KR101305901B1 - Method and system for authentication - Google Patents

Abstract

PURPOSE: An authentication method and system are provided to increase security relate with user authentication, thereby being usefully applied to a cloud service system etc. CONSTITUTION: A D-server (100) comprises a user interface unit (110), a random key generation unit (120), a 2D bar code generation unit (130) and a bar code transmission unit (140). In the user interface unit, the user connecting to the D-server performs a normal user registration process by using the terminal of the user and receives various interfaces. The random key generation unit generates a random key which is used in order to perform authentication about the user. The 2D bar code generation unit generates a 2D bar code by encoding the random key generated by the random key generation unit. The bar code transmission unit transmits the 2D bar code to the terminal of the user and indicates the 2D bar code on a display device. [Reference numerals] (100) D- server (web server); (110) User I/F unit; (120) Random key generation unit; (130) 2D bar code generation unit; (140) Bar code transmission unit; (150) User ID/PW DB

Description

Authentication method and system {METHOD AND SYSTEM FOR AUTHENTICATION}

The present invention relates to an authentication method and system, and more particularly, to an authentication method and system for authenticating a user using a two-dimensional bar code and a user device key.

Recently, with the rapid spread of the Internet, electronic commerce based on online rather than offline is being activated. The exchange of information through the Internet is also active, and in connection with this, the leakage of personal information and various computer crimes are also increasing.

In particular, in the fields such as Internet banking, the protection of personal information is more strongly demanded. Accordingly, various forms of identity authentication systems are being developed. For example, when a user connects to a network, the user ID / password set in advance in order to confirm the identity of the user is most commonly used.

However, an authentication method using a user ID / password may be left on the display without the user's knowledge and may leak to a third party, and may be easily extracted through computer hacking.

In connection with the above problem, it is proposed to perform authentication by combining barcode, fingerprint recognition, and face recognition (Application Nos. 10-2001-50145 and 10-2001-50146), but due to the inconvenience of authentication, etc. It is not widely used in the field.

Recently, in addition to simply using a personal computer, Cloud services have been widely used. In other words, by providing a variety of software that can be utilized by the user to a server that can be accessed through a communication network, and simply connect to the server, you can install a variety of programs without having to be anywhere, and without installing the software on their own computer Cloud services that can be utilized and store various data are widely used. In this cloud service, the importance of security in relation to personal information is further emphasized because it is a method of storing the data in a separate external server rather than storing the data in its own space (for example, a PC). . That is, when using the cloud service, when accessing the cloud server with a terminal capable of user identification, such as a smartphone, excessive user authentication may not be necessary. However, when using a laptop or desktop computer to access a cloud server, it may be difficult to say 100% that the user is a true user. However, in the case of the existing cloud service, the visitor is regarded as a true user, and the visitor can view all data registered by the user on the cloud server. That is, even if the accessor illegally acquires the user's ID / password, there is a problem that all data registered by the user is exposed to such an illegal accessor without confirming whether or not the user is a true user. Therefore, when identifying a user (accessor) only by user ID / password, there is a problem that it is not appropriate for a service requiring a higher level of user authentication such as a cloud service.

In addition to the user ID / password method, an additional security measure in the form of a public certificate is used for the Internet banking system. Depending on the Internet banking system, if you log in as a web service, you can restrict services such as money transfer, and if you authenticate with a certificate, you can use various services such as money transfer without restriction. have. However, when using such a service by using multiple terminals in various places, such as a cloud service, a certificate must be installed for each terminal, and a public certificate can be hacked, which may cause the same problem as the user ID / password method. have.

On the other hand, recently, two-dimensional barcodes have been widely used, and a method of performing user authentication using these two-dimensional barcodes has been used (for example, ticket ticketing and the like). However, in the two-dimensional bar code, the user's information, for example, the user's name and other information corresponding to the user's ID / password, is actually recorded, and the two-dimensional bar code itself can be duplicated. Information can be leaked or hacked to third parties, requiring more fundamental solutions.

SUMMARY OF THE INVENTION The present invention has been made to solve the problems described in the above-described prior art, and one object thereof is to maintain a user authentication method based on the existing user ID / password, and in addition to such authentication method, a user ID / password is simply used for the server. It is to provide a user authentication method and system that make all data unavailable.

It is another object of the present invention to provide a user authentication method and system that does not leak user information while using a two-dimensional bar code.

