WO2017213399A1

WO2017213399A1 - System and method for operating application password and enhancing security thereof

Info

Publication number: WO2017213399A1
Application number: PCT/KR2017/005863
Authority: WO
Inventors: 양기호
Original assignee: 양기호
Priority date: 2016-06-07
Filing date: 2017-06-05
Publication date: 2017-12-14
Also published as: KR20170138358A

Abstract

The present invention relates to a system and method for operating an application password and enhancing the security thereof, and the system for operating an application password and enhancing the security thereof according to the present invention comprises an application (app) management apparatus for receiving, from an app operating terminal, a password required to usually use an app or a password required to use an app with enhanced security so as to perform authentication and remotely manage an operation of the app according to the result of the authentication, wherein the app management apparatus comprises: an app subscription processing unit for receiving, from the app operating terminal, a log-in ID, a log-in password, and an additional password, so as to process a user's subscription to an app; and a title display unit for performing control such that the additional password is displayed in a certain area on the app operating terminal.

Description

Application password management and security hardening system and method

This application claims the priority based on Korean Patent Application No. 10-2016-0070556 filed on June 07, 2016, and all the contents disclosed in the specification and drawings of the application are incorporated in this application.

The present invention relates to a system and method for strengthening password security of an application (hereinafter, referred to as an 'app'), and more specifically, to log in a general app when a lost or recovered app or a password for strong authentication is required when operating an app. The present invention relates to an application password management and security enhancement system and method that performs more secure authentication than a user name and password used in a web application.

Recently, as mobile devices such as smartphones, tablet PCs, and wearable devices having various functions and high performances are widely distributed to users, convenience of users in everyday life is increasing.

Due to the increase in the computing and processing power of the mobile terminal and the increase in storage capacity, apps that provide various services are continuously developed and widely spread to users. The types of services provided by these apps include things that interest users, such as social networking services and game services using a web server, services that increase user productivity, such as simple document editing and user scheduling, and users. There are various forms of services that store credit cards and personal information.

On the other hand, in the case of an app that provides a service for storing a user's credit card or personal information, not only providing convenience for the user but also enhancing security is a hot issue. In particular, when a user loses an app and recovers it again, or performs a mobile banking using the app, it is generally necessary to perform a more secure authentication than an ID and password used when logging in to an app.

Regarding the security method using various passwords, when a long password is set, a long password must be input every time the app is logged, which causes difficulties and inconveniences for memorization of the user and can easily be forgotten. On the other hand, in case of a short password, the user's convenience is guaranteed at the time of login, but it is easily cracked and there is a risk of exposing personal information to the app. There is a risk of being easily recovered by others.

On the other hand, login IDs and passwords used by users are often used the same in many other sites used by users, and short passwords are generally used for convenience of use. Therefore, there is a demand for the construction of an app security system that can guarantee the convenience of using the app and can also provide highly secure authentication.

In order to solve the problems of the prior art,

It is an object of the present invention to provide an extended security key by combining an additional password input with a password used for general login only when a necessity of performing an authentication with high security by receiving an additional password from a user is provided. It is to provide an application password operation and security enhancement system and method that provides a strong means of identity verification.

An object of the present invention is to provide an application password operation and security enhancement system and method for designating additional passwords input from the user as the title (title), folder name, etc. of the app to display prominently each time the user uses the app. will be.

In order to solve the problems of the prior art,

Application password operation and security strengthening system according to one aspect, in the application password management and security enhancement system, the authentication by receiving the password according to the daily use of the app or the application of the enhanced security of the app to perform authentication and authentication App management device for remote management of the app operation according to the results; App management device, App subscription processing unit for receiving the login ID, login password, and additional password from the app operating terminal to process the user's app subscription; And a title display unit which controls the additional password to be displayed in a predetermined area on the app operating terminal.

The app management device, the login authentication unit for receiving the login ID and login password from the app operation terminal to perform the authentication and the authentication result to the app operation terminal to manage the daily use of the app in the app operation terminal; It is characterized in that it further comprises.

