KR101537410B1 - System and method of connecting line identification for off-line subcription - Google Patents

Abstract

The present invention relates to a line ID access system for offline subscription and a method thereof, which comprises a step of generating a virtual ID and a password for off-line subscription and issuing an online line ID, issuing a real line ID to a user through a site , It is possible to obtain the line connection ID and password online without having to provide the ID and password through off-line, and to be able to receive the user ID and password due to the neglect of the offline subscription management, And to provide a circuit ID connection system and method thereof for subscription.

To this end, the present invention provides a line ID connection system, comprising: ID issuing means for providing an ID issuing site capable of issuing actual user specific information through online; Generates virtual user-specific information and authentication information according to the subscription of the user's line ID via offline, generates the actual user unique information and the room authentication information through the user authentication process according to the line ID subscription through the ID issuing site An ID subscription and ID management means; Authentication means for authenticating a network connection based on the generated authentication information; And a network connection means for requesting the network connection authentication to the authentication means according to the network connection request of the user terminal and connecting to the ID issuing site or allowing the network connection according to the requested network connection authentication result.

Offline, online, line ID, virtual ID, network connection

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and a method for connecting to a line ID for offline subscription,

The present invention relates to a line ID connection system and method for offline subscription, and more particularly, to a system and method for line ID connection for offline subscription by generating a virtual ID and a password for offline subscription and performing an online line ID issuance process, By connecting the network to the Internet by issuing a line ID, line ID and password can be issued online without having to provide the ID and password through off-line, and user ID and password leakage incidents To a line ID connection system for offline subscription, and a method thereof.

In providing the communication service, the communication subscriber provides the carrier with an identifier (ID) and a corresponding password that uniquely identifies the customer for network access. And the telecommunications company is confirming that it has legitimate access rights. Here, in the case of a general online service, an ID and a password are issued online without receiving a separate line subscription document.

However, in this case, ID issuance procedures are under way on the assumption that the customer is already able to connect to the Internet through a line connection. In other words, ID and password are being issued only to customers who are connected to the Internet. However, since the Internet service provider (ISP) does not allow the connection until the customer enters the line connection ID and password for accessing the Internet, it is impossible for the customer to follow the general online line ID issuance process.

A method of identifying a customer by using an ID that the customer can not recognize by using a USIM (Universal Subscriber Identity Module) card or the like and a password (PW) Is used to identify customers. Among these methods, there is a problem that it is difficult to identify a customer in a service provided without a card because a method using a card such as USIM uses an ID that the customer does not recognize. Therefore, even when the customer is identified by using the card, it is common to provide the service by subscribing the ID and password using the subscription form.

However, there is a problem in that the conventional method of applying the line ID using the subscription form causes leakage of the ID and password described in the subscription document through the subscription document. In addition, since the conventional subscription method is not a real-time issuance process, there is a problem in that it is impossible to process the same ID when a customer is already using the same ID. Furthermore, in the conventional subscription method that does not use the USIM card, the network connection itself for issuing the online ID is blocked when the customer does not apply the corresponding ID and password.

Therefore, the above-described conventional technology has a problem that the ID and password described in the subscription form can be leaked off-line and the issuing process can not be performed in real time, and thus it is difficult for the user to issue an ID and a password. This is an object of the present invention.

Accordingly, the present invention generates a virtual ID and a password for off-line subscription, performs an online line ID issuance process, issues a real line ID to a user through a site where an ID can be issued, connects to the Internet, A line ID connection system for off-line subscription, which can receive a line connection ID and a password online, and can prevent a leakage of a user ID and a password due to a lack of offline subscription management, and a method thereof There is a purpose.

The objects of the present invention are not limited to the above-mentioned objects, and other objects and advantages of the present invention which are not mentioned can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. It will also be readily apparent that the objects and advantages of the invention may be realized and attained by means of the instrumentalities and combinations particularly pointed out in the appended claims.

In order to solve the above problem, the present invention generates a virtual ID and a password for off-line subscription, executes an online line ID issuing process, issues a real line ID to a user through a site capable of issuing an ID, and connects to the Internet.

