KR102244523B1 - System and method for user certification in using web service - Google Patents

Abstract

The present invention relates to a system and method for user authentication when using a web service, and more particularly, a user information database in which user information including user authentication information and additional information of individual services is stored, an authentication token for a web service from a terminal device. When a (Authtoken) issuance request signal is received, an authentication token issuing unit that issues an authentication token with a set validity period and transmits it to the terminal device, and a user authentication information request signal including an authentication token is received from a web service device, And an authentication unit that performs user authentication using the authentication token, and transmits user authentication information including an AccessID and a CI to the web service device in the case of an authenticated user.

Description

System and method for user authentication when using web services {SYSTEM AND METHOD FOR USER CERTIFICATION IN USING WEB SERVICE}

The present invention relates to a system and method for user authentication when using a web service, and more particularly, when executing a web service through a browser, an authentication token is issued from an integrated management device, and user authentication to a web service device with the issued authentication token. Regarding a system and method for user authentication when using a web service that requests and receives an AccessID and requests and receives user authentication information or additional information using the AccessID as a key value when user authentication information or additional information is needed while the web service is running. .

Recently, as the awareness and use of user terminals such as smart phones has increased, many users are using applications through user terminals, and the number and types of applications that can be executed on the user terminals are also increasing exponentially.

Typically, a user downloads and installs a desired application on a user terminal from a server that provides various applications such as an application store, and uses the installed application. In addition, after the installed application is authenticated as a user who can use the application, only the authenticated user can use it.

On the other hand, if the service function is to be used through user authentication among various mobile web services provided on a terminal basis, when the mobile web service is executed through a browser installed on the terminal, user authentication and service are provided through the user authentication system. Acquiring necessary user authentication information.

However, in the past, even if an application service that goes through an identity authentication procedure is being used among web services, when additional application services are downloaded and executed, it is inconvenient that the user must directly input the identity authentication procedure and user additional information necessary for using the service. There was this.

Prior Art 1: Korean Patent Laid-Open Patent No. 10-2013-0085509: Apparatus and method for user authentication

The present invention was conceived to solve the above problem, and if at least one web service that goes through an identity authentication procedure is being used, if an additional web service is downloaded and executed, the identity authentication procedure and service use The purpose of this study is to provide a system and method for user authentication when using web services that allow users to use the service immediately without the user's additional information input procedure.

Another object of the present invention is to directly access an integrated management device that stores/manages user authentication information and additional information in individual web services without installing a separate authentication application acting on behalf of the user authentication function to provide additional user authentication and services. It is to provide a system and method for user authentication when using a web service that can receive information.

According to an aspect of the present invention for solving the above-described problem, a user information database in which user information including user authentication information and additional information of individual services is stored, an authentication token issuance request signal for a web service from a terminal device When is received, an authentication token issuing unit that issues an authentication token with a set validity period and transmits it to the terminal device, and when a user authentication information request signal including an authentication token is received from the web service device, the authentication token is used. An integrated management device including an authentication unit that performs user authentication and transmits user authentication information including an AccessID and a CI to the web service device in the case of an authenticated user is provided.

When a user authentication information request signal including an AccessID is received, the integrated management device searches the user information database to obtain user authentication information mapped to the AccessID, and provides authentication information for transmitting the obtained user authentication information. May contain more wealth.

The authentication token issuance request signal may include at least one of terminal device identification information, web service identification information, client authentication key, and whether or not AppGuard is installed, and the user authentication request signal includes an authentication token and a web service device authentication key. can do.

The authentication unit may determine whether or not within the validity period set in the authentication token, if within the validity period, issue an AccessID, and transmit user authentication information including the issued AccessID and CI to the web service device.

According to another aspect of the present invention, when a command to execute a web service through a communication unit and a browser for communication through a communication network is input, an authentication token is issued from the integrated management device through the communication unit, and a web service is provided with the issued authentication token. A terminal device including a web service processing unit for receiving an AccessID by requesting user authentication from the device is provided.

