KR101278926B1 - Social verification login system being possible to verify user and providing method thereof - Google Patents

Abstract

Disclosed are a social authentication login system and a method of providing the same. The social authentication login system providing method includes requesting login information of an external service account to which a user corresponding to the user terminal subscribes to use a specific service from a user terminal, in response to the request. Performing authentication based on the login information input from the user; performing authentication based on the user authentication information input from the user terminal if authentication is successful; and if the authentication succeeds, Allowing use.

Description

Social verification login system being possible to verify user and providing method

The present invention relates to a system and a method of providing the same, which can safely and conveniently use a service that can be used by performing identity authentication using a service account that does not perform identity authentication.

When you want to use a specific service provided by a given web page for various policy reasons or practical reasons, you may need to authenticate yourself. In general, the service to be authenticated may be a service provided by a web page accessed by a plurality of users. As such, the system that needs to perform identity verification when using a specific web page or a specific service provided by a specific web page is called a limited identity verification or a limited identity verification system.

This limited identity verification system is usually introduced to solve the problems caused by the anonymity of the Internet network. As a result, web pages that are subject to a limited identity verification scheme generally do not guarantee anonymity when they comment.

Recently, a service called social login or social comment has appeared. The social comment or social login service uses the account (or ID) of the specific service (e.g., Social Network Service (SNS)) without using the user's real name when using the specific service. , Comments, etc.).

1 is a view for explaining a method using a conventional social login service.

Referring to FIG. 1, a UI that enables social login when commenting on content disclosed on a specific web page is shown. The user may select one of predetermined web services (eg, an SNS service). 10 may be provided. Then, the user may select an icon corresponding to the web service of his choice among the selection UI 10. Then, you can log in with the account of the selected web service. When the login is normally performed, the user may input a comment in the comment field as shown in FIG. 1, and when the input is completed, the account information (eg, ID) of the web service selected by the user may be disclosed together with the comment. have.

As such, when uploading a predetermined opinion or information to a specific service using a social login service, the opinion or information is not automatically uploaded to the corresponding service. It can be uploaded to the user to reduce the effort.

In addition, since the user's ID or account used in a specific Internet service is disclosed when the specific service is used, there are various effects such as the consolidation of Internet culture and the expansion of communication and sharing of opinions or information.

However, there may be a question about whether the social login service can be applied to a web page or a web service to which the limited identity verification system is applied as described above. This is because, among the SNS services used by the social login service, there is a service that can be used to create an account without going through authentication. For example, most overseas web services (eg, Twitter, Me Today, Facebook, etc.) can subscribe to the service without authenticating. Alternatively, there may be a service that can be subscribed to services without performing self-authentication in domestic services. Therefore, in the case of allowing a user to use a specific service that needs to be authenticated by using a social login service using a web service that can be used without performing authentication, the limited authentication system may become meaningless. have.

However, if the web service to which the limited identity authentication system is applied does not allow social login unconditionally, it may be unreasonable because it artificially prevents various advantages and effects of using social login as described above. .

Therefore, there is an urgent need for a system and method for using a web service that does not perform identity authentication to reasonably use a specific service that should perform identity verification.

Accordingly, the technical problem to be achieved by the present invention is to provide a system and method that can reasonably use a specific service that should perform identity authentication using a web service that does not perform identity authentication.

In addition, the present invention provides a system and a method capable of performing identity authentication for users of a web service (eg, overseas SNS service) that does not perform identity authentication safely without the risk of personal information leakage.

In addition, since it is not necessary to subscribe to a web service that provides the specific service individually in order to use a specific service that performs identity authentication, an ID of a specific web service (eg, a service that does not need to perform identity authentication) is required. It is to provide a system and method that can be open ID.

In addition, if only one authentication is performed once, even when performing social login using a web service (eg, overseas SNS service) that does not perform identity authentication, it provides a system and a method for continuously authenticating.

In addition, the present invention provides a system and method that can solve various problems that may occur through social login using a web service (eg, an overseas SNS service) that does not perform self authentication.

In order to achieve the above technical problem, a method for providing a social authentication login system may include requesting login information of an external service account to which a user corresponding to the user terminal is subscribed to use a specific service from a user terminal. In response to performing authentication based on the login information input from the user terminal; if authentication succeeds, performing personal authentication based on the personal authentication information input from the user terminal; And allowing the use of the specific service.

The specific service is a service that can be used only by performing an authentication, and the external service account may be an account that can be created without performing an authentication.

The performing of the authentication based on the login information input from the user terminal may include transmitting the login information to an external service server corresponding to the external service account and authentication result information and account identification information to the external service server. Receiving the.

