KR100563004B1 - System and method for authenticating access to online content - Google Patents

Abstract

The present invention relates to a system and method for authenticating an access right to online content. The present invention relates to a system for providing online content using a storage device that stores user information such as an ID and password. The present invention relates to a system and method for automatically authenticating access to online content that provides a differentiated service according to a user's level without automatically entering an authentication process.

A system for authenticating access rights to online content according to an embodiment of the present invention includes a storage device for managing user information and an authentication program, a terminal for transmitting the user information using the authentication program, and the user information. Includes content providers to send online content based on authentication results.

Storage devices, content providers, user information, certification programs

Description

System and method for authenticating accessing on-line contents}

1 is a conceptual diagram illustrating content provision according to a user's online authentication in the related art.

2 is a conceptual diagram illustrating content provision by a conventional user information unauthorized use online.

3 is a conceptual diagram illustrating a system for authenticating an access right to online contents according to an embodiment of the present invention.

4 is a conceptual diagram illustrating communication between a web browser and a content provider of a terminal according to an embodiment of the present invention.

5 is a block diagram illustrating a storage device according to an exemplary embodiment of the present invention.

6 is a block diagram illustrating a content provider according to an exemplary embodiment of the present invention.

7 is a flowchart illustrating a process of authenticating an access right to online contents according to an embodiment of the present invention.

<Explanation of symbols on main parts of the drawings>

510: storage unit 520: control unit

530: communication unit

The present invention relates to a system and method for authenticating online content. More particularly, the present invention relates to a system and a method for authenticating online content, and more particularly, when a user accesses a site providing online content using a storage device that stores user information such as an ID and a password. The present invention relates to a system and method for automatically authenticating online content without an information input process and providing differentiated services according to user ratings.

Along with the spread of the Internet, online commerce using it is actively progressing. Through online commerce, a user makes an online payment for a product to be purchased and receives the product. The payment method and the receiving method are changed according to the type of the product. In general, necessities such as books and clothing are provided by a payment made at the same time as the order, but information valid on a personal computer (PC) such as materials and multimedia data may be provided by a payment made at the same time as the order, or performed in advance. It may be provided only by the user authentication process by the settlement payment or the service of the provider.

Here, the user authentication procedure consists of the user providing an account, a password, personal information and an address to a provider.

1 is a conceptual diagram illustrating content provision according to a user's online authentication in the related art.

As described above, in general, an online content provider receives user information from a user, undergoes an authentication process, and provides online content to an authenticated user. The online content includes materials and multimedia data, and the content providing method includes web page movement, data transmission, or data stream transmission.

Generally, only user account and password are used for user information, but user name and social security number may be used depending on the importance.

In order to send user information to a content provider, a user enters a pre-registered account and password on a web browser. If a user loses an account or password, the user must receive it again according to the procedure provided by the content provider. This can be very cumbersome for the user. In addition, when a user wants to input user information using a PDA (Personal Digital Assistant), a mobile phone, etc., it is not easy to input characters as much as a PC, and there is a problem of avoiding the same account when registering a user.

2 is a conceptual diagram illustrating content provision by a conventional user information unauthorized use online.

There is also a risk of unauthorized theft by others when the user informs the user of his / her user information. At this time, there is an unreasonable need for the contents provider to provide services to others who have unauthorized access with the authenticated user information. .

In order to prevent this, the content provider may restrict the provision of the content to the users connected to the same account at the same time, but this may be a limitation for the authenticated user.

An object of the present invention is to automatically perform an authentication procedure without inputting user information by a user when accessing a site providing online content using a storage device storing user information such as an ID and a password. .

In addition, an object of the present invention is to provide a differentiated service according to the grade of the connected user.

The objects of the present invention are not limited to the above-mentioned objects, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

In order to achieve the above object, a system for authenticating access rights to online content according to an embodiment of the present invention includes a storage device for managing user information and an authentication program, and a terminal for transmitting the user information using the authentication program. And a content provider that receives the user information and transmits online content according to an authentication result.

According to an embodiment of the present invention, a method for authenticating an access right to online content includes checking whether an authentication program is installed, executing the authentication program, and transmitting user information using the executed authentication program. And receiving the online content according to whether or not the transmitted user information is authenticated.

According to an embodiment of the present invention, a method for authenticating an access right to online content includes receiving user information, checking whether the user information is authorized to receive content, and transmitting online content according to the test result. Steps.

