KR101853705B1 - Service System And Operation Method For Single-Sign On based on a Web browser - Google Patents

Abstract

The present invention relates to a single authentication service based on a web browser. More particularly, the present invention relates to a method and system for performing at least one application service device connection according to at least one application activation request among a plurality of applications provided through a web browser, A terminal for receiving a service token from each application service apparatus without inputting authentication information separately when operating the application service using a single authentication token based on a single authentication cookie information provided by a browser; An application service apparatus that provides data for operation and provides the message to a single authentication service apparatus upon receiving a single authentication related message, A single authentication service system providing information for operating the single authentication service of the terminal to the application service apparatus or providing the information to the terminal through the application service apparatus, And a method for operating the system.

Description

[0001] The present invention relates to a single authentication service system based on a web browser and a method of operating the single authentication service system.

The present invention relates to a single authentication based on a web browser, and more particularly to a single authentication service system based on a web browser supporting a single authentication operation of a plurality of applications operated in a terminal on the basis of a web browser and a method of operating the same .

2. Description of the Related Art Communication terminals are manufactured in a portable form and are used in a wide variety of fields due to their ease of use and portability. Recently, such communication terminals have been developed in the form of smart phones equipped with various user functions to provide convenience and amusement.

Meanwhile, along with the spread of smart phones, users are using various user functions and especially using various communication services based on smart phones. For example, conventional users use a chat service using a smart phone, a specific web service, or a service for exchanging e-mail with other users. At this time, the user operates various applications based on the smart phone and uses specific communication services. In this process, in order to utilize the specific communication service provided by each application, the user must perform an authentication process with a service device supporting application operation to confirm whether the user is a legitimate user and acquire a usage right. This authentication process is necessary for normal smartphone users to use and secure normal communication services.

However, this information authentication process sometimes causes a great inconvenience to the user. For example, the user must individually transmit and receive authentication information to and authenticate the respective service devices in order to use a communication service based on a specific application. At this time, there has been a problem in that when the type of application is increased and the authentication information is input in a limited screen state, the user is forced to perform a repeated and inconvenient authentication information input process. Further, when the authentication information is set differently for each application, the user must input the correct authentication information for each application. If the proper information storage can not be performed in this process, the user inputs the wrong authentication information and corrects There was an inconvenience that even a secondary procedure had to be performed.

Patent Document 1: KR 10-2003-0016073 A, 2003.02.26 Published (name: user authentication method and authentication system using cookie on the web)

It is therefore an object of the present invention to solve the problems of the prior art as described above, and it is an object of the present invention to provide a method and system for authenticating user applications on a web browser basis, The present invention provides a single authentication service system based on a web browser and a method of operating the same.

According to an aspect of the present invention, there is provided a method for providing an application service using a single authentication token based on a single authentication cookie information provided by a web browser, A terminal for receiving a service token from each application service apparatus without inputting authentication information at the time of service operation, a data providing unit for providing application service operation data of a terminal providing a service token, and transmitting the message to a single authentication service Upon receiving a single authentication related message from an application service apparatus and an application service apparatus provided to the apparatus, information for operating a single authentication service of the terminal is provided to the application service apparatus, Providing to the terminal via the revocation service device initiates the configuration of a single authentication service system comprising a single authentication service unit.

According to an embodiment of the present invention, there is also provided a communication system including a first communication unit for receiving integrated ID login information or a single authentication token based session inquiry message provided by a web browser from at least one terminal application, A message corresponding to the integrated ID login information or a message corresponding to the session inquiry message to a single authentication service apparatus, and transmits a message corresponding to the integrated ID login information from the single authentication service apparatus to the web server, When receiving a single authentication token and a one-time access key for obtaining a single authentication cookie information of the browser, the control unit controls to forward the single authentication token to the specific application of the terminal. When receiving the integrated service number corresponding to the session inquiry message from the single authentication service apparatus, Confirmation of authentication information And a first control unit for providing the service token to the terminal without the first authentication service.

When receiving the integrated ID login information, the first control unit generates a service token based on the single authentication token provided by the single authentication service device, and transmits the single authentication token, the one-time access key and the service token, And upon receipt of the session inquiry message, generates a service token based on the integrated service number provided by the single authentication service device and controls the service token to be provided to the specific application of the terminal.

The first controller of the application service apparatus according to the present invention can control the terminal to provide a service token expiration response message for service logout of the corresponding application upon receiving the service token expiration request message from the terminal. Alternatively, upon reception of the single authentication cookie expiration request message based on the web browser, a single authentication cookie expiration request message may be provided to the single authentication service apparatus, and a corresponding response message may be provided to the terminal.

The present invention also relates to a method and apparatus for receiving a single authentication session request message for generating a single authentication cookie information to form a communication channel with at least one application service apparatus and providing the same to a web browser of a terminal, A second communication unit for providing a token and a disposable access key to the terminal, a second control unit for controlling the web browser connected through the disposable access key to provide single authentication cookie information, a single authentication token, a disposable access key, And a second storage unit for storing the authentication cookie information.

Here, the second control unit may control to delete the one-time access key after connection based on the disposable access key of the web browser.

The second control unit controls the application service apparatus to provide the integrated service number corresponding to the received message when receiving a message for single authentication of the application created using the single authentication cookie information provided by the web browser of the terminal, Upon receipt of the single authentication cookie expiration request message from the web browser of the terminal, a response message corresponding to the expiration request message may be provided to the web browser and the single authentication cookie information stored in the second storage unit may be deleted.

The present invention also provides a web browser for operating a plurality of application items and a storage unit for storing a plurality of applications, a communication unit for forming a communication channel with a plurality of application service apparatuses for performing a plurality of application functions, And a control unit for checking whether the single authentication cookie information of the web browser is operated and transmitting a message for performing the automatic login of the application to the corresponding application service apparatus by using the single authentication token provided through the single authentication cookie information And a terminal that supports a single authentication service.

The terminal according to the present invention includes a selection area for activating a specific application operating on the same web browser, an area for inputting general authentication information of the application service device, an area for an integrated ID login for acquiring a single authentication cookie, And a display unit for outputting at least one of the areas in which authentication information for accessing a specific application service device is automatically input based on the token.

