METHOD OF AUTHENTICATING USER, SERVER AND MOBILE TERMINAL PERFORMING THE SAME

• US 20140215563A1
• Filed: 04/02/2013
• Published: 07/31/2014
• Est. Priority Date: 04/05/2012
• Status: Active Grant

• Current Assignee: LG CNS Company Limited (LBHunet Co., Ltd.)
• Original Assignee: LG CNS Company Limited (LBHunet Co., Ltd.)
• Inventors: Kang, Min
• Granted Patent: US 9,532,216 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

A user authenticating method is performed by a user authenticating server connectable to at least one mobile terminal and a user terminal. The user authenticating method includes: receiving access information of a network including an access identification code and an access location code from the user terminal; estimating an access location of a network based on the access location code; determining at least one mobile terminal associated with the access identification code; transmitting the estimated access location of a network to the at least one mobile terminal; and receiving a location-based access approval or access rejection determined based on the access location of a network and a location of a particular mobile terminal belonging to the at least one mobile terminal from the particular mobile terminal.

Claims

1. A user authenticating method performed by a user authenticating server connectable to at least one mobile terminal and a user terminal, the user authenticating method comprising:

receiving access information of a network including an access identification code and an access location code from the user terminal;

estimating an access location of a network based on the access location code;

determining at least one mobile terminal associated with the access identification code;

transmitting the estimated access location of a network to the at least one mobile terminal; and

receiving a location-based access approval or access rejection determined based on the access location of a network and a location of a particular mobile terminal belonging to the at least one mobile terminal from the particular mobile terminal.

2. The user authenticating method of claim 1, wherein the receiving of the location-based access approval or access rejection comprises:

when the estimated access location of a network and the location of the particular mobile terminal fall within a particular error range, receiving the location-based access approval automatically determined by the mobile terminal or determined by a user approval; and

when the estimated access location of a network and the location of the particular mobile terminal do not fall within the particular error range, receiving the location-based access rejection automatically determined by the mobile terminal.

3. The user authenticating method of claim 2, wherein the receiving of the location-based access approval or access rejection further comprises:

when the location-based access rejection is automatically received by the mobile terminal because the estimated access location and the location of the particular mobile terminal do not fall within the particular error range, requesting an access approval from a user associated with the network service.

4. The user authenticating method of claim 3, wherein the receiving of the location-based access approval or access rejection comprises:

when the location-based access approval is received from the particular mobile terminal, disregarding location-based access approvals or access rejections from the other remaining mobile terminals.

5. The user authenticating method of claim 4, further comprising:

when the location-based access approval or access rejection is finally determined, notifying at least some of the at least one mobile terminal about the determination.

6. The user authenticating method of claim 1, wherein the user authenticating server corresponds to at least one of:

an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

7. The user authenticating method of claim 1, wherein the access location code corresponds to a network address.

8. The user authenticating method of claim 7, wherein the estimating of the access location of a network further comprises:

converting the network address into location information already used by the at least one mobile terminal.

9. The user authenticating method of claim 1, wherein the already used location information includes location data converted by a global positioning system (GPS), a WiFi-based positioning system (WPS), or a cellular-based positioning system (CPS).

10. A user authenticating method performed by a mobile terminal connectable to a user authenticating server, the user authenticating method comprising:

receiving an access location of a network and an access approval request from the user authenticating server;

estimating a location of the mobile terminal; and

approving or rejecting the access approval request based on location information regarding the access location of a network and the estimated location of the mobile terminal.

11. The user authenticating method of claim 10, wherein the user authenticating server corresponds to at least one of:

an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

12. The user authenticating method of claim 10, wherein the approving or rejecting the access approval request comprises:

automatically approving the access approval request when the access location of a network and the estimated location of the mobile terminal fall within a particular error range.

13. The user authenticating method of claim 10, wherein the approving or rejecting the access approval request further comprises:

displaying the access location of a network and the estimated location of the mobile terminal on a map.

