KR20150065441A - System and Method for log in based on server easily - Google Patents

Abstract

The present invention relates to a system and a method for server-based simple log-in. A system for server-based simple log-in according to an embodiment of the present invention comprises: a simple log-in server receiving simple log-in request information including a device ID, an application ID, and a user ID from a terminal, and transferring a simple log-in result including the device ID, the application ID, and a customer identification key corresponding to the user ID after judging whether the terminal is registered in the simple log-in service; a log-in server receiving and processing the device ID, the application ID, and the user ID from the simple log-in server; and an app server receiving a first log-in request including the customer identification key from the terminal, transmitting a second log-in request including the customer identification key and app server information to the log-in server, and receiving the log-in result from the log-in server.

Description

[0001] The present invention relates to a server-based simple login system and a simple login method,

This incidence relates to a server-based simple login system and a simple login method.

Recently, a wireless Internet system that provides Internet service through a mobile phone has been developed and is becoming popular. A wireless Internet system is a system for providing Internet service through a mobile communication terminal. It uses a wireless Internet protocol such as Wireless Application Protocol (WAP), cHTML, and ME to create a document written in a markup language such as WML, HDML, or mHTML And provides it to the mobile phone through the wireless Internet network.

When accessing a web page through a wireless Internet, a user can access a desired web page by inputting the address of a web page to access the mobile phone and selecting an Internet connection. For example, when a user desires to access the Naver, the address of the wireless Internet web page to be input is a URL used to access the web server through a web browser of a computer, such as 'http://www.naver.com' . In order to solve such a problem, recent wireless Internet access technologies allow a user to input, in advance, the address of a web page to be accessed to a mobile phone and a corresponding number or a representative telephone number, It is possible to access a web page even if only one number or representative telephone number is inputted. However, even if a user wants to login after accessing a web page, the user ID and password of the Naver, for example, must be entered in the same manner as in a normal computer keyboard. However, it is very inconvenient to input a character or a numerical ID and a password using a character or numeric keyboard of a mobile phone.

On the other hand, each website on the Internet operates as a free or paid member to secure its members competitively. As a result, users are forced to join the service in order to use the service or information provided by the site, and they are burdened to memorize and manage the unique ID and password of each web site.

In addition, billing and remittance through wireless internet such as mobile game and mobile banking are increasing, so that login by using ID, password and authentication information and security of the information become important.

Korean Patent Publication No. 102013011968

A problem to be solved by one embodiment of the present invention is to provide a server-based simple login system and a simple login method in which log-in is performed through a server to reduce the memory and CPU usage of the terminal, There is.

Another object of the present invention is to provide a server-based simple login system and a simple login method that can prevent a hacking of personal information caused by a malicious application because the terminal does not store the identification key.

Another object of the present invention is to provide a server-based simple login system and a simple login method capable of performing a simple login without inputting additional information in the terminal.

Another object of the present invention is to provide a server-based simple login system and a simple login method that can avoid the risk of leakage of personal information because personal information of a terminal user is not used.

In an embodiment of the present invention, after receiving the simple login request information including the device ID, the application ID, and the user ID from the terminal, determining whether the terminal is registered in the simple login service, A simple login server for transmitting a simple login result including a customer identification key corresponding to a user ID to the terminal, receiving and processing the device ID, the application ID and the user ID from the simple login server, Receiving a first login request including the customer identification key from the terminal and transmitting a second login request including the customer identification key and the app server information to the login server, Lt; RTI ID = 0.0 > a < / RTI > A simple server-based login system can be provided.

In an exemplary embodiment, the terminal may be a portable terminal, a mobile terminal, a telematics terminal, a notebook computer, a digital broadcasting terminal, a personal digital assistant (PDA) ), A Wibro Terminal, an IPTV (Internet Protocol Television) terminal, an AVN (Audio Video Navigation) terminal, a PMP (Portable Multimedia Player), and a navigation terminal (vehicle navigation device) .

In another embodiment, the device ID may include an International Mobile Equipment Identity (IMEI) of the terminal, the application ID may include a unique number of an application installed in the terminal, And may be a combination of numbers and characters arbitrarily set by the user of the terminal.

In another embodiment, the login server may arbitrarily generate the customer identification key, and obtain the device ID, the application ID, and the user ID by searching the generated customer identification key.

In another embodiment, the application server may provide a service to the application executed in the terminal, and the login server may transmit the customer identification key transmitted to the simple login server and the customer identification key transmitted from the application server, The service request information can be transmitted to the app server when the identification keys match, and the app server can perform the login of the terminal upon receiving the service request information from the login server.