In the embodiment of the present invention, when the application can not operate the single authentication cookie of the web browser, the application performs the integrated ID login based on the selected specific application, receives the one-time access key from the single authentication service device and provides it to the web browser , The web browser can access the single authentication service device based on the one-time access key to receive the single authentication cookie information.

The present invention also provides a method of providing a single authentication token based on a single authentication cookie information to a corresponding application when a web browser of the terminal receives an input signal for activating a specific application, Providing a session inquiry message for login to a single authentication service apparatus through an application service apparatus; generating a single integrated service number corresponding to the session inquiry message and providing the integrated service number to the application service apparatus; Generating a service token for application service operation based on the integrated service number, and providing the application to the application with user data for service token and application service operation And a method of operating a single authentication service.

The method according to an embodiment of the present invention includes the steps of providing information for login of an integrated ID entered by an application to a single authentication service apparatus through an application service apparatus when the single authentication cookie information of the web browser can not be operated, Providing the disposable access key to the application, providing the disposable access key to the web browser by the application, accessing the single authentication service device using the disposable access key to receive the single authentication cookie information As shown in FIG.

The method according to an embodiment of the present invention may further include receiving an input signal for a web browser termination or a single authentication service logout based on a web browser, transmitting a request message according to an input signal to a single authentication service apparatus, Deleting the single authentication cookie information stored in the service device, providing a response message corresponding to the request message to the terminal, and performing the service logout by the terminal.

The present invention also discloses the structure of a computer-readable recording medium on which a program for executing the above-described method is recorded.

As described above, according to the web browser-based single authentication service system and method according to an embodiment of the present invention, the present invention supports a single authentication function for a plurality of applications operated on a web browser, User functions can be operated quickly and conveniently, and authentication status management can be operated more easily.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 schematically illustrates a configuration of a single authentication service system based on a web browser according to an embodiment of the present invention; FIG.
2 is a block diagram illustrating a configuration of a terminal according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of an application service apparatus according to an embodiment of the present invention.
4 is a block diagram illustrating in greater detail a configuration of a single authentication service apparatus according to an embodiment of the present invention;
5 is a diagram for explaining a single authentication initialization process among a single authentication operation method based on a web browser according to an embodiment of the present invention;
FIG. 6 is a diagram for explaining a single authentication operation process among a single authentication operation method based on a web browser according to an embodiment of the present invention; FIG.
7 is a diagram schematically illustrating an example of a screen interface of a terminal according to the single authentication function operation according to the embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

In the following description of the embodiments of the present invention, descriptions of techniques which are well known in the technical field of the present invention and are not directly related to the present invention will be omitted. In addition, detailed description of components having substantially the same configuration and function will be omitted.

For the same reason, some of the elements in the accompanying drawings are exaggerated, omitted, or schematically shown, and the size of each element does not entirely reflect the actual size. Accordingly, the present invention is not limited by the relative size or spacing depicted in the accompanying drawings.

1 is a block diagram schematically illustrating a configuration of a single authentication service system based on a web browser according to an embodiment of the present invention.

Referring to FIG. 1, a single authentication service system 10 of the present invention may include a configuration of a terminal 100, application service devices 200, and a single authentication service device 300. Here, the terminal 100 activates a web browser for operating at least one specific application (hereinafter referred to as an application), and supports a plurality of applications selectively through a web browser. In particular, when the single authentication service system 10 according to the present invention performs single authentication initialization through the integrated ID login process in the specific application operation process, the single authentication service system 10 automatically logs in the single authentication function when activating other applications based on the same web browser .

To this end, the terminal 100 may store a web browser and a plurality of applications, and may support a plurality of applications selectively in accordance with the activation of the web browser. The terminal 100 supports the acquisition of single authentication cookie information based on the web browser and inputs a separate login information according to the approval of the single authentication service apparatus 300 by using a single authentication token included in the single authentication cookie information To perform new application operations.

The application service apparatuses 200 may include a plurality of service apparatuses for supporting the services of the respective applications included in the terminal 100. For example, the application service apparatuses 200 may include a first application service apparatus 201 for supporting a first application of the terminal 100, 2 application service device 202, as shown in FIG. The application service apparatuses 200 may perform a process for authenticating authentication information when a connection is requested according to activation of a specific application of the terminal 100. [ In particular, at least one of the application service apparatuses 200 of the present invention can support the automatic login service of the terminal 100 using a single authentication token-based integrated service number provided by a web browser.

When the application service apparatuses 200 provide a session creation request message based on the integrated ID information provided by the terminal 100 in which the specific application is activated, the single authentication service apparatus 300 transmits a single authentication token and a single authentication token And may provide the recall connection key to a specific application of the terminal 100. [ Then, the single authentication service apparatus 300 provides a single authentication cookie to the web browser of the terminal 100 to be accessed using the one-time access key, and transmits the single authentication cookie to the application Can support the assignment of integrated service numbers. As a result, the single authentication service device 300 supports various applications based on the web browser of the terminal 100 to perform the automatic login function.

As described above, in the single authentication service system 10 according to the embodiment of the present invention, when the terminal 100 accesses the application service apparatuses 200 for the specific application operation, the single authentication service apparatus 300 issues A single authentication token of single authentication cookie information is provided to a specific application through a web browser, thereby enabling easy access and operation of the service through automatic login without performing a repeated authentication information verification process. Each of the components constituting the web browser-based single authentication service system 10 will be described in more detail with reference to FIG. 2 to FIG.

2 is a detailed block diagram of a terminal 100 according to an embodiment of the present invention.

2, the terminal 100 of the present invention includes a communication unit 110, an input unit 120, an audio processing unit 130, a display unit 140, a storage unit 150, and a controller 160 .

The terminal 100 according to the present invention having the above-described configuration may be configured to use the communication unit 110 in response to various applications such as a first application 151 activation request based on the web browser 155 stored in the storage unit 150 The first application service apparatus 201 can perform the connection. In this process, the terminal 100 may perform an initialization process for operating a single authentication service based on the first application 151 for single authentication service operation. That is, the terminal 100 supports the web browser 155 to acquire the single authentication cookie information from the single authentication service apparatus 300 in the course of the operation of the first application 151. When a request for activation of another application, for example, the second application 153 occurs, the web browser 155 provides the single authentication token included in the single authentication cookie information to the second application 153, And supports the automatic login function of the application service apparatus 202.

