KR20140033536A - System and method for application authentication - Google Patents

Abstract

The present invention relates to a system and a method for authenticating applications comprising: a user terminal for receiving a terminal authentication key from a push hub by transmitting a terminal authentication request signal including terminal identification information to the push hub, to generate an authentication key using the terminal authentication key and the characteristic authentication mechanism of the application when the application is installed or when the execution of the application is requested, and to transmit the generated authentication key to a service providing device; the push hub for authenticating the user terminal by confirming an operator using the terminal identification information as a subscriber from a subscriber information database included in the push hub when the terminal authentication request signal is received from the user terminal, and for transmitting the terminal authentication key to the user terminal and the service providing device by generating the terminal authentication key when the authentication of the user terminal is succeeded; and the service providing device for authenticating the application usage of the user terminal by comparing the authentication key received from the user terminal with the authentication key received from the push hub. [Reference numerals] (100) User terminal; (200) Push hub; (300) Service providing device

Description

System and Method for application authentication

The present invention relates to a system and method for authenticating an application, and more particularly, to use an application by using authentication information transmitted from a push hub when the application is downloaded and installed in a user terminal or when the application is executed. It relates to an application authentication system and method for authenticating.

BACKGROUND ART [0002] With the rapid development of information and communication technology today, services provided by a mobile communication system are being developed not only for voice services but also for multicasting multimedia communication for transmitting a large amount of data. As a large amount of data transmission becomes possible in a mobile communication system, various information can be provided anytime and anywhere using a mobile terminal.

As such, with the evolution of mobile terminals, including smartphones, services for synchronizing data from servers to mobile terminals are actively provided. For example, there may be real-time data synchronization such as mail service, schedule service, and contact service.

The data transmission in synchronization with the mobile terminal at the server side is called a data push (Push) service, and is currently applied to various types of services such as KakaoTalk, My People, and Viber. In order to use such a service, a subscriber first downloads an application to a mobile terminal, receives an authentication number transmitted from a server as an SMS, and inputs the authentication number to an application installed in the mobile terminal, thereby completing the application use authentication. Can be.

However, when authenticating the use of an application as in the related art, there is an inconvenience of receiving an SMS for an authentication number every time the application is downloaded / installed or executed, and undergoing a cumbersome procedure of inputting the authentication number.

Korean Patent Publication No. 2010-0090201 (2010.08.13), title of the invention: System and method for providing a message push service in a wireless communication system

The present invention has been made in order to solve the above problems, and perform a mutual authentication between the push client and the push hub mounted on the user terminal, the authentication number must be entered each time to download / install or run the application It is an object of the present invention to provide an application authentication system and method that can simplify the procedure of downloading / installing or executing an application by eliminating the procedure.

According to another object of the present invention, when an application download / installation or execution is requested in a user terminal, a push hub generates an authentication key and provides the authentication key to the user terminal and the service providing device, and the user terminal and the service providing device are transmitted from the push hub. The present invention provides an application authentication system and method that can simplify an application use authentication process by performing application use authentication using an authentication key.

It is still another object of the present invention to provide an application authentication system and method for increasing security by using a stable session between a push client and a push hub.

According to an aspect of the present invention, the terminal authentication request signal including the terminal identification information is transmitted to the push hub to receive the terminal authentication key from the push hub, when the application is installed or the application execution is requested, the terminal authentication key And a user terminal for generating an authentication key using an app-specific authentication mechanism and transmitting the generated authentication key to a service providing device, and when a terminal authentication request signal is received from the user terminal, A user terminal authenticates an operator using terminal identification information as a subscriber, and if the user terminal authentication is successful, a push hub for generating a terminal authentication key and transmitting the generated terminal authentication key to the user terminal and the service providing apparatus. An authentication key received from the user terminal and the push hub; The application authentication system including a service providing apparatus for authenticating an application use of the user terminal is provided since if the match by comparing the received authorization key.

The app-specific authentication mechanism may be an app unique key.

According to another aspect of the present invention, a communication unit for communication with a service providing device or a user terminal, a subscriber information database in which identification information of user terminals and information on applications installed in each user terminal are stored, and terminal identification information from the user terminal. When a terminal authentication request signal is received, the user identification is performed from the subscriber information database by using the terminal identification information as a subscriber. When the user terminal authentication is successful, the terminal authentication key is generated. A push hub including an authentication processing unit for transmitting to the user terminal and the service providing apparatus is provided.