More specifically, the present invention relates to a line ID connection system, comprising: ID issuing means for providing an ID issuing site capable of issuing real user-specific information online; Generates virtual user-specific information and authentication information according to the subscription of the user's line ID via offline, generates the actual user unique information and the room authentication information through the user authentication process according to the line ID subscription through the ID issuing site An ID subscription and ID management means; Authentication means for authenticating a network connection based on the generated authentication information; And a network connection means for requesting the network connection authentication to the authentication means according to the network connection request of the user terminal and connecting to the ID issuing site or allowing the network connection according to the requested network connection authentication result.

According to another aspect of the present invention, there is provided a method for connecting a line identity, the method comprising: a virtual information generation step of generating virtual user-specific information and authentication information according to a line ID of a user via offline; An issuing site access step of processing the network connection authentication based on the generated authentication information according to a network connection request of the user terminal and connecting the user terminal to an ID issuing site capable of issuing actual user specific information through online; An actual information generating step of generating real user unique information and real authentication information by performing a user authentication process according to a line ID subscription through the connected ID issuing site; And a network connection step of processing authentication based on the generated real authentication information according to a connection request of the user terminal and allowing the user terminal to access the network.

In the present invention as described above, a virtual ID and a password for off-line subscription are generated, an online line ID issuing process is performed, a real line ID is issued to a user through a site capable of issuing an ID, and a network is connected to the Internet, It is possible to receive the line connection ID and password on-line without writing the password and password, and it is possible to prevent the leakage of the user ID and password due to the neglect of the offline subscription management.

That is, the present invention has an effect that the ID and the password can be issued online on the line connection ID without writing the ID and the password on the subscription form. Further, the present invention has the effect of fundamentally blocking the leakage of the ID and password of the customer due to the poor management of the subscription book.

In addition, since the present invention is an ID and a password issued directly by the customer, it is possible to increase the degree of identity of the customer, and since the password is also directly issued by the customer, the error of the person to be input is reduced.

Furthermore, the present invention can be applied to a conventional system in which an existing customer records an ID and a password on an application form by receiving an ID and a password online through a network connection without a customer listing an ID and a password on an application form It is possible to proceed with the issuance of the online ID while minimizing the change.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, It can be easily carried out. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail. Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The present invention is for issuing online an ID and a password for line connection even when a line connection is impossible due to lack of an ID and a password.

To this end, the present invention includes a process of verifying the validity of a user so that a user without an ID and a password can access the line, a process of confirming the identity of a user who wishes to issue an ID and a password, A process of issuing and confirming the ID selected by the user, and the like. In addition, the present invention minimizes the change of the system in which the conventional ID and password are subscription-processed.

1 and 2 are explanatory diagrams of an embodiment of a circuit ID connection system and method for offline subscription according to the present invention.

1 and 2, the line ID connection system for off-line subscription according to the present invention includes an admission server 130, an ID management server 140, an authentication server 150, an ID issuing web server 170, And a network connection server 180.

The subscription server 130 receives a line ID subscription from the user (meaning a subscriber or a customer) via the offline line, that is, a line ID subscription via the reception counter terminal 120. Then, the ID management server 140 issues an ID according to the subscription, and performs a process of establishing an authentication origin for the corresponding ID. That is, the ID management server 140 generates virtual user-specific information (a virtual ID and a virtual password, etc.) and authentication information according to the subscription information received from the subscription server 130, The user ID verification process is performed in accordance with the line ID subscription through the ID issuing site provided in the real-time issuance site. Here, the authentication server 150 receives the authentication source unit constructed by the ID management server 140, and performs authentication of the user's connection from the network connection server 180.

Then, the ID issuing web server 170 operates an ID issuing site that provides a user interface (UI) for issuing a user's ID. The user accesses the network access server 180 or the ID issuing web server 170 through the user terminal 110.

