KR101409348B1 - Method of verifying and managing user based on universal user identification information - Google Patents

Abstract

The present invention provides a method of authenticating and managing a user using integrated user authentication information performed in a computing device that supports a predetermined authentication standard, the method comprising the steps of: (a) determining, for a first service supporting the authentication standard, Managing integrated user authentication information in which first service identification information and user identification information of a user of the first service are matched; (b) after authentication of the user is performed by a first service providing server providing authentication for the first service, authentication for a second service having second service identification information and supporting the authentication standard is performed Receiving an authentication request from a second service providing server; And (c) authenticating the second service providing server to the user based on the integrated user authentication information and transmitting an authentication result to the second service providing server, wherein the step Receiving authentication information including the user identification information from the first service providing server; And if the integrated user authentication information is generated for the user identification information, matches the user identification information and the first service identification information to the integrated user authentication information, and generates the integrated user authentication information for the user identification information And generating the integrated user authentication information and matching the user identification information and the first service identification information to the integrated user authentication information if the authentication information is not authenticated. to provide.
According to the present invention, a user can be recognized based on integrated user authentication information that can uniquely identify a user regardless of an authentication method provided by a service provider, and can be used through a single authentication process for a plurality of services. The device identification information of the user is connected to the information so that the authentication from the device is blocked during the period when the user does not use the device, thereby preventing the security incident in advance.

Description

TECHNICAL FIELD [0001] The present invention relates to a method and apparatus for authenticating a user using integrated user authentication information,

The present invention relates to a user authentication and management method using integrated user authentication information. More specifically, the present invention relates to a method for authenticating a user based on integrated user authentication information capable of uniquely identifying a user regardless of an authentication method provided by a service provider It is possible to use a plurality of services through a single authentication process. By connecting the user's device identification information to the integrated user authentication information, the authentication from the corresponding device is blocked during the period when the user does not use the device, And more particularly, to a user authentication and management method using integrated user authentication information.

BACKGROUND ART [0002] Various services are provided through the Internet in accordance with the development of communication technologies such as the Internet and personal computer technology. These various services basically authenticate the user and provide the service based on the user ID and the password.

However, there is an inconvenience that a user has to manage his or her own user ID and password for each service in particular as the number of services increases.

Especially, in the case of mobile services, services that are divided and configured into small-sized applications of a unit business level suitable for a specific use are mainstream in a characteristic feature driven by a mobile device such as a smart phone.

In the case of mobile services, there is a disadvantage in that a service developer is burdened with the authentication of the user, such as membership registration, and does not use the service for his own service.

In addition, there is a disadvantage that users have to make a lot of user IDs and passwords in order to install and use a mobile service that they need, and log in. Therefore, if the motivation for using the service is unclear, And this process itself causes the overall service efficiency of the user to deteriorate.

In addition, there is a case where one user recently uses various devices such as a smart phone and a personal computer. However, if the device is automatically set to log in to a specific service, if the device is lost or not owned Some people have anxiety about accessing certain services with their device and personal information may be leaked.

For example, Korean Patent Laid-Open Publication No. 10-2005-0086106 discloses a configuration in which a user automatically logs in to a specific service, but a user must separately install a client program for the corresponding automatic login on his computer, There is no way to prevent other users from maliciously logging in.

For example, Korean Patent Laid-Open Publication No. 10-2011-0080081 discloses a configuration in which an application is recognized by using an authentication key file, but an authentication key file must be stored in the terminal, and when a terminal is lost, There is no way to prevent you from logging in.

Also, in recent mobile services, it is recommended to set the user's e-mail as the user ID. However, when the user stops using the e-mail, the access to the user's service becomes difficult.

1. Korean Patent Publication No. 10-2005-0086106. 2. Korean Patent Publication No. 10-2011-0080081.

It is an object of the present invention to recognize a user based on integrated user authentication information capable of uniquely identifying a user regardless of an authentication method provided by a service provider and use the same through a single authentication process for a plurality of services, Providing user authentication and management method using integrated user authentication information that can prevent a security incident in advance by connecting the user's device identification information to the authentication information and blocking the authentication from the device during the period when the user does not use the device I have to.