The title display unit may control to display an additional password only when daily use of the app is permitted in the app operating terminal by authentication of the login authentication unit.

The app management device receives the security key combined with the login ID and the login password from the app operation terminal, performs authentication and transmits the authentication result to the app operation terminal to use the security of the app in the app operation terminal. Characterized in that it further comprises; authentication enhancement unit for managing the.

The enhanced security usage of the app may include at least one of a lost app recovery request and a mobile banking request through the app.

The app operating terminal, characterized in that the request to the app management device for authentication and performs the app operation according to the user's request according to the authentication result.

Application password operation and security enhancement device according to another aspect, Application password management and security enhancement device, the input unit for generating the user's input data in accordance with the daily use of the app or the use of enhanced security of the app; A display unit for displaying information processed by the app; And an app manager configured to perform authentication according to daily use of the app or use of enhanced security of the app, and manage app operation according to the authenticated result. The app manager may include a login ID, a login password, and Receive an additional password to process the user's app subscription, characterized in that to display the additional password in a predetermined area on the display unit.

The app manager may receive a login ID and a login password from the input unit, perform authentication, and manage daily use of the app according to the authentication result.

The app manager may display the additional password on the display unit only when authentication for daily use of the app is permitted.

The app manager, by receiving a security key combined with a login ID and a login password from the input unit to perform the authentication, characterized in that for managing the enhanced security of the app according to the authentication result.

The present invention has the following effects by the above configuration.

According to the present invention, an additional password is added to the login password only when a user needs to perform authentication with only a user-specified password during general login, and when a high security authentication is required, such as when performing an app recovery or mobile banking using an app. Authentication is performed using the combined strong security key, which not only provides convenience of using the app in general, but also provides a strong identification means.

The present invention has the effect of continuously displaying additional passwords in a certain area of the app so that the user does not forget the additional password not used when using the app.

1 is a block diagram schematically illustrating an application password management and security enhancement system according to an embodiment.

FIG. 2 is a block diagram illustrating a configuration of an app management server of FIG. 1.

3 is an exemplary view illustrating information received from a user when registering an app according to an embodiment.

4 and 5 are exemplary diagrams in which an additional password input from a user upon app subscription is set as an app title according to an embodiment.

6 is an exemplary view illustrating information received from a user who wants to recover an app according to an embodiment.

7 is an exemplary view illustrating information received from a user who wants to log in according to an exemplary embodiment.

8 is a block diagram illustrating a configuration of an app operating terminal that performs app operation and app management according to another embodiment.

9 is a flowchart illustrating information processing received from a user upon app sign-up according to another embodiment.

10 is a flowchart illustrating in detail an application password management and security hardening method according to another embodiment.

Hereinafter, embodiments of the present invention will be described in more detail with reference to the accompanying drawings. The embodiments of the present invention can be modified in various forms, and the scope of the present invention should not be construed as being limited to the following embodiments. This embodiment is provided to more completely explain the present invention to those skilled in the art. In addition, although specific terms are used in the drawings and the specification of the present invention, they are used only for the purpose of illustrating the present invention and are not used to limit the scope of the present invention as defined in the meaning or the claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible from this. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

Next, the application password operation and security enhancement system and method of the present invention will be described in detail with reference to the accompanying drawings.

Referring to FIG. 1, an application password management and security enhancement system according to an embodiment includes an app management server 10, a network 20, and an app operation terminal 30.

App management server 10 receives the ID and password according to the application (hereinafter referred to as "app") use type according to the request of the app operating terminal 30 performs authentication, and the app operating terminal according to the authentication result App operation running in the 30 can be remotely managed. Here, the app usage type may include daily use of the app and security use of the app. In addition, the enhanced security use of the app may be required to authenticate by a highly secure password by combining an additional password with a login password required for daily use of the app. More details will be described in FIG. 2.

Network 20 is a medium used to provide a communication link between various devices and data processing systems that are connected to each other in an application cryptography and security enhancement system. The network 20 may include a connection, such as a wire, a wireless communication link, or an optical fiber cable. The network 20 may be a wide area network (WAN), a local area network (LAN), a wireless network of a WAN or a LAN, a mobile network, a virtual private network (VPN), the Internet, a general telephone. It may be implemented using or including a variety of different communication technologies, such as Public Switched Telephone Network (PSTN) or the like.