When the web service execution command is input, the web service processing unit transmits the web service identification information to the authentication module, and stores the AccessID transmitted from the authentication module in a cache, and the web service identification information transmitted from the browser module , Terminal device identification information, client authentication key, transmits an authentication token issuance request signal including at least one of the presence or absence of AppGuard installation to the integrated management device, and receives an authentication token with an expiration date set from the integrated management device, and the It may include an authentication module that transmits a user authentication request signal including an authentication token to the web service device, receives an AccessID from the web service device, and transmits it to the browser module.

When user authentication information or additional information is required while the web service is running, the web service processing unit requests and receives user authentication information or additional information from the integrated management device via the web service device as a key value using the AccessID cached in the browser module. I can.

According to another aspect of the present invention, when a user authentication request signal including an authentication token is received from an authentication information database in which user authentication information including the user's AccessID and CI is stored, and a terminal device, a user including the authentication token When an authentication information request signal is transmitted to the integrated management device and user authentication information including an AccessID and CI is received from the integrated management device, the user authentication information is stored in the authentication information database, and the AccessID is stored in the terminal device. There is provided a web service device including an authentication request processing unit that transmits to.

According to another aspect of the present invention, a user information database in which user information including user authentication information and additional information is stored is provided, and when issuance of an authentication token for a web service is requested from a terminal device, an authentication token with an expiration date set Is issued, and when a user authentication information request signal including an authentication token is received from the web service device, user authentication is performed using the authentication token, and user authentication information including the AccessID and CI is provided in the case of an authenticated user. When an integrated management device transmitted to the web service device or a command to execute a web service through a browser is input, an authentication token is issued from the integrated management device, and a user authentication is requested to the web service device with the issued authentication token, and AccessID When a user authentication request signal including an authentication token is received from the terminal device and the terminal device, the user authentication information request signal including the authentication token is transmitted to the integrated management device, and AccessID and CI from the integrated management device When user authentication information including a is received, a system for user authentication when using a web service including a web service device that stores the user authentication information and transmits the AccessID to the terminal device is provided.

According to another aspect of the present invention, in a method for user authentication when an integrated management device uses a web service, when a request signal for issuing an authentication token for a web service is received from a terminal device, an authentication token with an expiration date set Issuing and transmitting to the terminal device, when a user authentication information request signal including the authentication token is received from a web service device that has received a user authentication request signal from the terminal device, user authentication using the authentication token A method for user authentication when using a web service including transmitting user authentication information including an AccessID and a CI to the web service device in the case of an authenticated user is provided.

According to another aspect of the present invention, when executed by the integrated management device, when an authentication token issuance request signal for a web service is received from a terminal device, an authentication token with a set validity period is issued to the terminal device. In the transmitting step, when a user authentication information request signal including the authentication token is received from a web service device that has received a user authentication request signal from the terminal device, user authentication is performed using the authentication token, and the authenticated user In the case of, a computer-readable recording medium containing a program for executing a method for user authentication when using a web service including transmitting user authentication information including an AccessID and a CI to the web service device is provided.

According to another aspect of the present invention, in a method for user authentication when a terminal device uses a web service, when a web service execution command is input through a browser, an authentication token issuance request signal for the web service is transmitted to the integrated management device. Transmitting, when an authentication token with a set validity period is issued from the integrated management device, transmitting a user authentication request signal including the authentication token to a web service device, and receiving and storing an AccessID from the web service device And, when user authentication information or additional information is required during execution of the web service, requesting and receiving user authentication information or additional information from the integrated management device via the web service device using the stored AccessID as a key value When used, a method for user authentication is provided.

According to another aspect of the present invention, when executed by a terminal device, when a web service execution command is input through a browser, transmitting an authentication token issuance request signal for a corresponding web service to an integrated management device, the integrated management When an authentication token with a set validity period is issued from the device, transmitting a user authentication request signal including the authentication token to a web service device, receiving and storing an AccessID from the web service device, while the web service is running When user authentication information or additional information is required, a method for user authentication when using a web service comprising the step of requesting and receiving user authentication information or additional information from the integrated management device via the web service device using the stored AccessID as a key value. A computer-readable recording medium in which a program for execution is recorded is provided.

