KR102164301B1 - System and Method for log in based on server easily - Google Patents

Abstract

The present invention relates to a server-based simple log-in system and a simple log-in method. An embodiment of the present invention receives simple log-in request information including a device ID, an application ID, and a user ID from a terminal, and the terminal simply logs in. A simple login server that transmits a simple login result including the device ID, the application ID, and a customer identification key corresponding to the user ID to the terminal after determining whether it is registered in the service, the device ID from the simple login server, Receiving and processing the application ID and the user ID, receiving a first login request including the customer identification key from the login server and the terminal for generating the customer identification key, and the customer identification key and app server information It is possible to provide a server-based simple login system including the app server that transmits the included second login request to the login server and receives a login result from the login server.

Description

Server-based simple login system and simple log in method {System and Method for log in based on server easily}

This outbreak relates to a server-based simple login system and a simple login method.

Recently, wireless Internet systems that provide Internet services through mobile phones have been developed and are becoming common. The wireless Internet system is a system that provides Internet service through a mobile communication terminal. Using wireless Internet protocols such as WAP (Wireless Application Protocol), cHTML, and ME, documents written in markup languages such as WML, HDML, mHTML, etc. It is provided to mobile phones through a wireless Internet network.

When attempting to access a web page through wireless Internet, the user can access the desired web page by entering the address of the web page to be connected to the mobile phone and selecting an Internet connection. For example, when a user wants to access Naver, the entered wireless Internet web page address is a URL used when accessing a web server through a web browser of a computer, such as'http://www.naver.com'. It has the same form as In order to solve this problem, recent wireless Internet access technologies require users to enter the address of a web page to access the mobile phone and a corresponding number or representative phone number in advance. You can access the webpage by entering only one number or representative phone number. However, even if the user wants to log in after accessing the web page, as in a normal computer keyboard, for example, Naver's ID and password must be entered in the same manner. However, it is very inconvenient to input an ID and password combined with letters or numbers using a text or numeric keypad of a mobile phone.

Meanwhile, each website on the Internet is operated on a free or paid membership system to secure members competitively. Accordingly, users inevitably sign up for membership in order to use the services or information provided by the site, and each website has a lot of burden to remember and manage the unique ID and password subscribed to.

In addition, as billing and remittance through wireless Internet such as mobile games and mobile banking are increasing, log-in by using ID, password, and authentication information and security of information according to the use of ID, password and authentication information are becoming an important issue.

Republic of Korea Patent Publication: No. 102013011968

The problem to be solved by an embodiment of the present invention is to provide a server-based simple login system and a simple login method capable of improving the execution speed of an application by reducing the memory and CPU usage of the terminal by logging in through the server. Have.

A problem to be solved by another embodiment of the present invention is to provide a server-based simple login system and a simple login method that can fundamentally prevent hacking of personal information by malicious applications because the terminal does not store the identification key.

Another problem to be solved by another embodiment of the present invention is to provide a server-based simple log-in system and a simple log-in method capable of simply performing log-in without inputting additional information from a terminal.

Another problem to be solved by another embodiment of the present invention is to provide a server-based simple login system and a simple login method that can escape from the risk of leakage of personal information because the personal information of the terminal user is not used.

According to an embodiment of the present invention, after receiving simple login request information including a device ID, an application ID, and a user ID from a terminal, and determining whether the terminal is registered in the simple login service, the device ID, the application ID, and the A simple login server that transmits a simple login result including a customer identification key corresponding to a user ID to the terminal, the device ID, the application ID, and the user ID are received and processed from the simple login server, and the customer identification key Receiving a first login request including the customer identification key from the login server and the terminal to generate a, and transmitting a second login request including the customer identification key and app server information to the login server, and the login server It is possible to provide a server-based simple login system including the app server that receives a login result from the server.