The app operating terminal 30 may receive a command for an app from the user and transmit a request for the command to the app management server 10. The app operation terminal 30 may receive an image chunk and a sound chunk for the app from the app management server 10, and decode and output the received image chunk and the sound chunk. According to an embodiment, the app operating terminal 30 may receive a command for an app usage type requested from a user and transmit an authentication request for the command to the app management server 10. The app operation terminal 30 may receive an authentication result from the app management server 10 and perform an app operation according to an app usage type according to the authentication result. According to another embodiment, the app operating terminal 30 may directly perform authentication for the type of app use requested by the user.

App operation terminal 30 is a PCS (Personal Communication System), GSM (Global System for Mobile communications), PDC (Personal Digital Cellular), PHS (Personal Handyphone System), PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication) -2000, Code Division Multiple Access (CDMA) -2000, W-Code Division Multiple Access (W-CDMA), Wireless Broadband Internet (Wibro), 3G, 4G, 5G Terminals, Smartphones, Tablet PCs, Notebooks Or a wired or wireless communication device such as a general PC. In addition, an example of the app operation terminal 30 may include all kinds of TV devices using an Internet line, such as an IPTV (Internet Protocol Television), a Smart TV, and a Connected TV.

FIG. 2 is a block diagram illustrating a configuration of an app management server of FIG. 1, and FIG. 3 is an exemplary view showing information received from a user when an app is registered according to an embodiment, and FIGS. 4 and 5 are apps according to an embodiment. FIG. 6 illustrates an example of setting an additional password input from a user when registering as an app title, and FIG. 6 is a diagram illustrating information received from a user who wants to recover an app according to an embodiment, and FIG. 7 illustrates login according to an embodiment. An example diagram showing information received from a desired user.

The app management server 10 may include a memory, a memory controller, one or more processors (CPUs), peripheral interfaces, input / output (I / O) subsystems, display devices, input devices, and communication circuits. The memory may include fast random access memory, and may also include one or more magnetic disk storage devices, nonvolatile memory such as flash memory devices, or other nonvolatile semiconductor memory devices. Access to memory by other components such as processors and peripheral interfaces may be controlled by the memory controller. The memory may store various information and program instructions, and the program is executed by the processor.

The peripheral interface connects an input / output peripheral of the app management server 10 with a processor and a memory. One or more processors execute various sets of software programs and / or instructions stored in memory to perform various functions and process data for the app management server 10. I / O subsystems provide an interface between input and output peripherals, such as display devices and input devices, and peripheral interfaces. The display device may use liquid crystal display (LCD) technology or light emitting polymer display (LPD) technology.

The processor is a processor configured to perform operations associated with the app management server 10 and to perform instructions, for example, using instructions retrieved from a memory, and receiving input and output data between components of the app management server 10. Operation can be controlled. The communication circuit performs communication via an external port or communication by an RF signal. The communication circuit converts an electrical signal into an RF signal and vice versa and can communicate with the communication network, other mobile gateway devices and communication devices through the RF signal.

Referring to FIG. 2, the app management server 10 may include an app subscription processing unit 11, a title display unit 13, an authentication reinforcing unit 15, and a login authentication unit 17, and these components may be hardware. Or it may be implemented in software or through a combination of hardware and software.

The app subscription processor 11 receives the login ID, the login password, and the additional password from the app operation terminal 30 to process the user's app subscription. Here, the app (app) is a program executed in the app operating terminal 30, for example, to provide a game service using a social network service and a web server or a service for providing simple document editing and user schedule management. Can be. According to an embodiment, the app may provide a service requiring high security, such as storing a user's credit card or personal information.

Referring to FIG. 3, a login ID and a login password PW are general user information used when a user logs in to various servers and devices. According to an embodiment, the app subscription processing unit 11 receives an additional password (A_PW) in addition to the general user information.