Specific details of other embodiments are included in the detailed description and the drawings.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but can be implemented in various different forms, and only the embodiments make the disclosure of the present invention complete, and those of ordinary skill in the art to which the present invention belongs. It is provided to fully inform the person having the scope of the invention, which is defined only by the scope of the claims. Like reference numerals refer to like elements throughout.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

3 is a conceptual diagram illustrating a system for authenticating an access right to online contents according to an embodiment of the present invention.

The system for authenticating access rights to online content includes a content provider 310, a storage device 330, and a terminal 320.

The storage device 330 is a device having predetermined input / output means and storage means, such as a USB flash drive, an SD card, an XD card, a mini SD, and an RS MMC. Players, host MP3 players and mobile phones are also included in the storage.

User information and an authentication program are stored and managed in the storage means of the storage device 330, and the user information is transmitted to the content provider 310 through the terminal 320.

The storage device 330 may use a communication method such as USB, IEEE 1394, RS-232, IrDA, PS2, and a parallel port to communicate with the terminal 320. The storage device 330 may be a flash memory that is a nonvolatile memory. Memory) is preferably used.

The terminal 320 corresponds to a PC, a PDA, a mobile phone, etc., and transmits user information to the content provider 310 using an authentication program stored in the storage device 330.

When the terminal 320 communicates with the storage device 330, a communication method such as USB, IEEE 1394, RS-232, IrDA, PS2, and a parallel port is used. When the storage device 330 is connected to the terminal 320, The terminal 320 checks whether an authentication program is installed, and if not installed, extracts and installs the authentication program from the storage device 330.

The authentication program is installed in the terminal 320 and transmits user information, and a method of transmitting user information by itself and a method of transmitting when accessing a content provider site may be used.

For example, a method of transmitting user information by itself may include: When the storage device 330 is connected to the terminal 320 and an authentication program is executed, the terminal 320 automatically communicates with the content provider 310 to provide user information. It is a method for granting the content receiving authority to the terminal 320 by transmitting the.

When the user accesses the content provider site, the method of transmitting the user information is executed when the user accesses the content provider site using the web browser of the terminal 320 to transmit the user information. A method of granting content receiving authority to a web browser currently connected.

In this case, a general user account and password may be used as the user information, or a unique code of the storage device 330 embedded in the storage device 330 may be used.

The content provider 310 checks whether there is a right to receive content with respect to the received user information, transmits content according to a grade when there is a receiving right, and requests a payment if there is no receiving right. Therefore, the content provider 310 preferably stores a rating, payment status, and the like for user information.

4 is a conceptual diagram illustrating communication between a web browser and a content provider of a terminal according to an embodiment of the present invention.

When the user accesses the site of the content provider using the web browser of the terminal 320, the content provider 310 transmits a user information request packet to the web browser of the terminal 320. The received web browser executes an authentication program. The executed authentication program extracts user information stored in the storage device 330 and delivers the user information to the web browser. The web browser receiving the user information transmits the user information to the content provider 310 and receives the online content from the content provider 310.

Here, a web page of the content provider 310 is displayed in a web browser connected to the site of the content provider 310, and the web page may execute an authentication program using Javascript or the like.

5 is a block diagram illustrating a storage device according to an exemplary embodiment of the present invention.

The storage device 330 according to an exemplary embodiment of the present invention includes a storage unit 510, a controller 520, and a communication unit 530.

The storage unit 510 stores user information and an authentication program. The storage unit 510 preferably uses a flash memory, which is a nonvolatile memory, and preferably stores user information provided to the storage device 330 in an area where a user's access is restricted. In this case, since the user information input by the user must be stored when the first storage device 330 is used, it is preferable to allow access only at the first user registration.

The communication unit 530 communicates with the terminal 320 by a communication method such as USB, IEEE 1394, RS-232, IrDA, PS2, and a parallel port, and transmits user information and an authentication program to the terminal 320.

In the case of a communication method such as USB and IEEE 1394, a Plug and Play function is supported. Therefore, when the storage device 330 is connected to the terminal 320, the terminal 320 may include a device driver ( Device Driver) installation, the authentication program is preferably installed in the terminal 320, and if the automatic installation is not performed, the user may extract and install the authentication program stored in the storage unit 510 directly have.

The control unit 520 determines whether to output the user information and the authentication program.