According to another aspect of the present invention, the terminal authentication request signal including the terminal identification information is transmitted to the push hub to receive the terminal authentication key, when the app authentication registration request signal is received from the application, the terminal authentication key is A push client transmitting an application and an app authentication registration request signal to the push client to receive a terminal authentication key from the push client, and generate an authentication key using the received terminal authentication key and an app-specific authentication mechanism. Thereafter, a user terminal including an application for performing use authentication by transmitting the generated authentication key to a service providing device is provided.

The app authentication registration request signal may be transmitted to the push client when the application is installed or when the application execution is requested. The app-specific authentication mechanism may be an app unique key.

According to another aspect of the present invention, when the application is installed or the application is requested to run, by sending an app authentication request signal including the terminal identification information and the application identification information to the push hub, and receives the authentication key from the push hub and A user terminal for transmitting the received authentication key to a service providing apparatus; and when an app authentication request signal is received from the user terminal, authentication of the user terminal and the application is performed using the provided subscriber information database, When the authentication of the user terminal and the application is successful, a push hub (PUSH HUB) for generating an authentication key for the application use authentication of the user terminal to transmit to the user terminal and the service providing device, received from the user terminal Number from the authentication key and the push hub The application authentication system including a service providing apparatus for authenticating an application use of the user terminal is provided if the match by comparing the authentication key.

The push hub may generate a unique authentication key for authenticating an application use of the user terminal based on at least one of application identification information, user terminal identification information, application identification information, and user terminal identification information.

According to another aspect of the present invention, a service providing device or a communication unit for communication with a user terminal, a subscriber information database in which identification information of user terminals and information on applications installed in each user terminal are stored, and terminal identification information from the user terminal. And receiving an app authentication request signal including application identification information, authenticating the user terminal and an application installed in the user terminal using the subscriber information database, and authenticating the user terminal and the application. A push hub including an authentication processor for generating an authentication key for authenticating an application use of the user terminal and transmitting the authentication key to the user terminal and the service providing apparatus is provided.

The authentication processor may generate a unique authentication key for authenticating an application use based on at least one of application identification information, user terminal identification information, application identification information, and user terminal identification information.

According to another aspect of the present invention, an application for transmitting an authentication key request signal to the push client to receive the authentication key, and transmits the authentication key to the service providing device to perform the use authentication, the app authentication registration request from the application When a signal is received, a user terminal including a push client transmitting an app authentication request signal to a push hub and receiving an authentication key from the push hub to the application is provided.

The app authentication registration request signal may be transmitted to the push client when the application is installed or when the application execution is requested.

According to another aspect of the present invention, in a method for authenticating an application, a push hub receives a terminal authentication request signal including terminal identification information from a user terminal, wherein the push hub is based on the terminal identification information; Generating an authentication and a terminal authentication key for the user terminal, wherein the push hub transmits the generated terminal authentication key to the user terminal and a service providing device, wherein the terminal authentication key is the user. It is generated when the terminal is successfully authenticated, and the authentication of the user terminal is performed through an operator confirmation using the terminal identification information as a subscriber from a subscriber information database previously stored in the push hub. Is provided.

The application authentication method, when the application is installed in the user terminal or requested to run the application, generating an authentication key using a terminal authentication key received from the push hub and an authentication mechanism unique to the app, wherein the generated authentication key The method may further include transmitting from the user terminal to the service providing apparatus.

And comparing the authentication key received from the user terminal with the authentication key received from the push hub in the service providing apparatus, and authenticating an application use of the user terminal if they match.

According to the present invention, by performing mutual authentication between a push client mounted on a user terminal and a push hub, the procedure of inputting a certification number each time to download / install or run the application is removed, thereby downloading / installing the application. Alternatively, the implementation process can be simplified.

In addition, when an application download / install or execution is requested from the user terminal, the push hub generates an authentication key and provides the authentication key to the user terminal and the service providing device, and the user terminal and the service providing device use the authentication key transmitted from the push hub. By performing application use authentication, the application use authentication process can be simplified.

In addition, you can increase the security by using a stable session between the Push Client and the Push Hub.