The title display unit 13 may display the additional password A_PW received from the app operating terminal 30 in a predetermined area of the display unit of the app operating terminal 30. According to an embodiment, the login authentication unit 17 App management terminal 30 can be controlled so that the additional password (A_PW) is displayed only when the daily use of the app is allowed in the app operation terminal 30 by the authentication of).

The additional password A_PW is information received from a user, and according to an embodiment, information used only when securely recovering an app is information that is not required for authentication for general app use such as login. Further, the additional password A_PW is displayed on the display only when it is recognized as a legitimate user by the login approval, thereby preventing the unauthorized third party from confirming the additional password A_PW.

4 and 5 show an example of an additional password A_PW, represented by a title T for any folder on the app or the app itself, according to an embodiment. 4 and 5, the additional password (A_PW) may use a phrase that is not commonly used, such as "Octopus's Garden", "Why always me?" This unusual phrase has the advantage of high security According to one embodiment, there is a disadvantage in that it is not required at the time of login, but only at the time of high security authentication, so that the user has a low chance of contact and is easy to forget even if the user inputs himself.

According to an embodiment of the present disclosure, the additional password A_PW input by the user upon signing up is displayed as a title T in a certain area of the app when the app is executed, so that the user can see and be aware of it every time the app is executed. This prevents the user from forgetting the additional password (A_PW). Here, the title T is not limited to a title of an arbitrary folder on the app or the app itself, and is used when the app is implemented as a phrase displayed at an arbitrary location on the app or a phrase linked to an emoticon or an icon. It includes all embodiments displayed in any position that can be identified.

The authentication reinforcement unit 15 receives the login ID (ID) and the security key (Security Key, S_PW) from the app operation terminal 30, performs authentication, and transmits the authentication result to the app operation terminal 30, the app. Remotely manages the enhanced security of the app performed in the operating terminal 30. App security enhancements are defined as those that involve strong user authentication processes, such as a lost app recovery request and a mobile banking request through the app. Here, the security key S_PW is a password having a high security strength because the length of the security password S_PW is combined with the additional password A_PW.

If the authentication reinforcement unit 15 according to an embodiment receives the user's app recovery command from the app operating terminal 30 according to the lost app, the application reinforcement process may determine whether to allow the app recovery. Referring to FIG. 6, when a user selects an 'app recovery' list and delivers an app recovery command to the app operating terminal 30, the app operating terminal 30 is extended from a user with a login ID and a length. Receives a high security key (S_PW).

Referring to FIG. 3, it is assumed that the login ID (ID), login password (PW), and additional password (A_PW) stored by the user when the app is registered are "Hong Gil-dong", "2017app", and "Octopus's Garden", respectively. Referring to FIG. 6, in order to request an app recovery, a user needs to go through a highly secure user authentication process by inputting a login ID and a security key S_PW. For the strong security authentication, the user is required to input not only the login ID (ID), the login password (PW) but also the additional password (A_PW), where the user inputs the title shown in FIGS. 4 and 5 as "Octopus's Garden." ", You can easily complete the authentication by entering the additional password (A_PW).

The login authentication unit 17 receives the login ID (ID) and the login password (PW) from the app operation terminal 30, performs authentication, and transmits the authentication result to the app operation terminal 30 to the app operation terminal 30. You can manage your daily use of the app. Referring to FIG. 3, a user must input a login ID (ID), a login password (PW), and an additional password (A_PW) when initially applying for an app subscription, but when using an app such as a login, as shown in FIG. 7, It is enough to enter only the login ID and login password (PW).

The app operating terminal 30 may include a memory, a memory controller, one or more processors (CPUs), peripheral interfaces, input / output (I / O) subsystems, display devices, input devices, and communication circuits. The memory may include fast random access memory, and may also include one or more magnetic disk storage devices, nonvolatile memory such as flash memory devices, or other nonvolatile semiconductor memory devices. Access to memory by other components such as processors and peripheral interfaces may be controlled by the memory controller. The memory may store various information and program instructions, and the program is executed by the processor.