In order to achieve the above object, according to the present invention, a service providing server for providing a service by authenticating a user connected to a server through a user registration procedure and an authentication procedure. The server provides only a normal web service to a user accessing the system using a user ID and a password, and additional security is only provided when a user accesses the system using the user ID and a password. Provide the user with the required secondary service. The server, when the user accesses using a user terminal, is used to perform authentication for the connected user, means for generating a random key for identifying the connected user and stores in the first database for each user, The random key is a variable data value generated every time the user selects to utilize the second authentication service provided by the server, and generates a two-dimensional barcode including the means and information of the generated random key. Bar code generation means for transmitting to the terminal, and receiving means for receiving a random key and a user device key (UDK) from the user's mobile communication terminal, the mobile communication terminal photographs a two-dimensional bar code displayed on the display device of the user terminal Decode and extract the random key generated and transmitted. In addition, an application capable of generating a unique user device key (UDK) is installed in the user mobile communication terminal, and the application stores the generated user device key in a storage unit of the mobile communication terminal and extracts the data. The user information corresponding to the random key from the first database based on the receiving means and the random key received by the receiving means, which transmits the generated random key and the generated user device key to the server. Extracting the user information and mapping the received user device key with the received user device key and storing the extracted user information in the first database or a separate second database and the user information extracting means based on the received random key. User device mapped with user information extracted by And, it characterized in that it is extracted from the user of the mobile communication terminal compares whether or not the device key matches the user that has been currently transmitting an authentication means for authenticating the user to use the second authentication service.

According to an embodiment, the random key may be data (UUID) generated based on a time when a user accesses the system or a random key generation time.

In one embodiment, the two-dimensional barcode generated by the barcode generating means does not include user information such as user ID / password.

In one embodiment, the user device key may be generated using the terminal unique identification information of the mobile communication terminal.

In one embodiment, the application may be provided through the system or in a separate application providing store and installed in the mobile communication terminal.

According to another aspect of the present invention, a user authentication method in a service providing server that provides a service by authenticating a user connected to a server through a user registration procedure and an authentication procedure, wherein the server uses a user ID and a password. Only normal web services are provided to the user accessing the system, and the second authentication service requiring security is provided to the user only when the user accesses the system using the user ID and password. It is configured to. In the method, the user registration procedure, (A) when the user connects using a user terminal, is used to perform authentication for the accessed user and generates a random key for identifying the accessed user to generate a first key. Storing each user in a database, wherein the random key is a variable data value generated each time a user selects to utilize a second authentication service provided by the server; and (B) the generated random key Generating a two-dimensional barcode including information of the information and transmitting the same to a user terminal; and (C) receiving a random key and a user device key (UDK) from the user's mobile communication terminal. The 2D barcode displayed on the display device of the user terminal is photographed and decoded to be generated and transmitted. An application capable of extracting an on random key and generating a unique user device key (UDK) is installed in the user mobile communication terminal, and the application stores the generated user device key in a storage unit of the mobile communication terminal. And transmitting the extracted random key and the generated user device key to the server, and (D) based on the received random key, corresponding to the random key from the first database. Extracting the user information, mapping the extracted user information and the received user device key, and storing the extracted user information in the first database or a separate second database, wherein the authentication procedure comprises: receiving the received random key A user device key mapped with the user information extracted based on the second authentication; In order to use the service as compared to whether or not the user has a device key that has been currently transmitted from the user matches the mobile terminal characterized by including the step of authenticating the user.

According to the present invention, user authentication is performed not only by user ID / PW but by using a new concept of random key and user device key. Accordingly, the security associated with user authentication can be improved, and can be usefully applied to a cloud service system.

1 is an overall schematic diagram of a user authentication system according to an embodiment of the present invention.
2 is a block diagram showing the configuration of a D-server (web server) according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of an authentication server according to an exemplary embodiment of the present invention.
4 shows one example of an interface provided by a user interface unit in accordance with one embodiment of the present invention.
5 is a view showing one embodiment of a two-dimensional bar code displayed on the display device of the user terminal.
6 is a diagram illustrating a process of performing authentication by photographing a two-dimensional bar code.
7 is a diagram illustrating an aspect of a second authentication service provided to a user after an authentication process.
8 is a flowchart illustrating a process of performing a user pre-registration procedure according to an embodiment of the present invention.
9 is a flowchart illustrating a process of performing an authentication procedure according to an embodiment of the present invention.