In addition, even if the number of applications increases, the download / execution procedure of the applications can be simplified.

1 is a view showing an example of an application authentication system according to the present invention.
Figure 2 is a block diagram schematically showing the configuration of a user terminal according to the present invention.
Figure 3 is a block diagram schematically showing the configuration of a push hub according to the present invention.
4 and 5 illustrate an application authentication method according to the present invention.

The foregoing and other objects, features, and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: FIG.

1 is a diagram illustrating an example of an application authentication system according to the present invention.

Referring to FIG. 1, the application authentication system includes a user terminal 100, a push hub 200, and a service providing device 300. Here, the user terminal is equipped with a push client 150, the push client 150 may be mounted on the user terminal 100 from the beginning (preloaded or embedded), or may be mounted via download. have.

Hereinafter, it will be described on the assumption that the push client 150 is mounted on the user terminal 100.

When the user terminal 100 downloads and installs an application by a user or an external input, or when an application is requested to be executed, the user terminal 100 receives authentication information from the push hub 200 and authenticates the use of the application using the received authentication information. do. Here, the authentication information may be a terminal authentication key or an authentication key, wherein the authentication key is a key for authenticating an application use of the user terminal 100, and includes application identification information, user terminal identification information, application identification information and user terminal identification information. It may be generated based on at least one of the combination.

Hereinafter, when the authentication information is 1) the terminal authentication key, that is, when the application authentication is performed, that is, the user terminal 100 equipped with the push client 150 shares the terminal authentication key with the push hub 200, When the application is installed or executed, the application authentication using the terminal authentication key shared with the push hub 200, and 2) If the authentication information is the authentication key, that is, the user is installed or executed after the user, A case in which the terminal 100 performs application authentication using the authentication key generated through the app authentication request to the push hub 200 will be described.

First, the authentication information is a terminal authentication key.

The user terminal 100 equipped with the push client 150 transmits a terminal authentication request signal including terminal identification information to the push hub 200. Thereafter, when the authentication completion signal for the user terminal 100 is received from the push hub 200, the user terminal 100 maintains a session with the push hub 200. Here, the authentication completion signal includes a terminal authentication key, the terminal identification information is a phone number, Universal Subscribe Identifier Module (USIM) information, International Mobile Equipment Identity (IMEI), ID (Idendifier or Identification), MAC address (Mac) Address) and the like.

In addition, the push client 150 is mounted on the user terminal 100 in order to connect with the push hub 200, the push client 150 provides information required for application authentication with other applications such as KakaoTalk, My People, Viber Give and take Here, the information required for application authentication may include a terminal authentication key, an authentication key, and the like.

Therefore, when the application such as KakaoTalk, My People, etc. is downloaded and installed or the execution of the application is requested, the user terminal 100 generates an authentication key using a terminal authentication key and an authentication mechanism unique to the app, The use of the application is authenticated using the generated authentication key. Here, the app-specific authentication mechanism may be, for example, an app unique key. That is, since the application has a unique key value (app unique key), the user terminal 100 generates a new authentication key by combining the terminal authentication key transmitted from the push hub 200 and the application unique key of the application, The generated authentication key is transmitted to the service providing apparatus 300 providing the application, thereby performing authentication on the use of the application. In this case, since the service providing apparatus 300 knows both the terminal authentication key and the app unique key, the service providing apparatus 300 may authenticate the use of the application of the user terminal 100.

When the user terminal 100 shares the terminal authentication key with the push hub 200, even if the application is downloaded and installed later or the execution is requested for the application, the user terminal 100 does not go through a separate authentication process and shares it with the push hub 200. The application can be installed or executed using the terminal authentication key.

Next, the authentication information is an authentication key.

In this case, the user terminal 100 may simplify the application use authentication procedure without sharing the terminal authentication key with the push hub 200. That is, when the application is downloaded and installed or the application is requested to be executed, the user terminal 100 transmits an app authentication request signal to the push hub 200, and upon receiving the app authentication completion signal from the push hub 200, the app An application may be installed or executed using an authentication key included in the authentication completion signal. Here, the app authentication request signal includes terminal identification information, application identification information, and the like.

A detailed description of the user terminal 100 will be given with reference to FIG.

