KR102274066B1 - Authentication apparatus and method for providing emm service - Google Patents

Abstract

An authentication apparatus and method for providing an EMM service are provided. The authentication apparatus according to an embodiment of the present invention includes a database unit for storing user information of a user in association with a registration code for the user's first user device, an OTP generating unit for generating a one-time password for the user, and the An authentication code generator generating an authentication code including a registration code and the one-time password, and transmitting the authentication code to the first user device or a second user device paired with the first user device based on the user information and an authentication unit receiving the authentication code from the authentication code transmitter and the first user device, and comparing the received authentication code with the transmitted authentication code to authenticate the first user device.

Description

AUTHENTICATION APPARATUS AND METHOD FOR PROVIDING EMM SERVICE

Embodiments of the present invention relate to authentication technology for providing EMM services.

Enterprise Mobility Management (EMM) is one of mobile security solutions for enterprises that include functions of existing Mobile Device Management (MDM) and Mobile Application Management (MAM). In particular, as the use of mobile terminals has become common in recent years, BYOD (Bring Your Own Device), which allows employees to use personal terminals for work, and COPE (Company, Mobile trends such as -issued, Personal Enabled) are spreading.

Korean Patent Publication No. 10-2016-0018474 (published on February 17, 2016)

SUMMARY Embodiments of the present invention are to provide an authentication apparatus and method for providing an EMM service.

The authentication apparatus according to an embodiment of the present invention includes a database unit for storing user information of a user in association with a registration code for the user's first user device, an OTP generating unit for generating a one-time password for the user, and the An authentication code generator generating an authentication code including a registration code and the one-time password, and transmitting the authentication code to the first user device or a second user device paired with the first user device based on the user information and an authentication unit receiving the authentication code from the authentication code transmitter and the first user device, and comparing the received authentication code with the transmitted authentication code to authenticate the first user device.

The first user device may be a user device in which an Enterprise Mobility Management (EMM) service application is installed.

The user information includes a phone number assigned to the first user device or the second user device, and the authentication code transmitter transmits an SMS (Short Message Service) message including the authentication code to the phone number. can

The first user device may be a wearable device.

The second user device may be a mobile device paired with the first user device.

The user information may include the user's email address, and the authentication code transmitter may transmit an email including the authentication code to the user's email address.

The authentication code generating unit sets an effective period for the one-time password, and the authentication unit, whether the received authentication code matches the transmitted authentication code, and the validity period of the one-time password included in the received authentication code The authentication may be performed by determining whether or not there is.

The authentication code transmitter may transmit the authentication code and an access address for transmitting the authentication code to the first user device or the second user device.

The authentication method according to an embodiment of the present invention includes generating a one-time password for a user, generating an authentication code including a registration code for the user's first user device and the one-time password, the user's transmitting the authentication code to the first user device or a second user device paired with the first user device based on user information; receiving the authentication code from the first user device; and the received authentication and performing authentication on the first user device by comparing the code with the transmitted authentication code.

The first user device may be a user device in which an Enterprise Mobility Management (EMM) service application is installed.

The user information includes a phone number assigned to the first user device or the second user device, and the transmitting includes transmitting an SMS (Short Message Service) message including the authentication code to the phone number. can

The first user device may be a wearable device.

The second user device may be a mobile device paired with the first user device.

The user information may include the user's email address, and the transmitting may include transmitting an email including the authentication code to the user's email address.

The generating of the one-time password may further include setting a valid period for the one-time password, and the performing of the authentication may include determining whether the received authentication code matches the transmitted authentication code and whether the received authentication code matches the received authentication code. The authentication may be performed by determining whether the validity period of the one-time password included in the authentication code has elapsed.

The transmitting may include transmitting the authentication code and an access address for transmitting the authentication code to the first user device or the second user device.

According to embodiments of the present invention, by allowing a user who wants to use an EMM service to authenticate a user device by inputting only an authentication code without a complicated input process, convenience for the user can be increased.

1 is a view showing an example of a system environment to which embodiments of the present invention are applied;
2 is a diagram illustrating another example of a system environment to which embodiments of the present invention are applied;
3 is a block diagram of an authentication device according to an embodiment of the present invention;
4 is a flowchart of an authentication method according to another embodiment of the present invention;
5 is a block diagram illustrating and describing a computing environment including a computing device suitable for use in example embodiments;

Hereinafter, specific embodiments of the present invention will be described with reference to the drawings. The following detailed description is provided to provide a comprehensive understanding of the methods, apparatus, and/or systems described herein. However, this is merely an example and the present invention is not limited thereto.

