KR101854389B1 - System and Method for application authentication - Google Patents

Abstract

The present invention relates to an application authentication system and method, and more particularly, it relates to an application authentication system and method, which transmits a terminal authentication request signal including terminal identification information to a push hub, receives a terminal authentication key from the push hub, A user terminal for generating an authentication key using the terminal authentication key and an authentication mechanism specific to the application and transmitting the generated authentication key to the service providing apparatus; A user terminal authentication unit for authenticating the user terminal by checking an operator having the terminal identification information as a subscriber from the information database and generating a terminal authentication key when the user terminal authentication is successful and transmitting the terminal authentication key to the user terminal and the service providing apparatus, (PUSH HUB) from the user terminal, By comparing the authentication key received from the authentication key and the push Placed hub, if they match and a service providing unit to authenticate the application use of the user terminal.

Description

System and Method for application authentication < RTI ID = 0.0 >

The present invention relates to a system and method for authenticating an application, and more particularly, to a system and method for authenticating an application using authentication information transmitted from a push hub when an application is downloaded and installed in a user terminal or an application is executed. And more particularly to an application authentication system and method for authenticating an application.

BACKGROUND ART [0002] With the rapid development of information and communication technology today, services provided by a mobile communication system are being developed not only for voice services but also for multicasting multimedia communication for transmitting a large amount of data. As a large amount of data transmission becomes possible in a mobile communication system, various information can be provided anytime and anywhere using a mobile terminal.

As a mobile terminal including a smart phone evolves, a service for synchronizing data of a server in a mobile terminal is actively provided. For example, there may be real-time data synchronization such as mail service, schedule service, and contact service.

In this way, data transmission in synchronization with a mobile terminal on the server side is called a data push service and is currently applied to various kinds of services such as KakaoTalk, MyPhone, and Viber. In order to use such a service, the subscriber first downloads the application to the mobile terminal, receives the authentication number transmitted from the server by SMS, inputs the authentication number to the application installed in the mobile terminal, and completes the application use authentication .

However, in the case of authenticating the use of the application as in the prior art, there is an inconvenience in that it is necessary to receive the SMS for the authentication number every time when the application is downloaded / installed or executed, and have to go through a complicated procedure of inputting the authentication number.

Korean Patent Publication No. 2010-0090201 (Aug. 13, 2010), Title of the Invention: System and method for providing a message push service in a wireless communication system

SUMMARY OF THE INVENTION The present invention has been conceived to solve the problems described above, and it is an object of the present invention to provide a method and system for performing mutual authentication between a push client and a push hub mounted on a user terminal, And an application authentication system and method that can simplify the procedure of downloading / installing or executing an application by eliminating a procedure.

It is another object of the present invention to provide a method and system for providing a pushbutton to a pushbutton when a pushbutton hub generates an authentication key and provides the pushbutton to a user terminal and a service providing device, The present invention is to provide an application authentication system and method that can simplify an application use authentication procedure by performing application use authentication using an authentication key.

It is still another object of the present invention to provide an application authentication system and method capable of enhancing security by using a stable session between a push client and a push hub.

According to an aspect of the present invention, a terminal authentication request signal including terminal identification information is transmitted to a push hub to receive a terminal authentication key from the push hub, and when an application is installed or application execution is requested, A user terminal for generating an authentication key using an authentication mechanism specific to an application and transmitting the generated authentication key to a service providing apparatus, A push hub (PUSH HUB) for authenticating a user terminal by checking an operator having the terminal identification information as a subscriber, generating a terminal authentication key when the user terminal authentication is successful, and transmitting the generated terminal authentication key to the user terminal and the service providing device, An authentication key received from the user terminal, The application authentication system including a service providing apparatus for authenticating an application use of the user terminal is provided since if the match by comparing the received authorization key.

The authentication mechanism specific to the application may be an app unique key.

According to another aspect of the present invention, there is provided a communication system including a communication unit for communication with a service providing apparatus or a user terminal, a subscriber information database storing identification information of user terminals and information on applications installed in each user terminal, When the terminal authentication request signal including the terminal authentication request signal is received, the user terminal authentication is performed by checking the operator whose terminal identification information is a subscriber from the subscriber information database, and if the user terminal authentication is successful, the terminal authentication key is generated A pushing hub including a user terminal and an authentication processing unit for transmitting to the service providing apparatus is provided.