The account identification information may be information that can identify the user or the external service account.

The account identification information may be embodied as information including ID information included in the login information or a hash key value or an encrypted value of identification information allocated for each account.

The social authentication login system providing method may further include storing the account identification information and the result of the authentication of the external service account in a predetermined database.

The social authentication login system providing method includes requesting second login information of the external service account from a predetermined terminal to use the specific service, and transmitting the second login information to the external service server, and responding to the transmission. When receiving the account identification information from the external service server, based on the information stored in the database may further comprise the step of allowing the use of the particular service without requesting the predetermined terminal identity authentication.

The specific service may be a service for uploading an opinion of the user input from the user terminal to a predetermined web page.

The identity verification may include performing identity verification using IPIN (Internet Personal Identification Number) information, performing identity verification using a mobile phone, or performing identity verification using a social security number and name. It may include at least one of the steps.

The social authentication login system providing method for solving the technical problem is a step of performing authentication by using the login information of the account to an external service server that can create an account even if the social authentication login system does not perform a user authentication, authentication If the success is successful, performing a self-authentication through a self-certification authority, and storing the account identification information of the account and the identity verification result information of the account by storing.

The identification information of the account may be security key information generated based on information for identifying the user or the account.

The method for providing a social authentication login system may include receiving an authentication request using the account from a service server that provides a specific service that can be used by performing personal authentication, and based on the second login information received from the service server. Performing authentication with a service server, if authentication is successful, checking an identity verification result of the account corresponding to the second login information, and confirming that the account corresponding to the second login information has been authenticated The method may further include transmitting authentication success information to the service server, and the service server may allow use of the specific service when receiving the authentication success information.

The social authentication login system providing method for solving the technical problem is whether the account identification information of the account and the account of the account of the external service server that can create an account even if the social authentication login system does not perform identity authentication? Storing the identity authentication result information indicating that the account is authenticated from the service server providing a specific service that can be used to perform identity authentication, and whether the account is authenticated in response to the request. Transmitting information about the service server.

The social authentication login system providing method may be stored in a computer readable recording medium recording a program.

In order to solve the above technical problem, a social authentication login system requests login information of an external service account to which a user corresponding to the user terminal is subscribed to use a specific service from a user terminal, and inputs from the user terminal in response to the request. An external service authentication module for performing authentication based on the login information, a user authentication module for performing self authentication based on the user authentication information input from the user terminal if the authentication is successful, and the result of the self authentication is successful And a control module for allowing use of the predetermined service.

The external service authentication module transmits the login information to the external service server using an API (Application Programming Interface) corresponding to the external service server corresponding to the external service account, and authenticates the authentication result information and the Security key information can be received.

The control module stores the result of performing the identity verification of the account corresponding to the account identification information and the account identification information in a predetermined database.

The external service authentication module requests second login information of the external service account from a predetermined terminal to use the specific service, transmits the second login information to the external service server, and the external service authentication module When receiving the security key from the external service server, the control module may allow the use of the specific service without requesting the predetermined terminal to authenticate the user based on the information stored in the database.

The social authentication login system for solving the technical problem is an external service authentication module for performing authentication using the login information of the account to an external service server that can create an account without performing an authentication, and authentication is successful. In this case, the user authentication module for performing the authentication through the identity authentication authority, and a control module for storing the account identification information of the account and the identity authentication result information of the account and stored in a predetermined database.

The external service authentication module receives an authentication request using the account from a service server that provides a specific service that can be used by performing self-authentication, and transmits the request to the external service server based on the second login information received from the service server. When the authentication is successful by the external service authentication module, the control module checks the identity verification result of the account corresponding to the second login information in the database, and checks the second login information. When the corresponding account is authenticated, the authentication success information is transmitted to the service server, and when the service server receives the authentication success information, the use of the specific service is allowed.

The social authentication login system for solving the technical problem stores account identification information of an account of an external service server that can create an account without performing an authentication and identity authentication result information indicating whether the account has been authenticated. A request for identity authentication of the account from a service server that provides a specific service that can be used by performing a database and identity authentication, and in response to the request, information about whether the identity of the account is authenticated is transmitted to the service server. It includes a control module.

The social authentication login system and the method of providing the same according to the present invention have the effect of reasonably using a specific service that needs to perform identity authentication using a web service that does not perform identity authentication. In particular, it is effective to authenticate users of overseas SNS according to domestic law.

In addition, there is an effect that can perform identity authentication for users of a web service (eg, overseas SNS service) that does not perform a secure identity without the risk of personal information leakage.