In describing the embodiments of the present invention, if it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, the terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users and operators. Therefore, the definition should be made based on the content throughout this specification. The terminology used in the detailed description is for the purpose of describing embodiments of the present invention only, and should in no way be limiting. Unless explicitly used otherwise, expressions in the singular include the meaning of the plural. In this description, expressions such as “comprising” or “comprising” are intended to indicate certain features, numbers, steps, acts, elements, some or a combination thereof, one or more other than those described. It should not be construed to exclude the presence or possibility of other features, numbers, steps, acts, elements, or any part or combination thereof.

1 is a diagram illustrating an example of a system environment to which embodiments of the present invention are applied.

Referring to FIG. 1 , a system environment 100 according to an embodiment of the present invention includes a first user device 110 and an EMM service system 130 .

The first user device 110 is a device used by a user registered in the Enterprise Mobility Management (EMM) service system 130 to receive an EMM service, for example, a mobile device such as a smart phone, a tablet PC, or the like, or a smart device. It may be a wearable device such as a watch.

Specifically, the user downloads and installs the EMM service application provided by the EMM service system 130 using the first user device 110 , and then sends it to the first user device 110 through the EMM service system 130 . authentication can be performed.

For example, the user may install the EMM service application in the first user device 110 by accessing a deep link provided by the EMM service system 130 to install the EMM service application. In this case, the deep link is provided, for example, through an SMS message sent from the EMM service system 130 to the first user device 110 or an email sent to the user's email address, or separately in an area where the EMM service is to be provided. It may be provided through the deployed EMM service application installation guide.

Meanwhile, authentication for the first user device 110 may be performed by transmitting an authentication code provided from the EMM service system 130 to the EMM service system 130 through the first user device 110 . In this case, the authentication code may be provided through, for example, an SMS message sent from the EMM service system 130 to the first user device 110 or an email sent to the user's email address, and the user may use the EMM service system ( The authentication code received from 130 may be transmitted to the EMM service system 130 using the first user device 110 .

Meanwhile, the EMM service system 130 is a system operated by an EMM service provider and may be implemented as one or more servers.

Specifically, the EMM service system 130 may provide the EMM service by providing and authenticating the EMM service application for the first user device 110 possessed by the user.

According to an embodiment of the present invention, the EMM service system 130 may retain user information pre-registered by the EMM service provider. In this case, the user information includes, for example, a user ID and password, identification information of the user's affiliation (eg, affiliated company or affiliated department, etc.), the user's email address, and device information about the first user device 110 . may include In this case, the device information may include, for example, identification information (eg, device ID) for the first user device 110 , a phone number assigned to the first user device 110 , and the like.

In addition, according to an embodiment of the present invention, when user information is registered by the EMM service provider, the EMM service system 130 generates a registration code for the first user device 110 and then the generated registration code. can be stored in association with user information. In this case, the registration code may be composed of, for example, a character string, a numeric string, or a combination of letters and numbers, but is not limited thereto, and can uniquely identify the first user device 110 and the first user device ( 110) may have various types that can be inputted.

Meanwhile, according to an embodiment of the present invention, the EMM service system 130 may transmit the authentication code for the first user device 110 to the user according to the request of the EMM service provider.

According to another embodiment of the present invention, the EMM service system 130 may transmit an authentication code for the first user device 110 to the user according to the user's request. In this case, the user transmits, for example, authentication information for user authentication to the EMM service system 130 through an authentication web page provided by the EMM service system 130 or an EMM service application installed in the first user device 110 . may be transmitted, and the EMM service system 130 may transmit an authentication code to the user when authentication for the user is successful. In this case, the authentication information for user authentication may include, for example, a user ID and password, identification information (eg, device ID) of the first user device, and the like, and the EMM service system 130 receives the received The user may be authenticated by comparing the authentication information with the user information registered in the EMM service system 130 .

Meanwhile, the EMM service system 130 receives the authentication code from the first user device 110 after transmitting the authentication code, compares the received authentication code with the transmitted authentication code, and authenticates the first user device 110 . can be performed.

2 is a diagram illustrating another example of a system environment to which embodiments of the present invention are applied.

Referring to FIG. 2 , the system environment 200 according to an embodiment of the present invention includes a first user device 110 , an EMM service system 130 , and a second user device 150 .