According to an aspect of the present invention, there is provided a method of authenticating and managing a user using integrated user authentication information performed in a computing device supporting a predetermined authentication standard, the method comprising: (a) Managing integrated user authentication information that matches the first service identification information and the user identification information of a user of the first service with respect to the first service to be supported; (b) after authentication of the user is performed by a first service providing server providing authentication for the first service, authentication for a second service having second service identification information and supporting the authentication standard is performed Receiving an authentication request from a second service providing server; And (c) authenticating the second service providing server to the user based on the integrated user authentication information and transmitting an authentication result to the second service providing server, wherein the step Receiving authentication information including the user identification information from the first service providing server; And if the integrated user authentication information is generated for the user identification information, matches the user identification information and the first service identification information to the integrated user authentication information, and generates the integrated user authentication information for the user identification information And generating the integrated user authentication information and matching the user identification information and the first service identification information to the integrated user authentication information if the authentication information is not authenticated. to provide.

A method for authenticating and managing a user using integrated user authentication information according to the present invention, the method comprising: (d) receiving a request for generating the first service identification information from the first service providing server; The method of claim 1, further comprising: generating and storing the first service identification information, and then transmitting the first service identification information to the first service providing server, wherein (e) Receiving the request for the service identification information, generating and storing the second service identification information, and transmitting the generated second service identification information to the second service providing server.

delete

Further, the present invention provides a method of authenticating and managing a user using integrated user authentication information according to the present invention, the step (c) comprising: receiving an authentication confirmation request for the user from the second service providing server; Matching the user identification information and the second service identification information with the integrated user authentication information; And transmitting at least one of the user identification information and the integrated user authentication information to the second service providing server.

In the method for authenticating and managing a user using integrated user authentication information according to the present invention, the step (c) may include: receiving an authentication confirmation request for the user including second user identification information from the second service providing server ; Matching the second user identification information and the second service identification information to the integrated user authentication information; And transmitting at least one of the second user identification information and the integrated user authentication information to the second service providing server.

In the method for authenticating and managing users using integrated user authentication information according to the present invention, the second user identification information may be different from the user identification information.

Further, the present invention provides a method of authenticating and managing a user using integrated user authentication information according to the present invention, the step (c) comprising: receiving an authentication confirmation request for the user from the second service providing server; And setting the authentication result to authentication success if the second service identification information is matched with the integrated user authentication information.

In addition, the present invention provides a method of authenticating and managing a user using integrated user authentication information according to the present invention, the method comprising: (f) generating and transmitting a current state of the integrated user authentication information after receiving a request for transmitting the authentication information status of the user; .

The method may further include: (g) generating and transmitting an authentication history based on the integrated user authentication information after receiving the authentication history transmission request of the user, ; ≪ / RTI >

In addition, the present invention provides a method of authenticating and managing a user using integrated user authentication information, the method comprising: receiving authentication information including device identification information of the user from the first service providing server; And dynamically matching the device identification information to the integrated user authentication information.

In the method for authenticating and managing a user using integrated user authentication information according to the present invention, the step (c) may further include a step of, when the device identification information matches the device identification information received from the second service providing server, The method comprising the steps of:

The method may further include: (h) receiving a device right setting request of the user and, after receiving the device right setting request of the user, 2 < / RTI > service provision server;

According to the present invention, a user can be recognized based on integrated user authentication information that can uniquely identify a user regardless of an authentication method provided by a service provider, and can be used through a single authentication process for a plurality of services. The device identification information of the user is connected to the information so that the authentication from the device is blocked during the period when the user does not use the device, thereby preventing the security incident in advance.

The user can install and use a new service without a separate authentication process. In particular, since the authentication process can be controlled for each device possessed by the user, the security for the authentication can be strengthened, and the ID / PW system It is possible to access the service continuously regardless of the change of the service or the information of the user based on the integrated user authentication information.

For the service developer, the authentication scheme supporting the integrated user authentication information according to the present invention can be used to support the monitoring related to the authentication, and the user can easily access the service without burdening the service authentication To provide a pathway for access to the. In addition, it can be easily connected to services developed by a service developer or another entity, thereby providing scalability in enterprise services and the like.

