KR20140011030A - Service system and operation method for single-sign on - Google Patents

Abstract

The present invention relates to single authentication service support. Disclosed are a single authentication service system, a system configuration, and an operating method thereof. The single authentication service system according to the present invention comprises: a terminal which accesses at least one application service device among multiple application service devices according to an activation request by at least one among multiple applications, and receives a service token used for operating services from each application service devices based on a single token without inputting separate authentication information; an application service device which provides data to operate an application service for the terminal using the service token and provides a message related to single authentication for a single authentication service device when the message is received; the single authentication service device which provides the application service device with information to operate the single authentication service for the terminal or provides the terminal with the information through the application service device when the message related to singe authentication is received from the application service device. [Reference numerals] (100) Terminal; (201) First APP service device; (202) Second APP service device; (300) Single authentication service device

Description

Service System And Operation Method For Single-Sign On}

The present invention relates to a single authentication of a terminal, and more particularly, to a single authentication service system and a method of operating the same for operating a single authentication of a plurality of applications operated in the terminal.

2. Description of the Related Art Communication terminals are manufactured in a portable form and are used in a wide variety of fields due to their ease of use and portability. Recently, such communication terminals have been developed in the form of smart phones equipped with various user functions to provide convenience and amusement.

Meanwhile, with the spread of smart phones, users are using various user functions, and in particular, are using various communication services based on smart phones. For example, conventional users use a smartphone to use a chat service, a specific web service, or use an e-mail service with another user. At this time, the user is using a specific communication service by operating a variety of smartphone-based applications. However, in this process, in order to use a specific communication service provided by each application, the user must perform an authentication process with a service device that supports the operation of the corresponding application to confirm whether the user is a legitimate user and acquire a use authority. This authentication process is necessary for normal communication service use and security of each smartphone user.

However, this information authentication process sometimes gives a great inconvenience to the user. In more detail, in order to use a specific application-based communication service, a user must perform a process of transmitting and receiving authentication information with each service device and authenticating the authentication information. At this time, when the type of application is increased and when authentication information is input in a limited screen state, there is a problem of forcing the user to repeatedly perform authentication information input process under inconvenient input conditions. In addition, if the authentication information is set differently for each application, the user must input the correct authentication information for each application, and if it is impossible to properly remember the information in this process, the user enters the wrong authentication information and corrects it. Secondary procedures must be performed. Due to such inconvenience, many users frequently give up using a specific communication service based on a terminal.

Patent Document 1: KR 10-2010-0106184 A, 2010.10.01 publication (name: multiple network / system authentication method through a single ID and mobile terminal for the method)

Accordingly, an object of the present invention is to solve the problems of the prior art as described above, and to enable the integrated authentication of applications so that a single communication service can be easily and conveniently managed while ensuring appropriate security. An authentication service system and an operation method thereof are provided.

In order to achieve the above object, the present invention performs access to at least one application service device among a plurality of application service devices according to an activation request of at least one of a plurality of applications, but without inputting additional authentication information based on a single authentication token. Terminal for receiving service token used for service operation from each application service device, providing data for application service operation of terminal presenting service token, and providing a single authentication service device when receiving a single authentication related message Upon receiving a single authentication related message from an application service device or an application service device, the terminal provides the application service device with information for operating a single authentication service of the terminal or the application service device. Disclosed is a configuration of a single authentication service system comprising a single authentication service device provided to a terminal through.

The present invention also provides a first communication unit for receiving an integrated ID login information or a single authentication token-based session inquiry message from a specific application of the terminal, storing data for supporting a specific application function of the terminal, and operating a specific application function of the terminal. The first storage unit for storing the service token for the service, when receiving the integrated ID login information from a specific application, delivers a message for generating a single authentication token to a single authentication service device, and when receiving a session inquiry message, transmits it to a single authentication service device And a first control unit which receives the integrated service number related to the session inquiry message from the authentication service device and provides the service token to a specific application of the terminal without checking the authentication information of the corresponding application. It discloses the structure of an application service devices supported.

The first control unit generates a service token based on a single authentication token provided by a single authentication service device upon receiving the integrated ID login information, and provides a single authentication token, service token, and data for supporting application functions to a specific application of the terminal. When the service token expiration request message is received from a specific application of the terminal, the service token expiration response message for service logout of the corresponding application may be provided to the terminal.

In addition, the first control unit provides a single authentication token expiration request message to a single authentication service device when receiving a service token and a single authentication token expiration request message from a specific application of the terminal, and receives a response message corresponding thereto. The terminal may control the terminal to provide an expiration response message of a single authentication token.

The present invention also provides a device communication unit for establishing a communication channel with at least one application service device and receiving a single authentication session request message or a single authentication session check message transmitted by a specific application of the terminal through the application service device, and a specific application service. A second storage unit for storing a single authentication token provided to the terminal for single authentication support to allow a device to be connected without inputting additional authentication information, and receiving the single authentication token from the application service device upon receiving the single authentication session request message. And a second control unit provided to the terminal and controlling to provide the integrated service number based on the single authentication token to the application service device when the single authentication session check message is received. It discloses a structure of a service device.

Here, the second control unit may provide a response message corresponding to the single authentication token expiration to the application service device when the single authentication token expiration request message is received from the application service device.

The present invention also provides a communication unit for establishing a communication channel with at least one of a plurality of application service apparatuses for performing at least one application function among a plurality of applications, a plurality of applications, a service token for service use of a plurality of application service apparatuses, A storage unit for storing a single authentication token that supports access to a plurality of application service devices, and a request message for acquiring a single authentication token in the absence of a single authentication token to a single authentication service device through the application service device. To obtain a single authentication session inquiry message for providing an integrated service number for accessing and using a specific application service device based on a single authentication token. It discloses a structure of a terminal supporting a single authentication service, which is characterized in that through the device, a control unit for controlling so as to provide a single authentication service device.

Herein, the terminal automatically inputs an area for inputting general authentication information for accessing an application service device, an area for an integrated ID login for obtaining a single authentication token, and authentication information for accessing a specific application service device based on the single authentication token. The display apparatus may further include a display unit configured to output at least one of the regions.

The terminal may further include a display unit configured to provide a screen including at least one of a logout item for the service token expiration request, a popup window for the single authentication token expiration request, and a service area for outputting data received from the application service device. have.

The controller may control the creation of an account manager account for the operation of a single authentication token or support the activation control of a cloud service function. In this case, the controller may control to delete the account manager account when the single authentication token expires.