According to another aspect of the present invention, when a web service execution command is input through a browser in a terminal device, an authentication token including at least one of web service identification information, terminal device identification information, client authentication key, and whether or not AppGuard is installed. Transmitting an issuance request signal to an integrated management device, the integrated management device issuing an authentication token for which an expiration date is set and transmitting it to the terminal device, the terminal device transmitting a user authentication request signal including the authentication token to the terminal device. Transmitting to a web service device, the web service device transmitting a user authentication information request signal including the authentication token to the integrated management device, the integrated management device performing user authentication using the authentication token, and , In the case of an authenticated user, transmitting user authentication information including an AccessID and a CI to the web service device, the web service device storing the user authentication information and transmitting the AccessID to the terminal device, the The terminal device provides a method for user authentication when using a web service including storing an AccessID.

According to the present invention, if at least one web service that undergoes an identity authentication procedure is being used, if another web service is downloaded and executed, the user authentication procedure and the user additional information input procedure required for using the service are not used. You can use the service.

In addition, without installing a separate authentication application that acts as an agent for user authentication, by directly accessing the integrated management device that stores/manages user authentication information and additional information in individual web services, additional information necessary for user authentication and service provision can be provided. I can.

In addition, from the side of the web service provider, authentication costs can be reduced and additional user information necessary for service provision can be immediately provided, and from the aspect of web service users, the service can be executed and used immediately without inputting inconvenient authentication information and additional information required for service provision. Therefore, cost reduction and convenience can be provided.

1 is a diagram showing a system for user authentication when using a web service according to an embodiment of the present invention.
2 is a block diagram schematically showing the configuration of a terminal device according to an embodiment of the present invention.
3 is a diagram showing the configuration of a web service processing unit shown in FIG. 2 in detail.
4 is a block diagram schematically showing the configuration of a web service device according to an embodiment of the present invention.
5 is a block diagram schematically showing the configuration of an integrated management apparatus according to an embodiment of the present invention.
6 is a diagram showing a method for user authentication when using a web service according to an embodiment of the present invention.

Details of the above-described objects and technical configurations of the present invention, as well as operational effects thereof, will be more clearly understood by the following detailed description based on the accompanying drawings in the specification of the present invention.

Hereinafter, a'system and method for user authentication when using a web service' according to the present invention will be described in detail with reference to the accompanying drawings. The described embodiments are provided so that those skilled in the art can easily understand the technical idea of the present invention, and the present invention is not limited thereto. In addition, matters expressed in the accompanying drawings are schematic drawings in order to easily describe embodiments of the present invention, and may be different from a form actually implemented.

Meanwhile, each component expressed below is only an example for implementing the present invention. Accordingly, in other implementations of the present invention, other components may be used without departing from the spirit and scope of the present invention. In addition, each component may be implemented with purely hardware or software, but may be implemented with a combination of various hardware and software components that perform the same function. In addition, two or more components may be implemented together by one piece of hardware or software.

In addition, the expression'including' certain elements is an expression of'open type' and simply refers to the existence of the corresponding elements, and should not be understood as excluding additional elements.

1 is a diagram showing a system for user authentication when using a web service according to an embodiment of the present invention.

Referring to FIG. 1, a system for user authentication when using a web service includes a terminal device 100, a web service device 200, and an integrated management device 300.

When a command to execute a web service through a browser is input, the terminal device 100 receives an AuthToken from the integrated management device 300 and requests user authentication from the web service device 200 with the issued authentication token. To receive the AccessID.

The terminal device 100 is a client terminal capable of communicating with the web service device 200 or the integrated management device 300, for example, a smart phone, a notepad, a laptop computer, and a tablet. Terminals such as computers may be included, and if communication through a communication network is possible, there is no need to be limited to any specific terminal.

A detailed description of the terminal device 100 will be made with reference to FIG. 2.