Each of these components can be integrated according to the type of the access network and the system configuration of each business site, and can be separately constructed. That is, the ID management server 140 and the subscription server 130 can be constructed as one physical system. Also, the ID management server 140 and the authentication server 150 may be integrated into one.

Hereinafter, an online line ID issuing process will be described with reference to FIG.

In the process of subscribing to a general online line ID, a user (customer) receives an application slip for an online line ID via offline from the reception counter manager (101). And the user information for the online line subscription is included in the subscription form.

Subsequently, the reception counter manager transmits the subscription request information including the user information through the reception counter terminal 120, and accepts the online line ID issuance to the subscription server 130 (102). A subscription order, that is, a subscription order, is generated through the reception counter terminal 120.

Thereafter, the subscription server 130 transmits the subscription request information to the ID management server 140 (103). Then, the ID management server 140 performs a function of establishing an authentication source unit in the authentication server 150 (104).

When user information such as an ID and a password PW for authenticating a user is established in the authentication server 150 through the subscription process, the user terminal 110 requests connection authentication through the network connection server 180 (105). Thereafter, when the connection authentication is performed, the user terminal 110 can use the network service.

Here, the network connection server 180 collects user information including a user ID and a password, and requests the authentication server 150 whether the user can use the network service (106). If the connection authentication is normally performed, the network connection server 180 permits the connection of the user terminal 110 (107). That is, the user must know the ID and the password established in the authentication server 150 in order to utilize the network service. Therefore, in general, when a user of a network product subscribes, an ID and password must be applied in advance.

However, in this general subscription process, there is a high possibility that the user ID and password described on the subscription will be leaked. Therefore, there is a method other than the application for submission when the ID management server 140 notifies the user of the ID and the password arbitrarily issued. However, this method also has a problem that a network operator arbitrarily issues an ID and a password, which are personal information of a user. In addition, since ID and password can be notified, this method is also likely to leak ID and password.

Therefore, the ID management server 140 according to the present invention issues a virtual ID and a password that the user does not know and transmits the virtual ID and the password to the ID management server 140 and the authentication server 150 or between the network connection server 180 and the authentication server 150 Internal interlocking is handled. Here, the virtual ID and the password are an ID and a password that can not be used even if leaked. The ID management server 140 adds a process of generating a virtual ID and a password so that the user can obtain a desired ID and change the password later.

The most efficient way for users to obtain their own ID and password is by using a website. The user accesses the ID / PW issuance site (ID issuance site) that manages the ID desired by the user in the ID issuance web server 170 and is issued. Here, the ID / PW issuing site can be provided to the user by the subscription server 130 or the ID management server 140. [ After the issuance of the ID is completed, the user can utilize the network by using the ID and password applied by the user.

However, in order for a user to receive an ID and a password, the user must be able to access the ID / PW issuing site in which the user issues an ID and a password without an ID and a password. Therefore, the network connection server 180 allows the user who does not know the ID and the password to access the website that issues the ID and password through the user terminal 110 in step "107 ".

2, the network access server 180 transmits the ID of the user terminal 110 to the ID / PW using one of Redirection, Tunneling, and Restricted Access. And to connect to the issuing site. Here, the redirection is to deliver the HTTP traffic transmitted from the user terminal 110 to a specific server, that is, the ID issuing web server 170. Tunneling is to deliver all the traffic transmitted from the user terminal 110 to the ID issuing web server 170. Also, Restricted Access allows only requests from the user terminal 110 to the ID issuing web server 170 among all the traffic transmitted from the user terminal 110.

Hereinafter, a case in which the network access server 180 supports redirection will be described. When the user terminal 110 fails in the access authentication using the HTTP traffic, all the traffic is transmitted to the ID / PW issuing site. Therefore, the user can issue an ID and password at the corresponding ID / PW issuing site.

If redirection is not supported at the network connection server 180, a tunneling technique can be used. The tunneling technique is to create a tunnel between the network connection server 180 and the ID issuing web server 170. The network connection server 180 transmits all traffic transmitted from the user terminal 110 to the ID issuing web server 170 via the corresponding tunnel, and processes the traffic at the ID / PW issuing site. This gives you a result similar to redirects.