The push hub 200 generates authentication information when the push client 150 is mounted on the user terminal 100 or runs an application for installation / execution in the user terminal 100 to generate authentication information for the user terminal 100 and the service providing apparatus ( 300). Here, the authentication information may be a terminal authentication key or an authentication key for application use authentication of the user terminal 100. Therefore, when the push client 150 is mounted on the user terminal 100, the push hub 200 generates a terminal authentication key and transmits the generated terminal authentication key to the user terminal 100 and the service providing apparatus 300. In addition, when the application for installation or execution is driven in the user terminal 100, the push hub 200 generates an authentication key for authenticating the application use and transmits the authentication key to the user terminal 100 and the service providing apparatus 300. .

Similarly, when the authentication information is a terminal authentication key, the push hub 200 receives a terminal authentication request signal including the terminal identification information from the user terminal 100, and then checks an operator using the terminal identification information as a subscriber. Authenticate the user terminal 100. That is, the push hub 200 confirms the operator using the terminal identification information as a subscriber, determines whether the terminal identification information is registered in the subscriber's subscriber information database, and authenticates the terminal (user). Here, the operator performs a function of providing a communication service to the user terminal 100. When the user terminal 100 is authenticated, the push hub 200 generates a terminal authentication key, transmits an authentication completion signal including the generated terminal authentication key to the user terminal 100, and the user terminal 100. The terminal authentication key is shared with the terminal. When the user terminal 100 is authenticated, the push client 150 and the push hub 200 maintain a "secure session" mutually authenticated.

In addition, when the authentication information is an authentication key, the push hub 200 receives an app authentication request signal including the terminal identification information and the application identification information from the user terminal 100, and then authenticates the terminal (user) or the application. When the authentication is successful, an authentication key is generated and transmitted to the user terminal 100 and the service providing apparatus 300. At this time, the push hub 200 generates a unique authentication key for application use authentication based on at least one of a combination of application identification information, user terminal identification information, application identification information, and user terminal identification information.

Detailed description of the push hub 200 will be described with reference to FIG. 3.

The service providing apparatus 300 compares the authentication information from the push hub 200 with the authentication information from the user terminal 100 when the application is downloaded and installed in the user terminal 100 or when the execution of the application is requested. If there is a match, the application usage of the user terminal is authenticated. That is, when the service providing device 300 receives the terminal authentication key from the push hub 200, the service providing device 300 generates an authentication key using the terminal authentication key and the app unique key, and generates the authentication key and the user terminal 100. The authentication key received from the server is compared to authenticate the use of the application if there is a match. In addition, when the service providing device 300 receives the authentication key from the push hub 200, the service providing device 300 compares the received authentication key with the authentication key received from the user terminal.

In addition, the service providing device 300 initiates the connection in conjunction with the push hub 200, and controls the user terminal 100 to maintain the connection.

The service providing device 300 refers to a device that provides a real-time service such as KakaoTalk, My People, Naver Line, Nate On Talk, and the like.

The service providing apparatus 300 performs a real time service based on a web or a wireless application protocol (WAP). In addition, service data and update data transmitted and received to provide a real-time service may be expressed in a hypertext markup language (HTML) or a wireless markup language (WML).

Although illustrated as having one service providing apparatus 300 here, it may actually be configured with a plurality of service providing apparatuses. When configured as a plurality of service providing apparatuses, each terminal may access one of the plurality of service providing apparatuses according to a random or predetermined access rule to receive real-time service.

2 is a block diagram schematically showing the configuration of a user terminal according to the present invention.

Referring to FIG. 2, the user terminal 100 receives an application 120 that receives a push service from a plurality of service providing apparatuses, a push client 150 that requests a connection to a push hub in cooperation with the application 120, and stores the push client 150. The unit 170 is included.

When the application 120 downloads and installs an application by a user or an external input, or when an application is requested to be executed, the application 120 requests registration of app authentication to the push client 150 to receive authentication information from the push client 150. The service providing device and the application use authentication are performed using the received authentication information. That is, when the application 120 is downloaded, installed, or requested to be executed, the application 120 may receive a terminal authentication key shared with the push hub from the push client 150 or may receive an authentication key generated at the push hub. Here, the authentication key generated in the push hub is an authentication key for authenticating the application use of the user terminal 100, and is generated based on at least one of a combination of application identification information, user terminal identification information, application identification information, and user terminal identification information. Can be.