In another aspect, the present invention, the terminal performs an integrated ID login in the process of accessing the application service device for the operation of a specific application function or providing a session inquiry message for single authentication based on a pre-stored single authentication token to the application service device, application service After the device performs the integrated ID login, transmitting a request message for generating a single authentication token to the single authentication service device or sending the session inquiry message to a single authentication service device; Receiving an integrated service number according to a single authentication token or session inquiry message, and when the application service device receives the single authentication token, the service token and data for using the single authentication token and the application service device And providing the terminal, performing an automatic login of an application upon receiving an integrated service number, and providing the service token and data to the terminal.

The method includes the terminal transmitting a request message for expiring a service token or a request message for expiring a service token and a single authentication token to an application service device, wherein the application service device provides a response message for the expiration of a service token to the terminal; Sending a request message for expiring a single authentication token to a single authentication service device and providing a corresponding response to the terminal with the service token expiration response message, wherein the terminal performs either a service logout or a single authentication logout. The method may further include performing the step.

The present invention also discloses the structure of a computer-readable recording medium on which a program for executing the above-described method is recorded.

As described above, according to the single authentication service system and method according to the present invention, the present invention can quickly and conveniently perform an authentication process for operating various applications with a simple input for operating a specific application, and manages authentication status. Support for easier operation.

In addition, the present invention supports the common use of a variety of applications provided by a specific service provider based on a single authentication information to improve the management transparency and reliability of the authentication information, while reducing the cost for authentication information management and authentication information management Improve efficiency

1 is a view schematically showing the configuration of a single authentication service system according to an embodiment of the present invention.
Figure 2 is a block diagram showing in more detail the configuration of a terminal according to an embodiment of the present invention.
3 is a block diagram showing in more detail the configuration of an application service apparatus according to an embodiment of the present invention.
Figure 4 is a block diagram showing in more detail the configuration of a single authentication service device according to an embodiment of the present invention.
5 and 6 are signal flow diagrams illustrating a single authentication operation method according to a first embodiment of the present invention.
7 and 8 are signal flow diagrams illustrating a single authentication operation method according to a second embodiment of the present invention.
9 is a view for explaining the service logout operation of a single authentication service system according to an embodiment of the present invention.
10 is a view for explaining a single authentication logout operation of a single authentication service system according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

In the following description of the embodiments of the present invention, descriptions of techniques which are well known in the technical field of the present invention and are not directly related to the present invention will be omitted. In addition, detailed description of components having substantially the same configuration and function will be omitted.

For the same reason, some of the elements in the accompanying drawings are exaggerated, omitted, or schematically shown, and the size of each element does not entirely reflect the actual size. Accordingly, the present invention is not limited by the relative size or spacing depicted in the accompanying drawings.

1 is a block diagram schematically showing the configuration of a single authentication service system according to an embodiment of the present invention.

Referring to FIG. 1, a single authentication service system 10 of the present invention may include a configuration of a terminal 100, application service devices 200, and a single authentication service device 300. Here, the terminal 100 forms a communication channel with the application service apparatuses 200 for operating a specific application (hereinafter referred to as an application), and the application service apparatuses 200 support a single authentication between applications of the terminal 100. It establishes a communication channel with a single authentication service device 300.

In particular, the single authentication service system 10 of the present invention is a service token and a single authentication token (Single-Sign On Token) from an application service device, for example, the first application service device 201, to which the terminal 100 is connected through a specific application. : Receive SSO token), and based on this, it supports to operate an authentication manager (Authenticator) that performs a single authentication management. Here, the authentication manager supports the extraction of a single authentication token when each mobile application is activated. Accordingly, in the mobile environment in which the authentication manager is maintained, the terminal 100 may automatically receive a service token from a specific application service device for supporting a second application, for example, a second application service device 202. have. Then, the second application of the terminal 100 may support the use of the service supported by the second application service apparatus 202 using the received service token. Here, the authentication manager may be implemented differently according to the operating system supported by the terminal 100. In this way, the authentication manager is implemented as a specific type of software module according to the operating system of each terminal 100 to support authentication information management. It can be a configuration.

As described above, the single authentication service system 10 of the present invention has a single authentication token issued by the single authentication service device 300 when the terminal 100 accesses the application service devices 200 for a specific application operation. The application service devices 200 are designed to be operated by the application service devices 200, and the application service devices 200 allocate service tokens to respective applications of the terminal 100 based on a single authentication token. ) Supports access and service use. Accordingly, when the single authentication service system 10 of the present invention operates at least one of various applications in the terminal 100, the corresponding application service devices 200 using a single authentication token provided by a pre-generated authentication manager. ) To receive and use the service token. As a result, the single authentication service system 10 of the present invention freely accesses and uses the service application devices 200 using a service token provided based on a single authentication token without performing a separate authentication information transmission / reception process for each application. Support to do it. Each component of the above-described single authentication service system 10 will be described in more detail with reference to FIGS. 2 to 4.

First, FIG. 2 is a view showing in more detail the configuration of the terminal 100 according to an embodiment of the present invention.

2, the terminal 100 of the present invention includes a communication unit 110, an input unit 120, an audio processing unit 130, a display unit 140, a storage unit 150, and a controller 160 .

The terminal 100 of the present invention having such a configuration uses the communication unit 110 in response to a specific application stored in the storage unit 150, for example, the first application 151 activation request. The connection can be made. In this process, the terminal 100 checks whether a pre-generated authentication manager exists for a single authentication service operation, and if the authentication manager does not exist, is used for single authentication between applications through the first application service device 201. Authentication manager operation to provide a single authentication token can be performed. Meanwhile, when the authentication manager can provide a single authentication token, the terminal 100 extracts a single authentication token from the corresponding authentication manager, and based on the extracted single authentication token, another application service device, for example, a second application service device. 202 may perform a connection. Accordingly, the terminal 100 of the present invention is a second application service apparatus for using another application service when an authentication manager operation of providing a single authentication token based on a specific application among the plurality of applications 151 and 153 is preceded. 202) A connection may be supported to enable without providing additional authentication information.

To this end, the communication unit 110 forms a communication channel with the application service apparatuses 200 by supporting the communication function of the terminal 100. The communication unit 110 may be configured as a mobile communication module to support the mobility of the terminal 100. Accordingly, the communication unit 110 may access a base station or a wireless access point installed to support a communication service, and access the application service devices 200 through a network device connected to the base station or the wireless access point. If the communication unit 110 is unable to operate an authentication manager that provides a single authentication token, the communication unit 110 may request a login message based on the integrated ID information under the control of the controller 160, for example, the first application service device 201. Can be sent to.