In addition, since it is not necessary to subscribe to a web service that provides the specific service individually in order to use a specific service that performs identity authentication, an ID of a specific web service (eg, a service that does not need to perform identity authentication) is required. It has the effect of being open ID.

In addition, if the user authentication is performed only once, even when performing a social login using a web service (for example, an overseas SNS service) that does not perform the self-authentication, there is an effect of continuously authenticating.

In addition, certain web sites require complex and various personal information for membership registration / authentication, which causes inconveniences with the risk of leakage of personal information. However, according to an exemplary embodiment of the present invention, since the user needs to subscribe to a predetermined service (for example, a web service that does not perform self-authentication) with less information and perform personal authentication only once, the risk of leakage of personal information is reduced, and the user has already In order to use a specific service using an existing account, there is no need to subscribe to a web service that provides the specific service.

In addition, there is an effect that can solve a variety of problems that can occur through social login using a web service (eg, overseas SNS service) that does not perform identity authentication.

BRIEF DESCRIPTION OF THE DRAWINGS A brief description of each drawing is provided to more fully understand the drawings recited in the description of the invention.
1 is a view for explaining a method using a conventional social login service.
2 is a diagram schematically illustrating a configuration for a method for providing a social authentication login system according to an exemplary embodiment of the present invention.
3 shows a schematic configuration of a social authentication login system according to an embodiment of the present invention.
4 is a diagram illustrating an example of information stored in a database that may be included in a social authentication login system according to an embodiment of the present invention.
5 illustrates an example of a UI that may be provided to a user for using a method for providing a social authentication login system according to an embodiment of the present invention.
6 is a view schematically showing a configuration for a method for providing a social authentication login system according to another embodiment of the present invention.

In order to fully understand the present invention, operational advantages of the present invention, and objects achieved by the practice of the present invention, reference should be made to the accompanying drawings and the accompanying drawings which illustrate preferred embodiments of the present invention.

Also, in this specification, when any one element 'transmits' data to another element, the element may transmit the data directly to the other element, or may be transmitted through at least one other element And may transmit the data to the other component.

Conversely, when one element 'directly transmits' data to another element, it means that the data is transmitted to the other element without passing through another element in the element.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the present invention will be described in detail with reference to the preferred embodiments of the present invention with reference to the accompanying drawings. Like reference symbols in the drawings denote like elements.

2 is a diagram schematically illustrating a configuration for a method for providing a social authentication login system according to an exemplary embodiment of the present invention. In addition, Figure 3 shows a schematic configuration of a social authentication login system according to an embodiment of the present invention.

2 and 3, a social authentication login system 100 is provided to implement a method for providing a social authentication login system according to an exemplary embodiment of the present invention. The social authentication login system 100 may be installed and implemented in a server 1 that provides a specific service that can be used only by performing personal authentication. In the present specification, for convenience of description, a predetermined service that can be used after self-authentication should be defined as an authentication service. In addition, a web service (eg, a web site, a web application, etc.) that can create an account by joining a service without performing personal authentication will be defined as a non-authentication service.

The server 1 may provide an authentication service. For example, a service for uploading predetermined content (eg, information, comments, comments, etc.) to a predetermined web page (site) provided by the server 1 may be an authentication service. In general, a service for uploading predetermined content to a web page to which a limited identity verification system is applied may be an authentication service. The server 1 may provide at least one authentication service.

The server 1 may transmit and receive predetermined information with the user terminal 200 to implement the technical idea of the present invention. For example, the server 1 may receive an authentication service use request received from the user terminal 200. Then, the social authentication login system 100 included in the server 1 sends login information of an account for using an external service to which the user corresponding to the user terminal 200 subscribes to the user terminal 200. You can request The external service may be provided by the external service server 300. The external service server 300 may provide a non-authentication service. For example, the external service provided by the external service server 300 may be an overseas SNS service (eg, Twitter, Me Today, Facebook, etc.). In order for the social authentication login system 100 to request login information (eg, ID, password (pswd)) of the external service account to the user terminal 200, the server 1 directly via a predetermined UI. In addition to requesting the login information to the user terminal 200, the user may receive a login UI provided by the external service server 300 and provide the received login UI to the user terminal 200. It can be used to mean. According to an embodiment, when a predetermined control signal is transmitted to the external service server 300 and the external service server 300 provides a predetermined UI for logging in to the user terminal 200 in response to the transmission. It may also include.

In any case, the server 1 may receive login information corresponding to an account created in the external service server 300 from the user terminal 200. Then, the server 1 may perform authentication based on the received login information. The authentication here may mean login authentication according to the account of the external service server 300.