In the example shown in FIG. 2 , the first user device 110 is a device used by a user registered in the Enterprise Mobility Management (EMM) service system 130 to receive an EMM service, for example, such as a smart watch. It may be a wearable device.

The second user device 130 is a device paired with the first user device 150 using, for example, a short-range wireless communication technology such as Bluetooth, for example, a smart phone, a tablet PC, or the like. It may be a mobile device.

Specifically, the first user device 110 may be a wearable device to which a phone number is not assigned, and the second user device 150 may be a mobile device to which a phone number is assigned. In this case, the first user device 110 is configured to be paired with the second user device 150 and check the SMS message received to the second user device 150 on the first user device 110 , for example. can be

On the other hand, the user downloads and installs the EMM service application provided from the EMM service system 130 using the first user device 110 , and then uses the EMM service system 130 for the first user device 110 . authentication can be performed.

For example, the user may install the EMM service application in the first user device 110 by accessing a deep link provided by the EMM service system 130 to install the EMM service application. In this case, the deep link is provided, for example, through an SMS message sent from the EMM service system 130 to the second user device 150 or an email sent to the user's email address, or separately in an area where the EMM service is to be provided. It may be provided through the deployed EMM service application installation guide.

Meanwhile, authentication for the first user device 110 may be performed by transmitting an authentication code provided from the EMM service system 130 to the EMM service system 130 through the first user device 110 . In this case, the authentication code may be provided, for example, through an SMS message sent from the EMM service system 130 to the second user device 150 or an email sent to the user's email address, and the user can use the EMM service system ( The authentication code received from 130 may be transmitted to the EMM service system 130 using the first user device 110 .

Meanwhile, the EMM service system 130 may provide an EMM service by providing and authenticating an EMM service application for the first user device 110 possessed by the user.

According to an embodiment of the present invention, the EMM service system 130 may retain user information pre-registered by the EMM service provider. In this case, the user information includes, for example, a user ID and password, identification information of the user's affiliation (eg, affiliated company or affiliated department, etc.), the user's email address, and device information about the first user device 110 . may include In this case, the device information includes, for example, identification information (eg, device ID) for the first user device 110 , and a phone assigned to the second user device 150 paired with the first user device 110 . It may include a number, etc.

In addition, according to an embodiment of the present invention, when user information is registered by the EMM service provider, the EMM service system 130 generates a registration code for the first user device 110 and then the generated registration code. can be stored in association with user information.

Meanwhile, according to an embodiment of the present invention, the EMM service system 130 may transmit the authentication code for the first user device 110 to the user according to the request of the EMM service provider.

According to another embodiment of the present invention, the EMM service system 130 may transmit an authentication code for the first user device 110 to the user according to the user's request. In this case, the user transmits, for example, authentication information for user authentication to the EMM service system 130 through an authentication web page provided by the EMM service system 130 or an EMM service application installed in the first user device 110 . may be transmitted, and the EMM service system 130 may transmit an authentication code to the user when authentication for the user is successful. In this case, the authentication information for user authentication may include, for example, a user ID and password, identification information (eg, device ID) of the first user device, and the like, and the EMM service system 130 receives the received The user may be authenticated by comparing the authentication information with the user information registered in the EMM service system 130 .

Meanwhile, the EMM service system 130 receives the authentication code from the first user device 110 after transmitting the authentication code, compares the received authentication code with the transmitted authentication code, and authenticates the first user device 110 . can be performed.

3 is a block diagram of an authentication device according to an embodiment of the present invention.

Referring to FIG. 3 , the authentication device 300 according to an embodiment of the present invention includes a database unit 310 , a One-Time Password (OTP) generating unit 330 , an authentication code generating unit 350 , and an authentication code transmission. It includes a unit 370 and an authentication unit 390 .

The authentication device 300 is for performing device authentication for the first user device 110 on which the EMM service application is installed, and is implemented with one configuration included in the EMM service system 130 shown in FIG. 1 or FIG. 2 . can be For example, the authentication device 300 may be implemented as one or more servers included in the EMM service system 130 .

The database unit 310 associates and stores user information about the user and a registration code for the first user device 110 .

In this case, the user information includes, for example, a user ID and password, identification information of the user's affiliation (eg, affiliated company or affiliated department, etc.), the user's email address, and device information about the first user device 110 . may include In this case, the device information may include, for example, identification information (eg, device ID) for the first user device 110 , a phone number assigned to the first user device 110 , and the like. Meanwhile, according to an embodiment, when there is no phone number assigned to the first user device 110 , the device information on the first user device 110 is the second user paired with the first user device 110 . It may include a phone number assigned to the device 150 .