In one embodiment, the terminal is a portable terminal, a mobile terminal, a telematics terminal, a notebook computer, a digital broadcasting terminal, a personal digital assistant (PDA). ), Wibro Terminal, IPTV (Internet Protocol Television) terminal, AVN (Audio Video Navigation) terminal, PMP (Portable Multimedia Player), navigation terminal (vehicle navigation device) (Navigation Terminal) I can.

In another embodiment, the device ID may include an IMEI (International Mobile Equipment Identity) of the terminal, the application ID may include a unique number of an application installed in the terminal, and the user ID is the It may be a combination of numbers and letters arbitrarily determined by the user of the terminal.

In another embodiment, the login server may randomly generate the customer identification key, and obtain the device ID, the application ID, and the user ID by searching for the generated customer identification key.

In another embodiment, the app server may provide a service to the application running on the terminal, and the login server includes the customer identification key transmitted to the simple login server and the customer received from the app server. When the identification keys match, the service request information may be transmitted to the app server, and the app server may perform login of the terminal upon receiving service request information from the login server.

In another embodiment of the present invention, a simple login server receives simple login request information including a device ID, an application ID, and a user ID from a terminal, determining whether the terminal is registered in the simple login service, a login server Receiving the simple login request information, receiving and processing the device ID, the application ID, and the user ID, and generating a customer identification key, the simple log-in result including the customer identification key by the simple log-in server Transmitting to the terminal, the terminal transmitting a first login request including the customer identification key to the app server, the app server a second login including the customer identification key and information of the app server It is possible to provide a server-based simple login method comprising transmitting a request to the login server and transmitting, by the login server, service request information corresponding to the second login request to the app server.

In an embodiment, in the generating of the customer identification key, the customer identification key may be randomly generated, and the device ID, the application ID, and the user ID may be obtained by searching for the generated customer identification key.

In another embodiment, when the customer identification key transmitted to the simple login server and the customer identification key received from the app server match, transmitting the service request information to the app server. .

In another embodiment, when the app server receives service request information from the login server, it may further include performing a login of the terminal.

In another embodiment, the simple login server is operated by a first service provider, the login server is operated by a second service provider, and the app server of claim 1 is operated by a third service provider, The first service provider, the second service provider, and the third service provider may be legally distinguished subjects, wherein the legally distinguished subjects include natural persons and legal persons.

In the server-based simple log-in system and simple log-in method according to an embodiment of the present invention, a log-in is performed through a server, thereby reducing the memory and CPU usage of the terminal, thereby increasing the execution speed of the application.

In the server-based simple log-in system and simple log-in method according to an embodiment of the present invention, since the terminal does not store an identification key, hacking of personal information by a malicious application can be fundamentally prevented.

The server-based simple log-in system and simple log-in method according to an embodiment of the present invention can perform log-in simply without inputting additional information from a terminal.

The server-based simple log-in system and simple log-in method according to an embodiment of the present invention do not use personal information of a terminal user, so that personal information may be free from the risk of leakage.

1 is a block diagram showing a server-based simple login system according to an embodiment of the present invention.
2 is a flowchart illustrating a server-based simple login method according to an embodiment of the present invention.

In the present invention, various modifications may be made and various embodiments may be provided. Specific embodiments are illustrated in the drawings and will be described in detail through detailed description. However, this is not intended to limit the present invention to a specific embodiment, it is to be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention. The terms used in the present specification have selected general terms that are currently widely used as possible while considering functions in the present invention, but this may vary according to the intention or custom of a technician working in the art, or the emergence of new technologies. In addition, in certain cases, there are terms arbitrarily selected by the applicant, and in this case, the meaning will be described in the description of the corresponding invention. Therefore, it should be noted that terms used in the present specification should be interpreted based on the actual meaning of the term and the entire contents of the present specification, not a simple name of the term.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the drawings.

1 is a block diagram showing a server-based simple login system according to an embodiment of the present invention.

Referring to FIG. 1, a server-based simple login system according to an embodiment of the present invention may include a simple login server 100, a login server 200, and an app server 300.

