Method and system for authenticating identity on internet

• US 20010056487A1
• Filed: 12/22/2000
• Published: 12/27/2001
• Est. Priority Date: 12/24/1999
• Status: Abandoned Application

• Current Assignee: Link Plus Corporation
• Original Assignee: Link Plus Corporation
• Inventors: Yoo, Chin Woo
• Application Number:
  US09/747,013
• Publication Number:
  US 20010056487A1
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

A system and method for authenticating an identity on Internet is provided. The authentication system and method authenticates the identity of a user on the Internet whenever he/she needs to be authenticated through only one authentication procedure. The authentication system and method also checks the multiple registration of an applicant who wishes to register in a membership system web site or participate in an event permitting just one chance per man. The authentication system and method also checks the identity of a user logged on the membership system web site in a state where the user'"'"'s anonymity is secured. Based on the fact that a subscriber has a personal resident registration number and/or a corporate/institute registration number, personal data about the subscriber'"'"'s identity and credit is registered in a system server of the authentication system, and the authentication system is automatically linked to whenever the subscriber registers his/her identity to use, for example, electronic commerce on the Internet so that the subscriber'"'"'s identity can be authenticated by the authentication system without proceeding with authentication whenever necessary, thereby allowing the subscriber to have a transaction on the Internet with the anonymity secured. In addition, subscriber information for each membership system web site is registered in the system server of the authentication system so that the multiple registration of a subscriber in a certain membership system web site can be checked. By authenticating the identity of a subscriber based on the guarantee of a guarantor (or a certification agency), the authenticated identity corresponds to the real subscriber one to one so that convenience in registering in web sites requiring identity authentication and the reliability on identities on the Internet can be improved, and the waste and misuse of resources due to multiple registration can be prevented.

Claims

1. A method of authenticating the identity of an applicant for registration on The Internet, comprising the steps of:

(a) confirming the identity of the applicant for registration; and

(b) registering the personal information of the applicant whose identity is confirmed in an authentication system together with a password and issuing a unique Internet ID online or sending the Internet ID to the applicant'"'"'s e-mail address.

2. The method of

claim 1

, wherein when the applicant intends to register in the authentication system with a guarantor as security, the step (a) comprises the steps of:

(a1) the applicant inputting his/her resident registration number and at least one guarantor'"'"'s Internet identifier (ID) or resident registration number;

(a2) the authentication system transmitting the applicant'"'"'s resident registration number and an authentication key to the guarantor;

(a3) the guarantor determining the validity of the applicant'"'"'s resident registration number and transferring the authentication key to the applicant when the guarantor determines the applicant'"'"'s resident registration number to be valid;

(a4) the authentication system allowing the applicant to input an ID, a password and personal information using the authentication key transferred from the guarantor when the guarantor determines the applicant'"'"'s resident registration number to be valid; and

(a5) the authentication system assigning an Internet ID to the applicant.

3. The method of

claim 1

, wherein when the applicant intends to register in the authentication system without a guarantor, the step (a) comprises the steps of:

(a11) the applicant inputting personal information such as his/her resident registration number and address;

(a22) the authentication system requesting the applicant to visit a nearby certification agency to be authenticated;

(a33) the applicant visiting the certification agency to proceed with authentication or ending the authentication procedure without visiting the certification agency;

(a44) the certification agency confirming the applicant'"'"'s identity, inputting the applicant'"'"'s resident registration number to the authentication system, and receiving an authentication key;

(a55) the certification agency transferring the authentication key to the applicant and allowing the applicant to input an ID, password and personal information using the authentication key at the web site of the authentication system; and

(a66) the authentication system assigning an Internet ID to the applicant.

4. The method of

claim 1

, wherein for the Internet ID and/or the password, alpha numeric information, the applicant'"'"'s personal characteristic such as a finger print, voice or handwriting sample, or a smart card can be used.

5. The method of

claim 1

, further comprising the steps of:

when the applicant assigned the Internet ID needs to be authenticated on the Internet,

(c) the applicant presenting the Internet ID to a membership system web site requiring the authentication of the applicant'"'"'s identity;

(d) the membership system web site transmitting the Internet ID to the authentication system to request the authentication of the applicant'"'"'s identity; and

(e) the authentication system requesting the applicant to input the password and informing the membership system web site that the applicant'"'"'s identity is authenticated when the password input by the applicant is the same as that stored in the authentication system.

6. The method of

claim 5

, wherein the authentication system transmits personal information such as the name and address of the owner of the Internet ID required for delivery of a product, and the age, occupation and sex of the owner required for voting or public opinion polls to a membership system web site in real time in response to a request or grant of permission by the owner of the Internet ID.

7. The method of

claim 5

, further comprising the step of transmitting the access/transaction details of the owner of the Internet ID with respect to the membership system web site to the owner.

8. The method of

claim 1

, further comprising the step of checking the multiple registration of the applicant assigned the Internet ID when the applicant registers in a web site as a member or to participate in an event permitting just one chance per man, the multiple registration checking step comprising the steps of:

(f) receiving a request to check the multiple registration of the applicant and the site ID of the web site from the web site;

(g) receiving the applicant'"'"'s Internet ID and password necessary for authentication on the Internet from the applicant and performing authentication; and

(h) determining whether the applicant has registered in the web site using the applicant'"'"'s Internet ID and the site ID of the web site and transmitting the result of the determination to the web site.

