KR101323816B1 - Method and system for providing authentication service in portable terminal - Google Patents

Abstract

PURPOSE: A method for providing an authentication service of a portable terminal and a system for providing the same are provided to perform a secondary authentication through a comparison with a previously registered profile by checking a profile information of a corresponding device performing a login operation. CONSTITUTION: A mobile device management (MDM) server (318) calls and compares a login information registered in a first access to an electronic medical record (EMR) service server with a static profile information matched with a corresponding profile information of a device which registers the login information. Each of portable terminals (310,312,314) is connected to the EMR service server through a wireless network. Each of the portable devices transmits profile information defined in an operation system by the request of the EMR service server. Each of the portable terminals executes an application provided in the EMR service server. [Reference numerals] (AA) Network

Description

Method for providing authentication service of mobile terminal and system providing same {METHOD AND SYSTEM FOR PROVIDING AUTHENTICATION SERVICE IN PORTABLE TERMINAL}

The present invention relates to an electronic medical record system, and more particularly, to a method for providing an authentication service for a portable terminal and a system for providing the same, which can enhance security of a login procedure based on profile information of the portable terminal.

Various types of online services are provided through a communication network, and most online service systems allow users to use a service after authenticating that they are a subscriber through a login procedure.

Login information that users use to authenticate themselves may be configured in various ways, but a method using an ID and a password is most widely used.

However, if the login information is stolen or hacked, various user information managed by the online service system may be exposed and damaged.

Therefore, there is a demand for various measures that can prevent unauthorized access attempts by stealing or hacking login information of others.

Therefore, the present invention further checks the profile information of the corresponding device performing the login operation, in addition to the primary authentication using the ID and password when the client terminals provided with the service from the service server providing various services through the communication network. Secondary authentication will be performed through comparison with the registered profile, and the user's account will be protected by preventing unauthorized users' access attempts through the theft or hacking of login information.

According to an aspect of the present invention, in the authentication service providing method of a portable terminal, a process of attempting to log in by an input of a user to an electronic medical record (EMR) service server configured in a specific domain, and the wireless network in the EMR service server Requesting the profile information from the terminal attempting to log in, and obtaining the device characteristics of the terminal by analyzing the requested profile; and profile information of the device attempting to log in. Outputting a call to compare the registered profile information registered at the time of initial access to the EMR service server and the corresponding profile information of the terminal which has registered the login information and matching the static profile information, and outputs the result of the comparison. Depending on whether the profile information matches the called static profile information Including the process of determining whether to approve the attempted login.

According to another aspect of the present invention, in the authentication service providing system, manages a plurality of EMR service applications, requests information on the corresponding profile (profile) from the terminal connected via a wireless network and attempting to log in, and the requested Analyze the profile to determine the suitability of the EMR service server that acquires the device characteristics of the corresponding terminal and the terminal that communicates with the EMR service server through a wireless network and attempts to log in to the EMR service server. To provide the service requested by the identified terminal, and outputs profile information obtained from the EMR service server to display the registered login information and the login information registered upon initial access to the EMR service server. Static profile with matching profile information It is connected to the EMR service server through a mobile device management (MDM) server and a wireless network for calling and performing a comparison, and transmits the profile information defined in the operating system at the request of the EMR service server, and the EMR And a portable terminal executing an application provided to the service server.

The present invention has the effect of preventing unauthorized user access by blocking access attempts of unauthorized users through the theft or hacking of login information, thereby preventing additional medical information leakage accidents.

1 is a flowchart illustrating a method of providing an authentication service of a portable terminal according to an embodiment of the present invention.
2 is a view illustrating a screen in which a login is denied in an authentication service providing method of a portable terminal according to an embodiment of the present invention.
3 is an overall configuration of an authentication service providing system according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. It will be appreciated that those skilled in the art will readily observe that certain changes in form and detail may be made therein without departing from the spirit and scope of the present invention as defined by the appended claims. To those of ordinary skill in the art.

The present invention relates to an electronic medical record system, and more particularly, to primary authentication using an ID and password when logging in of client terminals provided with services from an EMR service server that provides various EMR services through a communication network. Check the profile information of the corresponding device performing the login operation, and perform the second authentication by comparing the registered login information with the profile information of the corresponding device that registered the login information with a matched static profile. It is intended to provide a technology that protects users 'accounts by blocking unauthorized users' access attempts through the theft or hacking of login information.

A portable terminal according to an embodiment of the present invention may be a digital broadcasting terminal, a personal digital assistant (PDA), a smart phone, a tablet PC, an iPad, a 3G terminal such as IMT (UMTS) terminal, a Wideband Code Division Multiple Access (WCDMA) terminal, a GSM / GPRS (Universal Mobile Telecommunication Service) terminal and a UMTS (Universal Mobile Telecommunication Service) Equipment and the like. However, it will be readily apparent to those skilled in the art that the configuration according to the embodiments described herein may also be applied to fixed terminals such as digital TVs, desktop computers, and the like, except when applicable only to portable terminals.