According to another aspect of the present invention, a terminal authentication request signal including terminal identification information is transmitted to a push hub to receive a terminal authentication key, and when an application authentication registration request signal is received from an application, A push client transmitting an application authentication registration request signal to the push client, receiving a terminal authentication key from the push client, generating an authentication key using the received terminal authentication key and an application specific authentication mechanism And an application for transmitting the generated authentication key to a service providing apparatus to perform use authentication.

The app authentication registration request signal may be transmitted to the push client when the application is installed or when the application execution is requested. The authentication mechanism specific to the application may be an app unique key.

According to another aspect of the present invention, when an application is installed or an application is requested to be executed, an application authentication request signal including terminal identification information and application identification information is transmitted to a push hub, and an authentication key is received from the push hub A user terminal for transmitting the received authentication key to a service providing apparatus, an authentication server for authenticating the user terminal and the application using a subscriber information database provided when an app authentication request signal is received from the user terminal, A push hub (PUSH HUB) for generating an authentication key for authenticating application use of the user terminal and transmitting the authentication key to the user terminal and the service providing device when authentication of the user terminal and the application is successful; An authentication key and a number from the push hub The application authentication system including a service providing apparatus for authenticating an application use of the user terminal is provided if the match by comparing the authentication key.

The push hub may generate a unique authentication key for application usage authentication of the user terminal based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information.

According to another aspect of the present invention, there is provided a communication system including a communication unit for communication with a service providing apparatus or a user terminal, a subscriber information database storing identification information of user terminals and information on applications installed in each user terminal, And an application authentication request signal including application identification information, and performs authentication of an application installed in the user terminal and the user terminal using the subscriber information database, and when authentication of the user terminal and the application is successful And an authentication processing unit for generating an authentication key for authenticating application use of the user terminal and transmitting the authentication key to the user terminal and the service providing apparatus.

The authentication processing unit may generate a unique authentication key for application use authentication based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information.

According to another aspect of the present invention, there is provided an application for transmitting an application authentication registration request signal to a push client, receiving an authentication key, transmitting the authentication key to a service providing device and performing use authentication, A push client for sending an app authentication request signal to the push hub when the signal is received, and a push client for receiving the authentication key from the push hub and sending it to the application.

The app authentication registration request signal may be transmitted to the push client when the application is installed or when the application execution is requested.

According to another aspect of the present invention there is provided a method for authenticating an application, the method comprising: receiving from the user terminal a terminal authentication request signal including terminal identification information, Generating a terminal authentication key for the user terminal and transmitting the generated terminal authentication key to the user terminal and the service providing apparatus, Wherein the authentication of the user terminal is performed through an operator confirmation that the terminal identification information is a subscriber from the subscriber information database previously stored in the push hub, / RTI >

The application authentication method comprising the steps of: generating an authentication key using an terminal authentication key received from the push hub and an authentication mechanism specific to an application when an application is installed or an application is requested to be executed at the user terminal; From the user terminal to the service providing apparatus.

Comparing the authentication key received from the user terminal with the authentication key received from the push hub in the service providing apparatus, and authenticating use of the application of the user terminal if the authentication key is identical.

According to the present invention, mutual authentication is performed between a push client and a push hub mounted on a user terminal, thereby eliminating a procedure of inputting an authentication number each time an application is downloaded / installed or executed, Or the execution procedure can be simplified.

In addition, when downloading / installing or executing an application is requested from the user terminal, the push hub generates an authentication key and provides the authentication key to the user terminal and the service providing device. When the user terminal and the service providing device use the authentication key transmitted from the push hub The application usage authentication procedure can be simplified.

In addition, a secure session can be used between the push client and the push hub to increase security.

In addition, even if the number of applications increases, the download / execution procedure of the application can be simplified.

1 shows an example of an application authentication system according to the present invention;
2 is a block diagram schematically illustrating a configuration of a user terminal according to the present invention;
3 is a block diagram schematically showing the configuration of a push-button hub according to the present invention;
4 and 5 are diagrams illustrating an application authentication method in accordance with the present invention.