EMBODIMENT OF THE INVENTION Hereinafter, embodiment of this invention is described concretely with reference to an accompanying drawing. In the following description, the description of technical constructions well known in the art will be omitted. Even if this description is omitted, those skilled in the art will be able to easily understand the features of the present invention through the following description.

1 shows an overall schematic diagram of a user authentication system according to an embodiment of the present invention.

As shown in FIG. 1, the user authentication system S includes a user terminal 10, a server, and a user mobile communication terminal 20.

The user terminal 10 is a terminal capable of performing data communication by connecting to a server through a wired / wireless communication network. In an exemplary embodiment of the present invention, the user terminal 10 is a personal computer provided with a display device. However, the present invention is not limited thereto, and may include a notebook computer, a tablet PC, and the like.

If the user mobile communication terminal 20 is, for example, a terminal provided with a means for capturing and decoding a two-dimensional bar code displayed on the user terminal 10 as a smartphone, the form is not particularly limited.

As described above, according to the present invention, in consideration of the fact that smart phones are widely popularized, user authentication is performed using a mobile communication terminal 20 such as a smartphone and a user terminal 10 such as a personal computer. This is one feature of increasing security. In other words, by simply accessing the system of the present invention using only the user terminal 10, a service provided by the system, for example, a cloud service (in one embodiment, provides a tax-related program service) can be used. If the ID / password enters the hands of a third party due to hacking or the like, it is impossible to accurately authenticate whether the accessor is a real user, and in this case, a large amount of data stored in a predetermined storage space by the true user using the cloud service It can be exposed by illegal accessor. However, the present invention prevents such a problem at first, and will be described in detail as follows.

2 and 3 are detailed block diagrams of the server.

2 and 3, according to one embodiment of the present invention, the server is composed of a D-server 100 and an authentication server 200, which is a kind of web server, and these servers are connected to a wired / wireless communication network. It is connected so that mutual data communication is possible. Meanwhile, in the illustrated embodiment, the server is illustrated as being separated into two servers, but the present invention is not limited thereto. That is, it may be implemented as one server instead of two servers, which are also included in the scope of the present invention. In addition, the unit of each server may be implemented not only in the form of hardware but also in the form of software or in the form of a combination of hardware and software, and thus the implementation form is not particularly limited. On the other hand, when composed of two servers as in the present embodiment, each server may be managed under the control of one administrator, or may be managed under the control of a separate administrator.

First, the D-server 100 will be described. The D-server 100 communicates with a user connected to the server like a normal web server and performs a unique function according to the present invention. Explained as follows.

As shown, the D-server 100 includes a user interface (I / F) unit 110, a random key generation unit 120, a two-dimensional (2D) barcode generation unit 130, a barcode transmission unit 140. And a user ID / password database (DB) 150.

The user interface unit 110 performs a normal user registration (ID, PW setting, etc.) procedure by a user connected to the D-server 100 using his or her terminal 10, and provides various interfaces to the user. A typical user interface unit for providing. One example of the user interface provided by the user interface unit 110 is shown in FIG. 4. On the other hand, the user's information, that is, the user ID / password is stored in the user ID / password database 150.

When a user who has performed normal user registration accesses the D-server 100, the D-server 100 determines whether the user is a normal user or a second authentication user. That is, a normal user simply refers to a user who accesses a server by using a user ID / PW and receives only a normal web service provided by the D-server 100, and a service whose security is more important, such as a cloud service. The user who wants to use the service may use such a service after the second authentication, and the user is referred to as the second authentication user, and the present invention provides such a second authentication service. Hereinafter, a user registration procedure will be described first as a preliminary procedure for performing such a second authentication service.

When the user selects a second authentication service such as a cloud service, the D-server 100 performs a pre-registration procedure for second authentication as follows. First, the random key generation unit 120 of the D-server 100 generates a random key used to perform authentication for the connected user. This random key is not fixed data but data generated every time the user connects to the server and performs the second authentication service. That is, the random key is used for authentication of the user session, and it is possible to confirm whether the user who performed the first authentication on the web and the user who performs the second authentication using a mobile communication terminal such as a smart phone are the same person. To make it work. In one embodiment, the random key is 128 bits of data, and is generated in the form of a universally unique ID (UUID) based on a time such as a user's system access time and a random key generation time. The random key generation unit 120 generates a random key for the user connected to the server, and then stores the generated random key in the user ID / password database 150 for each user. In this case, the random key is generated only when the user selects the second authentication service, not fixed data such as a user ID or a password. When a new random key is generated, the old random key is replaced by the new random key.