Meanwhile, the user information may be stored in advance in the database unit 310 by the EMM service provider. Also, the registration code for the first user device 110 may be generated at a time when user information is stored in the database unit 310 , and device information for other user devices other than the first user device 110 is added. In this case, a registration code for the corresponding user device may be separately generated.

The OTP generation unit 330 generates a one-time password for the user. In this case, the one-time password may be composed of, for example, an arbitrary string, a numeric string, or a combination of letters and numbers, but is not limited thereto, and may have various forms inputable through the first user device 110 . have.

Meanwhile, according to an embodiment of the present invention, the OTP generation unit 330 may set an effective period for the one-time password generated when the one-time password is generated. In this case, the validity period may be variously set according to, for example, a policy of an EMM service provider.

The authentication code generating unit 350 generates an authentication code including the registration code for the first user device 110 stored in the database unit 310 and the one-time password generated by the OTP generating unit 330 .

Specifically, the authentication code generator 350 may generate an authentication code by combining the registration code for the first user device 110 and the one-time password.

For example, when the registration code for the first user device 110 is “ABC123” and the one-time password generated by the OTP generation unit 330 is “45”, the authentication code generation unit 350 generates authentication. The code may be "ABC12334". However, the combination method for generating the authentication code is not necessarily limited to the above-described example, and may be modified in various ways according to the policy of the EMM service provider.

The authentication code transmitter 370 pairs the authentication code generated by the authentication code generator 330 based on the user information stored in the database unit 310 with the first user device 110 or the first user device 110 . transmitted to the second user device 150 .

For example, when the authentication code transmission unit 370 includes a phone number assigned to the first user device 110 in the user information stored in the database unit 310, the authentication code generated by the corresponding phone number is included. SMS messages can be sent.

As another example, when the authentication code transmitter 370 includes a phone number assigned to the second user device 150 that is paired with the first user device 110 in the user information stored in the database unit 310 , the corresponding You can send an SMS message containing a verification code generated to your phone number.

As another example, when the user's e-mail address is included in the user information stored in the database unit 310, the authentication code transmitter 370 may transmit an e-mail including the authentication code to the corresponding e-mail address.

Meanwhile, according to an embodiment of the present invention, the authentication code transmitter 370 may transmit an access address for transmitting the authentication code from the first user device 110 together with the authentication code when the authentication code is transmitted. In this case, the access address may be, for example, a Uniform Resource Locator (URL) address assigned to the authentication device 100 or a shortened URL address.

On the other hand, when the SMS message including the access address and the authentication code is transmitted to the phone number assigned to the first user device 110 , the user executes the EMM service application installed in the first user device 110 to receive the SMS message. By inputting the included access address and authentication code, the authentication code may be transmitted to the authentication device 100 . In this case, according to an embodiment, the EMM service application may parse the received SMS message so that an access address and an authentication code included in the SMS message are automatically input.

Meanwhile, when the SMS message including the access address and the authentication code is transmitted to the phone number assigned to the second user device 150 , the second user device 150 receives the SMS message from the first user device 110 . can be transmitted. In this case, the user may transmit the authentication code to the authentication device 100 by executing the EMM service application installed in the first user device 110 and inputting the access address and the authentication code included in the SMS message. In this case, according to an embodiment, the EMM service application may parse the received SMS message so that an access address and an authentication code included in the SMS message are automatically input.

On the other hand, when an e-mail including an access address and an authentication code is sent to the user's e-mail address, the user executes the EMM service application installed in the first user device 110 to obtain the access address and authentication code contained in the received e-mail. By inputting it, the authentication code may be transmitted to the authentication device 100 .

The authentication unit 390 receives the authentication code from the first user device 110 , compares the received authentication code with the authentication code transmitted by the authentication code transmitter 370 , Perform authentication.

At this time, according to an embodiment of the present invention, when the validity period is set in the one-time password generated by the OTP generation unit 330, the authentication unit 390 determines whether the received authentication code matches the transmitted authentication code. And by determining whether the validity period of the one-time password included in the received authentication code has elapsed, authentication of the first user device 110 may be performed.

