the password generation method from the user terminal and performs registration for the user ID, and when authentication is requested from the user terminal, Generating a password, and comparing the authentication password transmitted from the user terminal with the confirmation password to determine whether or not the user ID is authenticated.

Images