The peripheral interface connects the input / output peripheral of the app operating terminal 30 with a processor and a memory. One or more processors execute a set of instructions stored in various software programs and / or memories to perform various functions and process data for the app operating terminal 30. I / O subsystems provide an interface between input and output peripherals, such as display devices and input devices, and peripheral interfaces. The display device may use liquid crystal display (LCD) technology or light emitting polymer display (LPD) technology.

The processor is a processor configured to perform an operation associated with the app operating terminal 30 and to perform instructions, for example, using instructions retrieved from a memory to receive input and output data between components of the app operating terminal 30. Operation can be controlled. The communication circuit performs communication via an external port or communication by an RF signal. The communication circuit converts an electrical signal into an RF signal and vice versa and can communicate with the communication network, other mobile gateway devices and communication devices through the RF signal.

Referring to FIG. 8, the app operating terminal 30 may include an input unit 31, a display unit 33, an app operating unit 35, and an app managing unit 37, and these components may be implemented in hardware or software. Or may be implemented through a combination of hardware and software.

App operation terminal 30 according to an embodiment, including the input unit 31, the display unit 33, the app operating unit 35 to execute the app, and is operated by remote management and control of the app management server 10. . App operation terminal 30 according to another embodiment may include an app management unit 37 in addition to the input unit 31, the display unit 33, the app operating unit 35, the app manager 37 App management server 10 described in Figures 2 to 7 can perform the function directly. Therefore, after receiving the application from the app management server 10, the app operating terminal 30 according to another embodiment may perform authentication related to the daily use and security enhanced use of the app by itself.

The input unit 31 generates input data for controlling the operation of the app operating terminal 30 by the user, and generates user input data according to the daily use of the app or the enhanced security use of the app. . The input unit 31 may include a key pad, a dome switch, a touch pad (constant voltage / capacitance), a jog wheel, a jog switch, and the like. According to an embodiment, the user inputs a login ID (ID), a login password (PW), and an additional password (A_PW) through the input unit 31.

The display unit 33 displays (outputs) information processed by the app operating terminal 30. For example, when the app operation terminal 30 is in the call mode, the user interface (UI) or graphic user interface (GUI) related to the call is displayed. When the app operating terminal 30 is in the video call mode or the shooting mode, it displays the taken or / and the received image, UI, GUI. According to an exemplary embodiment, the display unit 33 displays the additional password A_PW of the user input through the input unit 31 as a title T for any folder of the app or the app itself. 4 and 5, the display unit 33 may display an additional password A_PW such as "Octopus's Garden" and "Why always me?" As the title T of the app.

The display unit 33 includes a liquid crystal display (LCD), a thin film transistor-liquid crystal display (TFT LCD), an organic light-emitting diode (OLED), and a flexible display (flexible). display, a 3D display, or an e-ink display. Some of these displays can be configured to be transparent or light transmissive so that they can be seen from the outside. This may be referred to as a transparent display. A representative example of the transparent display is TOLED (Transparant OLED).

The app operator 35 decodes the app received from the app management server 10 and executes the app according to an algorithm. According to an embodiment, the app operator 35 is operated by remote management and control of the app management server 10. According to another embodiment, the app operating unit 35 is operated by the management and control of the app manager 37.

The app manager 37 may receive a password according to the app usage type from the input unit 31 to perform authentication and manage app operation according to the authenticated result. The app usage type includes daily use of the app and enhanced use of the app, and the enhanced use of the app is generated by combining an additional password (A_PW) with a login password (ID) required during the daily use of the app. The security key (S_PW) is executed as a result of authentication.

According to another embodiment, the app manager 37 may be realized as a program (app) that performs the function of the app management server 10 shown in FIG. Accordingly, the app manager 37 receives the user's login ID (ID), the login password (PW), and the additional password (A_PW) from the input unit 31 to authenticate the user's app subscription, and the additional password. A_PW may be displayed as a title T in a predetermined area on the display unit 33 that displays information processed by the app.