When a user authentication request signal including an authentication token is received from the terminal device 100, the web service device 200 transmits a user authentication information request signal including the authentication token to the integrated management device 300. When user authentication information including an AccessID and CI is received from the integrated management device 300, the web service device 200 stores the user authentication information and transmits the AccessID to the terminal device 100. Here, the AccessID means a user authentication ID, and the CI (Connecting Information) is information that can distinguish whether the user is the same user even between different Internet services, and may be personal identification information given by an identity verification agency for service linkage.

The web service device 200 may communicate with other electronic devices through various communication standards and may be implemented through an electronic device capable of performing various data processing operations. For example, the web service device 200 may be implemented in the form of a server device, and may be implemented in the form of various electronic devices in addition to the form of such a server device. In addition, the web service device 200 may be implemented in the form of a single electronic device, or may be implemented in a form in which two or more electronic devices are combined.

A detailed description of the web service device 200 will be made with reference to FIG. 3.

The integrated management device 300 includes a user information database in which user information including user authentication information and additional information is stored, and when issuance of an authentication token for a web service is requested from the terminal device 100, authentication for which an expiration date is set. Issue a token.

The integrated management device 300 performs user authentication using an authentication token when a user authentication information request signal including an authentication token is received from the web service device 200, and includes an AccessID and a CI in the case of an authenticated user. User authentication information to be transmitted to the web service device 200.

The integrated management device 300 may communicate with other electronic devices through various communication standards and may be implemented through an electronic device capable of performing various data processing operations. For example, the integrated management device 300 may be implemented in the form of a server device, and may be implemented in the form of various electronic devices in addition to the form of such a server device. In addition, the integrated management device 300 may be implemented in the form of a single electronic device, or may be implemented in a form in which two or more electronic devices are combined.

A detailed description of the integrated management device 300 will be made with reference to FIG. 4.

In the case of a web service executed through a browser mounted on the terminal device 100, a user authentication ID (AccessID) may be exposed in the URL in the form of a POST (Power On Self Test), so that the web service and the integrated management device 300 are interlocked. When an authentication token (AuthToken) is provided with an effective period (e.g., 10sec), and a user authentication is requested from the web service to the web service device 200 using the authentication token as a key value, the web service device ( By requesting user authentication from the integrated management device 300 at 200), the user authentication ID9 AccessID) may be safely transmitted between the web service device 200 and the integrated management device 300.

FIG. 2 is a block diagram schematically showing the configuration of a terminal device according to an embodiment of the present invention, and FIG. 3 is a detailed diagram illustrating the configuration of a web service processing unit shown in FIG. 2.

Referring to FIG. 2, the terminal device 100 includes a communication unit 110, an input unit 120, a display unit 130, a storage unit 140, a web service processing unit 150, and a control unit 160.

The communication unit 110 is a communication means for interconnecting the terminal device 100 and a web service device or an integrated management device through a communication network. For example, a wireless communication module such as mobile communication and satellite communication, a wired communication module such as the Internet, It may include a short-range wireless communication module such as Wi-Fi.

The input unit 120 is a means for receiving a user request for controlling the operation of the terminal device 100, and converts the user's request into an electric signal according to the user's manipulation. The input unit 120 is an input means for receiving letters, numbers, text, voice, movement, tactile sense, time, etc. from a user. For example, the input means is a keyboard, a keypad, a touch screen, a visual sensing means, a tactile sensing means, a motion sensing means. , Voice input means, etc. may be implemented in various forms. In addition, the input unit 120 may be implemented in the form of a touch screen integral with the display unit 130. The input unit 120 may be used to receive a command for executing a web service or the like.

The display unit 130 displays various information related to the operation of the terminal device 100. The display unit 130 may be in the form of a visually identifiable display.

The storage unit 140 stores a program required for controlling the operation of the terminal device 100 and data generated during execution of the program. The storage unit 140 may be implemented in a form including various types of memory devices.