To this end, the communication unit 110 supports a communication function of the terminal 100 to form a communication channel with the application service apparatuses 200. The communication unit 110 may be a mobile communication module for supporting the mobility of the terminal 100. Accordingly, the communication unit 110 can access a base station or a wireless access point installed to support a communication service, and can connect to the application service apparatuses 200 through a network device connected to the base station or the wireless access point .

In particular, the communication unit 110 may form a communication channel with the application service apparatuses 200 to support the services of the specific applications designated by the activation of the web browser 155. At this time, if the web browser 155 does not provide a single authentication token, the communication unit 110 transmits a request message requesting login using the integrated ID information according to a request of a specific application selected for activation, And may receive the service token and the user data, the single authentication token, and the disposable access key from the first application service apparatus 201 in response to the request.

Where a single authentication token and a disposable access key may be provided by the single authentication service device 300 through the first application service device 201. [ Meanwhile, the received disposable access key may be provided to the web browser 155. [ The web browser 155 accesses the single authentication service apparatus 300 using the communication channel and the one-time access key formed by the communication unit 110 with the single authentication service apparatus 300, And receives authentication cookie information. The web browser 155 can support automatic login of applications using the received single authentication cookie information.

The input unit 120 may be formed of a key button such as a home key or a side key and may be formed on a display unit 140 implemented with a touch screen And can be output in the form of a virtual key map. The input unit 120 may generate an input signal for activating at least one of the web browser 155 and the applications 151 and 153 supported by the terminal 100 and transmits the input signal to the controller 160 And can be used as a command for the corresponding web browser 155 and application activation. In addition, the input unit 120 can input authentication information requested by the application service apparatus according to activation of a specific application.

In particular, the input unit 120 may perform authentication of the authentication information for the integrated ID login according to the user control for single authentication based on the web browser according to the embodiment of the present invention. After the web browser 155 obtains the single authentication cookie information, the input unit 120 may generate an input signal for pre-defined and simplified specific input signals, e.g., automatic login selection, for authentication of additional activated applications .

The audio processing unit 130 may include a speaker SPK for outputting various audio data generated during the operation of the terminal 100 and a microphone MIC for audio data collection. The audio processor 130 may output various audio signals generated during the activation of the web browser 155 and the specific applications 151 and 153 supported by the terminal 100. [ In this process, the audio processor 130 may output a guidance sound to warn the user when an incorrect authentication information input occurs in the process of activating a specific application and accessing an application service apparatus. On the other hand, the audio processing unit 130 can support audio data output when the application service device provides the audio data according to the activation of the specific application.

The display unit 140 displays various menus of the terminal 100 as well as information input by the user or information provided to the user. That is, the display unit 140 may provide various screens such as an idle screen, a menu screen, a message creation screen, a call screen, a terminal end screen, and a terminal boot screen according to the use of the terminal 100. The display unit 140 may be formed in the form of a flat panel display panel such as a liquid crystal display (OLED) or an organic light emitting diode (OLED). The display unit 140 may be manufactured in a structure including a display panel and a touch panel according to a manufacturing method.

In particular, the display unit 140 of the present invention may output an application service apparatus connection screen for supporting an application selected for activation on the activation screen of the web browser 155 or the web browser 155. At this time, the connection screen may be an authentication information input screen in which one of connection through general authentication information and connection using integrated ID information can be selected. Meanwhile, the integrated ID information may be transmitted to the single authentication service apparatus 300 through the specific application service apparatus. When the single authentication service apparatus 300 transmits the single authenticated information, that is, the single authentication token and the one-time access key to the application service apparatus, the display unit 140 displays the service token generated by the single authentication token from the application service apparatus, User data, a single authentication token, and a disposable connection key.

On the other hand, the application receiving the single authentication token and the one-time access key from the application service device may transmit the one-time access key to the web browser 155, and the web browser 155 may use the single- The authentication server 300 can receive the single authentication cookie information. In this process, the display unit 140 can provide various screens required in the process of receiving the single authentication cookie information by the web browser 155 and supporting automatic log-in of a specific application by using the single authentication cookie information. The display unit 140 may output an indicator or an image effect indicating that the single authentication is being performed to the activation screen of the web browser 155 through the web browser 155. [ The application of the indicator or the non-image effect may not be fixedly provided to the display unit 140 according to the intention of the designer. If a specific application is selected in the state of the web browser 155, . The screen interface provided through the display unit 140 will be described in more detail with reference to the following drawings.

The storage unit 150 stores various resources including a screen image to be output to the display unit 140, as well as application programs necessary for the functional operation according to the embodiment of the present invention. In particular, the storage unit 150 of the present invention includes a web browser 155 provided to select and operate various applications, various applications 151 and 153 designed to provide a specific user function by communicating with a specific application service apparatus, Lt; / RTI >

The web browser 155 performs web service support of the plurality of applications 151 and 153. The web browser 155 can provide a browser screen in which a plurality of registered applications 151 and 153 are registered as an activation request, and supports a corresponding application call when a specific application activation is selected. In particular, the web browser 155 of the present invention can receive and manage single authentication cookie information from a single authentication service apparatus 300 for supporting a single authentication service. When an input signal for activating a specific application is generated from the input unit 120 or the display unit 140 of the input function, the web browser 155 having the single authentication cookie information calls a corresponding application, An authentication token may be provided.

At least one of the first application 151 and the second application 153 is an application designed to support a specific user function that the terminal 100 can support. In the present invention, a communication channel with each of the application service devices 200 And may be applications that provide specific data by checking the automatic authentication information with the application service devices 200 based on the single authentication cookie information according to the support of the web browser 155. [ In particular, the first application 151 and the second application 153 may include a user function supported by application service apparatuses that can be managed by one service provider or a joint service provider so that the first application 151 and the second application 153 can support the service based on a single authentication token .

For example, the first application 151 is an item provided on the web browser 155, and supports a user function based on communication with the first application service apparatus 201 when selected for activation, (153) is also an item provided on the web browser (155), and can support a user function based on communication with the second application service apparatus (202) when selected for activation. The first application service apparatus 201 and the second application service apparatus 202 are connected to the single authentication service apparatus 300 in order to support the single authentication service of the first application 151 and the second application 153, It can be an integrated device to enable authentication information management. That is, the first application service apparatus 201 and the second application service apparatus 202 may be application service apparatuses 200 in which authentication information is managed together by a specific service provider.