1 is an exemplary flowchart of a user authentication and management method using integrated user authentication information according to the present invention;
2 illustrates an exemplary system environment in which a user authentication and management method using integrated user authentication information according to the present invention is performed.
3 is a diagram exemplarily showing the concept of integrated user authentication information in a user authentication and management method using integrated user authentication information according to the present invention.
4 is a diagram exemplarily showing a correspondence relationship between integrated user authentication information, service identification information, user identification information, and device identification information according to a user authentication and management method using integrated user authentication information according to the present invention;
FIG. 5 illustrates an exemplary flowchart for managing integrated user authentication information for a first service in a user authentication and management method using integrated user authentication information according to the present invention; FIG.
6 is an exemplary flowchart showing the setting of first service identification information and second service identification information in a method for authenticating and managing a user using integrated user authentication information according to the present invention.
FIG. 7 is another exemplary flowchart showing authentication for a second service providing server in a user authentication and management method using integrated user authentication information according to the present invention; FIG.
FIG. 8 is another exemplary flowchart showing authentication for a second service providing server in a method for authenticating and managing users using integrated user authentication information according to the present invention. FIG.
FIG. 9 is another exemplary flowchart showing authentication for a second service providing server in a method for authenticating and managing a user using integrated user authentication information according to the present invention; FIG.
FIG. 10 is a flowchart illustrating an exemplary process for managing integrated user authentication information in a user authentication and management method using integrated user authentication information according to the present invention; FIG.
11 is a flowchart illustrating another exemplary process for managing integrated user authentication information for a first service in a user authentication and management method using integrated user authentication information according to the present invention.
FIG. 12 is another exemplary flowchart showing authentication for a second service providing server in a method for authenticating and managing users using integrated user authentication information according to the present invention. FIG.
FIG. 13 is an exemplary flowchart showing a device privilege setting in a user authentication and management method using integrated user authentication information according to the present invention. FIG.

Hereinafter, embodiments of the user authentication and management method using the integrated user authentication information of the present invention will be described more specifically with reference to the accompanying drawings.

FIG. 1 is an exemplary flowchart of a user authentication and management method using integrated user authentication information according to the present invention. FIG. 2 illustrates an exemplary system environment in which a user authentication and management method using integrated user authentication information according to the present invention is performed. Fig.

Hereinafter, a preferred embodiment of a user authentication and management method using the integrated user authentication information of the present invention will be described in detail with reference to FIG. 1 and FIG.

First, the computing device 100 in which the user authentication and management method using the integrated user authentication information of the present invention is implemented, performs a first service identification (ID) identification process for a first service 300 having a first service identification information, Information and the user identification information of the user of the first service (S100).

Herein, computing device 100 is a device that includes a processor (not shown) and a storage means (not shown), which reads and executes the application stored in the storage means. For example, the application is an application in which the user authentication and management method using the integrated user authentication information of the present invention is implemented. The computing device 100 also includes, for example, a personal computer, a smart phone, a notebook computer, a business server, and the like. Preferably, the computing device 100 may be a server that implements a user authentication and management method using integrated user authentication information according to the present invention, and supports a predetermined standard to be described later.

The term "service" as used herein refers to a function provided by the user's device 200, and may be generally referred to in various forms such as an application, a software program, an application, a web site, and the like. The service may be executed in the computing device 100, but only the function for accessing the service for the service is installed in the computing device 100, and only the result is executed by the computing device 100 ). ≪ / RTI > In particular, the authentication function for the service is performed by the server providing the service.

The "predefined authentication specification" herein is a predetermined specification for implementing the user authentication and management method using the integrated user authentication information according to the present invention in common in different services. For example, in the case where the present applicant supports the Korea Communications Standards Agency (BaaS) developed by the Ministry of Economy, Trade and Industry (METI).

The first service providing server 300 is a server that performs authentication through a communication network so that a first service is provided in the device 200 of the user. The first service providing server 300 supports a previously authenticated specification according to the present invention.

Preferably, the first service providing server 300 may provide at least some functions of the first service. In the present invention, the first service providing server 300 specifically refers to a server that performs a function of performing user authentication to use the first service.