9. The method of

claim 8

, wherein in the step (f), a member ID which the applicant wishes to use in the web site is also received and processed in association with the Internet ID.

10. The method of

claim 9

, wherein in the step (h), the member ID of the applicant is transmitted to the web site when it is determined that the applicant has already registered in the web site.

11. The method of

claim 9

, wherein for the member ID and/or the password, alpha numeric information, the applicant'"'"'s personal characteristic such as a finger print, voice or handwriting sample, or a smart card can be used.

12. The method of

claim 8

, wherein in the step (h), the applicant'"'"'s Internet ID is stored in association with the site ID of the web site when it is determined that the applicant has not yet registered in the web site.

13. The method of

claim 8

, further comprising the steps of:

when a user who has registered in the web site needs to be authenticated on the Internet,

(i) the web site transmitting the user'"'"'s member ID and the site ID to the authentication system and requesting authentication of the user'"'"'s identity;

(ii) the authentication system requesting the user to directly input his/her Internet ID and password or reading and processing the information of a cookie stored in the user'"'"'s terminal to acquire the user'"'"'s Internet ID and password; and

(k) the authentication system comparing the Internet ID and password of a user having the site ID and the member ID received in the step (i) with the Internet ID and the password acquired in the step (j) and transmitting the result to the web site.

14. The method of

claim 13

, wherein the cookie includes the user'"'"'s Internet ID and/or password information, is generated when the user'"'"'s terminal initially transmits the user'"'"'s Internet ID and/or password to the authentication system and stored in the user'"'"'s terminal.

15. The method of

claim 13

, wherein the authentication system transmits personal information such as the name and address of the owner of the Internet ID required for delivery of a product, and the age, occupation and sex of the owner required for voting or public opinion polls to a membership system web site in real time in response to a request or grant of permission by the owner of the Internet ID.

16. The method of

claim 13

, further comprising the step of transmitting the access/transaction details of the owner of the Internet ID with respect to the membership system web site to the owner.

17. A system for authenticating the identity of an applicant for registration on the Internet, the system comprising:

a web site server for confirming the identity of the applicant for registration in the system, registering the personal information of the applicant whose identity is confirmed together with a password under a secure state on the Internet and issuing a unique Internet ID online or sending it to the applicant'"'"'s e-mail address; and

a memory unit for storing the registered applicant'"'"'s Internet ID, password and personal information.

18. The system of

claim 17

, wherein when the applicant assigned the Internet ID needs to be authenticated on the Internet, the applicant presents the Internet ID to a membership system web site requiring the authentication of the applicant'"'"'s identity, the membership system web site transmits the Internet ID to the authentication system to request the authentication of the applicant'"'"'s identity, and the authentication system requests the applicant to input the password and informing the membership system web site that the applicant'"'"'s identity is authenticated when the password input by the applicant is the same as that stored in the authentication system.

19. The system of

claim 17

or

18

, wherein for the Internet ID and/or the password, alpha numeric information, the applicant'"'"'s personal characteristic such as a finger print, voice or handwriting sample, or a smart card can be used.

20. The system of

claim 17

, wherein when checking the multiple registration of the applicant assigned the Internet ID when the applicant registers in a web site as a member or participate in an event permitting just one chance per man, the system receives the request to check the multiple registration of the applicant and a site ID from the web site, receives the applicant'"'"'s Internet ID and password necessary for authentication on the Internet from the applicant and performs authentication, and determines whether the applicant has registered in the web site using the applicant'"'"'s Internet ID and the site ID of the web site and transmits the determined result to the web site.

21. The system of

claim 20

, wherein the system server stores the applicant'"'"'s Internet ID in the memory unit in association with the site ID of the web site when it is determined that the applicant has not yet registered in the web site.

22. The system of

claim 20

, wherein the system server also receives a member ID to be used by the applicant in the web site in which the applicant wishes to register, and stores it in the memory unit in association with the applicant'"'"'s Internet ID when it is determined that the applicant has not yet registered in the web site.

23. The system of

claim 20

, wherein for the member ID and/or the password, alpha numeric information, the applicant'"'"'s personal characteristic such as a finger print, voice or handwriting sample, or a smart card can be used.

24. The system of

claim 20

, wherein the system server transmits the member ID of the applicant to the web site when it is determined that the applicant has already registered in the web site.

25. The system of

claim 20

, wherein when a user who has registered in the web site needs to be authenticated on the Internet, the web site transmits the user'"'"'s member ID and the site ID to the authentication system and requests authentication of the user'"'"'s identity, the authentication system requests the user to directly input his/her Internet ID and password or reads and processes the information of a cookie stored in the user'"'"'s terminal to acquire the user'"'"'s Internet ID and password, and the authentication system compares the Internet ID and password of a user having the received site ID and the member ID with acquired the Internet ID and the password and transmits the result to the web site.

26. The system of

claim 25

, wherein the cookie includes the user'"'"'s Internet ID and/or password information, is generated when the user'"'"'s terminal initially transmits the user'"'"'s Internet ID and/or password to the authentication system and stored in the user'"'"'s terminal.