The first application 151 may be an application for accessing a web page operated by the first application service apparatus 201 and the second application 153 may be an application for accessing a web page managed by the second application service apparatus 202 And may be an application for accessing a web page to be operated. Here, the web page according to the first application 151 and the web page according to the second application 153 may be web pages capable of integrally operating the authentication information by the same business operator, Which can be integrated web pages for authentication information management.

As another example of the service type, the first application 151 may be a first game application, and the second application 153 may be a second game application. Here, the application service apparatus supporting the first game application and the application service apparatus supporting the second game application may be a service provider who can perform the same or the joint management of accounts, and accordingly, It can be designed as an integrated connection based on a single authentication service. On the other hand, each application service apparatus may support connection by inputting and confirming individual authentication information according to a user's request.

Accordingly, the first application 151 and the second application 153 of the present invention are not limited to a specific web page, a specific game, or a specific service page, but may be application service devices designed to enable single authentication through integrated authentication information As shown in FIG. In the above description, two applications are stored in the storage unit 150, but the present invention is not limited thereto. That is, the storage unit 150 can store more applications, and all of these applications can be applications related to application service apparatuses that can automatically log in using the single authentication cookie information through the web browser 155.

The control unit 160 may control various signal flow control, data processing, and data transmission and reception for supporting a single authentication service function according to an embodiment of the present invention. For example, the control unit 160 may include at least one of a menu, an icon, and a widget that can activate at least one of the web browser 155, the first application 151 and the second application 153 stored in the storage unit 150 One can be output. Alternatively, the control unit 160 may assign a hot key for activating the web browser 155, the first application 151, and the second application 153 according to a predetermined schedule scheme.

When an input signal for activating the web browser 155 is generated, the control unit 160 causes the plurality of applications 151 and 153 supported through the web browser 155 to be displayed on the screen for supporting the web browser 155 . When a specific application among a plurality of applications 151 and 153 included in the web browser 155 is selected for activation, the controller 160 collects application service device address information for supporting the application function, To control application service device connection.

At this time, the control unit 160 checks whether there is a service token accessible to the application service apparatus, and if the service token does not exist, the web browser 155 controls the application to provide a single authentication token based on the single authentication cookie information . If the web browser 155 can not operate the single authentication cookie information, the control unit 160 may support the display unit 140 to output a login screen for accessing the application service apparatus to support the application function. In addition, the control unit 160 may control the authentication information transmission for the integrated ID login for single authentication cookie information operation according to the user's selection. On the other hand, when the web browser 155 can operate the single authentication cookie information, the control unit 160 can support the automatic login of the application selected for activation through the provision of the single authentication token.

That is, the control unit 160 of the terminal 100 of the present invention can support the automatic login function according to the single authentication cookie information operation of the web browser 155 for a plurality of applications provided through the web browser 155 have. If the single authentication cookie information can not be operated, the controller 160 may process the message transmission and the data reception so that the web browser 155 can receive the single authentication cookie information from the single authentication service device 300. [

On the other hand, when an input signal for releasing a service such as a specific application termination or logout is generated, the control unit 160 can control whether to release only the service of the corresponding application or remove the single authentication cookie information of the web browser 155 have. Alternatively, when the specific application service is canceled, the control unit 160 may perform control such that only the service token collected for the service operation is expired and the single authentication cookie information is removed when an input signal for terminating the web browser 155 is generated .

3 is a detailed diagram illustrating the configuration of an application service apparatus 200 according to an embodiment of the present invention. Prior to the description, the application service apparatus 200 may be at least one of the first application service apparatus 201 and the second application service apparatus 202, and is hereinafter referred to as an application service apparatus. Reference numeral 200 And will be described in common. In the following description, the application service apparatuses will be described as separate application service apparatuses as necessary.

Referring to FIG. 3, the application service apparatus 200 of the present invention may include a first communication unit 210, a first control unit 220, and a first storage unit 230. In addition, the application service apparatus 200 may further include various components such as an input unit and a display unit for application service support and management.

The first communication unit 210 may form a communication channel with the terminal 100 to support a user function according to activation of a specific application of the terminal 100. [ The first communication unit 210 may receive an access request message based on a single authentication token based on the single authentication cookie information provided by the web browser 155 of the terminal 100 when the specific application is activated. Alternatively, the first communication unit 210 may receive a connection request for supporting the service of a specific application from the terminal 100, and may receive ID and password information for general authentication or single authentication from the terminal 100.

The received messages are transmitted to the first control unit 220 and can be used in the authentication process for supporting the application function of the corresponding terminal 100. In particular, the received messages can be used in a request message for requesting an integrated ID login or a session inquiry message for single authentication And may be provided to the single authentication service apparatus 300. [ For this, the first communication unit 210 may form a communication channel with the single authentication service device 300. The first communication unit 210 can receive a single authentication token or an integrated service number according to the message processing from the single authentication service apparatus 300. [ The received single authentication token can be provided to the terminal 100, and the integrated service number can be used for the automatic login service for supporting the function of the application. The receiving and processing of the above-mentioned messages will be described in detail with reference to the following drawings.

Meanwhile, the first communication unit 210 may include a communication module for forming a communication channel with the terminal 100, and a communication module for forming a communication channel with the single authentication service apparatus 300, respectively. Alternatively, the first communication unit 210 may include one communication module capable of forming a communication channel with the terminal 100 and the single authentication service apparatus 300. For this purpose, the communication interface for connection between the terminal 100 and the single authentication service device 300 may be compatible or implemented in the same manner.

The first storage unit 230 stores an operating system necessary for operating the application service apparatus 200 and various application programs. In particular, the first storage unit 230 may include an application support program 231 for supporting a specific application function of the terminal 100, and may store a service token 233 allocated for use of the service of the terminal 100 . The first storage unit 230 may store the identification information of the terminal 100 through the pre-registration process of the terminal 100. The identification information of the terminal 100 may be used to confirm whether the terminal 100 is a registered terminal so that the terminal 100 can use a normal service. To this end, the first storage unit 230 stores the identification information of the terminal 100 100 and the ID information and the password information registered in the identification information.