To this end, the server 1 may transmit to the external service server 300 in accordance with the API (Application Programming Interface) standard provided by the external service server 300. If there are a plurality of external service servers associated with the server 1, the user may select any one of the external service servers, and output login information corresponding to the account of the selected external service server to the server 1. Can be. In this case, the server 1 may transmit login information according to an API standard provided by the external service server selected by the user, and receive a result value. For example, when the server 1 allows social login through Twitter, Me Today, and Facebook SNS providing non-authentication service, the server 1 meets the standard of API of each of the three SNS services. It is desirable to be able to perform communication.

In any case, the server 1 may receive authentication result information from the external service server 300. The authentication result information may be predetermined information indicating success or failure of authentication. In addition, the server 1 may receive predetermined account identification information together with the authentication result information or sequentially. The account identification information may refer to information for identifying an account used by a user of the user terminal 200. Therefore, the account identification information may refer to any type of information that can identify the account or the user. For example, the account identification information may be an ID included in the login information, or may be a predetermined identification number or code used by the external service server 300 to identify the account. In any case, the server 1 may receive the account identification information. According to the method for providing a social authentication login system according to an embodiment of the present invention, the server 1 may receive the account identification information as security key information to which a predetermined security protocol is applied. The security key information may refer to information to which a predetermined security protocol is applied, not the account identification information itself. For example, a hash result value or a predetermined encryption algorithm hashing a user ID included in the login information or information in which predetermined information is added to the user ID through a predetermined hash function. It may be an applied encryption information. The hash function or encryption algorithm and decryption algorithm may be applied by the external service server 300. Accordingly, although the external service server 300 can identify the user or the account using the security key, even if the server 1 receives the security key, the user of the user using the security key. The effect is that no information is known at all. Therefore, according to the social authentication login system 100 and the method of providing the same according to an embodiment of the present invention, there is an effect that can implement the technical idea as described below without the risk of personal information leakage.

On the other hand, when the server 1 receives the authentication result information from the external service server 300, and the received authentication result information is predetermined information indicating that authentication is successful, the server 1 is the user terminal Identity verification may be performed based on identity verification information input from 200. That is, the social authentication login system 100 included in the server 1 performs authentication through an external service server 300 that provides a non-authentication service, even if authentication is successful. Can be. As such, the external service server 300 may perform the self-authentication even when the external service server 300 provides the non-authenticated service and provides the social login service using the non-authenticated service.

If the authentication is successful, the server 1 may allow the use of the specific service, which is an authentication service.

As such, when the server 1 performs the login authentication and the user authentication through the external service server 300 using the social authentication login system 100 in a double manner, various effects may be provided. This dual authentication, that is, login authentication and identity authentication may be performed only once. If such a double authentication is successful, the specific service (eg, commenting), which is an authentication service, can be used even after only login authentication, that is, only social login through a non-authentication service.

In addition, in order to use the specific service provided by the server 1, the user subscribes to the web service provided by the server 1 to use the specific service in a logged-in state, or every time the user uses the specific service. There may be a way to perform authentication.

First, a case of subscribing to a web service (eg, a media company site) provided by the server 1, the server 1 must perform identity authentication to subscribe to the web service provided by the server 1. Allowed. In this case, if the user is allowed to subscribe to the web service only by performing authentication, the specific service (eg, commenting on an article, etc.), which is an authentication service, may be allowed to be used without additional authentication while logged in. However, in order to do this, it is necessary to additionally input various personal information in order to subscribe to the web service in addition to the information required for identity authentication, and only use the web service (for example, to comment on an article) to use the web service (eg, to comment on an article). For example, signing up for a media site can be very inefficient. In addition, when a web service provided by the server 1 (eg, a media company site) allows subscription without performing authentication, and when the specific service (eg, commenting on an article) is an authentication service, login is performed. In order to use the specific service (e.g., comment on an article), the user must be authenticated. Therefore, to use the specific service (e.g., comment on an article), the user must separately There may be no effect obtained by joining.

In addition, when identity authentication is required each time the specific service (eg, commenting on an article) is used, there is an inconvenience of having to input personal information for identity verification every time.

Therefore, if the authentication is performed through the external service server 300 that provides the non-authentication service once, as in the method of providing the social authentication login system according to the embodiment of the present invention, and performs authentication again, all authentication is successful. From now on, even if only the social login using the external service server 300 that provides a non-authentication service, there is an effect that can perform the authentication service without a separate identity authentication. In addition, since the user uses a pre-registered non-authentication service, there is no need to newly subscribe to the web service (eg, a media company site) in order to use the specific service (eg, commenting on an article). In general, non-authenticated services allow self-authentication to provide services with only less personal information than web services that allow subscriptions. Therefore, even if personal information is leaked, the damage may be less lethal for users. have.