In addition, the app manager 37 may allow the user to log in by authenticating the user's login ID and login password PW from the input unit 31. In this case, according to an embodiment, the app manager 37 may display the additional password A_PW on the display 33 only when the user is allowed to log in. In addition, the app manager 37 may perform authentication on the login ID (ID) and the security key (S_PW) input by the user through the input unit 31 and manage the security enhancement of the app according to the authentication result. have. The security key S_PW is a password whose length is extended by combining the login ID ID and the login password PW with the additional password A_PW.

FIG. 9 is a flowchart illustrating processing of information received from a user when registering an app according to another embodiment. FIG. 10 is a flowchart illustrating an application password operation and security strengthening method according to another embodiment.

Referring to FIG. 9, an app password operation and security enhancement method includes an app subscription processing step (S91), a title display step (S93), and a user input information storage step (S95), in which a user can use an app. Set the environment on the app operating terminal 30 in the state.

In step S91, the app management server 10 receives the login ID (ID), the login password (PW), and the additional password (A_PW) from the app operating terminal 30 to process the user's app subscription. Here, the login ID (ID) and the login password (PW) correspond to general user information used by the user when logging in to various servers, devices, and the like. According to an embodiment, in step S91, the app operating terminal 30 receives an additional password (A_PW: additional password) in addition to the general user information.

In step S93, the app management server 10 displays the additional password A_PW received in the app subscription processing step S91 in a predetermined area of the display unit 23 of the app operation terminal 30. The additional password A_PW is information received from the user, and according to an embodiment, the personal information is used only when safely recovering an app without losing user-specified data, and is not used when using a general app such as a login. .

In step S93, the app management server 10 maps the login ID (ID), the login password (PW), and the additional password (A_PW) received in the app subscription processing step (S91) and stores them in a memory (not shown). do.

Referring to FIG. 10, after the app operating terminal 30 environment is set in a state in which the user can use the app as shown in FIG. 9, the app password operation and security strengthening method may include an app use request step (S110) and an app. Use type determination step (S120), security key input step (S130), security enhanced authentication step (S140), security use permission step (S150), login password input step (S160), general authentication step (S170), and general use Allow step (S180) may be included.

In step S110, the app management server 10 receives the user's app use request from the app operating terminal (30). According to an embodiment, a user's request for using an app may be divided into types of daily use of the app and security-enhanced use of the app. The daily use of the app is defined as a case that requires authentication to exclude the use of others in the use of the app, but does not require strong user authentication by emphasizing the user's convenience, for example, a login. In addition, the use of enhanced security of the app is defined as a case where high security is required for the use of the app, for example, when the Internet banking using the app or the app itself is recovered by losing the app.

In step S120, the app management server 10 distinguishes whether the user's request to use the app is a daily use of the app (S120, No), or whether the app uses enhanced security (S120, Yes). FIG. 10 illustrates an app recovery request as an embodiment of a type of enhanced security use of an app, but is not limited thereto, and includes all cases where high security is required for app use as described above.

If the user's request to use the app is used to enhance the security of the app (S120, Yes), proceed to the security key input step (S130). If the user's request to use the app is a daily use of the app (S120, No), the login password input step (S160) proceeds.

In step S130, the app management server 10 receives the login ID (ID) and the security key (S_PW) from the app management terminal (30). Here, the security key S_PW is a password whose length is extended by combining the login password PW with the additional password A_PW.

In step S140, the app management server 10 performs user authentication for the user information, that is, the login ID (ID) and the security key (S_PW) received from the app operating terminal (30). The user authentication is a process of checking whether the user is a legitimate party to the request for using the app requested by the user, and more specifically, the input login ID and the security key S_PW are used to secure the app. This is to check whether you have the authority to.

In step S150, the app management server 10 transmits the authentication result of the security enhanced authentication step (S140) to the app operating terminal 30 to manage the security enhanced use of the app in the app operating terminal (30). For example, if a user requests an app recovery and inputs a valid login ID and a security key (S_PW) to the app management terminal 30 and is authenticated by the app management server 10, the app management terminal ( The app can be restored at 30).

In step S160, the app management server 10 receives the login ID (ID) and the login password (PW) from the app operating terminal (30).