And the authentication service providing technology of the portable terminal to which the present invention is applied is a technology that can be applied to both the communication system between the server and the client interworked through the network, but in the detailed description of the present invention described below, the example of the electronic medical record system in the hospital It will be described with an example.

Hereinafter, an authentication service providing method of a portable terminal according to an embodiment of the present invention will be described with reference to FIG. 1.

1 is a flowchart illustrating an authentication service providing method of a portable terminal according to an embodiment of the present invention.

Referring to FIG. 1, first, in step 116, an ID (ID) and a password (PW) required for login are input from a user through the portable terminal 110.

In step 118, an attempt is made to access the EMR service server 112 using the input login information. In step 120, the EMR service server 112 uses login information input from the portable terminal 110 attempting to log in. After receiving and performing authentication on the terminal attempting to log in, generating authentication information and firstly checking whether it is a member subscriber, after confirming that it is a member subscriber, it is connected through a wireless network and attempts to log in. Requests the profile information from the terminal.

In this case, the profile is unique identification information of a corresponding terminal necessary for performing connection upon login to the EMR service server 112, and operating parameters defined in an operating system of the terminal, resolution of a display screen, CPU type information, and identification number (International Mobile equipment identity (IMEI).

In step 122, the portable terminal 110 transmits its profile information in response to the profile information request of the EMR service server 112, and the EMR service server 112 receiving the received information is sent in step 124. The profile is analyzed to obtain device characteristics of the corresponding terminal in step 126.

The device characteristics of the acquired terminal are transmitted to a mobile device management (MDM) server 114 interworking through a network (S128), and the MDM server 114 receiving the received device attempts to log in at 130. The EMR service server outputs the profile information of the device and displays the static profile information matching the login information registered at the time of initial access to the EMR service server 114 and the corresponding profile information of the terminal that performed the login information registration. Called to 112, the output profile information transmitted in response to this and the called static profile information is compared in step 138.

In this case, the application downloaded from the EMR service server 112 by dynamically applying the service usage rights of the EMR service server 112 according to a preset permission level to the member subscribers obtainable through login information when matching the corresponding profile information. Set access control rules for system resources.

In step 140, the MDM server 114 checks whether the two pieces of information match each other, and if there is a match, the MDM server 114 sequentially moves to steps 142 and 144 to attempt the EMR service server 112 and the portable terminal 110. Approving the login allows the use of the service provided by the EMR service server 112 and ends the login procedure.

On the other hand, if the check result in step 140, if it does not match, go to step 146 to confirm that the output profile information and the called static profile information does not match, go to step 148 and the EMR to disallow the attempted login After notifying the service server 112, the EMR service server 112 guides that the service is not provided through the pop-up window on the display unit screen of the portable terminal 110 as shown in FIG. Providing or blocking the EMR service after determining the suitability for the terminal trying to access by identifying the device characteristics of the terminal by obtaining the requested profile information from the terminal attempting to log in by blocking the use of the service. Do this.

In the above, the authentication service providing method of the portable terminal according to an embodiment of the present invention has been described.

Hereinafter, an authentication service providing system according to an exemplary embodiment of the present invention will be described with reference to FIG. 3.

3 is an overall configuration diagram of an authentication service providing system according to an embodiment of the present invention.

Referring to FIG. 3, the system 300 to which the present invention is applied includes a plurality of portable terminals 310, 312, and 314, an EMR service server 316, and an MDM server 318.

The EMR service server 316 manages a plurality of EMR service applications, requests information on a profile from a terminal connected to a wireless network and attempts to log in, and analyzes the requested profile to Obtain device characteristics.

In addition, the EMR service server 316 determines whether to approve the attempted login according to whether the output profile information and the called static profile information match as a result of the comparison in the MDM server 318.

The mobile device management (MDM) server 318 communicates with the EMR service server through a wireless network, and determines the suitability for a terminal attempting to log in to the EMR service server. Allows the terminal to provide the service requested by the terminal, outputs profile information obtained from the EMR service server, and initially registers login information and corresponding profile information of the device that has registered the login information upon initial access to the EMR service server. Performs matching by calling the matched static profile information.

In this case, suitability for the terminal is to determine whether the specialized profile of the terminal attempting to log in corresponds to pre-registered login information and corresponding profile information of the device which has registered the login information.

In addition, when the output profile information and the called static profile information match, the MDM server 318 allows the attempted login to be allowed to use the service provided by the EMR service server and terminates the login procedure. If not, the EMR service server is controlled to block the use of the service after guiding that the service is not provided through a pop-up window on the display screen of the terminal.