In addition, the communication unit 100 may receive a service token, user data, and a single authentication token from the first application service apparatus 201 in response. The communication unit 110 transmits an inquiry message for a single authentication session inquiry to the second application service device 202 based on a single authentication token extracted from the authentication manager when the authentication manager is operable, for example, and the second application service. The device 202 may receive a service token and user data corresponding to the inquiry message. The information received by the communication unit 110 is transmitted to the control unit 160, and the control unit 160 may support performance of a specific application based on the received information.

The input unit 120 is configured to support the generation of an input signal for operating the terminal 100. For example, the input unit 120 may be formed as a key button such as a home key and a side key, and may be formed on the display unit 140 implemented as a touch screen. It may be output in the form of a virtual key map. The input unit 120 may generate an input signal for activating at least one of the applications 151 and 153 supported by the terminal 100, and the input signal may be transmitted to the controller 160 to activate the corresponding application. Can be used as a command for. In addition, the input unit 120 may perform authentication information input required by the application service apparatus according to a specific application activation. In particular, the input unit 120 may perform authentication information input for the integrated ID login under user control to obtain a single authentication token according to an embodiment of the present invention. After the single authentication token is obtained or after the authentication manager is generated based on the single authentication token, the input unit 120 may generate a specific predefined and simplified input signal for verifying authentication information of additionally activated applications. For example, the specific input signal may be an input signal for selecting a confirmation key button on a single authentication screen requesting access to a specific application service device.

The audio processor 130 may include a speaker SPK for outputting various audio data generated during the operation of the terminal 100 and a microphone MIC for collecting audio data. In particular, the audio processor 130 may output various audio signals generated while the specific applications 151 and 153 supported by the terminal 100 are activated. In this process, the audio processor 130 may output a guide sound to alert the user when an incorrect authentication information input occurs during a specific application activation and application service device access. Meanwhile, when the application service apparatus provides audio data according to activation of a specific application, the audio processor 130 may support the corresponding audio data output.

The display unit 140 displays information input by the user or information provided to the user, including various menus of the terminal 100. That is, the display unit 140 may provide various screens according to the use of the terminal 100, for example, a standby screen, a menu screen, a message writing screen, a call screen, a terminal end screen, a terminal boot screen, and the like. The display unit 140 may be formed in the form of a flat panel display panel such as a liquid crystal display (LCD), an organic light emitting diode (OLED), or the like. The display unit 140 may be manufactured in a structure including a display panel and a touch panel according to a manufacturing form.

In particular, the display unit 140 of the present invention may output a screen for inputting authentication information for accessing an application service device according to activation of a specific application. In this case, the authentication information input screen output by the display unit 140 may include an ID input area and a password input area for inputting general authentication information or integrated authentication information. The authentication information input screen may include a simple login selection item for the integrated ID login based on the input authentication information. When the integrated ID login is performed, the single authentication service device 300 may deliver a single authentication token to the application service device, and the display unit 140 may generate a service token, user data, and single generated by the single authentication token from the application service device. The authentication token receiving screen can be displayed. In addition, the display unit 140 may output a login screen based on a single authentication token generated based on a single authentication token.

Meanwhile, when the terminal 100 receives a single authentication token from the application service device, the terminal 100 may support authentication manager operation based on this, and the authentication manager operation may be alarmed through the display unit 140. Alternatively, authentication manager operation may be performed through background processing without an alarm. However, the display unit 140 may output a specific image effect or indicator for guiding that various applications can be accessed through the authentication manager without input of additional authentication information.

For example, the display unit 140 may output an instruction icon or a guide message for guiding the authentication manager operating status to one side or guiding that an application service device can be accessed based on a single authentication token. Meanwhile, the above-described guide message, icon, or image effect may not be fixedly provided to the display unit 140 according to the intention of the designer, and is output on the corresponding application activation screen when a specific application is activated in the authentication manager operating state. Can be. The authentication information input screen provided through the display unit 140 will be described in more detail with reference to the accompanying drawings.

The storage unit 150 stores the screen image to be output on the display unit 140 as well as an application program required for operating a function according to an exemplary embodiment of the present invention. In addition, when the display unit 140 is configured as a touch screen, the storage unit 150 may store a key map or a menu map for operating the touch screen. Here, the key map and the menu map may be various types. That is, the key map may be a keyboard map, a 3 * 4 key map, a qwerty key map, or the like, or may be a control key map for operation control of an currently activated application program. In addition, the menu map may be a menu map for controlling the currently running application program. The storage unit 150 is an operating system (OS) for booting the terminal 100 and operating the above-described components, various user functions, for example, a user function for supporting a call function of the terminal 100, An MP3 user function for playing other sound sources, an image output function for playing pictures, and an application program for supporting a video play function may be stored.

In particular, the storage unit 150 of the present invention may store various applications 151 and 153 designed to communicate with a specific application service device to provide a specific user function. For example, the storage 150 may store the first application 151 and the second application 153. At least one of the first application 151 and the second application 153 is an application designed to support a specific user function that the terminal 100 can support, and according to the present invention, a communication channel with each application service apparatus 200 is established. Formed but may be applications that provide specific data through automatic authentication information check with the application service devices 200 based on a single authentication token. In particular, the first application 151 and the second application 153 may be a user function supported by application service devices that can be managed by one or a common service provider so as to support the corresponding service based on a single authentication token. Can be.

For example, the first application 151 supports a user function based on communication with the first application service device 201, and the second application 153 based on communication with the second application service device 202. It can support user functions. In this case, each of the first application service device 201 and the second application service device 202 may be an integrated device to manage authentication information by a single authentication service device 300. That is, the first application service device 201 and the second application service device 202 may be application service devices 200 in which authentication information is managed by a specific service provider.

As an example of a service type, the first application 151 may be a chat service application, and the second application 153 may be a shopping mall application. In this case, the application service apparatus supporting the chat service and the shopping mall may be commonly agreed to enable authentication information management. As another service type, the first application 151 may be a first game application, and the second application 153 may be a second game application. Here, the application service apparatus supporting the first game application and the application service apparatus supporting the second game application may be service providers that the distributors may perform the same or account management jointly, and thus the service providers provide It can be designed to be accessible based on a single authentication token. Meanwhile, each application service device may support access through individual authentication information input and confirmation according to a user request.

Meanwhile, in the above description, the two applications are stored in the storage unit 150 as an example, but the present invention is not limited thereto. That is, the storage unit 150 may store more applications, and all of these applications may be applications related to application service devices that can be accessed based on a single authentication token.