As described above, the authentication program may be automatically installed in the terminal 320 or directly extracted and installed by the user. In order to prevent unauthorized distribution of the authentication program, the entirety of the authentication program is not transmitted to the terminal 320. It is preferable to operate in conjunction with the terminal 320 so that only user information can be extracted from the storage device 330. In this way, the authentication program cannot be installed in the terminal 320 that does not connect the storage device 330.

6 is a block diagram illustrating a content provider according to an exemplary embodiment of the present invention.

The content provider 310 according to the exemplary embodiment of the present invention includes an information storage unit 610, an authentication unit 620, an input unit 630, and an output unit 640.

The input unit 630 serves to receive user information from the terminal 320 via wired or wireless.

The information storage unit 610 stores a rating and a payment status for each storage device 330. Ratings and payment status for the storage device 330 is updated each time the user is provided with the content using the storage device 330, the content of the content varies depending on the rating and provides content when there is no payment balance I never do that.

The authentication unit 620 determines whether to provide content by checking the rating and the payment status of the storage device 330 corresponding to the received user information with reference to the information storage unit 610. If the receiving authority, the output unit 640 to transmit the online content, if there is no content receiving authority to transmit the payment request packet.

Here, the online content includes web pages as well as materials and multimedia data, which allows users to access web pages that are rated. Therefore, the user can collect data and download contents such as multimedia data while searching the web page corresponding to the rating.

7 is a flowchart illustrating a process of authenticating an access right to online contents according to an embodiment of the present invention.

When the storage device 330 is connected to the terminal 320 (S710), the terminal 320 installs a device driver of the storage device 330 and checks whether an authentication program is installed (S720). Thus, if the authentication program is not installed, the authentication program stored in the storage device 330 is installed (S730).

In order to receive content from the content provider 310, the user accesses the site of the content provider 310 using a web browser. At this time, the user receives a user information request packet from the content provider 310. The web page of the content provider 310 executes an authentication program installed in the terminal 320 with respect to the received user information request packet (S740). The authentication program first checks whether a user is registered in the storage device 330. do. Thus, in the case of the first use, the user information is received from the user and stored in the storage unit 510 of the storage device 330. In the case of the first use, the user information stored in the storage unit 320 is extracted and the web is extracted. Pass it to the browser. The received web browser transmits user information to the content provider 310 (S750), and waits for notification of whether to authenticate from the content provider 310 (S760).

Thus, if the transmitted user information is authenticated information, the user receives online content (S780). If the user information is not authenticated, user registration and payment notification is received. After the user registration and payment is completed (S770), the user receives the online content. It becomes possible (S780).

Although embodiments of the present invention have been described above with reference to the accompanying drawings, those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features thereof. I can understand that. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive.

According to the system and method for authenticating the access right to the online content of the present invention as described above has one or more of the following effects.

First, when accessing a site that provides online content using a storage device that stores user information such as an ID and password, there is an advantage of automatically performing an authentication procedure without inputting user information by a user.

Second, there is an advantage of providing differentiated services according to the grade of the connected user.

Third, there is an advantage to prevent unauthorized theft of user information by others.

Claims (9)

A storage device for storing user information and an authentication program including at least one of a user account, a password, and a unique number; Receiving and installing the authentication program from the storage device, extracting first user information including the user account and the password from the storage device using the installed authentication program, or a second user including the unique number A terminal for extracting and transmitting information; And Receiving the first user information or the second user information, and if the payment situation is valid by referring to the rating and payment status for the storage device corresponding to the first user information or the second user information to the terminal And a content provider that transmits the online content according to the rating, and transmits a payment request packet to the terminal when the payment situation is not valid. The method of claim 1, The storage device A system that authorizes access to online content that is a USB flash drive, SD card, XD card, mini SD, RS MMC, MP3 player, host MP3 player, or mobile phone. The method of claim 1, And the content provider authenticates an access right to the online content for granting a content receiving right to the terminal or a web browser activated on the terminal when the payment situation is valid. delete delete (a) outputting user information and an authentication program including at least one of a stored user account, a password and a unique number; (b) receiving and installing the authentication program, extracting first user information including the user account and the password using the installed authentication program, or extracting and transmitting the second user information including the unique number; Doing; And (c) online content according to the rating if the payment status is valid by receiving the first user information or the second user information and referring to the rating and payment status for the first user information or the second user information; And transmitting a payment request packet if the payment situation is not valid. The method of claim 6, In the step (c), if the payment situation is valid, the online content includes a step of granting a content receiving right to a terminal transmitting the first user information or the second user information or a web browser activated on the terminal. How to authenticate access to. delete delete

Images