In another embodiment of the present invention, the simple login server receives simple login request information including a device ID, an application ID, and a user ID from a terminal, judges whether the terminal is registered in the simple login service, Receiving the simple login request information, receiving and processing the device ID, the application ID and the user ID, and generating a customer identification key; and the simple login server transmits a simple login result Transmitting the first login request including the customer identification key to the application server, transmitting the second login request including the customer identification key and the information of the application server to the application server, Sending a request to the login server; and < RTI ID = 0.0 > And transmitting the service request information corresponding to the login request to the app server.

In one embodiment, the step of generating the customer identification key may arbitrarily generate the customer identification key, and obtain the device ID, the application ID, and the user ID by searching the generated customer identification key.

In another embodiment, the method may further include transmitting the service request information to the app server when the customer identification key transmitted to the simple login server matches the customer identification key received from the app server .

In yet another embodiment, the method may further include performing a login of the terminal when the app server receives service request information from the login server.

In another embodiment, the simple login server is operated by a first service provider, the login server is operated by a second service provider, the first application server is operated by a third service provider, The first service provider, the second service provider, and the third service provider may be legally distinguished subjects, wherein the distinguished subjects include natural persons and legal persons.

The server-based simple login system and the simple login method according to an embodiment of the present invention can log in through the server and reduce the memory and CPU usage of the terminal, thereby improving the execution speed of the application.

In the server-based simple login system and the simple login method according to the embodiment of the present invention, since the terminal does not store the identification key, hacking of the personal information by the malicious application can be prevented originally.

The server-based simple login system and the simple login method according to an embodiment of the present invention can easily perform login without inputting additional information in the terminal.

The server-based simple login system and the simple login method according to an embodiment of the present invention do not use the personal information of the terminal user, so that the risk of leakage of personal information can be avoided.

1 is a block diagram illustrating a server-based simple login system according to an embodiment of the present invention.
2 is a flowchart illustrating a server-based simple login method according to an embodiment of the present invention.

While the present invention has been described in connection with certain exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and similarities. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. As used herein, terms used in the present invention are selected from general terms that are widely used in the present invention while taking into account the functions of the present invention, but these may vary depending on the intention or custom of a person skilled in the art or the emergence of new technologies. In addition, in certain cases, there may be a term arbitrarily selected by the applicant, in which case the meaning thereof will be described in the description of the corresponding invention. Therefore, it is intended that the terminology used herein should be interpreted based on the meaning of the term rather than on the name of the term, and on the entire contents of the specification.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

1 is a block diagram illustrating a server-based simple login system according to an embodiment of the present invention.

Referring to FIG. 1, a server-based simple login system according to an embodiment of the present invention may include a simple login server 100, a login server 200, and an application server 300.

The terminal 10 can mount an application that requires login. The application application may include a program to be executed on the terminal 10. Here, the program may include a program executed in a wired terminal as well as a wireless terminal. In one embodiment, the terminal 10 may be a portable terminal, a mobile terminal, a telematics terminal, a notebook computer, a digital broadcasting terminal, a personal digital assistant (PDA), a WiBro terminal, an IPTV (Internet Protocol Television) terminal, an AVN (Audio Video Navigation) terminal, a PMP (Portable Multimedia Player), and a navigation terminal .

The simple login server 100 can receive the simple login request information including the device ID, the application ID, and the user ID from the terminal 10, and determine whether the terminal 10 is registered in the simple login service. The simple login server 100 can store information about the simple login service. If the terminal 10 is not subscribed to the simple login service, it can provide a procedure for subscribing to the simple login service. If the terminal 10 is subscribed to the simple login service, the login server 200 can request the generation of the customer identification key.

The device ID may be a unique identification number of the terminal 10 or a combination of characters. For example, the device ID may include an International Mobile Equipment Identity (IMEI) of the terminal 10. [ In addition, the application ID may be a unique identification number of the application or a combination of characters performed by the terminal 10. For example, the application ID may include a unique number of the application installed in the terminal 10, and a unique number of the application may be a combination of a unique number generated based on the date when the terminal 10 downloaded the application Lt; / RTI > The user ID may be a combination of numbers and characters arbitrarily set by a user of the terminal 10 and may be a user ID already stored in the terminal 10. [ In addition, the simple login server 100 can transmit the simple login result including the device ID, the application ID, and the customer identification key corresponding to the user ID to the terminal 10. Here, the customer identification key may include a customer identification key generated at the login server 200.

The login server 200 can receive and process the device ID, the application ID, and the user ID from the simple login server 100. In addition, a customer identification key can be generated. For example, when the device ID is ABCDEF, the application ID is APP20131105140512, and the user ID is KTSEARCH1004, the login server 200 generates a randomly generated unique key (e.g., XYZ123) You can create ABCDEF / APP20131105140512 / KTSEARCH1004 / XYZ123 in combination with ID and user ID. At this time, each piece of information may be encrypted and generated. The customer identification key generated by encrypting may further include a key capable of decrypting the encrypted value. The login server 200 can transmit the generated customer identification key to the simple login server 100.