Subsequently, the two-dimensional barcode generation unit 130 generates a two-dimensional barcode. In this case, the two-dimensional barcode generation unit 130 does not generate a two-dimensional barcode by encoding information of a user connected to the server, that is, a user ID / password, and generates a random key generated by the random key generation unit 120. Encoding produces a two-dimensional barcode. By generating the two-dimensional bar code in this manner, the security can be increased as compared with the two-dimensional bar code formed by including user identification information such as a user ID. That is, the two-dimensional barcode including the user ID and the like may also be decoded by a third party, so that the user ID and password may be exposed to the third party. However, since a random key is encoded in the two-dimensional barcode generated according to the present invention instead of such user identification information, even if a third party illegally acquires and decodes the two-dimensional barcode, information related to the user cannot be obtained from the barcode. As a result, security can be further increased.

The generated two-dimensional barcode is transmitted to the user terminal 10 connected to the server by the barcode transmission unit 140 and displayed to the user through the display device of the user terminal (for example, see FIG. 5). The user takes a picture of the displayed two-dimensional bar code, at which time the following procedure is performed using a dedicated application. That is, the user may decode a dedicated bar code decoding provided by the applicant in the App Store, the T-Store, or the system server performing the present invention (ie, regardless of the acquisition path) in order to perform the service according to the present invention. The user device key generation application is downloaded and installed in the mobile communication terminal 20 such as its own smartphone. The application is similar to the commonly used viewfinder, a two-dimensional barcode reader, but differs from conventional barcode readers in that it generates user device keys. That is, a bar code reader such as a viewfinder photographs a two-dimensional bar code, and then decodes the bar code according to the information contained in the bar code, such as wirelessly accessing the user terminal or displaying the information contained in the bar code on the user terminal. Have

However, when the user photographs the two-dimensional barcode transmitted from the barcode transmission unit 140 using the application according to the present invention, the application decodes the two-dimensional barcode and at the same time, the serial number of the mobile communication terminal 20. As described above, information identifying the user of the mobile communication terminal is extracted to generate a user device key (UDK), and the key is stored in a storage device (not shown) of the mobile communication terminal. Here, the user device key is a key for identifying the terminal. The mobile communication terminal may include information related to the user, such as the user's telephone number, and information not related to the user, such as the OS type, version, and unique device ID (UDID) of the terminal, for example, the terminal serial number. Can be. In an embodiment of the invention, the application generates a user device key using information not associated with the user, such as a terminal serial number, instead of information associated with the user. The key thus generated is encrypted and stored in the terminal and registered, and authentication is performed using this key. Subsequently, the application transmits the extracted random key and the generated user device key to the server of the present invention. In one embodiment of the present invention, the transmitted random key and user device key are received by the random key / UDK receiving unit 210 of the authentication server 200.

When the random key / UDK is received, the user DB search unit 220 searches the user ID / PW database 150 based on the random key and extracts user information corresponding to the random key. That is, since the random key matches the user information ID / PW and is stored in the database, the user DB search unit 220 may extract the user information based on the received random key. When the user ID / password is extracted by the user DB retrieval unit 220, the mapping unit 230 maps the extracted information and the received UDK to the user ID / PW / UDK database 250. Meanwhile, in the present embodiment, although the user ID / PW / UDK database 250 is shown as being separate from the user ID / PW database 150, the user ID / PW / UDK database 250 is referred to as the user ID / PW database. It can be comprised integrally with the 150. In this case, the mapping unit 230 may store the extracted user information and the received UDK in the user ID / PW database 150.

By going through this series of procedures, the pre-registration procedure for performing the second authentication service (eg, a simple inquiry service in the case of a cloud service or a financial service, as well as a service capable of transferring or applying for a loan) is completed. When a user who has completed this pre-registration procedure wants to use the second authentication service, a method of authenticating the user will be described in detail below.

As in the user pre-registration procedure, when a user connects to the server using his terminal 10, the random key generation unit 120 generates a random key, and the corresponding user information of the user ID / PW database 150 is displayed. Store in Subsequently, the two-dimensional barcode generation unit 130 encodes the generated random key to generate a two-dimensional barcode, and the barcode transmission unit 140 transmits the two-dimensional barcode to the user terminal 10 to display the image on the display device. To be displayed.