The terminal 10 may mount an application application requiring login. The application application may include a program executed in the terminal 10. Here, the program may include a program executed in a wired terminal as well as a wireless terminal. In one embodiment, the terminal 10 is a portable terminal, a mobile terminal, a telematics terminal, a notebook computer, a digital broadcasting terminal, and a personal digital assistant. : Any one selected from PDA), Wibro Terminal, IPTV (Internet Protocol Television) terminal, AVN (Audio Video Navigation) terminal, PMP (Portable Multimedia Player), navigation terminal (vehicle navigation device) (Navigation Terminal) Can be.

The simple login server 100 may receive simple login request information including a device ID, an application ID, and a user ID from the terminal 10 and determine whether the terminal 10 is registered in the simple login service. The simple login server 100 may store information on a simple login service. When the terminal 10 is not subscribed to the simple login service, a procedure for subscribing to the simple login service may be provided. If the terminal 10 is subscribed to the simple login service, it may request the login server 200 to generate a customer identification key.

The device ID may be a unique identification number of the terminal 10 or a combination of characters. For example, the device ID may include the International Mobile Equipment Identity (IMEI) of the terminal 10. In addition, the application ID may be a unique identification number or a combination of characters of an application executed in the terminal 10. For example, the application ID may include a unique number of an application installed on the terminal 10, and the unique number of the application is a combination of a unique number generated based on the date the terminal 10 downloaded the application. Can be created by The user ID may be a combination of numbers and letters arbitrarily determined by the user of the terminal 10 or may be a user ID already stored in the terminal 10. In addition, the simple login server 100 may transmit a simple login result including a device ID, an application ID, and a customer identification key corresponding to the user ID to the terminal 10. Here, the customer identification key may include a customer identification key generated by the login server 200.

The login server 200 may receive and process a device ID, an application ID, and a user ID from the simple login server 100. In addition, it is possible to generate a customer identification key. For example, if the device ID is ABCDEF, the application ID is APP20131105140512, and the user ID is KTSEARCH1004, the login server 200 generates a randomly generated unique key (eg, XYZ123), and the device ID and application ABCDEF/APP20131105140512/KTSEARCH1004/XYZ123 combined with ID and user ID can be created. At this time, each piece of information may be encrypted and generated. The customer identification key generated by encryption may further include a key capable of decrypting the encrypted value. The login server 200 may transmit the customer identification key generated as described above to the simple login server 100.

The app server 300 may receive a first login request including a customer identification key from the terminal 10. The terminal 10 may run an application to drive a program requiring login. After the terminal 10 makes a simple log-in request to the simple log-in server 100, the terminal 10 can receive the customer identification key from the simple log-in server 100, and through an application provided in the terminal 10 The first login request may be transmitted to the app server 300.

In this case, the first login request may include a customer identification key generated by the login server 200 as well as a user ID and password, unlike login performed in a conventional application. Here, the customer identification key may include information on the terminal 10 and may be a unique key given to each terminal 10. As described above, the customer identification key may include a device ID, an application ID, and a user ID.

In addition, in response to the first login request, the app server 300 may transmit a second login request to the login server 200. Here, the second login request may include a customer identification key and app server information. In addition, the app server information may be a unique number or a combination of characters of the app server 300, and may be a combination of random numbers or characters assigned to each customer identification key. The login server 200 receives a second login request including information on the app server 300 information and the customer identification key, and the customer identification key generated by the login server 200 and received from the app server 300 It can be determined by searching whether the customer identification keys are the same. If the customer identification key generated by the login server 200 and the customer identification key received from the app server 300 are the same, a login result for requesting a service may be provided to the app server 300. Thereafter, the app server 300 may provide a service to an application executed in the terminal 10.

In the server-based simple login system according to an embodiment of the present invention, login is performed through the server, so that the memory and CPU usage of the terminal can be reduced to increase the execution speed of the application, and the terminal does not store the identification key. Hacking of personal information by malicious applications can be fundamentally prevented.