When a web service execution command through a browser is input, the web service processing unit 150 receives an authentication token from the integrated management device through the communication unit 110, and requests user authentication from the web service device with the issued authentication token, and access ID Receive.

The web service processing unit 150 may manage access to the integrated management device to a web service to receive user authentication information and additional information through the integrated management device, and perform a function of managing authentication information in the web service.

Referring to FIG. 3 for the web service processing unit 150, the web service processing unit 150 includes a browser module 152 and an authentication module 154.

When a web service execution command is input, the browser module 152 transmits the corresponding web service identification information to the authentication module 154 and stores the AccessID transmitted from the authentication module 154 in a cache.

The authentication module 154 transmits an authentication token issuance request signal including at least one of web service identification information, terminal device identification information, client authentication key, and whether or not AppGuard is installed, transmitted from the browser module 152, to the integrated management device, and , Receive an authentication token with an expiration date set from the integrated management device.

The authentication module 154 transmits a user authentication request signal including an authentication token to the web service device, receives an AccessID from the web service device, and transmits it to the browser module 152. Then, the browser module 152 stores the AccessID.

When user authentication information or additional information is required while the web service is running, the web service processing unit 150 requests user authentication information or additional information to the integrated management device through the web service device using the AccessID cached in the browser module 154 as a key value. And receive.

The control unit 160 controls the overall functions of the terminal device 100 by executing a driving program stored in the storage unit 140 according to an instruction of the terminal device user input through the input unit 120.

The control unit 160 controls the operation of each unit such as the communication unit 110, the input unit 120, the display unit 130, the storage unit 140, and the web service processing unit 150.

The control unit 160 may include at least one operation unit, in which case, as the operation unit, a general-purpose central processing unit (CPU), a programmable device element (CPLD, FPGA) implemented for a specific purpose, and a semiconductor operation on demand It can be a device (ASIC) or a microcontroller chip.

4 is a block diagram schematically showing the configuration of a web service device according to an embodiment of the present invention.

Referring to FIG. 4, the web service device 200 includes an authentication information database 210 and an authentication request processing unit 220.

The authentication information database 210 stores user authentication information including users' AccessIDs, CIs, and the like.

When a user authentication request signal including an authentication token is received from the terminal device, the authentication request processing unit 220 transmits a user authentication information request signal including the authentication token to the integrated management device, and transmits the AccessID and CI from the integrated management device. When the included user authentication information is received, the user authentication information is stored in the authentication information database 210, and the AccessID is transmitted to the terminal device. That is, when the user authentication request signal is received, the authentication request processing unit 220 requests user authentication from the integrated management device using the authentication token as a key value. Then, the integrated management device performs user authentication based on the authentication token, and, in the case of an authenticated user, transmits user authentication information to the authentication request processing unit 220.

5 is a block diagram schematically showing the configuration of an integrated management apparatus according to an embodiment of the present invention.

Referring to FIG. 5, the integrated management apparatus 300 includes a user information database 310, an authentication token issuing unit 320, an authentication unit 330, an authentication information providing unit 340, and a control unit 350.

User information including user authentication information and additional information of individual services is stored in the user information database 310. User authentication information may include name, gender, date of birth, domestic/foreigner status, communication company, mobile phone number, CI value, and the like, and additional information may include membership and coupon issuance, push sending information, and the like. As described above, the user information database 310 stores user information of individual services that have user authentication information and additional information in an integrated manner.

User authentication information or additional information stored in the user information database 310 may be updated in real time according to a web service state change (eg, deletion, reinstallation, MDN change, etc.) of the terminal device.

In addition, the authentication token issued by the authentication token issuing unit 320 is stored in the user information database 310.

When an authentication token issuance request signal for a web service is received from the terminal device, the authentication token issuing unit 320 issues an authentication token with a set validity period and transmits it to the terminal device. The authentication token issuance request signal may include terminal device identification information, web service identification information, a client authentication key, whether or not AppGuard is installed. The authentication token is information used to authenticate a user, and acts as an attempt response method or a time-based code sequence method. The authentication token may be a combination of one or more of encrypted numbers and letters, or may be a seed or serial number for generating an OTP.