The second service providing server 400 is a server that performs authentication through a communication network so that a second service is provided from the user's device 200. The second service providing server 400 supports a previously authenticated standard according to the present invention described above.

The configuration for managing integrated user authentication information through step S100 will be described in more detail as follows.

3 is a diagram exemplarily showing the concept of integrated user authentication information in the method of authenticating and managing users using integrated user authentication information according to the present invention.

Referring to FIG. 3, the integrated user identification information 110 is matched with the user identification information 130 and the service identification information 150. Also, the device identification information 170 may be additionally matched to the integrated user identification information 110, and preferably, the device identification information 170 is basically matched to the integrated user identification information 110.

The integrated user identification information 110 is a unique value given to the user by the aforementioned predetermined authentication standard. Only one integrated user identification information 110 may exist per user. Preferably, the integrated user identification information 110 is generated when the user performs authentication and uses authentication for the service that is used first among the services that support the predetermined authentication standard.

In the integrated user identification information 110, service identification information for a specific service and user identification information (preferably a user ID) for a specific service are matched and device identification information of a device used by a user is matched.

The user identification information 130 is information generated or managed corresponding to a specific service. For example, when a user accesses a service supporting the authentication standard to perform user authentication, and a plurality of pieces of user identification information may exist for a specific service. For example, when a user joins a service in a state in which a specific service does not support the above-described authentication standard according to the present invention, the user ID used at the time of membership can also be stored as user identification information.

The service identification information 150 is identification information given to a device that supports the above-described authentication standard according to the present invention, for example, the above-described computing device 100. Only one service identification information 150 is assigned to a specific service.

The device identification information 170 is identification information of the user's device. The device identification information 170 is generated so as to have a unique value for each device. In particular, when a user uses a plurality of devices, a plurality of device identification information 170 may be matched to the integrated user authentication information 110.

4 is a diagram exemplarily showing a correspondence relationship between integrated user authentication information, service identification information, user identification information, and device identification information according to the user authentication and management method using the integrated user authentication information according to the present invention.

The first user ("user # 1") uses three devices ("device # 1" to "device # 3") and subscribes to three services ("service # 1" State.

Particularly, the first user ("user # 1") can use service # 1 and service # 2 via device # 1, use service # 1 and service # 2 via device # 2, 3, the service # 3 is available.

The second user ("user # 2") uses two devices ("device # 3" to "device # 4") and subscribes to three services ("service # 3" State.

Particularly, the second user ("user # 2") can use the service # 3 through the device # 3 and use the service # 3 and the service # 5 via the device # 4.

The device # 3 is a device shared by the first user and the second user.

For the corresponding relationship shown in Fig. 4, one integrated user authentication information is matched for each user.

That is, the integrated user authentication information # 1 is matched with the first user and the integrated user authentication information # 2 is matched with the second user.

In the integrated user authentication information # 1, the user identification information, the service identification information, and the device identification information of the first user are matched.

(Device ID # 1 and device # 2) of the service # 1, user identification information (user ID) of the first user for the service, .

(Device ID # 1 and device # 2) and the user identification information (user ID) of the first user for the service # 2 (acquired by acquiring the service ID information described later) .

Also, the service identification information of the service # 3 (acquired through the service identification information acquiring process described later), the device identification information (the device # 3), and the user identification information (user ID) of the first user for the service are matched.

As described above, the service identification information, the device identification information, and the user identification information are matched to the integrated user authentication information # 1 for each of the service # 1 to the service # 3.

Similarly, the user identification information, the service identification information, and the device identification information of the second user are matched to the integrated user authentication information # 2.

(Device ID # 3 and device # 4) of the service # 3 and user identification information (user ID) of the second user for the service, .

Also, the service identification information of the service # 4 (acquired through the service identification information acquiring process described later), the device identification information (the device # 4), and the user identification information (user ID) of the second user for the service are matched.

Also, the service identification information of the service # 5 (acquired through the service identification information acquiring process described later), the device identification information (the device # 5), and the user identification information (user ID) of the second user for the service are matched.

As described above, the service identification information, the device identification information, and the user identification information are matched to the integrated user authentication information # 2 for each of the service # 3 to the service # 5.