The foregoing and other objects, features, and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: FIG.

1 is a diagram showing an example of an application authentication system according to the present invention.

Referring to FIG. 1, an application authentication system includes a user terminal 100, a push hub (PUSH HUB) 200, and a service providing device 300. Here, the user terminal loads a push client 150, and the push client 150 may be loaded (pre-loaded or embedded) in the user terminal 100, have.

Hereinafter, it is assumed that the push client 150 is installed in the user terminal 100. [

The user terminal 100 receives authentication information from the push hub 200 when an application is downloaded or installed by a user or an external input, or when execution of an application is requested, and the use of the application is authenticated using the received authentication information do. Herein, the authentication information may be a terminal authentication key or an authentication key, and the authentication key is a key for application usage authentication of the user terminal 100, and includes application identification information, user terminal identification information, application identification information, Or combinations thereof.

Hereinafter, when the authentication information is 1) terminal authentication key, when the application authentication is performed, that is, after the user terminal 100 on which the push client 150 is installed shares the terminal authentication key with the push hub 200, When the application is installed or executed, application authentication is performed using the terminal authentication key shared with the push hub 200, and 2) when the authentication information is the authentication key, that is, after the application is installed or executed, A case where the terminal 100 performs application authentication using an authentication key generated through an application authentication request to the push hub 200 will be described separately.

First, the authentication information is a terminal authentication key.

The user terminal 100 on which the push client 150 is mounted transmits a terminal authentication request signal including the terminal identification information to the push hub 200. The user terminal 100 maintains a session with the push hub 200 when an authentication completion signal for the user terminal 100 is received from the push hub 200. [ Herein, the authentication completion signal includes a terminal authentication key, and the terminal identification information includes a telephone number, Universial Subscribe Identifier Module (USIM) information, an International Mobile Equipment Identity (IMEI), an ID (Idendifier or Identification) Address).

The push client 150 is also mounted on the user terminal 100 for association with the push hub 200 and the push client 150 is capable of communicating with other applications such as KakaoTalk, MyPhone, Viber, Exchange. Here, the information required for application authentication may include a terminal authentication key, an authentication key, and the like.

Therefore, when an application such as a kakao chat or my people is downloaded and installed or the execution of an application is requested, the user terminal 100 generates an authentication key using the terminal authentication key and an authentication mechanism specific to the application, And authenticates the use of the application by using the generated authentication key. Here, the authentication mechanism specific to the application may be, for example, an app unique key. That is, since the application has a unique key value (app unique key), the user terminal 100 generates a new authentication key by combining the terminal authentication key transmitted from the push hub 200 and the application unique key of the application, Transmits the generated authentication key to the service providing apparatus 300 providing the application, and performs authentication for the use of the application. At this time, since the service providing apparatus 300 knows both the terminal authentication key and the application unique key, the service providing apparatus 300 can authenticate the use of the application of the user terminal 100.

When the user terminal 100 shares the terminal authentication key with the push hub 200, the user terminal 100 may share the terminal authentication key with the push hub 200 without downloading the application later or performing an authentication process even if execution of the application is requested The application can be installed or executed using the terminal authentication key.

Next, the authentication information is an authentication key.

In this case, the user terminal 100 can simplify the application use authentication procedure without sharing the terminal authentication key with the push hub 200. That is, when the application is downloaded and installed or an application is requested to be executed, the user terminal 100 transmits an app authentication request signal to the push hub 200, and when receiving the app authentication completion signal from the push hub 200, The application can be installed or executed using the authentication key included in the authentication completion signal. Here, the app authentication request signal includes terminal identification information, application identification information, and the like.

A detailed description of the user terminal 100 will be given with reference to FIG.