On the other hand, the server 1 may send and receive predetermined information with a predetermined identity authentication system 400 to perform identity authentication. The identity authentication system 400 may be implemented in various ways depending on the identity authentication scheme. For example, when identity authentication for a social authentication login system providing method according to an embodiment of the present invention is performed through input of IPIN information, the identity authentication system 400 stores and / or issues individual IPIN information. It may be an institutional data processing system. Alternatively, in the case of performing identity verification through a mobile phone, the identity verification system 400 may be implemented as a mobile communication company system. Alternatively, in the case where identity verification is performed through the social security number and the corresponding real name, a predetermined data processing system for storing and managing the real name for each social security number may be implemented as the personal identification system 400. Alternatively, identity verification may be performed using a credit card. In this case, a data processing system (for example, a system of a credit card issuer) storing personal information corresponding to the credit card may be used. 400). Alternatively, the self-certification may be performed using a public certificate. In this case, the system of the public certification issuer may be the self-certification system 400. The server 1 may perform identity authentication using at least one of the above-described methods, and may also perform identity authentication in a different manner depending on the embodiment.

The main functions of the server 1 as described above may be performed by the social authentication login system 100 included in the server 1.

The social authentication login system 100 may include a control module 110, an external service authentication module 120, and a user authentication module 130 as shown in FIG. 3. The social authentication login system 100 may further include a DB 140.

Herein, a module may mean a functional and structural combination of hardware for carrying out the technical idea of the present invention and software for driving the hardware. For example, the module may refer to a logical unit of a predetermined code and a hardware resource for executing the predetermined code, and does not necessarily mean a physically connected code or a kind of hardware. Can be easily deduced to the average expert in the field of the present invention. Thus, the module refers to a combination of hardware and software that performs the functions defined herein, and does not imply any particular physical configuration.

In addition, the server on which the social authentication login system 100 is installed may also be implemented by at least one data processing device defined by the function, and does not necessarily mean that the server is implemented by any one physical device. Therefore, each component of the social authentication login system 100 may be distributed to a plurality of physical devices. In the case of a distributed arrangement, an average expert in the art may easily deduce that the corresponding plurality of physical devices may be organically coupled to each other through communication to implement the technical idea of the present invention.

The control module 110 is a function of the other components (eg, external service authentication module 120, identity authentication module 130, and / or DB 140) included in the social authentication login system 100 and / Alternatively, the resource may be controlled.

In addition, the control module 110 may determine or determine whether to allow the use of the specific service (eg, commenting on an article) that is an authentication service.

The external service authentication module 120 receives a use request of the specific service (eg, commenting on an article) from the user terminal 200, and uses the user terminal to use the specific service (eg, commenting on an article). A user corresponding to 200 may request login information of an account of an subscribed external service. The external service may be provided by the external service server 300, and in particular, the external service server 300 may provide a non-authentication service. Then, the external service authentication module 120 may perform authentication, that is, login authentication, based on the login information input from the user terminal 200 in response to the request for the login information.

To this end, the external service authentication module 120 transmits the login information to the external service server 300 using an application programming interface (API) corresponding to the external service server 300 corresponding to the external service account. In addition, the authentication result information and the account identification information may be received from the external service server 300. The account identification information may be implemented as security key information as described above.

When the authentication result information is information indicating the successful authentication, the identity authentication module 130 may perform identity authentication based on the identity information input from the user terminal 200.

The identity authentication module 130 may request the identity information to the user terminal 200 after login authentication by the external service authentication module 120 to receive the identity information, but is not limited thereto. .

5 illustrates an example of a UI that may be provided to a user in order to use a social authentication login system providing method according to an embodiment of the present invention. Referring to FIG. 5, the specific service ( For example, when a request for using a comment) is received, the social authentication login system 100 receives an ID for receiving login information corresponding to an account of the external service server 300 as shown in FIG. 5. The input UI 20 and the password input UI 21 may be provided. At the same time, the social authentication login system 100 may provide the user terminal 200 with a predetermined user authentication UI 30 for receiving the user authentication information. Then, the external service authentication module 120 performs login authentication using the login information input through the ID input UI 20 and the password input UI 21, and the user authentication module 130 performs the user's identity. Identity authentication may be performed using the identity information input through the authentication UI (30). The identity authentication UI 30 may include a selection UI 31 for allowing a user to select any one of the plurality of identity authentication methods as described above. The user authentication information requested by the user authentication module 130 to the user terminal 200 may vary according to the user authentication method selected by the selection UI 31, and the number and / or type of UIs provided accordingly. May also be different.