Referring to FIG. 4, if each identification information is a unique value, the integrated user authentication information is matched with one or more service identification information. The service identification information also matches one or more device identification information. The user identification information may also be matched with one or more device identification information. Also, if the user identification information is different for each service, the integrated user authentication information is matched with one or more pieces of user identification information. However, the user identification information always has a matching relationship with the service identification information.

Also, the service identification information may be matched with one or more pieces of user identification information.

Also, since a plurality of users can share the same device, a plurality of integrated user authentication information may be matched to one device identification information.

That is, the integrated user authentication information may have a correspondence relationship of 1: N (N is a natural number of 1 or more) with the service identification information, and may have a correspondence relationship of 1: N with the user identification information and the device identification information. Also, the service identification information and the user identification information, the service identification information and the device identification information may also have a 1: N correspondence relationship, and the user identification information and the vice identification information may also have a 1: N correspondence relationship. Of course, each information may have a 1: 1 correspondence.

In particular, the configuration for generating and managing integrated user authentication information will be described in more detail as follows.

FIG. 5 is a flowchart illustrating an exemplary process for managing integrated user authentication information for a first service in a user authentication and management method using integrated user authentication information according to the present invention.

Referring to FIG. 5, authentication information including user identification information is first received from the first service providing server 300 (S110).

Next, it is checked in step S110 whether the integrated user authentication information is generated for the received user identification information. If the integrated user authentication information is generated in advance, the integrated user authentication information is matched with the user identification information and the first service identification information. If integrated user authentication information is not generated for the user identification information, the integrated user authentication information is generated, and the generated user identification information and the first service identification information are matched with the generated integrated user authentication information at step S130.

That is, in the embodiment of FIG. 5, after confirming whether the integrated user authentication information is generated, the first service 300 receives the first service identification information and the user identification information of the first service, Manage information.

5 is performed every time the user performs authentication for the first service, i.e., performs authentication through inputting the user ID to the first service providing server 300, Can be managed dynamically.

Meanwhile, the user authentication and management method using the integrated user authentication information according to the present invention may further include a step of generating service identification information, that is, steps S400 and S500 of FIG.

6 is an exemplary flowchart showing the setting of the first service identification information and the second service identification information in the user authentication and management method using the integrated user authentication information according to the present invention.

Referring to FIG. 6, a computing device 100 implementing a user authentication and management method using integrated user authentication information according to the present invention receives a request for generating first service identification information from a first service providing server 300 , Generates and stores the first service identification information, and transmits the first service identification information to the first service providing server 300 (S400). Preferably, step S400 is performed before step S100 is performed.

Meanwhile, when the first service providing server 300 receives the first service identification information transmitted through step S400, the first service providing server 300 provides the first service through an application market such as an application store or its server. In this case, the user authentication and management method using the integrated user authentication information of the present invention is implemented by confirming the service URL for the first service through the setting through the application market or the setting at the server of the user and then starting the first service To the computing device (100).

In addition, the second service providing server 400 receives the request for the second service identification information, generates and stores the second service identification information, and transmits the second service identification information to the second service providing server 400 (S500). Preferably, step S500 is performed before step S200 is performed.

On the other hand, when the second service providing server 400 receives the second service identification information transmitted through step S500, the second service providing server 400 provides the second service through an application market such as an app store or its server. In this case, the user authentication and management method using the integrated user authentication information of the present invention is implemented by confirming the service URL for the second service through setting through the application market or setting at the server of the user and then starting the second service To the computing device (100).

When the first service identification information and the second service identification information are set through step S400 and step S500, the first service providing server 300 and the second service providing server 400 then transmit the integrated user authentication information according to the present invention In the case of applying the user authentication and management method used, the service of the user can be displayed by the unique identification information.

Next, after the authentication of the user is performed by the first service providing server 300 providing the authentication for the first service by the step S100, the computing device 100 has the second service identification information, And receives the authentication request from the second service providing server 400 providing authentication for the second service supporting the specification (S200).

For example, when the user is using the first service and wants to receive the second service by recommendation or the like, the user downloads the second service, installs it in his / her user device 200, and wants to use the second service.