The application support program 231 includes an authentication processing routine for confirming whether the terminal is a terminal that is pre-registered according to a connection request of the terminal 100, a routine for providing user data corresponding to application activation of the authenticated terminal 100, A single authentication processing routine for processing a single authentication request of the terminal 100, a routine for assigning a service token to use the application service of the terminal 100, and the like.

The single authentication processing routine includes a routine for authenticating the integrated ID when receiving the integrated ID login request from the terminal 100, a routine for requesting the single authentication service apparatus 300 to generate a single authentication token, a single authentication token, (100). ≪ / RTI > Also, the single authentication processing routine may include a routine for transmitting a single authentication session inquiry message based on a single authentication token from the terminal 100 to the single authentication service device 300 and receiving an integrated service number corresponding thereto, May include routines that support automatic log-in based on the < RTI ID = 0.0 >

The service token 233 is information provided so that a specific application of the terminal 100 can utilize the service provided by the application service apparatus 200. The service token 233 is allocated to the terminal 100 when the terminal 100 requests the connection and the normal authentication process is performed, and may be collected or discarded when the corresponding application service function ends. The service token 233 may be generated in association with a single authentication token provided by the single authentication service device 300 or based on a single authentication token when the terminal 100 requires a single authentication service.

The first control unit 220 controls various signal processing, data processing, and delivery for application service apparatus 200 operations. When a connection is requested from the terminal 100, the first controller 220 may control the terminal 100 to request the authentication information according to the predefined schedule information. Upon receipt of the authentication information from the terminal 100, the first control unit 220 can check whether the authentication information matches the pre-registered information, and provide data necessary for the application service function accordingly.

When the first control unit 220 receives the integrated ID login information from the terminal 100, the first control unit 220 performs the integrated ID login based on the corresponding information and transmits a request message for creating a single authentication session to the single authentication service apparatus 300 to provide. When receiving the single authentication token and the one-time access key from the single authentication service apparatus 300, the first control unit 220 can support the transmission of the single authentication token and the one-time access key to the specific application of the terminal 100.

Meanwhile, when the first control unit 220 receives the session inquiry message based on the single authentication token from the terminal 100, the first control unit 220 may control the inquiry message to be provided to the single authentication service apparatus 300. The first controller 220 receives the integrated service number from the single authentication service apparatus 300 and can support the automatic login service for supporting the application function of the corresponding terminal 100 based on the integrated service number. That is, the first control unit 220 can perform the integrated ID login based on the integrated service number, allocate the service token, and provide the service token to the specific application of the terminal 100. That is, the first control unit 220 accepts the login of the application of the terminal 100 requesting the connection based on the single authentication token without authentication of the single authentication service device 300, The service function according to the present invention can be supported.

4 is a detailed diagram illustrating the configuration of a single authentication service apparatus 300 according to an embodiment of the present invention.

Referring to FIG. 4, the single authentication service apparatus 300 of the present invention may include a second communication unit 310, a second control unit 320, and a second storage unit 330. In addition, the single authentication service apparatus 300 may further include an input unit, a display unit, and the like for device management or for updating specific data, similar to the application service apparatus 200.

The second communication unit 310 forms a communication channel with the application service apparatus 200. To this end, the second communication unit 310 transmits data to and receives data from a network device to which a communication module or application service apparatus 200 capable of transmitting and receiving data with the application service apparatus 200 is connected And a communication module. The second communication unit 310 may receive a single authentication request message from the application service apparatus 200 or a single authentication session inquiry message. The second communication unit 310 provides at least one of the single authentication token, the one-time access key, the single authentication cookie information, and the integrated service number generated by the second control unit 320 to the application service apparatus 200.

The second storage unit 330 stores programs for operating the single authentication service apparatus 300. In particular, the second storage unit 330 includes a single authentication support program 331, a single authentication token 333, a one-time access key 335, and a single authentication cookie information 337, which are programs for supporting the single authentication service of the present invention. Can be stored.

The single authentication support program 331 may generate an integrated service number according to a message received from the application service apparatus 200 or may generate a single authentication token 333 and a disposable access key 335. [ To this end, the single authentication support program 331 includes a routine for classifying the type of a message received from the application service apparatus 200, and an integrated service number corresponding to the inquiry message when the received message is a single authentication session inquiry message And a routine for providing the created integrated service number to the application service apparatus 200. [ The single authentication support program 331 also includes a routine to generate a single authentication token 333 and a one-time access key 335 if the received message is a single authentication request message, a single authentication token 333 generated and a one- Key 335 to the application service device 200. The application service device < RTI ID = 0.0 > 200 < / RTI > Also, the single authentication support program 331 may include a single authentication cookie information 337 generation and transmission routine upon confirmation of the corresponding one-time access key 335 when a connection based on the one-time access key 335 occurs have.

The single authentication token 333 and the one-time access key 335 are information for generating a single authentication token of the specific terminal 100. [ The single authentication token 333 and the disposable access key 335 are generated when the specific terminal 100 requests to use a single authentication service and are generated in the specific application of the terminal 100 through the application service apparatus 200 And may be stored in the second storage unit 330. The single authentication token 333 and the one-time access key 335 stored in the second storage unit 330 may be used for confirming the connection validity of the corresponding application in the single authentication cookie information generation process. The disposable access key 335 may be deleted after connection of the web browser 155 of the terminal 100. [

The single authentication cookie information 337 includes a single authentication cookie and a single authentication token. The single authentication cookie information 337 is information provided to the connected web browser 155 on the basis of the one-time access key 335. The single authentication token included in the single authentication cookie information 337 may be used for inquiring session inquiry messages of a specific application of the terminal 100 in the future. The single authentication cookie information 337 may be discarded at the end of the single authentication service of the terminal 100, for example, at the end of the web browser 155. [

The second control unit 320 can control the processing and delivery of various signals necessary for operating the single authentication service apparatus 300. Particularly, the second control unit 320 generates and provides and manages a single authentication token 333, a one-time access key 335, and single authentication cookie information 337 for supporting the single authentication service of the present invention, And can support the creation, provision and management of the integrated service number of the service. Upon receiving the single authentication request message from the application service apparatus 200, the second control unit 320 can generate a single authentication token 333 and a one-time access key 335 according to the request have. When the single authentication token 333 and the disposable connection key 335 are generated, the second control unit 320 can provide it to the specific application of the terminal 100 through the application service apparatus 200. [

When the connection of the web browser 155 using the disposable access key 335 occurs, the second control unit 320 accesses the web browser 155 through the single authentication token inquiry corresponding to the disposable access key 335 Validity can be confirmed. Then, the second control unit 320 may control generation and transmission of single authentication cookie information and control deletion of the disposable access key 335. [

Here, since the validity authentication of the terminal 100 that transmitted the single authentication request message can be performed through the authentication of the integrated ID information of the application service apparatus 200, the second control unit 320 may not perform the validity verification separately . However, according to the design method of the system designer, the second control unit 320 determines whether the terminal 100 is a terminal registered in advance to use the single authentication service based on the information related to the terminal 100 included in the single authentication request message . To this end, the single authentication service apparatus 300 can store and manage the information of the terminals 100 pre-registered in order to use the single authentication service.