The push hub 200 generates authentication information when the push client 150 is loaded on the user terminal 100 or when an application for installation / execution is executed in the user terminal 100 and transmits the authentication information to the user terminal 100 and the service providing apparatus 300). Here, the authentication information may be a terminal authentication key or an authentication key for application usage authentication of the user terminal 100. [ Accordingly, when the push client 150 is installed in the user terminal 100, the push hub 200 generates a terminal authentication key and transmits the generated terminal authentication key to the user terminal 100 and the service providing apparatus 300. The push hub 200 generates an authentication key for application use authentication when the application for installation or execution in the user terminal 100 is activated and transmits the generated authentication key to the user terminal 100 and the service providing apparatus 300 .

Similarly, when the authentication information is the terminal authentication key, the push hub 200 receives the terminal authentication request signal including the terminal identification information from the user terminal 100, and then identifies the operator having the terminal identification information as a subscriber And authenticates the user terminal 100. That is, the push hub 200 identifies the operator having the terminal identification information as a subscriber, and judges whether the terminal identification information is registered in the subscriber information database of the operator and authenticates the terminal (user). Here, the operator performs a function of providing a communication service to the user terminal 100. The push hub 200 generates a terminal authentication key when the user terminal 100 is authenticated and transmits an authentication completion signal including the generated terminal authentication key to the user terminal 100, And the terminal authentication key. When the user terminal 100 is authenticated, the push client 150 and the push hub 200 maintain a mutually authenticated " secure session ".

When the authentication information is an authentication key, the push hub 200 receives an application authentication request signal including the terminal identification information and the application identification information from the user terminal 100, and then authenticates the terminal (user) or the application . If authentication is successful, an authentication key is generated and transmitted to the user terminal (100) and the service providing apparatus (300). At this time, based on at least one of the push hub 200 application identification information, the user terminal identification information, the combination of the application identification information and the user terminal identification information, a unique authentication key for application use authentication is generated.

A detailed description of the push hub 200 will be given with reference to FIG.

The service providing apparatus 300 compares the authentication information from the push hub 200 with the authentication information from the user terminal 100 when the application is downloaded and installed in the user terminal 100 or when execution of the application is requested, If they match, the user terminal authenticates the use of the application. That is, when the service providing apparatus 300 receives the terminal authentication key from the push hub 200, the service providing apparatus 300 generates an authentication key using the terminal authentication key and the application unique key, And verifies the use of the application when they match. Also, when receiving the authentication key from the push-to-hub 200, the service providing apparatus 300 compares the received authentication key with the authentication key received from the user terminal, and authenticates the use of the application when they match.

In addition, the service providing apparatus 300 initiates a connection with the push hub 200 and controls the user terminal 100 to maintain the connection continuously.

The service providing apparatus 300 is a device that provides real-time services such as KakaoTalk, MyPhone, Naver Line, Nate On Tok, and the like.

The service providing apparatus 300 performs a real-time service based on a Web or a WAP (Wireless Application Protocol). In addition, service data and update data transmitted and received to provide a real-time service may be expressed in Hypertext Markup Language (HTML) or Wireless Markup Language (WML).

Although illustrated here as having one service providing device 300, it may actually comprise a plurality of service providing devices. When a plurality of service providing apparatuses are configured, each terminal can access a real-time service by accessing one of the plurality of service providing apparatuses according to a random or predetermined connection rule.

2 is a block diagram schematically illustrating a configuration of a user terminal according to the present invention.

2, the user terminal 100 includes an application 120 that receives a push service from a plurality of service providing devices, a push client 150 that requests a connection to the push hub side in cooperation with the application 120, (170).

The application 120 may request the push client 150 to register the application authentication and receive the authentication information from the push client 150 when the application is downloaded or installed by a user or external input, And performs application use authentication with the service providing apparatus using the received authentication information. That is, the application 120 can receive the terminal authentication key shared with the push hub from the push client 150 or receive the authentication key generated from the push hub, when the application 120 is downloaded, installed, or requested to be executed. Here, the authentication key generated in the push hub is an authentication key for authenticating application use of the user terminal 100, and is generated based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information .

Hereinafter, the case where the application 120 is authenticated when the authentication information is a terminal authentication key and the case where the application 120 is authenticated when the authentication information is an authentication key will be separately described.

First, the authentication information is a terminal authentication key.