According to an embodiment of the present disclosure, when a request for using the specific service (eg, commenting on an article) is received from the user terminal 200, the social authentication login system 100 may transmit the ID input UI 20 and a password input UI. Only 21 may be provided to the user terminal 200. Thereafter, if the login is authenticated and the user authentication result value corresponding to the account identification information according to the login does not exist in the DB 140, that is, the login authentication and the user through the account corresponding to the login information once The identity authentication UI 30 may be provided to the user terminal 200 only when both authentications have never been successful. If a login is authenticated and a user authentication result value corresponding to the account identification information according to the login exists in the DB 140, the user authentication UI 30 is not displayed on the user terminal 200 or is already present. Information indicating that the user is authenticated may be displayed on the user terminal 200.

Referring back to FIG. 3, the identity authentication method performed by the identity authentication module 130 may include authentication using IPIN, authentication using a mobile phone, and / or authentication using a social security number and a real name as described above. However, it is not limited thereto. The identity authentication module 130 may perform authentication through communication with the identity authentication system 400.

When the user authentication performed by the user authentication module 130 is successful, the control module 110 may allow the use of the specific service (eg, comment on the article). Then, the user terminal 200 may use the specific service (eg, comment on an article).

On the other hand, the control module 110 may store the account identification information (for example, security key information) and the result of performing the identity authentication in the DB (140). Then, the control module 110 using the information stored in the DB 140, for the user who has succeeded until the user authentication once login authentication through the external service server 300, that is, only the social login is authenticated non-authentication service May allow the use of that particular service (eg, commenting on an article).

4 is a diagram illustrating an example of information stored in a database that may be included in a social authentication login system according to an embodiment of the present invention.

Referring to FIG. 4, the DB 140 may connect and store account identification information and information indicating that identity authentication of an account (or user) corresponding to the account identification information is performed. Linked and stored means that the account identification information and the corresponding authentication results of the corresponding account are stored in the DB 140 so as to be searchable, and the storage location of the data is physically related. It does not mean to indicate.

In addition, storing the result of performing the user authentication of the account corresponding to the account identification information and the account identification information in the DB 140 means that the account identification corresponding to the account for which authentication has succeeded or the account for which authentication failed. It may be interpreted to include the case of storing only information. In this case, it may be interpreted that the DB 140 itself includes information on the result of performing the authentication.

In the present specification, DB (DataBase) may be implemented as at least one table, and used as a meaning including a separate DBMS (Database Management System) for searching, storing, and managing information stored in the DB. It may be. In addition, it may be implemented in various ways such as a linked list, a tree, and a relational DB, and includes all data storage media and data structures capable of storing information to be stored in the DB 140. Can be used as

For example, the DB 140 may store ID information (eg, login ID 1, login ID 2, etc.) included in the login information as account identification information. In addition, a result of authenticating each of the Adi information may be stored in the DB 140. For example, information '1' may indicate that authentication of the user is successful, and '0' may mean that authentication of the user is not successful.

For example, a user of the user terminal 200 using 'login ID 1' as an ID may input login information to access the server 1 and use the specific service (eg, comment on an article). have. Then, the information indicating that the login authentication is successful and the account identification information (for example, 'login ID 1') generated based on the 'login ID 1' may be received from the external service server 300. When the user inputs his / her authentication information and his / her authentication succeeds, as shown in FIG. 4, the DB identification information (for example, 'login ID 1') and the authentication result ('1') are displayed in the DB 140. Can be stored in.

Thereafter, when the user accesses the server 1 again and wants to use a predetermined authentication service, only the login authentication may be performed through the external service server 300. That is, when the ID and password of 'login ID 1' are input, the external service server 300 returns the account identification information (eg, 'login ID 1') together with the authentication result information to the social authentication login system ( 100). That is, when performing the above-described dual authentication, the account identification information (for example, 'login ID 1') received from the external service server 300 and the user access the server 1 again to perform the authentication service. When performing login authentication to use the account identification information received by the external service server 300 is preferably the same.

Then, the control module 110 may check the identity authentication result value corresponding to the account identification information (for example, 'login ID 1') in the DB 140. Since the identity verification result value is '1', the control module 110 may control the identity verification module 130 so as not to request the identity verification to the user again. The control module 110 may allow the use of the specific service without requesting the user's terminal for personal authentication.