2 is a flowchart illustrating a server-based simple login method according to an embodiment of the present invention.

Referring to FIG. 2, in the server-based simple login method according to an embodiment of the present invention, the simple login server 100 receives simple login request information including a device ID, an application ID, and a user ID from the terminal 10. The step of determining whether the terminal 10 is registered in the simple login service, the login server 200 receiving the simple login request information, receiving the device ID, the application ID, and the user ID to process And, the step of generating a customer identification key, the simple login server 100 transmitting a simple login result including the customer identification key to the terminal 10, the terminal 10 is the app server 300 Transmitting a first login request including the customer identification key to the app server 300, the second login request including the information of the customer identification key and the app server 300 to the login server 200 ) And transmitting, by the login server 200, service request information corresponding to the second login request to the app server 300.

In step S201, the terminal 10 may transmit a simple login request to the simple login server 100. Here, the simple login request may include a device ID, an application ID, and a user ID.

In step S202, the simple login server 100 may determine whether the terminal 10 is registered in the simple login service.

If the terminal 10 is registered in the simple login service in step S203, the terminal 10 may transmit a simple login request including a device ID, an application ID, and a user ID to the login server 200.

In step S204, the login server 200 may receive a device ID, an application ID, and a user ID, and generate a customer identification key corresponding thereto.

In step S205, the login server 200 may transmit the customer identification key to the simple login server 100.

In step S206, the simple login server 100 may transmit a simple login result including the customer identification key to the terminal 10.

In step S207, the terminal 10 may request a login (first login request) to the app server 300 including the customer identification key.

In step S208, the app server 300 may transmit a login request (second login request) to the login server 200 including information on the app server 300 and information on the customer identification key to the login server 200. have.

In step S209, the login server 200 may determine whether the customer identification key generated by the login server 200 and the customer identification key transmitted from the app server 300 are the same.

In step S210, if the customer identification key generated by the login server 200 and the customer identification key transmitted from the app server 300 are the same, the login server 200 transmits a login result including service request information to the app server 300. Can be transmitted.

In step S211, the app server 300 may allow login to the terminal 10.

The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly in hardware, in a software module executed by a processor, or in a combination of the two. The software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM, or any other type of storage medium known in the art. I will be able to. An exemplary storage medium may be coupled with the processor, so that the processor can read information from and write information to the storage medium. Alternatively, the storage medium may be integrated into the processor. The processor and the storage medium may reside within an ASIC. The ASIC could be located in the user terminal. Alternatively, the processor and the storage medium may reside as separate components in the user terminal.

All of the processes described above may be implemented in software code modules executed by one or more general purpose or special purpose computers or processors, and may be fully automated via the software code modules. The code modules may be stored on any type of computer-readable medium or other computer storage device or collection of storage devices. Some or all of the above methods could alternatively be implemented within specialized computer hardware.

All methods and tasks described herein may be executed by a computer system and be sufficiently automated. The computer system may, in some cases, communicate over a network and interact with multiple individual computers or computing devices (e.g., physical servers, workstations) to perform the functions described above. , Storage arrays, etc.). Each such computing device typically comprises a processor (or multiple processors or circuit or set of circuits, e.g., a module) that executes program instructions or modules stored in a memory or other non-transitory computer-readable storage medium. to be. Although some or all of the various functions described herein may be implemented with application-specific circuitry (e.g., ASICs or FPGAs) of a computer system, the various functions described may be implemented with such program instructions. Can be. When the computer system includes several computing devices, the devices need not be co-located, but may be co-located. The results of the methods and tasks disclosed above may be permanently stored in a different state by transforming physical storage devices such as solid state memory chips and/or magnetic disks.