If the network access server 180 does not support both redirection and tunneling, the network access server 180 supports the user terminal 110 using the restricted access method. In this case, when a well-known ID and a password are inputted in the user terminal 110, the network connection server 180 allocates an IP address to the user terminal 110 so that the user can connect to the network. The network connection server 180 restricts the list of IP addresses accessible from the corresponding user terminal 110. The network connection server 180 allows traffic to be delivered only to a specific IP address (i.e., the IP address of the ID issuing web server 170).

Unlike the redirection or tunneling, the restricted access method is not capable of forcibly moving all the traffic from the web browser of the user terminal 110 to the ID / PW issuing site. In case of restricted access method, the user should directly try to connect to the ID / PW issuing site. There is a difference in that the user must enter a well-known ID and password. By using these three methods, the network connection server 180 can access the ID / PW issuing site through the user terminal 110 even when the user does not have his own ID and password.

The network connection server 180 sets one of the above three methods to be used. In the authentication server 150, a virtual ID and a password generated in step "104 " The authentication server 150 transmits the authentication result to the network connection server 180 so that redirection, limited access, or tunneling can be performed for access authentication through the virtual ID. When any one of the connection authentication fails, the authentication server 150 transmits an authentication result to the network access server 180 through the method that can be supported by the network connection server 180, Lt; / RTI > Also, the network connection server 180 may process the connection authentication through the basic setting.

When the user is able to access the ID issuing web server 170 through the user terminal according to the above-described process, the user must receive a real ID and password (actual user unique information) rather than a virtual ID and password. To do this, the user first inputs his / her user information and confirms his contract information at the ID / PW issuing site.

In general, the user's name and resident registration number are input. Then, the ID issuing web server 170 inquires the ID management server 140 of the user's name and resident registration number, and performs an ID subscription process.

FIG. 2 shows a process of authenticating a user himself / herself by an authentication key method through a credit evaluation server 160 by an external principal verification institution. The ID issuing web server 170 can directly support an authentication method using an official certificate or a credit card in cooperation with the credit evaluation server 160 of the external principal verification institution. This subscription process can be performed in various ways.

If access to the ID / PW issuing site is allowed in step "107 ", the user accesses the ID / PW issuing site through the user terminal 110. [ The user terminal 110 transmits the input user information to the ID issuing web server 170 through the network connection server 180 (201). Herein, the user information includes a user identification number and personal authentication information. For example, the user information includes a name and a resident registration number that can uniquely identify the user. Alternatively, the user information may include an ARS telephone number, a mobile phone number, and the like of the user's own name to confirm that the user is the user.

When the ID issuing web server 170 transmits the inputted user information to the ID management server 140, the ID management server 140 confirms the contract information (202). That is, the ID management server 140 determines whether the user is a contracted user (customer) based on the input information.

Here, the user information stored in the ID management server 140 is compared with the transmitted user information to determine whether the user is actually present. If the user does not actually exist, the ID management server 140 may display an error notification and an end process of the subscription process to the user terminal 110 through the ID issuing web server 170.

The ID management server 140 requests the credit evaluation server 160, which is a credit evaluation company, to check whether the user is the user or not, and generates and verifies the authentication key. (203). For example, a mobile phone short message (SMS), a home phone ARS, or an authorized certificate may be used as the identification method.

After the credit evaluation server 160 confirms the user's information, the credit evaluation server 160 generates an authentication key and transmits the generated authentication key to the user terminal 110 (204). The credit evaluation server 160 checks based on the user information input by the user and the database information of the credit evaluation server 160. As a result of the verification, when the identity verification by the identity verification institution is successful, the credit evaluation server 160 sends the authentication key to the user using a short message (SMS). On the other hand, if the identity verification fails in the identity verification institution, the credit rating server 160 ends the user error notification and subscription process to the user.