Hereinafter, the case where the application 120 authentication is performed when the authentication information is the terminal authentication key and the case where the application 120 authentication is performed when the authentication information is the authentication key will be described.

First, the authentication information is a terminal authentication key.

When the application 120 receives the terminal authentication key from the push client 150, the application 120 generates an authentication key using the received terminal authentication key and an app-specific authentication mechanism, and services the generated authentication key. Authentication may be performed by transmitting to a providing device. The push client 150 mounted on the user terminal 100 transmits a terminal authentication request signal including terminal identification information to the push hub.

Thereafter, the push client 150 receives the terminal authentication key from the push hub, and transmits the terminal authentication key to the application 120 when the application authentication registration is requested from the application 120 requested to be installed or executed. That is, the push client 150 performs terminal authentication with the push hub to share the terminal authentication key with the push hub.

Then, when the installation or execution of the application 120 is requested, the application 120 requests the push client 150 to register the app authentication, and the push client 150 uses the terminal authentication key received from the push hub to the application ( 120). Then, the application 120 generates an authentication key using a terminal authentication key and an app-specific authentication mechanism, and performs authentication with a service providing device using the generated authentication key. In this case, since the device for providing a service shares the terminal authentication key with the push hub, the same authentication as that generated by the application 120 using the terminal authentication key and an application-specific authentication mechanism of the corresponding application 120 is performed. A key is generated and the user terminal is authenticated to use the application 120 using the generated authentication key.

When the push hub and the push client 150 share the terminal authentication key as described above, the application 120 shares the terminal authentication key with the push client 150, the application of the service providing device to the push hub and terminal authentication key Share to authorize application 120 usage.

When the push client 150 and the push hub only perform authentication once through this, each application performs authentication using the terminal authentication key of the push client 150, so that a separate authentication process does not need to be performed. For example, if you want to install or run 10 applications, if you share the terminal authentication key with one-time authentication between the push client 150 and the push hub, it is necessary to authenticate 10 times when installing or running 10 applications. 10 applications can be installed or executed using the shared terminal authentication key.

Next, the authentication information is an authentication key.

When the application 120 receives the authentication key from the push client 150, the application 120 may transmit the received authentication key to a service providing device to perform authentication.

When the push client 150 receives an app authentication registration request from the application 120 that is requested to be installed or executed, the push client 150 transmits an app authentication request signal to the push hub, receives an authentication key from the push hub, and transmits the received authentication key to the application 120. do. Then, the application 120 performs authentication with the service providing device using the authentication key. In this case, since the service providing apparatus shares the authentication key with the push hub, the user terminal 100 may authenticate the user terminal 100 to use the application 120 using the authentication key.

The storage unit 170 stores various information and applications for using the communication network of the user terminal 100.

3 is a block diagram schematically showing the configuration of a push hub according to the present invention.

Referring to FIG. 3, the push hub 200 includes a communication unit 210, a subscriber information database 220, and an authentication processor 230.

The communication unit 210 performs communication with a service providing device and a user terminal.

The communication unit 210 is connected through a communication network such as a local area network, a wired communication network, and a wireless communication network, and is, for example, a wireless LAN (WLAN), a Wi-Fi, a Wibro, a Wima, a WiMAX, or an HSDPA (High). It uses various communication methods such as Speed Downlink Packet Access (Ethernet), xDSL (ADSL, VDSL), Hybrid Fiber Coaxial Cable (HFC), Fiber to The Curb (FTTC), and Fiber To The Home (FTTH).

The subscriber information DB 220 stores information on subscribers subscribed to each operator, that is, terminal identification information of service subscribers and information on applications installed in each terminal. Here, the terminal identification information includes a phone number, USIM information, IMEI, ID, MAC address, and the like. Therefore, the terminal or the application may be authenticated using the information stored in the subscriber information database 220.

In addition, the subscriber information DB 220 stores authentication information of a user terminal equipped with a push client. The authentication information stored in the subscriber information DB 220 is shared with the user terminal and the service providing apparatus, and used to authenticate the use of the application when a user terminal downloads / installs or executes an application. Here, the authentication information may be a terminal authentication key, an authentication key for application authentication.