14. The user authenticating method of claim 13, wherein the approving or rejecting the access approval request further comprises:

prompting an access approval request from a user on the displayed map.

15. The user authenticating method of claim 10, wherein the approving or rejecting the access approval request further comprises:

prompting the access approval, determined based on a distance between the access location of a network and the estimated location of the mobile terminal, from the user.

16. The user authenticating method of claim 10, wherein the estimating of the location of the mobile terminal includes at least one of global positioning system (GPS)-based location information, WiFi-based positioning system (WPS)-based location information, and cellular-based positioning system (CPS)-based location information.

17. A user authenticating server connectable to at least one mobile terminal and a user terminal, the user authenticating server comprising:

an access information receiving unit configured to receive access information including an access identification code and an access location code from the user terminal;

an access location estimating unit configured to estimate an access location of a network based on the access location code;

an access information transmitting unit configured to determine at least one mobile terminal associated with the access identification code, and transmit the estimated access location of a network to the at least one mobile terminal; and

an access permission receiving unit configured to receive a location-based access approval or access rejection determined based on the estimated access location of a network and a location of a particular mobile terminal belonging to the at least one mobile terminal from the particular mobile terminal.

18. The user authenticating server of claim 17, wherein, when the estimated access location of a network and the location of the particular mobile terminal fall within a particular error range, the access permission receiving unit receives the location-based access approval automatically determined by the mobile terminal or determined under a user approval, and when the estimated access location of a network and the location of the particular mobile terminal do not fall within the particular error range, the access permission receiving unit receives the location-based access rejection automatically determined by the mobile terminal.

19. The user authenticating server of claim 18, wherein, when the location-based access rejection is automatically received by the mobile terminal because the estimated access location of a network and the location of the particular mobile terminal do not fall within the particular error range, the access permission receiving unit requests an access approval from a user associated with the network service.

20. The user authenticating server of claim 19, wherein, when the location-based access approval is received from the particular mobile terminal, the access permission receiving unit disregards location-based access approvals or access rejections by the other remaining mobile terminals.

21. The user authenticating server of claim 20, further comprising:

an access notifying unit configured to notify at least some of the at least one mobile terminal about content of determination, when the location-based access approval or access rejection is finally determined.

22. The user authenticating server of claim 17, wherein the user authenticating server corresponds to an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

23. The user authenticating server of claim 17, wherein the access location code corresponds to a network address.

24. The user authenticating server of claim 23, wherein the access location estimating unit converts the network address into location information already used by the at least one mobile terminal.

25. The user authenticating server of claim 24, wherein the already used location information includes location data converted by a global positioning system (GPS), a WiFi-based positioning system (WPS), or a cellular-based positioning system (CPS).

26. A mobile terminal connectable to the user authenticating server and performing network service accessing, the mobile terminal comprising:

an access approval request receiving unit configured to receive an access location of a network and an access approval request from the user authenticating server;

a location estimating unit configured to estimate a location of the mobile terminal; and

an access approving unit configured to approve or reject the access approval request based on location information regarding the access location of a network and the estimated location of the mobile terminal.

27. The mobile terminal of claim 26, wherein the user authenticating server corresponds to an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

28. The mobile terminal of claim 26, wherein when the access location of a network and the estimated location of the mobile terminal fall within a particular error range, the access approving unit automatically approves the access approval request.

29. The mobile terminal of claim 26, wherein the access approving unit displays the access location of a network and the estimated location of the mobile terminal on a map.

30. The mobile terminal of claim 29, wherein the access approving unit prompts an access approval request from a user displayed on the map.

31. The mobile terminal of claim 26, wherein the access approving unit prompts an access approval request, determined based on a distance between the access location of a network and the estimated location of the mobile terminal, from a user.

32. The mobile terminal of claim 26, wherein the location estimating unit determines the location of the mobile terminal based on at least one of global positioning system (GPS)-based location information, WiFi-based positioning system (WPS)-based location information, and cellular-based positioning system (CPS)-based location information.