Meanwhile, in one embodiment, the database unit 310, the OTP (One-Time Password) generation unit 330, the authentication code generation unit 350, the authentication code transmission unit 370 and the authentication unit shown in FIG. 390 may be implemented on one or more computing devices including one or more processors and a computer-readable recording medium coupled thereto. The computer-readable recording medium may be internal or external to the processor, and may be connected to the processor by various well-known means. A processor within the computing device may cause each computing device to operate in accordance with the exemplary embodiments described herein. For example, the processor may execute instructions stored in a computer-readable recording medium, and the instructions stored in the computer-readable recording medium, when executed by the processor, cause the computing device to operate according to the exemplary embodiments described herein. can be configured to perform

4 is a flowchart of an authentication method according to another embodiment of the present invention.

The method illustrated in FIG. 4 may be performed, for example, by the authentication device 300 illustrated in FIG. 3 .

Referring to FIG. 4 , first, the authentication device 300 generates a one-time password for the user ( 410 ).

In this case, according to an embodiment of the present invention, the authentication apparatus 300 may set an effective period for the one-time password.

Thereafter, the authentication device 300 generates an authentication code including a registration code and a one-time password for the user's first user device 110 ( 420 ).

Thereafter, the authentication device 300 transmits the authentication code to the first user device 110 or the second user device 150 paired with the first user device 110 based on the user information of the user ( 430 ).

In this case, according to an embodiment of the present invention, the user information may include a phone number assigned to the first user device 110 , and the authentication device 300 may include a phone number assigned to the first user device 110 . to send an SMS message including an authentication code.

According to another embodiment of the present invention, the user information may include a phone number assigned to the second user device 150 that is paired with the first user device 110 , and the authentication device 300 is the second user device An SMS message including an authentication code may be transmitted to the phone number assigned to 150 .

According to another embodiment of the present invention, the user information may include a user's email address, and the authentication device 300 may transmit an email including an authentication code to the user's email address.

Meanwhile, according to an embodiment of the present invention, the authentication device 300 may transmit an access address for transmitting the authentication code together with the generated authentication code.

Thereafter, the authentication device 300 receives an authentication code from the first user device 110 ( 440 ).

Thereafter, the authentication device 300 compares the received authentication code with the transmitted authentication code to authenticate the first user device 110 ( 450 ).

At this time, according to an embodiment of the present invention, when the validity period for the one-time password generated when the one-time password is generated is set, the authentication device 300 determines whether the received authentication code and the transmitted authentication code match, and the received authentication code It is possible to perform authentication on the first user device 110 by determining whether the validity period of the one-time password included in the password has elapsed.

On the other hand, in the flowchart shown in FIG. 4, the method is described by dividing the method into a plurality of steps, but at least some of the steps are performed in a different order, are performed in combination with other steps, are omitted, or are performed in detailed steps. , or one or more steps not shown may be added and performed.

5 is a block diagram illustrating and describing a computing environment including a computing device suitable for use in example embodiments. In the illustrated embodiment, each component may have different functions and capabilities other than those described below, and may include additional components other than those described below.

The illustrated computing environment 10 includes a computing device 12 . In one embodiment, the computing device 12 includes, for example, the database unit 310 , the OTP generation unit 330 , the authentication code generation unit 350 , the authentication code transmission unit 370 and the authentication shown in FIG. 3 . It may be one or more components included in the authentication device 300 , such as the unit 390 .

Computing device 12 includes at least one processor 14 , computer readable storage medium 16 , and communication bus 18 . The processor 14 may cause the computing device 12 to operate in accordance with the exemplary embodiments discussed above. For example, the processor 14 may execute one or more programs stored in the computer-readable storage medium 16 . The one or more programs may include one or more computer-executable instructions that, when executed by the processor 14, configure the computing device 12 to perform operations in accordance with the exemplary embodiment. can be

Computer-readable storage medium 16 is configured to store computer-executable instructions or program code, program data, and/or other suitable form of information. The program 20 stored in the computer readable storage medium 16 includes a set of instructions executable by the processor 14 . In one embodiment, computer-readable storage medium 16 includes memory (volatile memory, such as random access memory, non-volatile memory, or a suitable combination thereof), one or more magnetic disk storage devices, optical disk storage devices, flash It may be memory devices, other forms of storage medium accessed by computing device 12 and capable of storing desired information, or a suitable combination thereof.

Communication bus 18 interconnects various other components of computing device 12 , including processor 14 and computer readable storage medium 16 .