The controller 160 may control various signal flow control, data processing, and data transmission and reception for supporting a single authentication service function according to an embodiment of the present invention. For example, the controller 160 may output at least one of a menu, an icon, and a widget capable of activating at least one of the first application 151 and the second application 153 stored in the storage 150. . Alternatively, the controller 160 may allocate a hot key for activating the first application 151 and the second application 153 according to a preset schedule method.

When an input signal for activating a specific application is generated, the controller 160 collects application service device address information for supporting the corresponding application, and activates the communication unit 110 to control access to the application service device. At this time, the controller 160 checks whether there is a service token that can access the corresponding application service device, and if there is no service token, checks whether there is an authentication manager capable of supporting a single authentication token. If there is no authentication manager, a request message for requesting a single authentication token may be created including information input by a user and transmitted to a specific application service device for supporting a specific application function. The input information included in the request message may be input information registered in the application service device in advance to activate the corresponding application, for example, ID information and password information or integrated ID information and password information previously set for single authentication. .

Thereafter, when the single authentication service device 300 receives the single authentication token generated from the application service device, the service token and the user data necessary for using the application service device, the controller 160 based on the corresponding information, the user function according to the activation of the application. Support. In addition, the controller 160 can support the operation of the authentication manager using a single authentication token. In addition, the controller 160 provides a single authentication token through the authentication manager when another application activation request is requested. The single authentication token provided by the authentication manager may be provided to the application service device, and according to the support of the single authentication service device 300, the user automatically performs the authentication information checking process of the corresponding application service device without inputting additional authentication information. Can be supported. The controller 160 may control to receive data for supporting another application selected for activation from the corresponding application service apparatus and output the data to the display unit 140 or through the audio processor 130 in the case of audio data.

Meanwhile, when an input signal for terminating or logging out of a specific application occurs, the control unit 160 terminates or logs out only the corresponding application service or terminates or logs out to a single authentication service through the authentication manager. You can confirm whether you want to do so and control the termination or logout process accordingly. Here, when the termination or logout signal for the applications activated through the authentication manager occurs, the control unit 160 terminates each application according to the termination signal or the logout signal, and finally, in the process of terminating or logging out the application. You can control the removal of administrators and the removal of a single authentication token. Alternatively, the controller 160 may perform signal processing for removing an authentication manager and removing a single authentication token when the first termination or logout of an application that is initially terminated or logged out of applications activated based on a single authentication token is performed. Alternatively, the controller 160 may support the removal of the single authentication token and the removal of the authentication manager upon application termination or logout that contributed to receiving the first single authentication token from the single authentication service device 300.

3 is a diagram illustrating in detail the configuration of an application service apparatus 200 according to an exemplary embodiment. Prior to the description, the application service apparatus 200 may be at least one of the first application service apparatus 201 and the second application service apparatus 202. Accordingly, hereinafter, the application service apparatus 200 will be referred to as an application service apparatus. Will be described in common.

Referring to FIG. 3, the application service apparatus 200 of the present invention may include a configuration of the first communication unit 210, the first storage unit 230, and the first control unit 220. In addition, the application service apparatus 200 may further include various components such as an input unit and a display unit for application service support and management.

The first communication unit 210 may form a communication channel with the terminal 100 to support a user function according to activation of a specific application of the terminal 100. The first communication unit 210 may receive an access request message from the terminal 100, and transmit an authentication information request message corresponding thereto. In addition, the first communication unit 210 may receive a message including authentication information or a request message for requesting a single authentication from the terminal 100. The received messages may be delivered to the first control unit 220 to be used in the authentication process for supporting the application function of the terminal 100, in the case of a request message for requesting an integrated ID login or an inquiry message for performing a single authentication. It may be provided to a single authentication service device 300.

To this end, the first communication unit 210 may form a communication channel with the single authentication service device 300. The first communication unit 210 provides a request message requesting an integrated ID login or a single authentication to the single authentication service device 300, and a single authentication token or integrated service according to processing of the request message from the single authentication service device 300. The number can be received. The received single authentication token may be provided to the terminal 100 and the received integrated service number may be used for the automatic login service to support the application function of the terminal 100.

The first communication unit 210 may include a communication module for forming a communication channel with the terminal 100 and a communication module for forming a communication channel with the single authentication service device 300, respectively. Alternatively, the first communication unit 210 may include one communication module capable of forming a communication channel with the terminal 100 and the single authentication service device 300. To this end, a communication interface for connecting the terminal 100 and the single authentication service device 300 may be compatible or implemented in the same manner.

The first storage unit 230 stores an operating system and various application programs necessary for operating the application service apparatus 200. In particular, the first storage unit 230 may include an application support program 231 to support a specific application function of the terminal 100, and store a service token 233 allocated to use a service of the terminal 100. Can be. The first storage unit 230 may store identification information of the terminal 100 through a pre-registration process of the terminal 100. The identification information of the terminal 100 may be used to determine whether the terminal 100 is a terminal registered to use a normal service, and for this purpose, the first storage unit 230 may use the terminal according to a pre-arranged rule. The ID information and password information registered by 100 may be included in the identification information and stored.

The application support program 231 provides an authentication processing routine for confirming whether the corresponding terminal is a pre-registered terminal, a service token corresponding to application activation of the authenticated terminal 100, and user data according to a connection request of the terminal 100. It can include routines. In particular, the application support program 231 is a routine for processing a single authentication request based on the integrated ID login processing or mobile single authentication token of the terminal 100, and processing to deliver a single authentication token according to the integrated ID login processing to the terminal 100. Routines and automatic login function support routines based on the integrated service number.

The service token 233 is information provided so that the terminal 100 can use a service provided by the application service apparatus 200. The service token 233 may be allocated to the terminal 100 when the terminal 100 requests an access and a normal authentication process is performed, and may be collected or discarded when the corresponding application service function ends. Meanwhile, if the terminal 100 requires a single authentication service, the service token 233 may be generated in association with a single authentication token provided by the single authentication service device 300 or based on a single authentication token.

The first controller 220 is a component that controls various signal processing, data processing, and transmission for operating the application service apparatus 200. When receiving a connection request from the terminal 100, the first controller 220 may control the terminal 100 to request authentication information according to predefined schedule information. Upon receiving the authentication information from the terminal 100, the first controller 220 may check whether the corresponding authentication information corresponds to pre-registered information, and provide data necessary for the application service function.

Here, when the first control unit 220 receives a request message for single authentication from a specific application of the terminal 100, the first control unit 220 may control to provide the corresponding request message to the single authentication service device 300. When the single authentication token is received from the single authentication service device 300, the service token and the user data may be provided to the terminal 100 together with the single authentication token. Here, the first controller 220 may perform an authentication process of the corresponding terminal 100 based on the integrated ID information and the password information included in the request message for single authentication. The first controller 220 may generate a service token for using the service of the terminal 100 based on a single authentication token or in association with a single authentication token.