The portable terminals 310, 312, and 314 are connected to the EMR service server through a wireless network to transmit profile information defined in an operating system at the request of the EMR service server, and provide the same to the EMR service server. Run

As described above, an operation related to an authentication service providing method of a portable terminal and a system for providing the same according to the present invention can be made. Meanwhile, the above-described description of the present invention has been described with reference to specific embodiments. It can be carried out without departing. Accordingly, the scope of the present invention should not be limited by the illustrated embodiments, but should be determined by equivalents of the claims and the claims.

310, 312, and 314: portable terminal 316: EMR service server
318: MDM server

Claims (11)

In the authentication service providing method of a portable terminal,
Attempting to log in by a user input to an electronic medical record (EMR) service server configured in a specific domain;
Requesting profile information from a terminal connected to the EMR service server through a wireless network and attempting to log in;
Acquiring device characteristics of the corresponding terminal by analyzing the requested profile;
Outputs profile information of the device that attempted to log in and compares the registered profile information when the initial access to the EMR service server and the corresponding profile information of the terminal that performed the login information registration match and match the static profile information. Process,
Determining whether to approve the attempted login according to whether the profile information output as a result of the comparison matches the called static profile information;
Control access to system resources for an application downloaded from the EMR service server by flexibly applying service usage rights of an EMR service server according to a preset level of permission to a member subscriber that can be obtained through login information when matching the corresponding profile information. And providing a rule for setting a rule. The method of claim 1, wherein the profile,
Among the operating parameters defined in the operating system of the terminal, the resolution of the display screen, the CPU type information, and the identification number (International Mobile Equipment Identity (IMEI)) as the unique identification information of the corresponding terminal required to perform the connection when logging in to the EMR service server. Authentication service providing method of a portable terminal, characterized in that it comprises at least one. The terminal according to claim 1, wherein when the output profile information and the called static profile information match, the attempted login is granted to allow the use of the service provided by the EMR service server, and the login procedure is terminated. And a method of blocking the use of the service after guiding that a service is not provided through a pop-up window on a display screen of the portable terminal. The method of claim 1,
The method further includes the step of providing or blocking the EMR service after determining the suitability of the corresponding terminal trying to access by identifying the device characteristics of the corresponding terminal by obtaining the requested profile information from the corresponding terminal attempting to log in. Characterized in that the authentication service providing method of the portable terminal. The method of claim 1,
And receiving login information inputted from the terminal attempting to log in to perform authentication on the terminal attempting to log in, generating authentication information, and then examining whether the subscriber is a member subscriber. Method of providing authentication service of a terminal. delete In the authentication service providing system,
An EMR service server that manages a plurality of EMR service applications, requests information on a profile from a terminal connected to a wireless network and attempts to log in, and analyzes the requested profile to obtain device characteristics of the terminal. Wow,
Communicate with the EMR service server through a wireless network, determine suitability for a terminal attempting to log in to the EMR service server, and allow the terminal to provide a service requested by the identified terminal; Outputs the profile information obtained from the service server to perform comparison by calling the static profile information matching the registered login information and the corresponding profile information of the device which registered the login information upon initial access to the EMR service server. MDM (Mobile Device Management) server and
A portable terminal connected to the EMR service server via a wireless network, transmitting profile information defined in an operating system at the request of the EMR service server, and executing an application provided to the EMR service server;
Control access to system resources for an application downloaded from the EMR service server by flexibly applying service usage rights of an EMR service server according to a preset level of permission to a member subscriber that can be obtained through login information when matching the corresponding profile information. Authentication service providing system of a portable terminal, characterized in that it further comprises the step of setting a rule. 8. The method of claim 7, wherein the suitability for the terminal is
And determining whether the specialized profile of the corresponding terminal attempting to log in corresponds to pre-registered login information and corresponding profile information of the device which has registered the login information. The method of claim 7, wherein the EMR service server,
And comparing the output profile information with the called static profile information as a result of the comparison performed in the MDM server, and determining whether the attempted login is approved or not. The method of claim 7, wherein the profile is,
Among the operating parameters defined in the operating system of the terminal, the resolution of the display screen, the CPU type information, and the identification number (International Mobile Equipment Identity (IMEI)) as the unique identification information of the corresponding terminal required to perform the connection when logging in to the EMR service server. Authentication service providing system, characterized in that it comprises at least one. The method of claim 7, wherein the MDM server,
If the output profile information and the called static profile information match, the attempted login is approved to allow the use of the service provided by the EMR service server, and the login procedure is terminated. And controlling the EMR service server to block the use of the service after guiding that a service is not provided through a pop-up window.

Images