The authentication processor 230 generates a terminal authentication key or an authentication key for application use authentication of the user terminal according to a request of the user terminal and transmits the generated authentication key to the user terminal or the service providing apparatus.

Hereinafter, the case where the authentication processing unit 230 generates the terminal authentication key and the case of generating the authentication key will be described.

First, the authentication processing unit 230 generates a terminal authentication key. After receiving the terminal authentication request signal including the terminal identification information from the user terminal through the communication unit 210, the authentication processor 230 confirms an operator using the terminal identification information as a subscriber to perform terminal authentication, and the terminal If authentication is successful, a terminal authentication key is generated and transmitted to the user terminal and the service providing apparatus. That is, when the terminal identification information is registered in the subscriber information database 220, the authentication processor 230 determines that the terminal is an authenticated terminal, generates a terminal authentication key, and uses the generated terminal authentication key as a user terminal and a service providing apparatus. To send.

Next, the authentication processing unit 230 generates an authentication key.

After receiving the app authentication request signal including the terminal identification information and the application identification information from the user terminal through the communication unit 210, the authentication processor 230 performs authentication of the user terminal and the application installed in the user terminal, and the user If authentication of the terminal and the application is successful, an authentication key is generated and transmitted to the user terminal and the service providing apparatus.

That is, when the app authentication request signal is received, the authentication processor 230 determines whether the terminal identification information is registered in the subscriber information database 220 and whether the application corresponding to the application identification information can be used. And authenticate the application. When the user terminal and the application are authenticated, the authentication processor 230 generates an authentication key based on at least one of application identification information, user terminal identification information, a combination of application identification information and user terminal identification information, and the generated authentication. The key is transmitted to the user terminal and the service providing apparatus.

4 is a diagram illustrating an application authentication method according to an embodiment of the present invention. That is, FIG. 4 illustrates a method for performing application authentication using a terminal authentication key shared with the push hub when an application is installed or executed after the user terminal equipped with the push client shares the terminal authentication key with the push hub. Indicates.

Referring to FIG. 4, the push client 150 mounted in the user terminal 100 transmits a terminal authentication request signal including terminal identification information to the push hub 200 (S402).

Thereafter, the push hub 200 confirms an operator using the terminal identification information included in the terminal authentication request signal as a subscriber and authenticates the user terminal 100 (S404).

If the authentication result of the user terminal 100 in step S404 is authenticated, the push hub 200 generates a terminal authentication key (S406), and the generated terminal authentication key to the user terminal 100 and the service providing apparatus 300 To transmit (S408). Through this, the push client 150 and the push hub 200 share the terminal authentication key, and when the installation or execution of the application 120 is requested from the user terminal 100 later, the application using the terminal authentication key You are authorized to use it.

After the execution of the step S408, if the application is downloaded and installed in the user terminal 100 or the application execution is requested (S410), the application 120 transmits an app authentication registration request signal to the push client 150 (S412), The push client 150 transmits the terminal authentication key received from the push hub 200 to the application 120 (S414).

The application 120 generates an authentication key using (or in combination with) a terminal authentication key received from the push hub 200 and an app-specific authentication mechanism (Schanism), and the terminal authentication key and the app unique. Using the authentication key generated through the authentication mechanism of the service providing device 300 and authenticates the use of the application (S418). Here, the app-specific authentication mechanism may be, for example, an app unique key.

That is, since the service providing device 300 has a terminal authentication key from the push hub 200 and knows an app-specific authentication mechanism of the application 120, the service providing device 300 may use a combination of the terminal authentication key and the app-specific authentication mechanism. Create an authentication key. Thereafter, the service providing apparatus 300 compares the authentication key received from the application 120 with its own authentication key to perform application use authentication.

5 is a view showing an application authentication method according to another embodiment of the present invention. That is, FIG. 5 is a diagram illustrating a method for a user terminal to perform application authentication using an authentication key generated in a push hub through an app authentication request to a push hub.

Referring to FIG. 5, when the application 120 is downloaded and installed in the user terminal 100 or an application execution request is requested (S502), the application 120 transmits an app authentication registration request signal to the push client 150 ( S504).

Thereafter, the push client 150 transmits an app authentication request signal including the terminal identification information and the application identification information to the push hub 200 (S506).