Thereafter, the user inputs the transmitted authentication key through the user terminal 110 (205). Then, the ID issuing web server 170 confirms the input authentication key and requests the ID management server 140 to confirm whether or not the user is authenticated (206). Here, the verification method for the authentication key may be performed in the ID management server 140, the credit evaluation server 160, or the ID issuing web server 170.

Thereafter, the ID management server 140 may terminate the error notification and subscription process to the user if the authentication key value is in error. On the other hand, if the identity verification of the user is successful, the ID management server 140 requests the ID issuing web server 170 to generate a contract list in which an actual user ID should be generated, and provides the ID list to the user through the ID / PW issuing site 207). That is, the ID management server 140 inquires about the contents to issue an actual user ID from the user information stored in the database. Then, the ID management server 140 provides the inquired contract contents to the user through the ID / PW issuing site.

If the ID is available, the user requests the actual user ID through the user terminal 110 (208). Then, the ID issuance web server 170 transmits the requested real user ID to the ID management server 140 through the user terminal 110, and requests the ID management server 140 to generate the corresponding ID (209).

Then, the ID management server 140 checks whether the actual user ID is available for the actual line ID selected by the user. If the requested real user ID is not available as a result of the check, the ID management server 140 notifies the user of the fact and the process is performed again from the step 208. [ On the other hand, if the requested real user ID is available as a result of the check, the ID management server 140 establishes the real authentication server of the ID management server 140 and the authentication server 150 with the actual user ID requested by the user do. That is, the ID management server 140 generates a real authentication source and transmits it to the authentication server 150 (210).

After the ID application is completed in step 210, the user requests authentication to terminate the connection to the network connection server 180 through the user terminal 110 and to reconnect the network connection server 180 (step 211).

In response to the connection authentication request from the user terminal 110 via the actual user ID, the network connection server 180 requests the authentication server 150 to perform the authentication process, The results are received (212).

Then, the network connection server 180 permits the user to access the Internet through the user terminal 110 in accordance with the received authentication result (213).

On the other hand, changes such as addition or deletion in the above-described process are possible. For example, in the case of receiving the passwords in the steps of " 208 " and "209 ", it is possible to issue a password together with the actual user ID of the user. The following is a case where the "208" process is also issued with a password.

If the actual user ID is available in step 208, the user inputs the actual user ID to be finally used through the user terminal 110, inputs the password to be used by the user, . In step " 209 ", the ID issuing web server 170 transmits the requested real user ID and password to the ID management server 140 through the user terminal 110 to request the ID generation server 170 to generate the corresponding ID.

Thus, the process of confirming that the user is the user can be performed through various processes.

For example, an authentication number is sent to a user matching the name of the mobile phone provided by the credit evaluation server 160 by a short message (SMS), and only the user who can receive the authentication number is authenticated . In addition, there is a method of using an ARS service of the intelligent network to call an authentication number to a telephone number of a user included in user information previously input by a user. In addition, there is a method of using a public certificate of the credit evaluation server 160, and the method of confirming that the person is the principal can be performed in various ways.

According to each method, information for identifying the user, such as the mobile phone number of the applicant's name in the case of a short message, the telephone number requested by the applicant in the case of the ARS, or the information of the universally recognized certificate in the case of an accredited certificate, The server 170, the ID management server 140, or the credit evaluation server 160 must collect it. Each server can use this to perform identity verification.

In addition to the above examples, there are various methods such as authentication using an account number and a card number. The present invention proposes a method that does not rely on the identity verification method.

3 is a flowchart illustrating an identity verification process and a circuit ID issuance process using a short message according to an exemplary embodiment of the present invention.

FIG. 3 shows an ID / PW issuance process using an authentication method using a short message provided by the credit evaluation server 160 according to an embodiment of the present invention. 3 shows that the user is using the ID / PW issuing site connected through the access method such as redirection, tunneling, or limited access using his or her own user terminal 110. [ The external organization sends the authentication number to the user using the short message.

The user terminal 110 inputs the user information through the ID / PW issuance web site (302). Then, the ID management server 140 receives the user information through the ID issuing web server 170 and determines whether it is a contracted user (customer) based on the user information (304).