Since the authentication token issued by the authentication token issuing unit 320 has an expiration date set, it is maintained for a certain period and is automatically destroyed after a certain period of time. Accordingly, the authentication token issuing unit 320 periodically (or in real time) checks the expiration date information of the authentication token stored in the user information database 310, and manages the authentication token information.

When a user authentication information request signal including an authentication token is received from the web service device, the authentication unit 330 performs user authentication using the authentication token, and in the case of an authenticated user, user authentication information including AccessID and CI To the web service device. Here, the user authentication information request signal may include an authentication token, a web service device authentication key, and the like. At this time, the authentication unit 330 determines whether or not the authentication token is within the validity period set in the authentication token, and if it is within the validity period, authentication is performed by comparing it with the authentication token stored in the user information database 310. In the case of an authenticated user, the authentication unit 330 issues an AccessID and stores the issued AccessID in the user information database 310. Then, the authentication unit 330 obtains user authentication information including the issued AccessID and CI from the user information database 310 and transmits the obtained user authentication information to the web service device.

When the user authentication information request signal including the AccessID is received, the authentication information providing unit 340 searches the user information database 310 to obtain user authentication information mapped to the AccessID, and transmits the obtained user authentication information. do.

The control unit 350 controls the operation of each unit, such as the user information database 310, the authentication token issuing unit 320, the authentication unit 330, and the authentication information providing unit 340.

These components that may be included in the integrated management apparatus 200 may be implemented by hardware, software, or a combination thereof, and two or more components may be simultaneously implemented by one piece of hardware or software.

6 is a diagram illustrating a method for user authentication when using a web service according to an embodiment of the present invention.

Referring to FIG. 6, when a web service execution command is input through a browser (S602), the terminal device is a request signal for issuing an authentication token including web service identification information, terminal device identification information, client authentication key, and whether or not AppGuard is installed. Is transmitted to the integrated management device (S604).

The integrated management device issues an authentication token with a set validity period and transmits it to the terminal device (S606).

The terminal device transmits a user authentication request signal including the authentication token received from the integrated management device to the web service device (S608), and the web service device transmits a user authentication information request signal including the authentication token to the integrated management device. (S610).

The integrated management device performs user authentication using the authentication token (S612), and in the case of an authenticated user, transmits user authentication information including an AccessID and CI to the web service device (S614).

The web service device stores user authentication information transmitted from the integrated management device (S616), and transmits the AccessID to the terminal device (S618). Then, the terminal device stores the AccessID (S618). If the terminal device needs user authentication information or additional information while executing and using the web service, the AccessID cached in the browser module is used as the key value, and the user authentication information or additional information can be requested and delivered to the integrated management device through the web service device. have. If you are using at least one web service that goes through the self-authentication process among web services, the web service does not require a separate self-authentication procedure and user additional information input procedure required for the use of the service when additional web services are downloaded and executed. Can be used.

On the other hand, according to another aspect of the present invention, when executed by the integrated management device, when an authentication token issuance request signal for a web service is received from the terminal device, an authentication token with a set validity period is issued to the terminal device. When a user authentication information request signal including the authentication token is received from a web service device that has received a user authentication request signal from the terminal device, user authentication is performed using the authentication token, and In the case of a user, a computer-readable recording medium including a program for executing a method for user authentication when using a web service including transmitting user authentication information including an AccessID and a CI to the web service device is provided.

In addition, according to another aspect of the present invention, when executed by a terminal device, when a web service execution command is input through a browser, transmitting an authentication token issuance request signal for the corresponding web service to the integrated management device, the integration When an authentication token with a set validity period is issued from the management device, transmitting a user authentication request signal including the authentication token to a web service device, receiving and storing an AccessID from the web service device, execution of the web service A method for user authentication when using a web service comprising the step of requesting and receiving user authentication information or additional information from the integrated management device via the web service device using the stored AccessID as a key value when user authentication information or additional information is required. A computer-readable recording medium in which a program for executing the program is recorded is provided.