Meanwhile, when the second control unit 320 receives a single authentication session inquiry message based on a single authentication token from the application service apparatus 200, the second control unit 320 confirms the single authentication token included in the inquiry message. It is possible to check whether a single authentication token included in the inquiry message is valid based on the single pre-stored authentication cookie information 337. [ Whether or not the validity is valid may be determined by matching with the single authentication cookie information 337 and elapsing the generation time. That is, even though the single authentication token contained in the inquiry message corresponds to the single authentication cookie information 337 pre-stored, the second control unit 320 determines that the validity is lost in the case of the single authentication token that has passed the predetermined designed threshold time, You can block support for a single authentication token-based authentication service. The validity design for such a single authentication token may not apply to the system designer's design approach. If the received inquiry message is valid, the second control unit 320 may generate an integrated service number for supporting use of the application service apparatus and provide the integrated service number to the application service apparatus 200. This integrated service number can be used as information for supporting automatic login acceptance of the terminal 100 to access the application service apparatus 200.

Meanwhile, the second control unit 320 may receive a message for removing the single authentication cookie information 337 from the application service apparatus 200. In this case, the second controller 320 removes the corresponding single authentication cookie information 337 and can notify the application service apparatus 200 that the single authentication cookie information 337 has been removed.

As described above, the single authentication service system 10 of the present invention and the respective configurations supporting the single authentication service system 10 can support the single authentication service of various applications by the web browser 155 of the terminal with single authentication cookie information. Accordingly, the user activates various applications based on the web browser 155 and can immediately use necessary services without unnecessary repeated input of authentication information and authentication acquisition process in using the corresponding service.

5 is a diagram for explaining a process of generating a single authentication cookie in a single authentication service operation method based on a web browser according to an embodiment of the present invention.

5, when a user of the terminal 100 activates the web browser 155 stored in the storage unit 150, the web browser 155 activates a plurality of registered applications Can be displayed on the display unit 140 as shown in FIG. When the user generates an input signal for activating a specific application, for example, the first application 151 among the applications registered in the web browser 155, the terminal 100 transmits a service token Can be confirmed. Here, the service token may be information that can use the first application service apparatus 201 to support the user function of the first application 151. If the terminal 100 has a use history for the first application service apparatus 201 and the reconnection time is within the predefined valid period or if the first application service apparatus 201 is kept logged in, ) Can maintain a service token. As a result, if the service token exists, the terminal 100 can access the first application service apparatus 201 based on the previous history without performing a separate authentication process.

On the other hand, if there is no service token but single authentication cookie information 337 is available, the web browser 155 can provide a single authentication token to the first application 151. This will be described in more detail with reference to FIG. If the web browser 155 can not operate the single authentication cookie information 337, the first application 151 creates a request message for the integrated ID login request for single authentication and transmits the request message to the first application service To the device 201. The first application service apparatus 201 may be a device for providing data for supporting a user function of the first application 151. When the first application service apparatus 201 receives the request message for single authentication from the terminal 100, the first application service apparatus 201 can perform the integrated ID authentication in step S103 using the login information included in the message. Then, the first application service apparatus 201 may create a single authentication session creation request message (createSSOSessionForMoblie) for acquiring a single authentication token and transmit it to the single authentication service apparatus 300 in step S105. Here, the single authentication session creation request message (createSSOSessionForMoblie) may include the integrated login information.

Upon receiving a single authentication session creation request message (createSSOSessionForMoblie) from the first application service apparatus 201, the single authentication service apparatus 300 transmits a Single-Sign-On (SSO) session Can be generated. The single authentication service device 300 may generate a single authentication token and a one-time access key for single authentication session operation and provide a single authentication token and a one-time access key to the first application service device 201 in step S109 have. Here, the single authentication service device 300 may store the generated single authentication token and the one-time access key for future connection validation of the web browser 155 or the like.

When the first application service apparatus 201 receives the single authentication token and the one-time access key from the single authentication service apparatus 300, the first application service apparatus 201 connected to the single authentication token or based on the single authentication token 201 In step S111, and provides the corresponding single authentication token, the one-time access key, the service token, and the user data according to the service support to the first application 151 of the terminal 100 in step S111. Then, the first application 151 of the terminal 100 may store the single authentication token information received in step S113. If the web browser 155 is inactivated, the first application 151 may call the web browser 155 and provide the disposable access key 335 to the web browser 155 in step S115. Here, the web browser 155 may be provided with a disposable access key 335 when the web browser 155 is activated. In this case, it is assumed that the user activates the first application 151 without accessing the web browser 155 and accesses the first application service apparatus 201.

On the other hand, when the web browser 155 receives the disposable access key from the first application 151, the web browser 155 can access the single authentication service apparatus 300 in step S117. At this time, the web browser 155 can directly access the single authentication service apparatus 300 without going through the first application service apparatus 201. The first application service apparatus 201 can support data relay between the web browser 155 and the single authentication service apparatus 300 when the first application service apparatus 201 passes through the first application service apparatus 201. [

When the single authentication service apparatus 300 receives a connection based on the disposable connection key from the web browser 155 of the terminal 100, the single authentication service apparatus 300 inquires a single authentication token based on the disposable access key in step S119, It is possible to control to generate cookie information. Then, the single authentication service apparatus 300 can perform the disposable connection key deletion in step S121. Meanwhile, the single authentication service device 300 can provide the single authentication cookie information generated in step S123 to the web browser 155 of the terminal 100. [ Here, the cookie information may include a single authentication cookie (SSO cookie) and a single authentication token (Mobile SSO Token).