The push hub 200 performs authentication of the user terminal and the application on the basis of the received app authentication request signal (S508), and if the authentication of the user terminal and the application is successful, generates an authentication key to push the client 150. And transmits to the service providing apparatus 300 (S512). In this case, the push hub 200 generates a unique authentication key for authenticating an application use of the user terminal 100 based on at least one of application identification information, user terminal identification information, application identification information, and user terminal identification information. do.

When step S512 is performed, the push client 150 transmits the authentication key from the push hub 200 to the application 120 (S514), the application 120 uses the authentication key received from the push client 150. By using the service providing device 300 to authenticate the application (S516).

That is, since the service providing device 300 has an authentication key from the push hub 200, the service providing device 300 compares the authentication key received from the application 120 with its own authentication key to perform application use authentication.

Meanwhile, according to another aspect of the present invention, in a method for authenticating an application by a push hub, when a terminal authentication request signal including terminal identification information is received from a user terminal, the terminal identification information is transmitted to a subscriber from a subscriber information database. Confirming an operator to perform user terminal authentication, and if the user terminal authentication is successful, generating an terminal authentication key and transmitting the generated user authentication key to the user terminal and the service providing apparatus as a program And recorded on a recording medium readable by the electronic device.

According to another aspect of the present invention, in a method for authenticating an application by a user terminal, a push client transmits a terminal authentication request signal including terminal identification information to a push hub and receives a terminal authentication key from the push hub. Step, the application transmits an app authentication registration request signal to the push client, the push client transmits the terminal authentication key received from the push hub to the application, the application is the received terminal authentication key and the app Generating an authentication key using a unique authentication mechanism, and performing use authentication for transmitting the generated authentication key to a service providing device, on a recording medium recorded by the program and readable by the electronic device. Can be recorded.

According to another aspect of the present invention, in a method for authenticating an application by a push hub, when the app authentication request signal including the terminal identification information and the application identification information is received from the user terminal, the user using a subscriber information database Performing authentication of a terminal and an application installed in the user terminal, and when authentication of the user terminal and the application is successful, generating an authentication key for authenticating an application use of the user terminal, and the user terminal and the service providing apparatus. An application authentication method comprising the step of transmitting to a computer may be recorded as a program and recorded on a recording medium readable by the electronic device.

According to another aspect of the present invention, in a method of authenticating an application by the user terminal, the application transmits an app authentication registration request signal to the push client, the push client sends an app authentication request signal to the push hub, Receiving an authentication key for the application use authentication from the push hub and transmitting to the application, the application authentication method comprising the step of transmitting the authentication key to the service providing device to perform the use authentication recorded by the program And recorded on a recording medium readable by the electronic device.

Such an application authentication method can be written in a program, and codes and code segments constituting the program can be easily inferred by a programmer in the art. In addition, a program relating to an application authentication method may be stored in a readable media readable by an electronic device, and read and executed by the electronic device.

Thus, those skilled in the art will appreciate that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. It is therefore to be understood that the embodiments described above are to be considered in all respects only as illustrative and not restrictive. The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

The present invention performs mutual authentication between a push client mounted on a user terminal and a push hub, thereby eliminating the procedure of entering an authentication number each time the application is downloaded / installed or executed, thereby downloading / installing or executing the application. It can be applied to an application authentication system and method that can simplify the procedure and increase security by using a stable session between the push client and the push hub.

100: user terminal 120: application
150: push client 170: storage
200: push hub 210: communication unit
220: subscriber information DB 230: authentication processing unit
300: service providing device

Claims (15)