The user drives the previously downloaded application by using the mobile communication terminal 20 and photographs a two-dimensional bar code displayed on the display device. As a result, the application decodes the two-dimensional barcode to extract a random key, extracts (reads) the generated user device key (UDK), and transmits the extracted random key and the UDK. The random key and the UDK transmitted to the user mobile communication terminal are received by the random key / UDK receiving unit 210, and the user DB retrieving unit 220 receives user information corresponding to the random key from the user ID / password database 150. Search for and extract. Subsequently, an authentication procedure is performed by the authentication unit 240.

Specifically, the authentication unit 240 compares the user device key (UDK) mapped with the user ID / password extracted by the user DB retrieval unit 220 and the UDK received by the random key / UDK receiving unit. (One example of the display screen of the authentication process is shown in FIG. 6), if the two UDKs match, they authenticate that they are normal users, allowing the user to use the secondary authentication service. 7 shows an example of a display screen of a second authentication service (tax service) available to an authenticated user.

As described above, according to the present invention, since user authentication is performed using a process of generating, extracting and transmitting / receiving a separate random key without using user information (ID / PW), the possibility of leakage of user information can be reduced. And even if the user information is leaked, the third party cannot use the second authentication service based on the user information. In addition, since the user device key is used in the authentication process, security can be further enhanced. That is, the user device key is data unique to the mobile communication terminal. If there is no loss or theft of the terminal, the third party cannot actually generate the user device key, thereby reducing the possibility of utilizing the second authentication service by the third party. Can be. As described above, according to the present invention, when accessing a system through a user ID / PW and then using a separate second authentication service, a random key and a UDK should be used, such as a cloud service. There is an advantage that can significantly reduce the possibility of using the service containing the third party, not the user.

Hereinafter, the present invention will be described in more detail with reference to specific examples. 7 is a diagram illustrating an authentication process in a flowchart form when a second authentication service is to be used according to an embodiment of the present invention. This example illustrates the case of using a tax program using a cloud service.

First, the user accesses the server of the present invention, specifically, the D-server 100 by using his terminal 10 (S100). When the user connects using ID / PW, the random key generation unit 120 generates a random key, and the barcode generation unit 130 generates a two-dimensional barcode based on the generated random key (S110). . The generated random key is stored for each user in the user ID / PW database 150.

The barcode transmission unit 140 transmits the generated two-dimensional barcode to the user terminal 10 (S120) and displays it on the display device of the user terminal (S130). Subsequently, the user drives a predetermined application installed in his mobile communication terminal 20 to photograph the displayed two-dimensional bar code (S140). Accordingly, the application decodes the photographed two-dimensional bar code to extract a random key (S150), generates a user device key (UDK) unique to the user mobile communication clearness 20 and stored in a predetermined storage device After that (S160), the decoded random key and the generated UDK is transmitted to the authentication server 200 (S170).

When the random key and the UDK are received by the random key / UDK receiving unit 210, the DB retrieving unit 220 searches the user ID / PW database 150 to search for user information corresponding to the received random key (eg, , User ID / PW) is extracted (S180). The mapping unit 230 maps the extracted user information and the UDK to the user ID / PW / UDK database 250 (S190).

As described above, after the user pre-registration procedure for utilizing the second authentication service is completed, if the user later accesses the server of the present invention again (S200), a random key / barcode is generated and stored (S210). The two-dimensional barcode is transmitted to the user terminal 10 (S220) and displayed on the display device (S230). The user drives the application to photograph the barcode (S240), and accordingly the two-dimensional barcode is decoded to extract a random key (S250), and the UDK is extracted (S260), the extracted UDK and the random key is an authentication server Is transmitted (S270). Accordingly, the user information corresponding to the random key is extracted (S280), and the authentication unit performs authentication by comparing whether or not the UDK mapped to the extracted user information matches the received UDK (S290). If the two UDKs match, authentication is successful (S300), and the second authentication service provided by the server can be utilized.