When the application 120 receives the terminal authentication key from the push client 150, the application 120 generates an authentication key using the received terminal authentication key and an application specific authentication mechanism, It is possible to perform authentication by transmitting to the providing apparatus. The push client 150 mounted on the user terminal 100 transmits a terminal authentication request signal including the terminal identification information to the push hub.

Thereafter, the push client 150 receives the terminal authentication key from the push hub, and transmits the terminal authentication key to the application 120 when the application authentication registration is requested from the application 120 requested to be installed or executed. That is, the push client 150 performs terminal authentication with the push hub and shares the terminal authentication key with the push hub.

Then, when the installation or execution of the application 120 is requested, the application 120 requests the push client 150 to register the application authentication, and the push client 150 transmits the terminal authentication key received from the push hub to the application 120). Then, the application 120 generates an authentication key using the terminal authentication key and an authentication mechanism specific to the application, and performs authentication with the service providing apparatus using the generated authentication key. In this case, since the service providing apparatus shares the terminal authentication key with the push hub, the service providing apparatus authenticates the same authentication key as the authentication key generated in the application 120 using the terminal authentication key and the application specific authentication mechanism of the application 120 And authenticates the user terminal to use the application 120 using the generated authentication key.

As described above, when the push hub and the push client 150 share the terminal authentication key, the application 120 shares the terminal authentication key with the push client 150, and the application of the service providing apparatus transmits the push- To authenticate the use of the application 120.

Accordingly, when the push client 150 and the push hub perform authentication only once, each application performs authentication using the terminal authentication key of the push client 150, so that there is no need to perform a separate authentication process. For example, if ten applications are to be installed or executed, if the terminal authentication key is shared between the push client 150 and the push hub by one-time authentication, it is necessary to authenticate 10 times when 10 applications are installed or executed , Ten applications can be installed or executed using the shared terminal authentication key.

Next, the authentication information is an authentication key.

When the application 120 receives the authentication key from the push client 150, the application 120 may transmit the received authentication key to the service providing apparatus to perform authentication.

The push client 150 sends an app authentication request signal to the push hub when the app authentication registration request is received from the application 120 that has been requested to be installed or executed and receives the authentication key from the push hub and transmits it to the application 120 do. Then, the application 120 performs authentication with the service providing apparatus using the authentication key. At this time, since the service providing apparatus shares the authentication key with the push hub, the service providing apparatus can authenticate the user terminal 100 to use the application 120 by using the authentication key.

The storage unit 170 stores various information and applications for using the communication network of the user terminal 100

3 is a block diagram schematically showing the configuration of a push hub according to the present invention.

Referring to FIG. 3, the push hub 200 includes a communication unit 210, a subscriber information database 220, and an authentication processing unit 230.

The communication unit 210 performs communication with the service providing apparatus and the user terminal.

The communication unit 210 is connected through a communication network such as a local area network, a wired communication network, and a wireless communication network and may be a WLAN (Wireless LAN), a Wi-Fi, a Wibro, a WiMAX, Speed Downlink Packet Access, Ethernet, xDSL (ADSL, VDSL), HFC (Hybrid Fiber Coaxial Cable), FTTC (Fiber to the Curb) and FTTH (Fiber To The Home).

In the subscriber information DB 220, information on subscribers subscribed to each operator, that is, terminal identification information of a service subscriber, and information on an application installed in each terminal are stored. Here, the terminal identification information includes a telephone number, USIM information, IMEI, ID, MAC address, and the like. Accordingly, the terminal or the application can be authenticated using the information stored in the subscriber information database 220.

In addition, the subscriber information DB 220 stores authentication information of a user terminal equipped with a push client. The authentication information stored in the subscriber information DB 220 is shared with the user terminal and the service providing apparatus and is used for authenticating use of the application when downloading / installation or execution of the application is requested at the user terminal. Here, the authentication information may be a terminal authentication key and an authentication key for application authentication.

The authentication processing unit 230 generates a terminal authentication key or an authentication key for application use authentication of the user terminal according to a request from the user terminal and transmits the generated authentication key to the user terminal or the service providing apparatus.

Hereinafter, the case where the authentication processing unit 230 generates the terminal authentication key and the case where the authentication key is generated will be described separately.