Upon receiving the single authentication token information, the web browser 155 generates a single authentication cookie in step S125 based on the single authentication token information. On the other hand, the web browser 155 calls a specific application, for example, the first application 151 selected in step S127, And can transmit a single authentication token (Mobile SSO Token) to the application 151.

FIG. 6 is a diagram for explaining a single authentication token operation among a single authentication service operation method based on a web browser according to an embodiment of the present invention.

6, an operation method of the single authentication service system 10 according to the present invention includes an input signal for activating a specific application (e.g., a second application 153) in a state where the web browser 155 is activated If so, the web browser 155 may invoke the second application 153 in step S201 and provide a single authentication token (Mobile SSO Token) to the second application 153. [ Then, the second application 153 may create a single authentication session inquiry message based on the single authentication token, and may forward the session inquiry message to the second application service apparatus 202 in step S203.

The second application service apparatus 202 creates a single authentication session check message (checkSSOSessionForMobile) in response to the receipt of the session inquiry message, and transmits the single authentication session check message (checkSSOSessionForMobile) to the single authentication service apparatus 300 in step S205 . When the single authentication service apparatus 300 receives a single authentication session confirmation message (checkSSOSessionForMobile) from the second application service apparatus 202, the single authentication service apparatus 300 transmits the information included in the single authentication session confirmation message (checkSSOSessionForMobile) In the step, an integrated service number can be assigned.

The integrated service number may be transmitted to the second application service apparatus 202 in step S209. Then, the second application service apparatus 202 performs the integrated ID login in step S211 based on the received integrated service number, and generates a service token for using the second application service apparatus 202. [ The generated service token and user data for operating the second application service apparatus 202 may be provided to the second application 153 of the terminal 100 in step S213.

As described above, according to the web browser-based single authentication service operating method of the present invention, the web browser allocates a single authentication token to an application that is instructed to be activated based on a single authentication cookie, .

7 is a diagram illustrating an example of a terminal screen interface in a single authentication service support process based on a web browser according to an embodiment of the present invention.

Referring to FIG. 7, when power is supplied, the terminal 100 may display a screen for selecting a web browser item 701a on the display unit 140 as shown in 701 according to preset schedule information or user input . Although only the web browser item 701a is shown as being displayed in the drawing, application items for operating various functions supported by the terminal 100 according to user settings and the like may be further displayed. For example, the terminal 100 may output application items to the display unit 140 to enable the first application 703a or the second application 703b to be executed immediately.

Meanwhile, when the user selects the web browser item 701a, the terminal 100 can output a screen for selecting a plurality of application items 703a and 703b as in the 703 screen. Although three application items 703a and 703b are shown in the drawing, the number of application items 703a and 703b may be increased or decreased according to user setting or terminal support.

Meanwhile, when the user selects the first application item 703a, the terminal 100 controls the connection of the first application service apparatus 201 to support the first application item 703a. At this time, if the web browser 155 can not provide the single authentication token for performing the single authentication service described above, the terminal 100 displays the first application login screen 705a for connection to the first application service apparatus 201, Can be output to the display unit 140. Then, the user can input ID and password through the first application login screen 705a. In particular, the user selects the "integrated login item (705b)" so that the web browser (155) can generate and operate a single authentication cookie through the first application login screen (705a) Input can be performed. When the "integrated log-in item (705b)" is selected, the terminal 100 can generate a request message for login of the integrated ID based on the input ID and password information, and can transmit the request message to the first application service apparatus 201 . The terminal 100 may then support the web browser 155 to obtain single authentication cookie information according to the procedure described above. On the other hand, if the "integrated login item 705b" is not selected, the first application 151 can support authentication with only the first application service apparatus 201 through transmission / reception of general authentication information.

If the web browser 155 of the terminal 100 assumes a screen 703 of a state in which the single authentication cookie information 337 can be operated, the web browser 155, when the second application item 703b is selected, 2 application 153 and may also provide the second application 153 with a single authentication token. Then, the second application 153 transmits the session inquiry message based on the single authentication token to the single authentication service apparatus 300 through the second application service apparatus 202 in the process of connecting the second application service apparatus 202 . The second application service apparatus 202 may receive the integrated service number from the single authentication service apparatus 300 and control the integration ID login of the second application 153. At this time, the second application service apparatus 202 may inquire to the second application 153 of the terminal 100 whether to perform the integrated ID login execution. The terminal 100 may inquire of the second application 153 of the " (707b) "to the second application login screen 707a. The user can perform automatic login to the second application service apparatus 202 for supporting the second application 153 by selecting "single authentication login item 707b ".

On the other hand, when the input signal for logout of a specific application or an input signal for termination is generated, the terminal 100 may transmit a service token expiration request message for logout or termination of the application to the application service apparatus. When the terminal 100 receives the service token expiration response message from the application service apparatus, the terminal 100 can control to perform the service logout. When the input signal for the end of the web browser 155 or the single authentication service logout based on the web browser 155 is generated, the terminal 100 expires the service token corresponding to the input signal and the single authentication cookie expiry request message To the corresponding application service apparatus and the single authentication service apparatus 300. When the terminal 100 receives the service token expiration and the single authentication cookie expiration response message from the application service apparatus and the single authentication service apparatus 300, the terminal 100 can perform the service logout. The single authentication service device 300 may delete the stored single authentication cookie information while providing a response message in response to receiving the single authentication cookie expiration request message.

As described above, in the single authentication service system and method based on the web browser of the present invention and the screen interface supporting the same, automatic login is performed through single authentication of applications executed through a specific web browser based on single authentication cookie information Support. Accordingly, the present invention eliminates repetitive authentication information input for various applications and facilitates management of authentication information. In addition, the present invention can support the application service device connection for performing various applications as a single authentication token, thereby minimizing the re-entry of the authentication information and the ID and password query situation.