If the user confirmation is not obtained, the ID management server 140 displays an error message indicating that the user has not been confirmed through the ID issuing web server 170 on the ID / PW issuance website (306). On the other hand, when the user is confirmed, the ID management server 140 requests the identity verification authority to confirm the identity (308). That is, the ID management server 140 requests the credit evaluation server 160, which is operated by the principal verification institution such as a credit evaluation company, to confirm whether the user is the principal.

Then, the credit evaluation server 160 confirms whether the user whose identity verification is requested is the name of the mobile phone included in the user information (310).

If the result of the check (310) is that the user and the name of the mobile phone do not match, the credit evaluation server 160 notifies the user of the error message (312). On the other hand, if the user matches the name of the mobile phone, the credit evaluation server 160 sends an authentication number (authentication key) using the SMS message to the mobile phone (314).

The user inputs the authentication number included in the short message to the ID / PW issuance website through the user terminal 110 (316).

Then, the ID issuing web server 170 confirms the entered authentication key, requests the ID management server 140 to confirm whether or not the identity is authenticated, and the ID management server 140 checks whether the authentication number matches (318) . Here, the verification method for the authentication number can be divided into a verification process in the ID management server 140, a verification process in the credit evaluation server 160, and a verification process in the ID issuing web server 170.

Thereafter, when the authentication numbers do not match, the ID management server 140 notifies the user of the error message (320). On the other hand, if the authentication numbers match, the ID management server 140 causes the ID issuing web server 170 to provide the user with a list of contracts for which the user ID should be generated (322). That is, the ID management server 140 inquires about the content to be issued ID from the user information stored in the database. The ID management server 140 provides the inquired contract contents to the user through the ID / PW issuing site.

The user selects a contract, inputs a new user ID to be finally used, and requests the new user ID through the user terminal 110 (324). Then, the ID management server 140 checks whether the ID is available for the line ID selected by the user (326).

If the check result 326 indicates that the requested user ID is not available, the ID management server 140 performs the process again from the step 322. [ If the requested user ID is available, the user inputs the password to be used through the user terminal 110 to the ID issuing web server 170 (328). Then, the ID issuing web server 170 transmits the requested user ID and password to the ID management server 140 through the user terminal 110, and requests the final ID generation (330).

The ID management server 14 reaffirms whether the user information is matched (332).

If the confirmation result (332) and the user information do not match, the ID management server 14 notifies the user of the error message (334). On the other hand, if the user information matches, the ID management server 14 generates an ID and establishes a real authentication origin in the authentication server 150 (336). Then, the ID management server 14 requests the user to reconnect (336).

FIG. 4 is a flow chart of another embodiment of an identity verification process and a circuit ID issuance process through ARS according to the present invention.

FIG. 4 shows an example of performing authentication using only self-constructed information without a connection with an external credit evaluation company or the like. It is checked whether the ARS reception telephone number stored in the subscription server 130 matches the ARS reception telephone number entered by the user. If they match, the ARS notifies the corresponding telephone number of the authentication number and actually use the telephone number Whether or not there is a difference between the two. In addition, it is possible to change the procedure so that the identity can be verified through various means such as an official certificate, a credit card, and an account number authentication.

Specifically, the user terminal 110 inputs the user information through the ID / PW issuance web site (402). Then, the ID management server 140 receives user information through the ID issuing web server 170 and determines whether the user is a contracted user (customer) based on the user information (step 404).

If the user confirmation is not obtained, the ID management server 140 displays an error message indicating that the user has not been confirmed through the ID issuing web server 170 on the ID / PW issuance website (306). On the other hand, when the user is confirmed, the ID management server 140 requests the ARS telephone number of the subscription information to the subscription server 130 (408). Here, the subscription information may be stored in the ID management server 140.

Then, the ID management server 140 determines whether the ARS reception telephone number matches the ARS reception telephone number input by the user (410).