First, the authentication processing unit 230 generates a terminal authentication key. After receiving the terminal authentication request signal including the terminal identification information from the user terminal through the communication unit 210, the authentication processing unit 230 performs terminal authentication by checking the operator having the terminal identification information as a subscriber, If the authentication is successful, the terminal authentication key is generated and transmitted to the user terminal and the service providing apparatus. That is, when the terminal identification information is registered in the subscriber information database 220, the authentication processing unit 230 determines that the terminal is the authenticated terminal, generates the terminal authentication key, and transmits the generated terminal authentication key to the user terminal and the service providing apparatus Lt; / RTI >

Next, the authentication processing unit 230 generates an authentication key.

After receiving the application authentication request signal including the terminal identification information and the application identification information from the user terminal through the communication unit 210, the authentication processing unit 230 performs authentication of the application installed in the user terminal and the user terminal, When authentication of the terminal and the application is successful, the authentication key is generated and transmitted to the user terminal and the service providing apparatus.

That is, when the application authentication request signal is received, the authentication processing unit 230 determines whether the terminal identification information is registered in the subscriber information database 220, whether the application corresponding to the application identification information can be used, And applications. When the user terminal and the application are authenticated, the authentication processing unit 230 generates an authentication key based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information, Key to the user terminal and the service providing apparatus.

4 is a diagram illustrating an application authentication method according to an embodiment of the present invention. That is, FIG. 4 illustrates a method of performing application authentication using a terminal authentication key shared with the push hub when an application is installed or executed after a user terminal equipped with the push client shares the terminal authentication key with the push hub .

4, the push client 150 installed in the user terminal 100 transmits a terminal authentication request signal including terminal identification information to the push hub 200 (S402).

Then, the push hub 200 confirms the operator having the terminal identification information included in the terminal authentication request signal as a subscriber, and authenticates the user terminal 100 (S404).

When the user terminal 100 is authenticated as a result of the authentication in step S404, the push hub 200 generates a terminal authentication key (S406), and transmits the generated terminal authentication key to the user terminal 100 and the service providing apparatus 300 (S408). The push client 150 and the push hub 200 share the terminal authentication key and when the installation or execution of the application 120 is requested at the user terminal 100 in the future, The user is authenticated.

After the execution of step S408, if the application is downloaded and installed in the user terminal 100 or the application execution is requested (S410), the application 120 transmits an app authentication registration request signal to the push client 150 (S412) The push client 150 transmits the terminal authentication key received from the push hub 200 to the application 120 (S414).

The application 120 generates an authentication key using (or in combination with) the terminal authentication key received from the push hub 200 and an authentication mechanism specific to the application (S416) And authenticates the use of the application with the service providing apparatus 300 by using the authentication key generated through the authentication mechanism of the service providing apparatus 300 (S418). Here, the authentication mechanism specific to the application may be, for example, an app unique key.

That is, since the service providing apparatus 300 has the terminal authentication key from the push hub 200 and knows the application-specific authentication mechanism of the application 120, the service providing apparatus 300 can use the combination of the terminal authentication key and the application- And generates an authentication key. Then, the service providing apparatus 300 compares the authentication key received from the application 120 with the authentication key of the application 120, and performs the application use authentication.

5 is a diagram illustrating an application authentication method according to another embodiment of the present invention. That is, FIG. 5 illustrates a method in which a user terminal performs application authentication using an authentication key generated in a push hub through an application authentication request to a push hub.

5, if the application 120 is downloaded and installed in the user terminal 100 or an application is requested to be executed (S502), the application 120 transmits an app authentication registration request signal to the push client 150 S504).

Thereafter, the push client 150 transmits an application authentication request signal including the terminal identification information and the application identification information to the push hub 200 (S506).

The push hub 200 performs authentication of the user terminal and the application based on the received application authentication request signal (S508). If the authentication of the user terminal and the application is successful, the push hub 200 generates an authentication key, And the service providing apparatus 300 (S512). At this time, the push hub 200 generates a unique authentication key for application usage authentication of the user terminal 100 based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information do.

The push client 150 transmits the authentication key from the push hub 200 to the application 120 at step S514 and the application 120 uses the authentication key received from the push client 150 And authenticates the use of the application with the service providing apparatus 300 (S516).