Computing device 12 may also include one or more input/output interfaces 22 and one or more network communication interfaces 26 that provide interfaces for one or more input/output devices 24 . The input/output interface 22 and the network communication interface 26 are coupled to the communication bus 18 . Input/output device 24 may be coupled to other components of computing device 12 via input/output interface 22 . Exemplary input/output devices 24 include pointing devices (such as a mouse or trackpad), keyboards, touch input devices (such as touchpads or touchscreens), voice or sound input devices, various types of sensor devices, and/or imaging devices input devices and/or output devices such as display devices, printers, speakers and/or network cards. The exemplary input/output device 24 may be included in the computing device 12 as a component constituting the computing device 12 , and may be connected to the computing device 12 as a separate device distinct from the computing device 12 . may be

Although representative embodiments of the present invention have been described in detail above, those of ordinary skill in the art to which the present invention pertains will understand that various modifications are possible without departing from the scope of the present invention with respect to the above-described embodiments. . Therefore, the scope of the present invention should not be limited to the described embodiments, and should be defined by the claims described below as well as the claims and equivalents.

10: Computing Environment
12: computing device
14: Processor
16: computer readable storage medium
18: communication bus
20: Program
22: input/output interface
24: input/output device
26: network communication interface
100: service environment
110: first user device
130: EMM service system
150: second user device
300: authentication device
310: database unit
330: OTP generation unit
350: authentication code generator
370: authentication code transmitter
390: authentication unit

Claims (16)

a database unit for storing user information of a user in association with a registration code for the user's first user device;
an OTP generation unit generating a one-time password for the user;
an authentication code generation unit generating an authentication code including the registration code and the one-time password;
an authentication code transmitter configured to transmit the authentication code to the first user device or a second user device paired with the first user device based on the user information; and
and an authentication unit configured to receive the authentication code from the first user device, compare the received authentication code with the transmitted authentication code, and perform authentication on the first user device.
The method according to claim 1,
The first user device is an authentication server, characterized in that the EMM (Enterprise Mobility Management) service application is installed in the user device.
The method according to claim 1,
The user information includes a phone number assigned to the first user device or the second user device,
The authentication code transmission unit, authentication server, characterized in that for transmitting the SMS (Short Message Service) message including the authentication code to the phone number.
The method according to claim 1,
The first user device is an authentication server, characterized in that it is a wearable device.
5. The method according to claim 4,
The second user device is an authentication server, characterized in that the mobile device is paired with the first user device.
The method according to claim 1,
The user information includes the user's email address,
The authentication code transmitting unit, authentication server, characterized in that for transmitting the e-mail including the authentication code to the user's e-mail address.
The method according to claim 1,
The authentication code generation unit sets an effective period for the one-time password,
The authentication unit, the authentication server, characterized in that the authentication is performed by determining whether the received authentication code matches the transmitted authentication code and whether the validity period of the one-time password included in the received authentication code has elapsed.
The method according to claim 1,
The authentication code transmitter, the authentication server, characterized in that for transmitting the authentication code and an access address for transmitting the authentication code to the first user device or the second user device.
generating a one-time password for the user;
generating an authentication code comprising a registration code for the user's first user device and the one-time password;
transmitting the authentication code to the first user device or a second user device paired with the first user device based on the user information of the user;
receiving the authentication code from the first user device; and
and performing authentication on the first user device by comparing the received authentication code with the transmitted authentication code.
10. The method of claim 9,
The first user device is an authentication method, characterized in that the EMM (Enterprise Mobility Management) service application is installed is a user device.
10. The method of claim 9,
The user information includes a phone number assigned to the first user device or the second user device,
In the transmitting, an SMS (Short Message Service) message including the authentication code is transmitted to the phone number.
10. The method of claim 9,
The first user device is an authentication method, characterized in that it is a wearable device.
13. The method of claim 12,
and the second user device is a mobile device paired with the first user device.
10. The method of claim 9,
The user information includes the user's email address,
The transmitting includes transmitting an e-mail including the authentication code to the user's e-mail address.
10. The method of claim 9,
The generating of the one-time password further includes setting a valid period for the one-time password,
In the step of performing the authentication, it is characterized in that the authentication is performed by determining whether the received authentication code matches the transmitted authentication code and whether the validity period of the one-time password included in the received authentication code has elapsed. authentication method.
10. The method of claim 9,
In the transmitting, the authentication code and an access address for transmitting the authentication code are transmitted to the first user device or the second user device.

Images