Next, the computing device 100 performs authentication of the second service providing server 400 with respect to the user based on the integrated user authentication information managed through step S100 for the authentication request received in step S200, And transmits the result to the second service providing server 400 (S300).

The authentication configuration for the second service providing server 400 will be described in more detail as follows.

FIG. 7 is an exemplary flowchart illustrating authentication for a second service providing server in a user authentication and management method using integrated user authentication information according to the present invention.

First, an authentication confirmation request for the user is received from the second service providing server 400 (S310).

Next, the computing device 100 matches the user identification information and the second service identification information with the integrated user authentication information (S320).

Next, the computing device 100 transmits at least one of the user identification information and the integrated user authentication information to the second service providing server 400 (S330).

7, the authentication for the second service providing server 400 may be performed in a state where user authentication is performed for the first service through the first service providing server 300, for example, Authentication is automatically performed through a user authentication and management method using authentication information.

In this case, the second service providing server 400 can manage user authentication information for its own service, i.e., the second service, using at least one of the user identification information and the integrated user authentication information.

 FIG. 8 is another exemplary flowchart showing authentication for a second service providing server in a user authentication and management method using integrated user authentication information according to the present invention.

First, an authentication confirmation request for the user including the second user identification information is received from the second service providing server 400 (S340).

Next, the computing device 100 matches the second user identification information and the second service identification information to the integrated user authentication information (S340).

Next, the computing device 100 transmits at least one of the second user identification information and the integrated user authentication information to the second service providing server (S340).

8, the authentication for the second service providing server 400 can be performed in a state where user authentication is performed for the first service through the first service providing server 300, for example, Authentication is performed through the user authentication and management method using the authentication information, but the second user identification information separately designated by the user or the second user identification information generated for the user in the second service providing server 400 And transmits the authentication confirmation request together.

In this case, the second service providing server 400 can manage user authentication information for its own service, i.e., the second service, using at least one of the second user identification information and the integrated user authentication information.

In this case, the computing device 100 may also match the second user identification information and the second user identification information with respect to the second service identification information, or may match only the second user identification information with respect to the second service identification information.

The second user identification information is preferably different from the above-described user identification information.

On the other hand, if the second service identification information and the integrated user authentication information are matched through the above process, the authentication in step S300 is performed in the following manner.

FIG. 9 is another exemplary flowchart illustrating authentication for a second service providing server in a method for authenticating and managing a user using integrated user authentication information according to the present invention.

First, an authentication confirmation request for the user is received from the second service providing server 400 (S370).

Next, if the second service identification information is matched with the integrated user authentication information, the computing device 100 sets the authentication result to authentication success (S380).

In other words, when the authentication confirmation request for the user is received from the second service providing server 400 in the state that the first service is authenticated, the second service identification information is already matched to the integrated user authentication information, It is assumed that the user authentication has been successfully performed.

The authentication result is transmitted to the second service providing server 400, and the second service providing server 400 regards the second service as a user performing the authentication and provides the second service.

Meanwhile, the first service providing server 300 and the second service providing server 400, which support the aforementioned predetermined specification, preferably provide the management function of the integrated user authentication information to the user .

(For example, inquiry, modification, and withdrawal of user identification information authenticated to the currently used service), inquiry of integrated user authentication information and inquiry of the integrated user authentication information, Management (for example, inquiry of integrated user authentication information corresponding to user identification information of currently used service, inquiry of services and user identification information and device identification information mapped to integrated user authentication information, service identification information, (E.g., inquiry of the service usage status, setting of whether or not to use the service, identification of the service matched to the user identification information, etc.) Information inquiry, the addition of the user identification information to the service identification information Deletion and integration, policy setting of the user identification information in the service identification information, for example, whether the corresponding user identification information is for login use or information modification, management of data dependent on the user identification information of the service identification information, (A function of transferring user identification information to a user or integrating it into existing user identification information), device management (inquiry of the usage status of a device, restriction of use of a specific device for a specific service or use of a specific device for a specific user) Management function can be provided.

Therefore, the developer of the first service or the developer of the second service can provide the above-described management functions according to the present invention through their own services, thereby minimizing difficulties in implementing the management functions.