The app server 300 may receive a first login request including a customer identification key from the terminal 10. [ The terminal 10 can execute an application and can drive a program requiring login. The terminal 10 can receive the customer identification key from the simple login server 100 after the terminal 10 makes a simple log-in request to the simple log-in server 100, And send the first login request to the app server 300.

At this time, the first login request may include a user identification key generated in the login server 200 as well as a user ID and a password, unlike a login performed in a conventional application. Here, the customer identification key may include information on the terminal 10, and may be a unique key assigned to each terminal 10. [ As described above, the customer identification key may include a device ID, an application ID, and a user ID.

In addition, the app server 300 may send a second login request to the login server 200 for the first login request. Here, the second login request may include a customer identification key and app server information. The app server information may be a unique number or a combination of characters possessed by the app server 300, or may be a random number or combination of characters assigned to each customer identification key. The login server 200 receives the second login request including the information on the app server 300 and the information on the customer identification key, and transmits the client identification key, which is generated by the login server 200, It is possible to determine whether the customer identification key is the same. If the customer identification key generated by the login server 200 and the customer identification key received from the app server 300 are the same, a login result for requesting a service may be provided to the app server 300. Thereafter, the app server 300 can provide services to applications executed in the terminal 10. [

In the server-based simple login system according to the embodiment of the present invention, the login is performed through the server, the speed of execution of the application can be improved by reducing the memory and CPU usage of the terminal and the terminal does not store the identification key Hacking of personal information by malicious application can be prevented at the source.

2 is a flowchart illustrating a server-based simple login method according to an embodiment of the present invention.

2, a server-based simple login method according to an embodiment of the present invention is a simple login method in which the simple login server 100 receives simple login request information including a device ID, an application ID, and a user ID from the terminal 10 Determining whether the terminal 10 is registered in the simple login service, receiving the simple login request information, receiving the device ID, the application ID, and the user ID, The simple login server 100 transmits a simple login result including the customer identification key to the terminal 10, and the terminal 10 transmits the simplified login result to the application server 300, Transmitting the first login request including the customer identification key to the application server 300, and transmitting the first login request including the customer identification key to the application server 300, Register may step and the log in server 200 sending a request to the log in server 200 comprises sending a service request information corresponding to the second login request to the apps server 300.

In step S201, the terminal 10 can send a simple login request to the simple login server 100. [ Here, the simple login request may include a device ID, an application ID, and a user ID.

In step S202, the simple login server 100 can determine whether the terminal 10 is registered in the simple login service.

If the terminal 10 is registered in the simple login service in step S203, the terminal 10 can transmit a simple login request including the device ID, the application ID, and the user ID to the login server 200. [

In step S204, the login server 200 receives the device ID, the application ID, and the user ID, and generates the corresponding customer identification key.

The login server 200 can transmit the customer identification key to the simple login server 100 in step S205.

In step S206, the simple login server 100 can transmit the simple login result including the customer identification key to the terminal 10. [

In step S207, the terminal 10 may request a login (first login request) to the app server 300 including the customer identification key.

In step S208, the app server 300 can send a login request (second login request) to the login server 200, including information on the app server 300 and information on the customer identification key, have.

In step S209, the login server 200 may determine whether the customer identification key generated by the login server 200 is the same as the customer identification key transmitted from the application server 300. [

In step S210, when the customer identification key generated by the login server 200 is identical to the customer identification key transmitted from the application server 300, the login server 200 transmits a login result including the service request information to the app server 300 Lt; / RTI >

In step S211, the application server 300 may allow the terminal 10 to log in.

The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. The software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art It will be possible. An exemplary storage medium would be capable of associating with the processor so that the processor could read information from, and write information to, the storage medium. Alternatively, the storage medium may be incorporated into the processor. The processor and the storage medium may reside in an ASIC. The ASIC may be located within the user terminal. Alternatively, the processor and the storage medium may reside as separate components in a user terminal.

All of the processes described above may be implemented within one or more general purpose or special purpose computers or software code modules executed by processors, and may be fully automated via the software code modules. The code modules may be stored on any type of computer-readable medium or on a collection of other computer storage devices or storage devices. Some or all of the above methods may alternatively be implemented within specialized computer hardware.