If the result of the check (410) indicates that the user does not match the name of the mobile phone, the ID management server 140 notifies the user of the error message (412). On the other hand, if the ARS telephone number of the subscription information matches the telephone number of the ARS receiving user input, the ID management server 140 sends the authentication number (authentication key) to the mobile phone using the ARS, It is determined whether it is actually available (414).

Then, the user inputs the authentication number to the ID / PW issuance website through the user terminal 110 (416).

Steps 418 to 438 may be performed in the same way as in steps 316 to 311. Thus, the description of steps 418 to 438 will be omitted. do.

The ID issuing web server 170 confirms the entered authentication key and requests the identity management server 140 to confirm whether or not the identity is authenticated. The ID management server 140 confirms whether the authentication number matches the authentication number (418). Here, the verification method for the authentication number can be divided into a verification process in the ID management server 140, a verification process in the credit evaluation server 160, and a verification process in the ID issuing web server 170.

Thereafter, when the authentication numbers do not match, the ID management server 140 notifies the user of the error message (420). On the other hand, if the authentication numbers match, the ID management server 140 causes the ID issuing web server 170 to provide the user with a list of contracts for generating the user ID (422). That is, the ID management server 140 inquires about the content to be issued ID from the user information stored in the database. The ID management server 140 provides the inquired contract contents to the user through the ID / PW issuing site.

The user selects a contract, inputs a new user ID to be finally used, and requests the new user ID through the user terminal 110 (324). Then, the ID management server 140 checks whether the ID is available for the line ID selected by the user (426).

If the check result 426 indicates that the requested user ID is not available, the ID management server 140 performs the process from step 422 again. On the other hand, if it is determined that the requested user ID is available, the user inputs the password to be used through the user terminal 110 to the ID issuing web server 170 (428). Next, the ID issuing web server 170 transmits the requested user ID and password to the ID management server 140 through the user terminal 110 to request the final ID generation (430).

The ID management server 14 reaffirms whether the user information matches (432).

If the user information does not match the confirmation result (432), the ID management server 14 notifies the user of the error message (434). On the other hand, if the user information matches, the ID management server 14 generates an ID and establishes a real authentication origin in the authentication server 150 (436). Then, the ID management server 14 requests the user to reconnect (438).

On the other hand, in the process of transmitting information between each server and the user, a security system must always be provided. This is to prevent the possibility of user information leakage. To this end, the ID management server 140 allocates an arbitrary session key for each process. The ID management server 140 must provide a response only when the corresponding session key is matched. Also, the ID management server 140 sets the expiration time of the session key so that the response is not provided after a predetermined time. In addition, the ID management server 140 must introduce a firewall for security. Also, the ID issuing site and the ID management server 140 may be separated.

Meanwhile, the method of the present invention as described above can be written in a computer program. And the code and code segments constituting the program can be easily deduced by a computer programmer in the field. In addition, the created program is stored in a computer-readable recording medium (information storage medium), and is read and executed by a computer to implement the method of the present invention. And the recording medium includes all types of recording media readable by a computer.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention. The present invention is not limited to the drawings.

1 and 2 are diagrams for explaining an embodiment of a circuit ID connection system and method for off-line subscription according to the present invention,

3 is a flowchart illustrating an identity verification process and a circuit ID issuance process using a short message according to an exemplary embodiment of the present invention.

FIG. 4 is a flowchart illustrating an identity verification process and a circuit ID issuance process according to another embodiment of the present invention.

DESCRIPTION OF THE REFERENCE NUMERALS

110: User terminal 120: Reception window terminal

130: Subscription server 140: ID management server

150: Authentication server 160: Credit evaluation server

170: ID Issuing Web Server 180: Network Access Server

Claims (13)