Meanwhile, when the first controller 220 receives a session authentication message based on a single authentication token from a specific application of the terminal 100, the first controller 220 may transmit the inquiry message to the single authentication service device 300. When receiving the integrated service number according to the single authentication from the single authentication service device 300, the terminal 100 can log in and generate a service token. The first controller 220 may provide the terminal 100 with the generated service token and the user data for supporting the application service function. That is, the first controller 220 accepts the login without a separate authentication information confirmation process for the terminal 100 requesting access based on the single authentication token without confirming the authentication information and according to the corresponding application. Can support service functions.

In the above description of the application service apparatus 200, the specific application service apparatus 200 has been described as performing both the login support based on the single authentication request message and the login support based on the single authentication token. It is not limited. That is, the application service apparatus of the login support based on the single authentication request message may be fixed to the first application service apparatus 201 according to the system designer's design scheme. For example, the first application service apparatus 201 that supports the first application 151 of the terminal 100 supports a login based on a single authentication request message and supports a second application 153. The application service device 202 may be designed to support only a single authentication token based login and a general authentication information based login. Alternatively, the second application service device 202 may be a device for providing a single authentication token, and the first application service device 201 may be a device that performs a login based on a single authentication session inquiry message.

4 is a diagram illustrating in more detail the configuration of a single authentication service device 300 according to an embodiment of the present invention.

Referring to FIG. 4, the single authentication service device 300 of the present invention may include a device communication unit 310, a second control unit 320, and a second storage unit 330. In addition, similar to the application service apparatus 200, the single authentication service apparatus 300 may further include a configuration of an input unit, a display unit, etc. for device management or for updating specific data.

The device communication unit 310 forms a communication channel with the application service device 200. To this end, the device communication unit 310 may transmit data to a network device to which a communication module or an application service device 200 capable of transmitting and receiving data with the application service device 200 and receive data from the corresponding network device. It may be configured as a communication module. The device communication unit 310 may receive a single authentication request message from the application service device 200 or a single authentication session inquiry message. The device communication unit 310 provides one of the single authentication token and the integrated service number generated by the second control unit 320 to the application service device 200.

The second storage unit 330 stores programs for operating the single authentication service device 300. In particular, the second storage unit 330 may store a single authentication support program 331 and a single authentication token 332 which is a program for supporting a single authentication service of the present invention.

The single authentication support program 331 may support generating an integrated service number or generating a single authentication token according to a message received from the application service apparatus 200. To this end, the single authentication support program 331 is a routine for classifying types of messages received from the application service apparatus 200, and when the received message is a single authentication session inquiry message, generating an integrated service number in response to the inquiry message. The routine may include a routine for providing the generated integrated service number to the application service apparatus 200. In addition, the single authentication support program 331 may include a routine for generating a single authentication token when the received message is a single authentication request message, and a routine for providing the generated single authentication token to the application service apparatus 200.

The single authentication token 332 is information that enables a specific terminal 100 to access and use a plurality of application service devices. The single authentication token 332 is generated when a specific terminal 100 requests to use a single authentication service, is transmitted to the terminal 100 through the application service apparatus 200, and to the second storage unit 330. Can be stored. The single authentication token 332 can then be used to validate the single authentication session inquiry message. To this end, the terminal 100 receives a single authentication token received from the single authentication service device 300 through the application service device 200 from the authentication manager when the single authentication session inquiry message is written, and includes it in the corresponding message. Can transmit The single authentication token 332 may be discarded according to the single authentication service termination request of the terminal 100.

The second control unit 320 may control processing and transmission of various signals required for operating the single authentication service device 300. In particular, the second control unit 320 may support generation, provision, and management of a single authentication token 332 for support of a single authentication service of the present invention, generation, provision, and management of an integrated service number based on a single authentication token 332. have. In more detail, when the second control unit 320 receives a single authentication request message from the application service apparatus 200, the second control unit 320 may generate a single authentication token 332 according to the request. When the single authentication token 332 is generated, the second controller 320 can provide it to the application service apparatus 200.

In this case, since the validity authentication of the terminal 100 transmitting the single authentication request message may be performed through the authentication of the integrated ID information of the application service apparatus 200, the second control unit 320 may not separately perform the validation. . However, according to the design method of the system designer, the second controller 320 determines whether the terminal 100 is a terminal registered in advance to use a single authentication service based on the terminal 100 related information included in the single authentication request message. Can be. To this end, the single authentication service device 300 may store and manage information of terminals 100 pre-registered to use a single authentication service.

On the other hand, when receiving a single authentication session inquiry message from the application service device 200, the second controller 320 checks a single authentication token included in the inquiry message. In addition, it may be determined whether the single authentication token included in the inquiry message is the same as the single prestored single authentication token 332 or compared with the single authentication token 332. In this case, the validity is taken into consideration when generating a single authentication token 332. That is, even though the single authentication token included in the inquiry message is the same as the pre-stored single authentication token 332, the second controller 320 determines that the single authentication token has passed the pre-designed threshold time and has lost its validity. It can block support for a single authentication service based on authentication tokens. The validity design for this single authentication token 332 may not be applied depending on the design method of the system designer. If the single authentication token of the received inquiry message is valid or is the same as the pre-stored single authentication token 332, the second control unit 320 generates an integrated service number for supporting the use of the application service device and the application service device 200 ) Can be provided. The integrated service number may be used as information supporting login acceptance of the terminal 100 to access the application service apparatus 200.

Meanwhile, the second control unit 320 may receive a message for removing a single authentication token from the application service device 200. In this case, the second control unit 320 may remove the corresponding single authentication token and transmit to the application service device 200 that the single authentication token has been removed.

As described above, the single authentication service system 10 and each component supporting the same support a single authentication service between applications of a terminal based on a token. Accordingly, in the process of activating various applications and using the corresponding service, the user can immediately use necessary services without unnecessary and unnecessary authentication information input and authentication process.

5 is a view for explaining an authentication manager-based operating method of the operation method of a single authentication service system according to a first embodiment of the present invention.

Referring to FIG. 5, in a method of operating a single authentication service system, first, when a user of the terminal 100 generates an input signal for activating a specific application stored in the storage 150, for example, the first application 151, the terminal In operation S101, the service 100 may determine whether a service token for supporting the first application 151 exists. Here, the service token may be information that can use the first application service device 201 to support a user function of the first application 151. If the terminal 100 has a history of use of the first application service device 201, and the reconnection time is within a predefined validity period or if the terminal 100 maintains a login for the first application service device 201, the terminal 100 is used. ) May maintain a service token. As a result, when the service token exists, the terminal 100 may perform access to the first application service apparatus 201 based on the previous history without performing an additional authentication process (S103).