All of the methods and tasks described herein may be performed by a computer system and be fully automated. The computer system, in some cases, may be a computer system or a plurality of separate computers or computing devices (e.g., physical servers, workstations, , Storage arrays, etc.). Each such computing device typically includes a processor (or a collection of multiple processors or a circuit or a circuit, e.g., a module) that executes program instructions or modules stored in memory or other non-transitory computer- to be. Although some or all of the various functions described herein may be implemented as application-specific circuitry (e.g., ASICs or FPGAs) in a computer system, the various functions described may be implemented with such program instructions . When the computer system includes a plurality of computing devices, the devices may not be deployed in the same location, but may be deployed together. The results of the disclosed methods and tasks may be permanently stored in different states by solid state memory chips and / or by transducing physical storage devices such as magnetic disks.

The simple login system according to an embodiment of the present invention can be operated by a plurality of subjects. In one embodiment, the simple login server 100 is operated by a first service provider, the login server 200 is operated by a second service provider, and the application server 300 is operated by a third service provider . For example, the network operator can operate the simple login server 100 and the login server 200, and the app server operator who provides the app service with permission of the network operator manages only the app server 300, And provide the service to the terminal 10 through the network operator. Here, the first service provider, the second service provider, and the third service provider may be legal subjects, and the legal persons may include natural persons and corporations. A simple login system according to an embodiment of the present invention defines a method operated by a plurality of subjects as a type of rights, and a plurality of actions performed by a plurality of subjects are combined to form a single joint illegal act have.

The embodiments of the present invention have been described above. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

10: Terminal
100: Easy Login Server
200: Login Server
300: App Server

Claims (15)

The method comprising: receiving simple login request information including a device ID, an application ID and a user ID from the terminal, determining whether the terminal is registered in the simple login service, and transmitting the device ID, the application ID, A simple login server for transmitting a simple login result including the key to the terminal;
A login server for receiving and processing the device ID, the application ID, and the user ID from the simple login server and generating the customer identification key; And
Receiving a first login request including the customer identification key from the terminal, transmitting a second login request including the customer identification key and the app server information to the login server, receiving a login result from the login server The app server;
A simple server-based login system.
The method according to claim 1,
The terminal may be a portable terminal, a mobile terminal, a telematics terminal, a notebook computer, a digital broadcasting terminal, a personal digital assistant (PDA), a wibro terminal Terminal, an Internet Protocol Television (IPTV) terminal, an AVN (Audio Video Navigation) terminal, a PMP (Portable Multimedia Player), and a navigation terminal (vehicle navigation device) Easy login system.
The method according to claim 1,
Wherein the device ID includes an IMEI (International Mobile Equipment Identity) of the terminal.
The method according to claim 1,
Wherein the application ID includes a unique number of an application installed in the terminal.
The method according to claim 1,
Wherein the user ID is a combination of numbers and characters arbitrarily set by the user of the terminal.
The method according to claim 1,
The login server
Optionally generating the customer identification key,
Retrieves the generated customer identification key, and obtains the device ID, the application ID, and the user ID.
The method according to claim 1,
The app server
Wherein the server provides a service to the application executed in the terminal.
The method according to claim 1,
The login server
The customer identification key transmitted to the simple login server
If the customer identification key received from the app server matches
And transmits the service request information to the app server.
The method according to claim 1,
When the application server receives the service request information from the login server
And the login of the terminal is performed.
The simple login server receiving simple login request information including a device ID, an application ID and a user ID from the terminal;
Determining whether the terminal is registered in the simple login service;
Receiving, by the login server, the simple login request information, receiving and processing the device ID, the application ID and the user ID, and generating a customer identification key;
The simple login server transmitting a simple login result including the customer identification key to the terminal;
The terminal sending a first login request including the customer identification key to an app server;
Transmitting, by the app server, a second login request including the customer identification key and the information of the app server to the login server; And
The login server transmitting service request information corresponding to the second login request to the app server;
A simple server-based login method.
11. The method of claim 10,
Wherein generating the customer identification key comprises randomly generating the customer identification key,
Retrieves the generated customer identification key, and obtains the device ID, the application ID, and the user ID.
11. The method of claim 10,
Transmitting the service request information to the app server when the customer identification key transmitted to the simple login server matches the customer identification key received from the app server;
And a server-based simple login method.
11. The method of claim 10,
When the app server receives service request information from the login server
Performing a login of the terminal;
And a server-based simple login method.
A recording medium on which a computer-readable program recorded by the method of any one of claims 10 to 13 is recorded.
A method for operating a server-based simple login system according to claim 1,
The simple login server of claim 1 is operated by a first service provider,
Wherein the login server of claim 1 is operated by a second service provider,
The app server of claim 1 is operated by a third service provider,
Wherein the first service provider, the second service provider, and the third service provider are legally distinguished subjects, wherein the subject matter distinguished by law includes a natural person and a corporation. .

Images