Although the preferred embodiment has been described above, it should be noted that the present name is not limited to the above embodiment. For example, although the configuration of the server illustrated in FIGS. 2 and 3 is implemented in hardware form, as described above, each unit may be implemented in software form or in hardware / software form. In addition, although each unit may be configured in a separate hardware form, it may be implemented integrally or by integrating some units, which is also within the scope of the present invention. As such, the embodiments may be variously modified and modified within the scope of the following claims, and all of them fall within the scope of the present invention. Accordingly, the invention is limited only by the claims and the equivalents thereof.

10: User terminal
20: user mobile communication terminal
100: D-server (web server)
120: random key generation unit
130: 2D barcode generation unit
140: barcode transmission unit
200: authentication server
210: random key / UDK receiving unit
230: mapping unit
240: authentication unit

Claims (11)

A service providing server that provides a service by authenticating a user connected to a server through a user registration procedure and an authentication procedure, wherein the server provides only a normal web service to a user connected to the server using a user ID and password. The second server may be configured to provide a second authentication service requiring additional security to the user only when a user accessing the server using the user ID and password performs an additional authentication procedure.
Means for generating a random key for identifying the connected user and storing the random key for each user in a first database when the user accesses using the user terminal. Said means being variable data values generated each time a user chooses to utilize a second authentication service provided by said server;
A barcode generation means for generating a two-dimensional barcode including information of the generated random key and transmitting the generated barcode to a user terminal;
Receiving means for receiving a random key and a user device key (UDK) from the user's mobile communication terminal, the mobile communication terminal photographed and decoded the two-dimensional bar code displayed on the display device of the user terminal generated and transmitted random An application capable of extracting a key and generating a unique user device key (UDK) is installed in the user mobile terminal, and the application stores the generated user device key in a storage unit of the mobile communication terminal. The receiving means for transmitting the extracted random key and the generated user device key to the server;
Based on the random key received by the receiving means, user information corresponding to the random key is extracted from the first database, and the extracted user information and the received user device key are mapped to the first database or User information extraction means for storing in a separate second database;
A user device key mapped with the user information extracted by the user information extracting means based on the received random key, and extracted from the mobile communication terminal of the user to use the secondary authentication service and currently transmitted. Authentication means for authenticating users by comparing whether user device keys match
Service providing server comprising a. delete The service providing server of claim 1, wherein the random key is data (UUID) generated based on a time when a user accesses the server or a random key generation time. The service providing server according to claim 1, wherein the two-dimensional barcode generated by the barcode generating means does not include user information including a user ID and a password. The service providing server according to any one of claims 1, 3, and 4, wherein the user device key is generated using terminal unique identification information of the mobile communication terminal. The service providing server of claim 1, wherein the application is provided through the server or in a separate application providing store and installed in the mobile communication terminal. A user authentication method in a service providing server that provides a service by authenticating a user connected to a server through a user registration procedure and an authentication procedure, wherein the server is generally used for a user accessing the server using a user ID and password. It is configured to provide only a web service and provide a second authentication service requiring security only when a user accessing the server using the user ID and password performs an additional authentication procedure.
The user registration procedure,
(A) when the user connects using a user terminal, generating a random key used to authenticate the connected user and identifying the accessed user and storing the random key in a first database for each user. The random key being a variable data value generated each time the user selects to utilize a second authentication service provided by the server;
(B) generating a two-dimensional bar code including the generated random key information and transmitting it to the user terminal;
(C) receiving a random key and a user device key (UDK) from a mobile communication terminal of a user, wherein the mobile communication terminal photographs, decodes, and generates the two-dimensional barcode displayed on a display device of the user terminal; An application for extracting the random key and generating a unique user device key (UDK) is installed in the user mobile communication terminal, and the application stores the generated user device key in the storage unit of the mobile communication terminal. And storing the extracted random key and the generated user device key to the server.
(D) extracting user information corresponding to the random key from the first database based on the received random key, mapping the extracted user information and the received user device key to the first database, or separately To a second database on the
Lt; / RTI >
The authentication process,
Whether the user device key mapped with the user information extracted based on the received random key and the user device key currently transmitted from the user's mobile communication terminal to use the second authentication service match. Authenticating the user by comparing the user authentication method with a service providing server. delete The method of claim 7, wherein the random key is data (UUID) generated based on a time when a user accesses the server or a random key generation time. The method of claim 7, wherein the two-dimensional barcode does not include user information including a user ID and a password. 10. The method of claim 7, wherein the user device key is generated using terminal unique identification information of the mobile communication terminal.

Images