HSM User authentication method and system using software-based HSM without password exposure

摘要

The present invention can be implemented as a software module rather than a hardware method like a conventional smart card chip without exposing a web service password that can be leaked through a keyboard hooking or a shoulder attack by a malicious code, And to provide a method and system for authenticating a user using HSM of a software type that does not expose a password for performing an HSM function using a removable medium. According to the present invention, when a software-based HSM module stored in a removable medium is loaded on a user PC, a software-based HSM module running on a user PC is encrypted in a removable medium By applying a structure that controls access to the storage space storing the password and various information, the price is considerably lower than the conventional hardware type security token.