On the other hand, if there is no service token at step S101, the terminal 100 can check whether an account manager account exists by branching to step S105. A description of the case where the account manager account exists in step S105 will be described with reference to FIG.

On the other hand, if the account manager account does not exist in step S105, the terminal 100 creates a request message for the integrated ID login request for a single authentication and transmits this request message to the first application service device 201 in step S107. Can be. The first application service device 201 may be a device that provides data for supporting a user function of the first application 151. When the first application service apparatus 201 receives a request message for single authentication from the terminal 100, the first application service apparatus 201 may perform integrated ID authentication using the login information included in the corresponding message in step S109. The first application service device 201 may create a single authentication session creation request message (createSSOSessionForMoblie) for acquiring a single authentication token, and transmit it to the single authentication service device 300 in step S111. Here, the single authentication session creation request message may include integrated login information.

When the single authentication service device 300 receives a single authentication session creation request message from the first application service device 201, the single authentication service device 300 may generate a single authentication (SSO) session in step S113 according to the reception of the request message. Can be. The single authentication service device 300 may generate a single authentication token for operating a single authentication session and provide the single application token to the first application service device 201 in operation S115. In addition, the single authentication service device 300 may store and manage the generated single authentication token and the integrated login information provided by the terminal 100 for later identification or validation of the terminal 100.

When the first application service device 201 receives a single authentication token from the single authentication service device 300, a service for using the first application service device 201 associated with or based on a single authentication token. In operation S117, the token may be generated, and the user data according to the corresponding single authentication token, the service token, and the service support may be provided to the terminal 100. Then, the terminal 100 may support generating an account manager account based on the single authentication token received in step S119 and storing the single authentication token in the storage 150. Meanwhile, the terminal 100 may support the function of the first application 151 using the received service token.

6 is a view for explaining a single authentication token-based operating method of the operation method of a single authentication service system according to a first embodiment of the present invention.

Referring to FIG. 6, in the method of operating the single authentication service system 10 of the present invention, when the terminal 100 is requested to activate the second application 153, the terminal 100 supports the second application 153 in step S201. The application service device 202 checks whether there is a service token for connecting and using the service. In this step, if there is a service token, the terminal 100 may access the second application service apparatus 202 based on the corresponding service token and support data transmission / reception for service use (S203).

Meanwhile, if there is no service token for operating the second application 153, the terminal 100 branches to step S205 and checks whether an account manager account exists. In this step, if there is no account manager account, the terminal 100 may support to perform a procedure according to the operation method described with reference to FIG. 5. On the other hand, if there is an account manager account in step S205, the terminal 100 may extract a single authentication token from the account manager in step S207. In addition, the terminal 100 may create an inquiry message for querying a single authentication session based on a single authentication token, and transmit the created inquiry message to the second application service apparatus 202 in step S209.

When the second application service device 202 receives the inquiry message from the terminal 100, the second application service apparatus 202 creates a single authentication session check message (checkSSOSessionForMobile) corresponding to the inquiry message, and in step S211, the created single authentication session check message (checkSSOSessionForMobile). In may be delivered to a single authentication service device 300. When the single authentication service device 300 receives a single authentication session check message (checkSSOSessionForMobile) from the second application service device 202, the terminal 100 checks the contents of the inquiry message included in the single authentication session check message (checkSSOSessionForMobile). You can check whether the single authentication token provided by) is valid. If it is determined that the single authentication service device 300 receives the message written based on the valid single authentication token, the single authentication service device 300 may generate the integrated service number in step S213 corresponding to the single authentication token. In this step, if it is determined that the single authentication token is not valid, the single authentication service device 300 may create an error message and provide it to the terminal 100 through the second application service device 202. Then, the terminal 100 may support to perform a process of acquiring a new single authentication token through the operation method of FIG. 5 described above. Meanwhile, the single authentication service device 300 provides the generated integrated service number to the second application service device 202 in step S215.

Upon receiving the integrated service number, the second application service device 202 may perform integrated ID authentication and service token generation in step S217. In this case, the integrated service number may include integrated login information of the terminal 100. The single authentication service device may check the integrated login information related to the terminal 100 pre-stored when generating the integrated service number and include the same in the integrated service number. In operation S219, the second application service apparatus 202 may provide the terminal 100 with a service token and user data for supporting the function of the second application 153.

FIG. 7 is a diagram illustrating an authentication manager based operating method among operating methods of a single authentication service system according to a second embodiment of the present invention.

Referring to FIG. 7, the method for operating a single authentication service system 10 of the present invention first checks whether a service token exists in step S301 when the terminal 100 requests the activation of the first application 151 similarly to step S101 described above. do. If the service token exists, the first application service device 201 may be accessed and operated using the existing service token.

And if there is no service token, the terminal 100 checks whether there is a single authentication token information in the cloud service repository that performs the authentication manager function in step S305. To this end, the terminal 100 may activate a cloud client. The cloud service may be a service that can be operated by sharing the content stored in the terminal 100 to a separate communication service device. In this case, the cloud service may manage an account of the terminal 100 for information sharing, and in particular, may manage a single authentication token for supporting a single authentication-based application function according to an embodiment of the present invention.

On the other hand, if there is no single authentication token information in step S305, each of the components of the single authentication service system 10, that is, the terminal 100, the first application service device 201 and the single authentication service device 300 is shown in FIG. The same operation as in the above described step S107 to step S119 is performed. That is, in step S307, the terminal 100 transmits an integrated ID login request message to the first application service device 201, and in step S309, the first application service device 201 performs a single authentication session request message together with performing integrated ID authentication. (createSSOSessionForMobile) Create and transmit a single authentication session request message (createSSOSessionForMobile) to a single authentication service device 300 in step S310. Then, the single authentication service device 300 may generate a single authentication session in step S311, and transmit a single authentication token to the first application service device 201 in step S313. The first application service apparatus 201 may generate a service token and provide user data for supporting the first application 151 service to the terminal 100 in step S315 with a single authentication token.

As a result, the terminal 100 may control to store the single authentication token received in step S317 in the cloud storage through the above-described steps. Meanwhile, the terminal 100 performs a function of the first application 151 based on the received service token.

8 is a view for explaining a single authentication token-based operating method of the operation method of a single authentication service system according to a second embodiment of the present invention.