FIG. 10 is a flowchart illustrating an exemplary process for managing integrated user authentication information in a user authentication and management method using integrated user authentication information according to the present invention.

Referring to FIG. 10, a method for authenticating and managing a user using integrated user authentication information according to the present invention includes a step S600 of generating and transmitting a current state of integrated user authentication information after receiving a user authentication information status transmission request .

That is, the authentication information status transmission request of the user is transmitted to the computing device 100, for example, from the user's device 200, or is transmitted to the first service providing server 300, Or may be transmitted to the computing device 100 via the second service providing server 400.

Referring to FIG. 10, a method for authenticating and managing a user using integrated user authentication information according to the present invention includes generating and transmitting authentication details based on integrated user authentication information after receiving a user authentication history transmission request (S600 ). ≪ / RTI >

That is, the authentication history transmission request of the user is transmitted, for example, directly from the user's device 200 to the computing device 100, or is transmitted to the first service providing server 300 or And may be transmitted to the computing device 100 through the second service providing server 400.

For this, the computing device 100 may generate and store authentication details based on the integrated user authentication information.

Meanwhile, as described above, the integrated user authentication information may be matched with the device identification information. Also, the user device 200 may be changed each time a user uses a different device.

For this, step S100 may be implemented as follows.

11 is a flowchart illustrating another exemplary process for managing integrated user authentication information for a first service in a user authentication and management method using integrated user authentication information according to the present invention.

11, in operation S100, authentication information including the device identification information of the user is received from the first service providing server 300 in operation S150. And dynamically matching the device identification information with the integrated user authentication information (S170).

That is, the identification information of the user's device 200 is matched with the integrated user authentication information, and when the user's device 200 is changed, the user automatically identifies the device used for authentication through the first service providing server 300 The information is additionally matched to the integrated user authentication information.

If the device identification information matches the integrated user authentication information, the authentication according to step S300 can be implemented as follows.

12 is another exemplary flowchart showing authentication for a second service providing server in a user authentication and management method using integrated user authentication information according to the present invention.

Referring to FIG. 12, in step S300, when the device identification information matched with the integrated user authentication information is identical to the device identification information received from the second service providing server 400 through the above-described step S170, (S390).

That is, authentication can be performed only when device identification information matching the integrated user authentication information is confirmed.

On the other hand, when a plurality of pieces of device identification information are matched with, for example, integrated user authentication information, it is possible to restrict the authentication of certain device identification information.

For example, if the user uses both the first service and the second service in his or her own smartphone and his or her business computer, it is assumed that the smartphone is left at home and is currently unavailable.

In this case, the user can dynamically set the access right for each service, that is, whether to authenticate for each device.

FIG. 13 is an exemplary flowchart showing a device privilege setting in a user authentication and management method using integrated user authentication information according to the present invention.

The computing device 100 dynamically sets whether or not the second service providing server 400 can authenticate based on the device identification information matched with the integrated user authentication information after receiving the device right setting request of the user (S800) .

That is, the user can request the computing device 100 to set the authority for each device, or request the privilege setting for each device through the first service providing server 300.

For example, if the smartphone is left at home, the user performs login to the first service providing server 300, for example, and then transmits the second service providing server 400 through the management function of the integrated user authentication information, The user can dynamically set the authority so as not to perform the authentication for the user.

It is also possible to set the authority to prevent authentication from 10:00 am to 8:00 pm, for example.

Although the present invention has been described in detail, it should be understood that the present invention is not limited thereto. Those skilled in the art will appreciate that various modifications may be made without departing from the essential characteristics of the present invention. Will be possible.

Therefore, the embodiments disclosed in the present specification are intended to illustrate rather than limit the present invention, and the scope and spirit of the present invention are not limited by these embodiments. The scope of the present invention should be construed according to the following claims, and all the techniques within the scope of equivalents should be construed as being included in the scope of the present invention.

According to the present invention, a user can be recognized based on integrated user authentication information that can uniquely identify a user regardless of an authentication method provided by a service provider, and can be used through a single authentication process for a plurality of services. The device identification information of the user is connected to the information so that the authentication from the device is blocked during the period when the user does not use the device, thereby preventing the security incident in advance.