The terminal authentication request signal including the terminal identification information is transmitted to the push hub to receive the terminal authentication key from the push hub, when the application is installed or the application is requested to use, using the terminal authentication key and the app-specific authentication mechanism Generating an authentication key and transmitting the generated authentication key to a service providing apparatus;
When the terminal authentication request signal is received from the user terminal, the user authentication is performed by checking the operator using the terminal identification information as a subscriber from the provided subscriber information database, and if the user terminal authentication is successful, the terminal authentication key A push hub (PUSH HUB) for generating and transmitting to the user terminal and the service providing apparatus; And
A service providing apparatus for comparing the authentication key received from the user terminal with the authentication key received from the push hub, and authenticating an application use of the user terminal if they match;
Application authentication system comprising a. The method of claim 1,
App-specific authentication mechanism is an application authentication system, characterized in that the app unique key. A communication unit for communicating with a service providing device or a user terminal;
A subscriber information database storing identification information of user terminals and information on an application installed in each user terminal; And
When the terminal authentication request signal including the terminal identification information is received from the user terminal, the user terminal authentication is performed by checking an operator using the terminal identification information as a subscriber from the subscriber information database, and the user terminal authentication is successful. An authentication processor for generating a terminal authentication key and transmitting the generated terminal authentication key to the user terminal and the service providing apparatus;
Push hub comprising a. A push client transmitting a terminal authentication request signal including terminal identification information to a push hub to receive a terminal authentication key, and when an app authentication registration request signal is received from an application, transmitting the terminal authentication key to the application; And
The app authentication registration request signal is transmitted to the push client to receive a terminal authentication key from the push client, generate an authentication key using the received terminal authentication key and an application-specific authentication mechanism, and then generate the generated authentication. An application that transmits a key to a service providing apparatus to perform use authentication;
. ≪ / RTI > 5. The method of claim 4,
The app authentication registration request signal is transmitted to the push client when the application is installed or the application execution is requested. 5. The method of claim 4,
The user-specific authentication mechanism is an app unique key. When an application is installed or an application is requested to be executed, an app authentication request signal including terminal identification information and application identification information is transmitted to a push hub to receive an authentication key from the push hub and provide the received authentication key as a service. A user terminal transmitting to the device;
When an app authentication request signal is received from the user terminal, authentication of the user terminal and the application is performed using the provided subscriber information database, and if authentication of the user terminal and the application is successful, A push hub for generating an authentication key for authenticating an application use and transmitting the generated authentication key to the user terminal and the service providing apparatus;
A service providing apparatus for comparing the authentication key received from the user terminal with the authentication key received from the push hub, and authenticating an application use of the user terminal if they match;
Application authentication system comprising a. 8. The method of claim 7,
The push hub generates a unique authentication key for authenticating an application use of the user terminal based on at least one of application identification information, user terminal identification information, application identification information, and user terminal identification information. system. A communication unit for communicating with a service providing device or a user terminal;
A subscriber information database storing identification information of user terminals and information on an application installed in each user terminal; And
Receives an app authentication request signal including terminal identification information and application identification information from the user terminal, performs authentication of the user terminal and the application installed in the user terminal using the subscriber information database, the user terminal and the An authentication processing unit for generating an authentication key for authenticating an application use of the user terminal and transmitting the generated authentication key to the user terminal and the service providing apparatus when authentication of the application is successful;
Push hub comprising a. 10. The method of claim 9,
And the authentication processor generates a unique authentication key for authenticating an application use based on at least one of application identification information, user terminal identification information, application identification information, and user terminal identification information. An application that transmits an app authentication registration request signal to a push client to receive an authentication key, and transmits the authentication key to a service providing device to perform use authentication; And
A push client that transmits an app authentication request signal to a push hub when the app authentication registration request signal is received from the application, and receives an authentication key from the push hub and transmits the authentication key to the application;
Lt; / RTI > 12. The method of claim 11,
The app authentication registration request signal is transmitted to the push client when the application is installed or the application execution is requested. In the method for authenticating an application,
Receiving, by the push hub, a terminal authentication request signal including terminal identification information from the user terminal;
Generating, by the push hub, an authentication and a terminal authentication key for the user terminal based on the terminal identification information;
The push hub is made to include the step of transmitting the generated terminal authentication key to the user terminal and the service providing device,
The terminal authentication key is generated when the authentication for the user terminal is successful,
The authentication of the user terminal is an application authentication method, characterized in that performed through the operator confirmation to the terminal identification information as a subscriber from the subscriber information database previously stored in the push hub. 14. The method of claim 13,
Generating an authentication key using a terminal authentication key received from the push hub and an application-specific authentication mechanism when an application is installed or an application is requested to be executed in the user terminal; And
And transmitting the generated authentication key from the user terminal to the service providing apparatus. 15. The method of claim 14,
And comparing the authentication key received from the user terminal with the authentication key received from the push hub in the service providing apparatus, and authenticating an application use of the user terminal if they match. .

Images