That is, since the service providing apparatus 300 has the authentication key from the push hub 200, the application use authentication is performed by comparing the authentication key received from the application 120 with the authentication key of the application 120.

According to another aspect of the present invention, there is provided a method of authenticating an application in a push hub, the method comprising: when a terminal authentication request signal including terminal identification information is received from a user terminal, And transmitting the generated authentication key to the user terminal and the service providing apparatus when the authentication of the user terminal is successful, And recorded on a recording medium readable by an electronic device.

According to another aspect of the present invention, there is provided a method for a user terminal to authenticate an application, the method comprising: transmitting a terminal authentication request signal including terminal identification information to a push hub; receiving a terminal authentication key from the push hub; Transmitting an application authentication registration request signal to the push client; transmitting, by the push client, a terminal authentication key received from the push hub to the application; An application authentication method, comprising: generating an authentication key using a unique authentication mechanism and performing use authentication for transmitting the generated authentication key to a service providing apparatus; Lt; / RTI >

According to another aspect of the present invention, there is provided a method of authenticating an application in a push hub, the method comprising: when an app authentication request signal including terminal identification information and application identification information is received from a user terminal, The method includes the steps of: authenticating an application installed in the terminal and the user terminal; generating an authentication key for authenticating application use of the user terminal when authentication of the user terminal and the application is successful; The application authentication method including the step of transmitting the application authentication method may be recorded in a program and recorded in a recording medium readable by the electronic device.

According to another aspect of the present invention, there is provided a method for a user terminal to authenticate an application, the method comprising: transmitting an application authentication registration request signal to a push client, the push client transmitting an application authentication request signal to a push hub; Receiving an authentication key for application use authentication from the push hub and transmitting the authentication key to the application; and transmitting, by the application, the authentication key to the service providing device to perform use authentication, And recorded on a recording medium readable by an electronic device.

Such an application authentication method can be written in a program, and the codes and code segments constituting the program can be easily deduced by a programmer in the field. In addition, a program relating to an application authentication method can be stored in an information storage medium (Readable Media) readable by an electronic device, readable and executed by an electronic device.

Thus, those skilled in the art will appreciate that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. It is therefore to be understood that the embodiments described above are to be considered in all respects only as illustrative and not restrictive. The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

The present invention performs mutual authentication between a push client and a push hub mounted on a user terminal, eliminating the procedure of inputting an authentication number every time an application is downloaded / installed or executed, thereby downloading / installing or executing an application The present invention can be applied to an application authentication system and method that can simplify the procedure and enable a secure session between the push client and the push hub to enhance security.

100: user terminal 120: application
150: push client 170:
200: push hub 210: communication unit
220: Subscriber information DB 230: Authentication processing unit
300: Service providing device

Claims (15)