In step S170, the app management server 10 performs a user authentication for the user information, that is, the login ID (ID) and login password (PW) received from the app operating terminal (30). The user authentication is a process of checking whether the user is a legitimate party to the request for using the app requested by the user, and more specifically, the input login ID and the login password PW are used for general use of the app. This is to check whether you have permission.

In step S170, the app management server 10 transmits the authentication result of the general authentication step (S170) to the app operating terminal 30 to manage the daily use of the app in the app operating terminal (30). For example, if a user requests a login of an app and inputs a valid login ID (ID) and a login password (PW) into the app management terminal 30 and is authenticated by the app management server 10, the app management terminal At 30, login is allowed.

While this specification contains many features, such features should not be construed as limiting the scope of the invention or the claims. Also, the features described in the individual embodiments herein can be implemented in combination in a single embodiment. Conversely, various features described in a single embodiment herein can be implemented individually in various embodiments or in combination as appropriate.

Although the operations are described in a particular order in the drawings, they should not be understood as being performed in a particular order as shown, or in a sequence of successive orders, or all described actions being performed to obtain a desired result. . Multitasking and parallel processing may be advantageous in certain circumstances. In addition, it should be understood that the division of various system components in the above-described embodiments does not require such division in all embodiments. The program components and systems described above may generally be packaged in a single software product or multiple software products.

The method of the present invention as described above may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

Claims

In application password management and security hardening system,

App management device for receiving the password according to the daily use of the app or the enhanced security use of the app from the app operation terminal to perform authentication and remotely manage the operation of the app according to the authentication result;

The app management device,

An app subscription processor configured to receive a login ID, a login password, and an additional password from an app operating terminal to process a user's app subscription; And a title display unit controlling to display the additional password in a predetermined area on the app operating terminal.

Application password management and security enhancement system comprising a.
The method of claim 1,

The app management device,

A login authentication unit configured to receive a login ID and a login password from an app operation terminal, perform authentication, and transmit an authentication result to the app operation terminal to manage daily use of the app in the app operation terminal;

Application password management and security enhancement system further comprising.
The method of claim 2,

The title display unit,

Application password management and security strengthening system, characterized in that the control to display the additional password only when the daily use of the app in the app operating terminal by the authentication of the login authentication unit.
The method of claim 3,

The app management device,

Authentication reinforcement unit for receiving the security ID combined with the login ID and the login password from the app operation terminal to perform the authentication, and transmits the authentication result to the app operation terminal to manage the use of security enhancement of the app on the app operation terminal ;

Application password management and security enhancement system further comprising.
The method of claim 4, wherein

To use the security enhancement of the app,

Application password management and security enhancement system comprising at least one of a lost app recovery request, a mobile banking request through the app.
The method according to any one of claims 1 to 5,

The app operating terminal,

Application password management and security enhanced system, characterized in that for requesting authentication to the app management device and performing the app operation according to the user's request according to the authentication result.
In application password management and security hardening device,

An input unit for generating input data of a user according to daily use of an app or use of enhanced security of the app;

A display unit for displaying information processed by the app; And

Includes an app management unit for performing the authentication according to the daily use of the app or the enhanced security use of the app and manages the operation of the app according to the authentication result,

The app manager receives the login ID, the login password, and the additional password from the input unit, processes the user's app subscription, and displays the additional password in a predetermined area on the display unit. Device.
The method of claim 7, wherein

The app management unit,

Application password management and security strengthening device, characterized in that to receive the login ID and login password from the input unit to perform authentication and to manage the daily use of the app according to the authentication result.
The method of claim 8,

The app management unit,

Application password management and security enhancement device, characterized in that for displaying the additional password on the display only when authentication is allowed for the daily use of the app.
The method of claim 9,

The app management unit,

Application password management and security strengthening device, characterized in that for receiving the security key combined with an additional password to the login ID and the login password from the input unit to perform the authentication and to manage the use of the enhanced security of the app according to the authentication result.
The method of claim 13,

To use the security enhancement of the app,

Application password management and security enhancement device comprising at least one of a lost app recovery request, a mobile banking request through the app.