When using such a web service, a method for user authentication can be written as a program, and codes and code segments constituting the program can be easily inferred by a programmer in the relevant field. In addition, a program relating to a method for user authentication when using a web service is stored in an information storage medium that can be read by an electronic device, and can be read and executed by an electronic device.

As such, those skilled in the art to which the present invention pertains will be able to understand that the present invention can be implemented in other specific forms without changing the technical spirit or essential features thereof. Therefore, the embodiments described above are illustrative in all respects and should be understood as non-limiting. The scope of the present invention is indicated by the claims to be described later rather than the detailed description, and all changes or modified forms derived from the meaning and scope of the claims and their equivalent concepts should be construed as being included in the scope of the present invention. do.

The present invention provides a system and method for user authentication when using web services, so that if at least one web service that undergoes an identity authentication procedure is being used among web services, a separate identity authentication procedure when additionally downloaded and executed another web service is used. And, you can use the service immediately without the user's additional information input procedure required to use the service.

100: terminal device 110: communication unit
120: input unit 130: display unit
140: storage unit 150: web service processing unit
160, 350: control unit 200: web service device
210: authentication information database 220: authentication request processing unit
300: integrated management device 310: user information database
320: authentication token issuing unit 330; Certification Department
340: authentication information provider

Claims (15)

A user information database in which user information including user authentication information and additional information of individual services is stored;
An authentication token issuing unit for issuing an authentication token with a set validity period and transmitting the authentication token to the terminal device when a signal for issuing an authentication token for a web service is received from the terminal device;
When a user authentication information request signal including the authentication token is received from a web service device, user authentication is performed using the authentication token, and user authentication information including an AccessID and CI is provided in the case of an authenticated user. An authentication unit that transmits to a device and transmits the AccessID to the terminal device; And
When a user authentication information request signal including the AccessID is received from the web service device in response to a request for the user authentication information using the AccessID as a key value, the user information database is searched and mapped with the AccessID. Acquiring user authentication information and comprising an authentication information providing unit for transmitting the obtained user authentication information to the terminal device through the web service device,
The authentication unit determines whether it is within the validity period set in the authentication token, and if it is within the validity period, issues the AccessID, and transmits the user authentication information including the issued AccessID and CI to the web service device. Integrated management device. delete delete delete delete A communication unit for communicating through a communication network;
A web service processing unit that receives an authentication token from the integrated management device through the communication unit when a command to execute a web service through a browser is input, and receives an AccessID by requesting user authentication from the web service device with the issued authentication token;
Including,
The web service processing unit determines whether or not the authentication token is within the validity period set in the authentication token, and when it is within the validity period, the AccessID and the AccessID and Upon receiving the AccessID transmitted from the web service device that received the user authentication information from the integrated management device by requesting user authentication information including CI, the AccessID is added to the cache of the browser module included in the web service processing unit. Save it,
When the user authentication information or additional information is required during the execution of the web service, the web service processing unit sends the user authentication information or additional information to the integrated management device through the web service device using the AccessID cached in the browser module as a key value. A terminal device, characterized in that the request is received. delete delete An authentication information database in which user authentication information including users' AccessIDs and CIs is stored;
When a user authentication request signal including an authentication token is received from a terminal device, a user authentication information request signal including the authentication token is transmitted to the integrated management device, and user authentication information including AccessID and CI from the integrated management device When is received, an authentication request processing unit storing the user authentication information in the authentication information database and transmitting the AccessID to the terminal device;
Including,
The authentication request processing unit determines whether it is within the validity period set in the authentication token and receives the user authentication information from the integrated management device that issues the AccessID when it is within the validity period,
User authentication transmitted from the integrated management device in response to a request from the terminal device for the user authentication information using the AccessID as a key value to be transmitted to the integrated management device, and in response to the request of the terminal device using the AccessID as a key value Web service device, characterized in that the information is transmitted to the terminal device. delete delete delete delete delete delete

Images