[Claim 1 has been abandoned due to the registration fee.] And transmits the terminal authentication request signal including the terminal identification information to the push hub to receive the terminal authentication key from the push hub, and when the application is installed or the application execution is requested, the terminal authentication key and the application specific authentication mechanism are used A user terminal for generating an authentication key and transmitting the generated authentication key to a service providing apparatus;
When receiving a terminal authentication request signal from the user terminal, performs authentication of a user terminal by checking an operator having the terminal identification information as a subscriber from the provided subscriber information database, and when the user terminal authentication is successful, A push hub (PUSH HUB) for transmitting the generated service to the user terminal and the service providing apparatus; And
A service providing device for comparing an authentication key received from the user terminal with an authentication key received from the push hub, and authenticating use of the application of the user terminal if the authentication key is identical;
The application authentication system comprising: [Claim 2 is abandoned upon payment of the registration fee.] The method according to claim 1,
Wherein the authentication mechanism specific to the application is an app unique key. A communication unit for communication with the service providing apparatus or the user terminal;
A subscriber information database storing identification information of user terminals and information on applications installed in each user terminal; And
When the terminal authentication request signal including the terminal identification information is received from the user terminal, performs authentication of the user terminal by checking an operator having the terminal identification information as a subscriber from the subscriber information database, An authentication processing unit for generating a terminal authentication key and transmitting the generated terminal authentication key to the user terminal and the service providing apparatus;
Lt; / RTI > A push client for transmitting a terminal authentication request signal including terminal identification information to a push hub to receive a terminal authentication key and transmitting the terminal authentication key to the application when an application authentication registration request signal is received from the application; And
Transmits an app authentication registration request signal to the push client, receives the terminal authentication key from the push client, generates an authentication key using the received terminal authentication key and an authentication mechanism specific to the application, An application for transmitting a key to a service providing device to perform use authentication;
. ≪ / RTI > [Claim 5 is abandoned upon payment of registration fee.] 5. The method of claim 4,
Wherein the application authentication registration request signal is transmitted to the push client when the application is installed or when execution of the application is requested. [Claim 6 is abandoned due to the registration fee.] 5. The method of claim 4,
Wherein the authentication mechanism specific to the app is an app unique key. [7] has been abandoned due to the registration fee. When an application is installed or an application is requested to be executed, a push client receiving an application authentication registration request from the application transmits an application authentication request signal including terminal identification information and application identification information to a push hub, A user terminal for receiving the authentication key received from the push client by the application, to a service providing apparatus;
When the application authentication request signal is received from the user terminal, authentication of the user terminal and the application is performed using the subscriber information database, and when authentication of the user terminal and the application is successful, A push hub (PUSH HUB) for generating an authentication key for application use authentication and transmitting the generated authentication key to the user terminal and the service providing apparatus;
And a service providing device for comparing the authentication key received from the user terminal with the authentication key received from the push hub, and authenticating use of the application of the user terminal when the authentication key is identical. [8] has been abandoned due to the registration fee. 8. The method of claim 7,
Wherein the push hub generates a unique authentication key for application usage authentication of the user terminal based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information. Authentication system. A communication unit for communicating with the service providing apparatus or the push client mounted on the user terminal;
A subscriber information database storing identification information of user terminals and information on applications installed in each user terminal; And
Receiving an application authentication request signal including terminal identification information and application identification information from the push client of the user terminal and performing authentication of the application installed in the user terminal and the user terminal using the subscriber information database, Generating an authentication key for authenticating application use of the user terminal and transmitting the generated authentication key to the push client and the service providing device of the user terminal when authentication of the user terminal and the application is successful, And an authentication processing unit that enables the application authentication unit to perform the application use authentication using the authentication key. [Claim 10 is abandoned upon payment of the registration fee.] 10. The method of claim 9,
Wherein the authentication processing unit generates a unique authentication key for application use authentication based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information. An application for transmitting an app authentication registration request signal to a push client to receive an authentication key, and transmitting the authentication key to a service providing device to perform use authentication; And
A push client for transmitting an application authentication request signal to the push hub, receiving an authentication key from the push hub, and transmitting the authentication key to the application when the application authentication registration request signal is received from the application;
Lt; / RTI > [12] has been abandoned due to the registration fee. 12. The method of claim 11,
Wherein the application authentication registration request signal is transmitted to the push client when the application is installed or when execution of the application is requested. [13] has been abandoned due to the registration fee. A method for authenticating an application,
The push hub receiving a terminal authentication request signal including terminal identification information from a user terminal;
The push hub generating an authentication and terminal authentication key for the user terminal based on the terminal identification information;
And the push hub transmits the generated terminal authentication key to the user terminal and the service providing apparatus,
The terminal authentication key is generated when authentication of the user terminal is successful,
Wherein the authentication of the user terminal is performed through an operator confirmation that the terminal identification information is a subscriber from the subscriber information database previously stored in the push hub. [14] has been abandoned due to the registration fee. 14. The method of claim 13,
Generating an authentication key using the terminal authentication key received from the push hub and an authentication mechanism specific to the application when the application is installed in the user terminal or when application execution is requested; And
And transmitting the generated authentication key from the user terminal to the service providing apparatus. [Claim 15 is abandoned upon payment of registration fee] 15. The method of claim 14,
Comparing the authentication key received from the user terminal and the authentication key received from the push hub in the service providing apparatus, and authenticating use of the application of the user terminal if the authentication key is identical to the authentication key received from the pushing hub .

Images