Of course, as shown in Figure 4, the account identification information may be implemented with a predetermined security key. For example, the hash key 1 is a value in which predetermined information is added to a predetermined login ID (or identification information for each account) or the login ID (or identification information for each account) is hashed by a predetermined hash function. Can be. Of course, as described above, encrypted information encrypted by a predetermined encryption algorithm may be used as the account identification information. In any case, if the same login information is output to the external service server 300, the account identification information received by the server 1 is preferably the same. Therefore, when the security key information is implemented as account identification information, the security key itself is not valuable as personal information, but can be usefully distinguished whether a user or an account has already been authenticated. Therefore, the technical spirit of the present invention can be implemented in the server 1 without storing personal information.

6 is a view schematically showing a configuration for a method for providing a social authentication login system according to another embodiment of the present invention.

Referring to FIG. 6, the social authentication login system 100 according to an exemplary embodiment of the present invention may be implemented as a physical device separate from a predetermined server 1 that provides an authentication service. Therefore, the plurality of servers 1 to N providing the predetermined authentication service and the social authentication login system 100 may be connected through a predetermined network.

For example, a particular press site 1 may be provided by the server 1 and a particular press site N may be provided by the server N.

In addition, the social authentication login system 100 may be connected to a plurality of external service servers 300-1 to 300 -M through a predetermined network. For example, SNS service 1 may be provided by the external service server 300-1, and SNS service M may be provided by the external service server 300 -M. The plurality of external service servers 300-1 to 300 -M may provide a non-authentication service.

In addition, the social authentication login system 100 may be connected to a predetermined identity authentication system 400.

The social authentication login system 100 is an external service authentication module 120 for performing authentication using the login information of the account to the external service server (eg, 300-1 to 300-M), and authentication is successful. In the case, the identity authentication module 130 for performing identity authentication through the identity verification authority, and a control module for connecting the identification information of the account and the identity authentication result information of the account and stored in a predetermined DB 140 ( 110).

For example, a user may make a request for using the authentication service to a service server (eg, 1) that provides a predetermined authentication service through the user terminal 200. Then, the service server (eg, 1) may receive login information from the user terminal 200 and transmit it to the social authentication login system 100. Then, the social authentication login system 100 may request login authentication using a predetermined external service server (eg, 300-1) selected by the user terminal 200. The social authentication login system 100 may perform identity authentication through the service server (eg, 1). If both login authentication and user authentication succeed, the social authentication login system 100 connects the account identification information of the account used for the login authentication and the user authentication result information of the account to a predetermined DB 140. Can be stored.

Thereafter, the user may request a use of the authentication service by accessing a predetermined service server (eg, N) that provides an authentication service through a predetermined terminal (eg, 200 or another terminal). Then, the service server (eg, N) may receive login information from the predetermined terminal and transmit it to the social authentication login system 100. Then, when the predetermined terminal selects the external service server (eg, 300-1) and performs login authentication, the social authentication login system 100 may receive the login information from the predetermined terminal. . Then, the social authentication login system 100 may transmit the login information received from the predetermined terminal to the external service server (eg, 300-1). Then, the social authentication login system 100 may receive the same information as the account identification information stored in the DB 140 from the external service server (eg, 300-1). Then, the social authentication login system 100 checks the identity verification result corresponding to the received information in the DB 140, and if the verification result is a successful account, the authentication success to the service server (for example, N). Information can be sent. Then, the service server (for example, N) may allow the use of the authentication service without requesting the user authentication to the predetermined terminal.

Therefore, according to the social authentication login system 100 according to an embodiment of the present invention, in order to use a predetermined authentication service provided by a specific service server, the user logs in to an account of a specific external service (eg, an SNS service which is a non-authentication service). If the authentication and identity authentication is successful and the result is stored in the DB 140, you can use the authentication service provided by the other service server using the same login information even without access to another service server without a separate identity authentication procedure. Will be. Therefore, the ID of the account corresponding to the account identification information stored in the DB 140 has the effect of being open ID.