Referring to FIG. 8, in the method of operating a single authentication service system according to the present invention, when a request for activation of a second application 153 occurs, the terminal 100 provides a service for supporting the corresponding second application 153 in step S401. 2 Check whether there is a service token that enables use of the application service device 202. If there is no service token in this step, the terminal 100 branches to step S405 to check whether single authentication token information exists in the cloud storage. To this end, the terminal 100 may maintain the activated cloud client. If there is a single authentication token in step S405, the terminal 100 performs a process of extracting a single authentication token from the cloud storage in step S407. Here, the terminal 100 may check whether the single authentication token is held in the cloud service device, and if so, may request the single authentication token information from the cloud service device. Meanwhile, when the single authentication token is stored in the cloud client, the terminal 100 may control to collect single authentication token information according to activation of the corresponding client. Management of a single authentication token and the like may be changed according to the cloud system designer design method, the terminal 100 of the present invention may be designed to collect a single authentication token information according to the system design method.

Meanwhile, the following steps S409 to S419 performed by the single authentication service system 10 perform substantially the same operations as steps S209 to S219 of FIG. 6, and thus a detailed description thereof will be omitted.

9 is a diagram illustrating service logout in a single authentication service system according to an exemplary embodiment of the present invention.

Referring to FIG. 9, the terminal 100 may perform a procedure for logging out before terminating a specific application in an active state. To this end, the user may generate an input signal for activating a virtual key button for instructing logout on the application activation screen output to the display unit 140. Alternatively, when an input signal for terminating an activated application is generated, the terminal 100 maintains a login state of the corresponding application for a predetermined time and then does not generate an additional input signal, for example, an input signal for reactivating the terminated application. It can be considered as a logout event. Alternatively, the terminal 100 may regard the input signal for terminating a specific application as a logout event occurrence.

When the input signal corresponding to the user's logout instruction is received or the above-described logout event occurs, the terminal 100 creates a service token expiration request message in step S501, and sends a service token expiration request message to the application service. May transmit to the device 200. The application service apparatus 200 that has received the service token expiration request message from the terminal 100 performs the service token expiration process in step S503 in response to receiving the request message. The application service apparatus 200 may create a service token expiration response message and transmit the response message to the terminal 100 in step S505.

When the terminal 100 receives the service token expiration response message corresponding to the service token expiration request message in step S507, the terminal 100 may process the login state of the corresponding application as a logout state based on the received service token expiration response message. When the terminal 100 receives an input signal for terminating an application, the terminal 100 may terminate the application activation screen being output to the display unit 140 and process the logout process according to the above-described message transmission and reception by a background processing method.

As described above, the single authentication service system 10 of the present invention may support to maintain a single authentication token in the process of processing the log-out state of a specific application. Accordingly, when reactivating the terminated specific application, the single authentication service system 10 supports to automatically receive and operate a service token from the corresponding application service device based on a single authentication token that has not expired.

FIG. 10 illustrates a single authentication logout in a single authentication service system according to an exemplary embodiment of the present invention.

Referring to FIG. 10, when an input signal indicating a single authentication logout is received together with the logout of a specific application, the terminal 100 creates an expiration request message requesting the service token and the single authentication token expiration, and in step S601. The expiration request message may be transmitted to the application service device 200. In this case, the reception of the input signal indicating the single authentication logout together with the logout of the specific application may occur by performing a process of confirming the single authentication logout upon termination of the specific application. Alternatively, when a single authentication logout is designed to be automatically performed when a specific application is logged out, the terminal 100 may determine that the input signal for the corresponding application logout is an input signal that performs up to a single authentication logout. Alternatively, the terminal 100 may automatically write a message to automatically perform a single authentication logout when the last application that was kept active while the applications operated based on a single authentication is terminated or when the last application is logged out. have.

When the application service apparatus 200 receives the expiration request message requesting the service token and the single authentication token expiration from the terminal 100, the application service apparatus 200 performs the service token expiration at step S603 and also sends a single authentication token expiration request message at the step S605. It may transmit to a single authentication service device 300. The single authentication service device 300 may perform a single authentication token expiration in step S607 according to the received single authentication token expiration request message, and transmit a response message for the single authentication token expiration to the application service device 200 in step S609. have.

When the application service device 200 receives a single authentication token expiration response message from the single authentication service device 300, the application service device 200 creates a service token and a single authentication token expiration response message, and the terminal 100 at step S611. Can be sent to. Upon receiving the expiration response message, the terminal 100 deletes the account manager account and the single authentication token information for each operating system in operation S613 or deletes the single authentication token information from the cloud storage. In addition, the terminal 100 may perform service logout in operation S615.

As described above, the single authentication service system and method of the present invention and a screen interface supporting the same eliminate a repetitive authentication information input for various applications by operating a single authentication token and a service token for operating an application service device. Support for easier management of authentication information. In addition, the present invention can support minimizing the situation of re-entering authentication information or querying an ID and password by allowing an application service device access to perform various applications with a single authentication token.

Meanwhile, the terminal 100 may further include various additional modules according to the providing mode. That is, the terminal 100 is a communication terminal, a short-range communication module for short-range communication, an interface for data transmission / reception by a wired communication method or a wireless communication method of the terminal 100, An Internet communication module, and a digital broadcasting module that performs digital broadcasting reception and reproduction functions. These components can not be enumerated because of a wide variety of variations depending on the convergence trend of the digital device, but it is also possible that components having the same level as the above-mentioned components are further included in the device have. Also, it is needless to say that the terminal 100 of the present invention may be excluded from the specific configurations in the above configuration or may be replaced with other configurations in accordance with the provision mode thereof. Which will be readily apparent to those skilled in the art.

In addition, the terminal 100 according to an embodiment of the present invention may include all types of devices that can use an application service device-based application function. For example, the terminal 100 may include all mobile communication terminals operating based on communication protocols corresponding to various communication systems, a portable multimedia player (PMP), a digital All information communication devices such as a broadcasting player, a PDA (Personal Digital Assistant), a music player (for example, an MP3 player), a portable game terminal, a smart phone, a notebook and a handheld PC, Device.

In addition, the method for operating a single authentication service of the present invention described above may be implemented in a software form readable by various computer means including an application service apparatus or a terminal, and recorded on a recording medium. In this case, the program recorded on the recording medium may be implemented to execute one or more processes or functions among the above-described method for operating a single authentication service of the present invention. Here, the recording medium may include program commands, data files, data structures, and the like, alone or in combination. Program instructions to be recorded on a recording medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. For example, the recording medium may be an optical recording medium such as a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, a compact disk read only memory (CD-ROM), a digital video disk (DVD) Includes a hardware device that is specially configured to store and execute program instructions such as a magneto-optical medium such as a floppy disk and a ROM, a random access memory (RAM), a flash memory, do. Examples of program instructions may include machine language code such as those generated by a compiler, as well as high-level language code that may be executed by a computer using an interpreter or the like. Such hardware devices may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. , And are not intended to limit the scope of the present invention. It will be apparent to those skilled in the art that other modifications based on the technical idea of the present invention may be practiced without departing from the scope of the invention disclosed herein.