The user can install and use a new service without a separate authentication process. In particular, since the authentication process can be controlled for each device possessed by the user, the security for the authentication can be strengthened, and the ID / PW system It is possible to access the service continuously regardless of the change of the service or the information of the user based on the integrated user authentication information.

For the service developer, the authentication scheme supporting the integrated user authentication information according to the present invention can be used to support the monitoring related to the authentication, and the user can easily access the service without burdening the service authentication To provide a pathway for access to the. In addition, it can be easily connected to services developed by a service developer or another entity, thereby providing scalability in enterprise services and the like.

100: computing device 110: integrated user identification information
130: user identification information 150: service identification information
170: Device identification information 200: User's device
300: first service providing server 400: second service providing server

Claims (12)

A user authentication and management method using integrated user authentication information performed in a computing device supporting a predetermined authentication standard,
(a) managing integrated user authentication information having first service identification information and matching the first service identification information and user identification information of a user of the first service with respect to a first service supporting the authentication standard;
(b) after authentication of the user is performed by a first service providing server providing authentication for the first service, authentication for a second service having second service identification information and supporting the authentication standard is performed Receiving an authentication request from a second service providing server; And
(c) performing authentication for the second service providing server with respect to the user based on the integrated user authentication information and transmitting an authentication result to the second service providing server;
, ≪ / RTI &
The step (a)
Receiving authentication information including the user identification information from the first service providing server; And
If the integrated user authentication information is generated for the user identification information, the integrated user authentication information is matched with the user identification information and the first service identification information, and the integrated user authentication information is generated for the user identification information Generating the integrated user authentication information and matching the user identification information and the first service identification information to the integrated user authentication information;
And a user authentication and management method using integrated user authentication information. The method according to claim 1,
Prior to step (a)
(d) receiving a request for generating the first service identification information from the first service providing server, generating and storing the first service identification information, and transmitting the generated first service identification information to the first service providing server;
Further comprising:
Prior to step (b) above,
(e) receiving a request for the second service identification information from the second service providing server, generating and storing the second service identification information, and transmitting the second service identification information to the second service providing server;
And a user authentication and management method using the integrated user authentication information. delete The method according to claim 1,
The step (c)
Receiving an authentication confirmation request for the user from the second service providing server;
Matching the user identification information and the second service identification information with the integrated user authentication information; And
Transmitting at least one of the user identification information and the integrated user authentication information to the second service providing server;
And a user authentication and management method using integrated user authentication information. The method according to claim 1,
The step (c)
Receiving an authentication confirmation request for the user including second user identification information from the second service providing server;
Matching the second user identification information and the second service identification information to the integrated user authentication information; And
Transmitting at least one of the second user identification information and the integrated user authentication information to the second service providing server;
And a user authentication and management method using integrated user authentication information. 6. The method of claim 5,
Wherein the second user identification information is different from the user identification information. The method according to claim 1,
The step (c)
Receiving an authentication confirmation request for the user from the second service providing server; And
Setting the authentication result to authentication success if the second service identification information matches the integrated user authentication information;
And a user authentication and management method using integrated user authentication information. The method according to claim 1,
(f) generating and transmitting a current state of the integrated user authentication information after receiving the authentication information status transmission request of the user;
And a user authentication and management method using the integrated user authentication information. The method according to claim 1,
(g) generating and transmitting an authentication description based on the integrated user authentication information after receiving the authentication history transmission request of the user;
And a user authentication and management method using the integrated user authentication information. The method according to claim 1,
The step (a)
Receiving authentication information including device identification information of the user from the first service providing server; And
Dynamically matching the device identification information to the integrated user authentication information;
And a user authentication and management method using integrated user authentication information. 11. The method of claim 10,
Performing the authentication if the device identification information matches the device identification information received from the second service providing server;
And a user authentication and management method using integrated user authentication information. 11. The method of claim 10,
(h) dynamically setting whether to authenticate the second service providing server based on the device identification information matched with the integrated user authentication information after receiving the device right setting request of the user;
And a user authentication and management method using the integrated user authentication information.

Images