The method for providing a social authentication login system according to an embodiment of the present invention may be embodied as computer readable codes on a computer readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, hard disk, floppy disk, optical data storage, and the like, and also in the form of carrier waves (e.g., transmission over the Internet). It also includes implementations. In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner. And functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers skilled in the art to which the present invention pertains.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

Claims (21)

Requesting, by the social authentication login system, login information of an external service account to which a user corresponding to the user terminal subscribes to use a specific service from the user terminal;
Performing authentication based on the login information input from the user terminal in response to the request;
Performing authentication based on authentication information input from the user terminal if authentication is successful; And
The social authentication login method comprising the step of allowing the use of the specific service if the authentication is successful.
The method of claim 1, wherein the specific service,
This service is available only when you perform your own authentication.
The external service account,
Social authentication login method, characterized in that the account can be created without performing the authentication.
The method of claim 1, wherein the performing of authentication based on the login information input from the user terminal comprises:
Transmitting the login information to an external service server corresponding to the external service account;
Receiving authentication result information and account identification information corresponding to the external service account to the external service server.
The method of claim 3, wherein the account identification information,
Social authentication login method, characterized in that the information that can identify the user or the external service account.
The method of claim 4, wherein the account identification information,
And a hash key value of the information including ID information included in the login information or the identification information assigned to each account.
According to claim 3, The social authentication login method,
And storing the account identification information and the authentication result of the external service account in a predetermined database.
The method of claim 6, wherein the social authentication login method,
Requesting second login information of the external service account from a predetermined terminal to use the specific service; And
When the second login information is transmitted to the external service server, and the account identification information is received from the external service server in response to the transmission, the second terminal information is not requested to the predetermined terminal based on the information stored in the database. And allowing the use of the particular service without doing so.
The method of claim 1, wherein the specific service,
And a service for uploading the opinion of the user input from the user terminal to a predetermined web page.
The method of claim 1, wherein the performing of the personal authentication comprises:
Performing identity authentication using Internet Personal Identification Number (IPIN) information;
Performing identity verification using at least one of a mobile phone, a credit card, and a public certificate; or
Social authentication login method comprising at least one of the steps of performing the identity authentication using the social security number and name.
Performing authentication using the login information of the account to an external service server capable of creating an account without performing a social authentication login system;
If authentication is successful, performing self-authentication through a self-certification authority; And
And linking and storing account identification information of the account and identity verification result information of the account.
The method of claim 10, wherein the identification information of the account,
Social authentication login method characterized in that the security key information generated based on the information that can identify the account.
The method of claim 10, wherein the social authentication login method,
Receiving an authentication request using the account from a service server that provides a specific service that can be used by performing identity authentication;
Authenticating to the external service server based on the second login information received from the service server;
If the authentication is successful, confirming an identity verification result of the account corresponding to the second login information; And
If it is confirmed that the account corresponding to the second login information has been authenticated, further comprising the step of transmitting authentication success information to the service server,
The service server, when receiving the authentication success information, social authentication login method, characterized in that to allow the use of the specific service.
delete A computer-readable recording medium having recorded thereon a program for performing the method according to any one of claims 1 to 12.
In order to use a specific service from a user terminal, request login information of an external service account to which a user corresponding to the user terminal is subscribed, and perform authentication based on the login information input from the user terminal in response to the request. External service authentication module;
An identity authentication module for performing identity authentication based on identity authentication information input from the user terminal if authentication is successful; And
Social authentication login system including a control module for allowing the use of the predetermined service if the authentication is successful as a result.
The method of claim 15, wherein the external service authentication module,
The login information is transmitted to the external service server using an API (Application Programming Interface) corresponding to the external service server corresponding to the external service account, and the authentication result information and identification of the external service account are received from the external service server. And a security authentication information generated by applying a predetermined security protocol to the account identification information associated with the social authentication login system.
The method of claim 16, wherein the control module,
And a result of performing the identity verification of the account corresponding to the account identification information and the account identification information in a predetermined database.
18. The method of claim 17,
The external service authentication module,
Request second login information of the external service account from a predetermined terminal to use the specific service, and transmit the second login information to the external service server,
When the external service authentication module receives the security key information from the external service server,
The control module is a social authentication login system that allows the use of the specific service without requesting the predetermined terminal based on the information stored in the database.
An external service authentication module for performing authentication using the login information of the account to an external service server capable of creating an account without performing an authentication;
If the authentication is successful, the identity authentication module for performing identity authentication through a self-certification authority; And
Social authentication login system comprising a control module for storing the account identification information of the account and the identity authentication result information of the account in a predetermined database.
20. The method of claim 19,
The external service authentication module,
Receiving an authentication request using the account from a service server that provides a specific service that can be used to perform the self-authentication, and performs authentication to the external service server based on the second login information received from the service server,
The control module includes:
When the authentication is successful by the external service authentication module, the identity verification result of the account corresponding to the second login information is checked in the database, and the verification result is that the account corresponding to the second login information is identity verification. Transmits authentication success information to the service server;
The service server, when receiving the authentication success information, social authentication login system to allow the use of the specific service.
delete

Images