The single authentication service system and method according to the present invention can quickly and conveniently perform the authentication process for the operation of various applications with a single input for a specific application operation, and supports to easily manage the authentication status management. do. In addition, the present invention supports the common use of a variety of applications provided by a specific service provider based on a single authentication information to improve the management transparency and reliability of the authentication information, while reducing the cost for authentication information management and authentication information management Improve efficiency

Accordingly, the present invention is applicable to the field of authentication for the operation of various applications installed in the terminal device, it is possible to improve the efficiency while reducing the cost for the authentication process, there is industrial applicability.

10: single authentication service system 100: terminal
110: communication unit 120: input unit
130: audio processing unit 140: display unit
150: storage unit 151, 153: application
160: control unit 200: application service device
210: first communication unit 230: first storage unit
220: first control unit 300: single authentication service device
310: device communication unit 330: second storage unit
320: second control unit

Claims (15)

Connect to at least one application service device among a plurality of application service devices according to an activation request of at least one of a plurality of applications, and use it for service operation from each application service device without inputting separate authentication information based on a single authentication token. A terminal for receiving a service token;
An application service device providing data for operating an application service of a terminal presenting the service token and providing a corresponding message to a single authentication service device when a single authentication related message is received;
A single authentication service device that provides information for operating a single authentication service of the terminal to the application service device or to the terminal through the application service device when receiving a single authentication related message from the application service device;
Single authentication service system comprising a. A first communication unit configured to receive an integrated ID login information or a single authentication token based session inquiry message from a specific application of the terminal;
A first storage unit for storing data for supporting a specific application function of the terminal and storing a service token for operating a specific application function of the terminal;
When receiving the integrated ID login information from the specific application, a message for generating a single authentication token is transmitted to a single authentication service device, and upon receiving the session inquiry message, it is transmitted to the single authentication service device and the session inquiry from the single authentication service device. A first control unit receiving the integrated service number associated with the message and providing the service token to a specific application of the terminal without checking the separate authentication information of the corresponding application;
Application service apparatus that supports a single authentication service comprising a. The method according to claim 2, wherein
The first control unit
Upon receiving the integrated ID login information, the service token is generated based on a single authentication token provided by the single authentication service device, and the data for supporting the single authentication token, the service token, and the application function is specified in the terminal. Application service apparatus for supporting a single authentication service, characterized in that the control to provide. The method according to claim 2, wherein
The first control unit
And a service token expiration response message for service logout of the corresponding application when the service token expiration request message is received from a specific application of the terminal. The method according to claim 2, wherein
The first control unit
When the service token and the single authentication token expiration request message are received from a specific application of the terminal, when the single authentication token expiration request message is provided to the single authentication service device and a corresponding response message is received, the service token and the single message are received. And providing the terminal with an expiration response message of an authentication token. A device communication unit for establishing a communication channel with at least one application service device and receiving a single authentication session request message or a single authentication session check message transmitted by a specific application of the terminal through the application service device;
A second storage unit for storing a single authentication token provided to the terminal for single authentication support to access a specific application service device without inputting additional authentication information;
The single authentication token is provided to the terminal through the application service device when the single authentication session request message is received, and the integrated service number based on the single authentication token is provided to the application service device when the single authentication session check message is received. A second control unit;
Single authentication service device comprising a. The method of claim 6, wherein
The second control unit
And when the single authentication token expiration request message is received from the application service device, providing a response message corresponding to the single authentication token expiration to the application service device. A communication unit forming a communication channel with at least one of the plurality of application service apparatuses to perform at least one application function among the plurality of applications;
A storage unit for storing the plurality of applications, a service token for using services of the plurality of application service devices, and a single authentication token for accessing the plurality of application service devices;
In the absence of the single authentication token, a request message for acquiring the single authentication token is provided to the single authentication service device through the application service device to obtain the single authentication token, and if the single authentication token exists, the single authentication token exists. A control unit controlling to provide a single authentication session inquiry message for providing an integrated service number for accessing and using a specific application service device to the single authentication service device based on the application service device;
A terminal supporting a single authentication service comprising a. The method of claim 8, wherein
An area for inputting general authentication information for accessing the application service device;
An area for an integrated ID login for obtaining the single authentication token;
An area in which authentication information for accessing a specific application service device is automatically input based on the single authentication token; A display unit for outputting at least one of the above;
Terminals supporting a single authentication service, characterized in that it further comprises. The method of claim 8, wherein
A logout item for the service token expiration request;
A popup window for the single authentication token expiration request;
A service area for outputting data received from the application service device; A display unit for providing a screen including at least one of the following;
Terminals supporting a single authentication service, characterized in that it further comprises. The method of claim 8, wherein
The control unit
A terminal supporting a single authentication service, characterized in that for controlling the creation of an account manager account for the single authentication token operation or the activation control of the cloud service. The method of claim 11, wherein
The control unit
And controlling the account manager account to delete the account manager account when the single authentication token expires. Providing, by the terminal, an integrated ID login in the process of accessing an application service device for a specific application function or providing a session inquiry message for single authentication based on a pre-stored single authentication token to the application service device;
After the application service device performs the integrated ID login, transmitting a request message for generating a single authentication token to the single authentication service device or transmitting the session inquiry message to the single authentication service device;
Receiving, by the application service device, an integrated service number according to the single authentication token or the session inquiry message from the single authentication service device;
When the application service device receives the single authentication token, the application service device provides the single authentication token and service token and data for using the application service device to the terminal, and when the integrated service number is received, performs an automatic login of the application and the service. Providing a token and data to the terminal;
Single authentication service operating method comprising a. The method of claim 13, wherein
Sending, by the terminal, a request message for expiration of the service token or a request message for expiration of the service token and the single authentication token to the application service device;
The application service device provides the terminal with a response message according to the service token expiration or sends a request message for expiration of the single authentication token to the single authentication service device and sends a corresponding response along with the service token expiration response message. Providing to the terminal;
The terminal performing either the service logout or the single authentication logout;
Single authentication service operating method characterized in that it further comprises. A computer-readable recording medium having recorded thereon a program for executing the method according to any one of claims 13 and 14.

Images