delete In a circuit-ID connection system, An ID issuing means for providing an ID issuing site capable of issuing actual user unique information through online; Generates virtual user-specific information and authentication information according to the subscription of the user's line ID via offline, generates the actual user unique information and the room authentication information through the user authentication process according to the line ID subscription through the ID issuing site An ID subscription and ID management means; Authentication means for authenticating a network connection based on the generated authentication information; And And network connection means for requesting the network connection authentication to the authentication means according to the network connection request of the user terminal and connecting the network to the ID issuing site or allowing the network connection according to the requested network connection authentication result, Wherein the ID subscription and ID management means comprises: A subscription means for receiving a line ID subscription from the reception counter terminal, which does not have actual user-specific information via offline; And And generates virtual user specific information and authenticity information according to the line ID subscription from the subscription means, generates real user specific information and room authentication information through a user authentication process in accordance with the line ID subscription through the ID issuing site ID management means A line ID connection system for off-line subscription. 3. The method of claim 2, Wherein the ID management means comprises: Wherein the user identification process is performed using a short message or an authentication key through an ARS (Automated Response System) of the intelligent network when there is no actual user specific information. 3. The method of claim 2, Wherein the ID issuing means comprises: And if the actual user specific information does not exist, performing a user authentication process through an authorized certificate or a credit card transaction in cooperation with the ID issuing site and an external credit evaluation server. 5. The method according to any one of claims 2 to 4, Wherein the network connecting means comprises: And connects the user terminal to the ID issuing site using any one of a redirect connection, a tunneling connection, and a restricted connection according to the requested network connection authentication result. 6. The method of claim 5, Wherein the network connecting means comprises: And transmits the traffic of the user terminal to the ID issuing site when the network connection authentication of the user terminal fails as a result of the requested network connection authentication. 6. The method of claim 5, Wherein the network connecting means comprises: And generating a tunnel between the user terminal and the ID issuing site to forward traffic from the user terminal to the ID issuing site through the generated tunnel. 6. The method of claim 5, Wherein the network connecting means comprises: And connecting the user terminal to the ID issuing site when the address of the ID issuing site is input by the user, wherein the user terminal restricts a list of internet addresses accessible to the user terminal. delete delete In a circuit ID connection method, A virtual information generating step of generating virtual user unique information and authentication information according to a line ID of a user via offline; An issuing site access step of processing the network connection authentication based on the generated authentication information according to a network connection request of the user terminal and connecting the user terminal to an ID issuing site capable of issuing actual user specific information through online; An actual information generating step of generating real user unique information and real authentication information by performing a user authentication process according to a line ID subscription through the connected ID issuing site; And And a network connection step of processing authentication based on the generated real authentication information according to a connection request of the user terminal and allowing the user terminal to access the network, The issuing site accessing step includes: And transmits the traffic of the user terminal to the ID issuing site when the network connection authentication of the user terminal fails as a result of the requested network connection authentication. In a circuit ID connection method, A virtual information generating step of generating virtual user unique information and authentication information according to a line ID of a user via offline; An issuing site access step of processing the network connection authentication based on the generated authentication information according to a network connection request of the user terminal and connecting the user terminal to an ID issuing site capable of issuing actual user specific information through online; An actual information generating step of generating real user unique information and real authentication information by performing a user authentication process according to a line ID subscription through the connected ID issuing site; And And a network connection step of processing authentication based on the generated real authentication information according to a connection request of the user terminal and allowing the user terminal to access the network, The issuing site accessing step includes: And generating a tunnel between the user terminal and the ID issuing site to transmit the traffic from the user terminal to the ID issuing site through the generated tunnel. In a circuit ID connection method, A virtual information generating step of generating virtual user unique information and authentication information according to a line ID of a user via offline; An issuing site access step of processing the network connection authentication based on the generated authentication information according to a network connection request of the user terminal and connecting the user terminal to an ID issuing site capable of issuing actual user specific information through online; An actual information generating step of generating real user unique information and real authentication information by performing a user authentication process according to a line ID subscription through the connected ID issuing site; And And a network connection step of processing authentication based on the generated real authentication information according to a connection request of the user terminal and allowing the user terminal to access the network, The issuing site accessing step includes: And connecting the user terminal to the ID issuing site when the address of the ID issuing site is input through the user terminal, wherein the user terminal restricts a list of internet addresses accessible to the user terminal.

Images