The simple login system according to an embodiment of the present invention may be operated by a plurality of subjects. In one embodiment, the simple login server 100 is operated by a first service provider, the login server 200 is operated by a second service provider, and the app server 300 is operated by a third service provider. Can be. For example, a network operator can operate a simple login server 100 and a login server 200, and an app server operator who provides an app service with the permission of the network operator operates only the app server 300, and A service can be provided to the terminal 10 through a network operator. Here, the first service provider, the second service provider, and the third service provider may be legally distinguished subjects, and the legally distinguished subjects may include natural persons and legal persons. The simple login system according to an embodiment of the present invention defines a method operated by a plurality of subjects as one type of right, and a single joint illegal act can be formed by combining a plurality of acts performed by a plurality of subjects. have.

So far, the present invention has been looked at around the examples. Those of ordinary skill in the art to which the present invention pertains will be able to understand that the present invention can be implemented in a modified form without departing from the essential characteristics of the present invention. Therefore, the disclosed embodiments should be considered from an illustrative point of view rather than a limiting point of view. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope equivalent thereto should be construed as being included in the present invention.

10: terminal
100: simple login server
200: login server
300: App server

Claims (15)

Receives simple login request information including device ID, application ID, and user ID from a terminal, and determines whether the terminal is a subscriber of the simple login service using the simple login request information, and the terminal is a subscriber of the simple login service In the case of, a simple login requesting the device ID, the application ID, and a customer identification key corresponding to the user ID to the login server, and transmitting a simple login result including a specific customer ID received from the login server to the terminal server;
When the device ID, the application ID, and a customer identification key corresponding to the user ID are requested from the simple login server, the device ID, the application ID, and the user ID are processed to generate the specific customer identification key, and the The login server for transmitting a specific customer identification key to the simple login server; And
Receives a first login request including a random customer identification key from the terminal, transmits a second login request including the random customer identification key and app server information to the login server, and identifies the random customer from the login server The app server receiving a login result for the key; Including,
The login server is
When the random customer identification key received from the app server is the specific customer identification key generated by the app server, the service request information corresponding to the second login request is transmitted to the app server.
The method of claim 1,
The terminal includes a portable terminal, a mobile terminal, a telematics terminal, a notebook computer, a digital broadcasting terminal, a personal digital assistant (PDA), and a Wibro terminal. Terminal), IPTV (Internet Protocol Television) terminal, AVN (Audio Video Navigation) terminal, PMP (Portable Multimedia Player), and navigation terminal (vehicle navigation device) (Navigation Terminal) Simple login system.
The method of claim 1,
The device ID includes an International Mobile Equipment Identity (IMEI) of the terminal.
The method of claim 1,
The application ID includes a unique number of an application installed in the terminal.
The method of claim 1,
The user ID is a server-based simple login system, characterized in that the combination of numbers and letters arbitrarily determined by the user of the terminal.
delete The method of claim 1,
The app server
Server-based simple login system, characterized in that providing a service to the application running in the terminal.
delete The method of claim 1,
When the app server receives the service request information from the login server,
A server-based simple login system, characterized in that performing login of the terminal.
A server-based simple login method provided by a login server in conjunction with a simple login server and an app server,
Receiving, from the simple login server, a request for a customer identification key corresponding to a device ID, an application ID, and a user ID transmitted from an arbitrary terminal;
Generating a specific customer identification key by processing the device ID, the application ID, and the user ID;
Transferring the specific customer identification key to the simple login server;
Receiving a login request including a random customer identification key and information of the app server from the app server; And
If the random customer identification key is the specific customer identification key generated by the user, transmitting service request information corresponding to the login request to the app server,
The device ID, application ID, and user ID are received from the simple login server when the arbitrary terminal is a subscriber of the simple login service,
The specific customer identification key is included in a simple log-in result transmitted from the simple log-in server to the random terminal, and included in a log-in request transmitted from the random terminal to the app server, a server-based simple log-in method.
delete delete The method of claim 10,
When the app server receives the service request information from the login server
Logging in the terminal;
Server-based simple login method further comprising a. delete delete

Images