Meanwhile, the terminal 100 may further include various additional modules according to the providing mode. That is, the terminal 100 is a communication terminal, a short-range communication module for short-range communication, an interface for data transmission / reception by a wire communication method or a wireless communication method of the terminal 100, An Internet communication module, and a digital broadcasting module that performs digital broadcasting reception and reproduction functions. These components can not be enumerated because of a wide variety of variations depending on the convergence trend of the digital device, but it is also possible that components having the same level as the above-mentioned components are further included in the device have. Also, it is needless to say that the terminal 100 of the present invention may be excluded from the specific configurations in the above configuration or may be replaced with other configurations in accordance with the provision mode thereof. Which will be readily apparent to those skilled in the art.

In addition, the terminal 100 according to the embodiment of the present invention may include any type of device that supports application function operation through connection to an application service device based on a web browser. For example, the terminal 100 may include all mobile communication terminals operating based on communication protocols corresponding to various communication systems, a portable multimedia player (PMP), a digital All information communication devices such as a broadcasting player, a PDA (Personal Digital Assistant), a music player (for example, an MP3 player), a portable game terminal, a smart phone, a notebook and a handheld PC, Device.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. , And are not intended to limit the scope of the present invention. It will be apparent to those skilled in the art that other modifications based on the technical idea of the present invention may be practiced without departing from the scope of the invention disclosed herein.

As described above, the web browser-based single authentication service system and method according to the embodiment of the present invention supports a single authentication function for a plurality of applications operated on a web browser, It can be done quickly and conveniently, and it helps to manage authentication status more easily.

Therefore, the present invention can be applied to various applications installed in a terminal and operated on a web-based basis, so that a single authentication can be performed quickly and efficiently using a web browser, which is industrially applicable.

10: Single authentication service system 100:
110: communication unit 120: input unit
130: audio processor 140:
150: storage unit 151, 153: application
155: Web browser 160:
200: Application service apparatus 210: First communication unit
230: first storage unit 220: first control unit
300: single authentication service device 310: second communication unit
330: second storage unit 320: second control unit

Claims (15)

[Claim 1 has been abandoned due to the registration fee.] The method comprising: performing connection with at least one application service apparatus in response to an application activation request of at least one of a plurality of applications, wherein a single authentication token based on a single authentication cookie information provided by a web browser is used, A terminal for receiving a service token from each application service device without inputting information;
An application service apparatus providing data for application service operation of a terminal providing the service token and providing the message to a single authentication service apparatus upon receiving a single authentication related message;
A single authentication service apparatus providing information for operating a single authentication service of the terminal to the application service apparatus or providing the information to the terminal through the application service apparatus upon receiving a single authentication related message from the application service apparatus;
And a single authentication service system. A first communication unit for receiving integrated ID login information from an application of at least one terminal or a single authentication token based session inquiry message provided by a web browser;
A first storage unit for storing data for supporting an application function of the terminal and storing a service token for function management of the application;
A message corresponding to the integrated ID login information or a message corresponding to the session inquiry message to a single authentication service apparatus; and a single authentication token for obtaining single authentication cookie information of the web browser from the single authentication service apparatus, When receiving an integrated service number corresponding to the session inquiry message from the single authentication service apparatus, controlling the terminal to transmit the service token to the terminal without checking authentication information A first control unit for controlling the first control unit;
And a second authentication server for supporting the single authentication service. [Claim 3 is abandoned upon payment of the registration fee.] The method according to claim 2, wherein
The first control unit
Upon reception of the integrated ID login information, generates the service token based on the single authentication token provided by the single authentication service apparatus, and transmits the single authentication token, the one-time access key and the service token, To be provided to an application of the terminal,
When receiving the session inquiry message, generates the service token based on the integrated service number provided by the single authentication service device and controls the application to provide the service token to the application of the terminal Service device. [Claim 4 is abandoned upon payment of the registration fee.] The method according to claim 2, wherein
The first control unit
Upon receipt of the service token expiration request message from the terminal, controls to provide the terminal with a service token expiration response message for service logout of the corresponding application. [Claim 5 is abandoned upon payment of registration fee.] 3. The method of claim 2,
The first control unit
When receiving a single authentication cookie expiration request message based on a web browser termination or a web browser based on the web browser, a single authentication cookie expiration request message is provided to the single authentication service apparatus and a corresponding response message is provided to the terminal The application service device supports a single authentication service. delete delete delete [Claim 9 is abandoned upon payment of registration fee.] A web browser for operating a plurality of application items and a storage unit for storing the plurality of applications;
A communication unit forming a communication channel with a plurality of application service apparatuses for performing the plurality of application functions;
When a user selects a specific application for activation, confirms whether the single authentication cookie information of the web browser is operated, and transmits a message for performing an automatic login of the application to the corresponding application service apparatus by using a single authentication token provided through the single authentication cookie information, To the control unit;
Wherein the terminal supports a single authentication service. [Claim 10 is abandoned upon payment of the registration fee.] The method of claim 9, wherein
A selection area for activating a specific application operated on the basis of the same web browser, an area for inputting general authentication information of the application service device, an area for an integrated ID login for obtaining the single authentication cookie, An area in which authentication information for accessing a specific application service device is automatically input; A display unit for outputting at least one of:
Wherein the terminal further supports a single authentication service. [Claim 11 is abandoned upon payment of the registration fee.] The method of claim 9, wherein
The particular application
When the single authentication cookie of the web browser can not be operated, performs an integrated ID login to receive a one-time access key from a single authentication service device and provides the single access key to the web browser,
The web browser
Wherein the terminal is connected to the single authentication service apparatus based on the disposable access key to receive the single authentication cookie information. [12] has been abandoned due to the registration fee. Providing a single authentication token based on a single authentication cookie information to a corresponding application when a web browser of the terminal receives an input signal for activating a specific application;
The application providing a session inquiry message for automatic login to the single authentication service apparatus through the application service apparatus using the single authentication token;
The single authentication service apparatus generates an integrated service number corresponding to the session inquiry message and provides the integrated service number to the application service apparatus;
The application service device generating a service token for application service operation based on the integrated service number;
Providing the application service device with the service token and user data for operating the application service;
The method comprising the steps of: [13] has been abandoned due to the registration fee. 13. The method of claim 12,
Providing information for login of the integrated ID to the single authentication service apparatus through the application service apparatus when the single authentication cookie information of the web browser can not be operated;
The single authentication service device providing a disposable access key to the application;
The application providing the disposable access key to the web browser;
The web browser accessing the single authentication service apparatus using the disposable access key to receive the single authentication cookie information;
Further comprising the step of: delete delete

Images