SYSTEM AND METHOD FOR SECURITY AUTHENTICATION VIA MOBILE DEVICE

• US 20150200936A1
• Filed: 07/22/2014
• Published: 07/16/2015
• Est. Priority Date: 01/10/2014
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: KIM, Soo Hyung, CHO, Young Seob, NOH, Jong Hyouk, CHO, Jin Man, CHO, Sang Rae, CHOI, Dae Seon, KIM, Seung Hyun, KIM, Seok Hyun, JIN, Seung Hun
• Application Number:
  US14/337,881
• Publication Number:
  US 20150200936A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Disclosed are a system for security authentication via a mobile device, which includes: a first terminal of a user which requests mobile authentication; a server which generates authentication information and a key for encryption, encrypts the authentication information with the key, and divides the key into first information and second information to transmit the first information to the first terminal and transmit the second information and the encrypted information to a second terminal of the user; and the second terminal which acquires the first information from the first terminal, generates the key based on the first information and the second information, and acquires the authentication information by using the generated key.

Claims

1. A system for security authentication via a mobile device, comprising:

a first terminal of a user configured to request mobile authentication;

a server configured to generate authentication information and a key for encryption in response to the request for the mobile authentication, encrypt the authentication information with the key, and divide the key into first information and second information to transmit the first information to the first terminal and transmit the second information and the encrypted information to a second terminal of the user different from the first terminal; and

the second terminal of the user configured to acquire the first information from the first terminal, generate the key based on the first information and the second information, and acquires the authentication information by using the generated key.

2. The system of claim 1, further comprising:

a third terminal configured to perform short-range wireless communication with the second terminal,

wherein the server transmits the second information and the encrypted information to the third terminal, and

the second terminal receives the second information and the encrypted information from the third terminal.

3. The system of claim 2, wherein the second terminal is connected to the third terminal, and

the third terminal transfers the second information and the encrypted information to the second terminal through near field communication (NFC), Bluetooth, or WiFi when receiving the second information and the encrypted information from the server.

4. The system of claim 1, further comprising:

a message server configured to transmit the second information and the encrypted information to the second terminal based on identification information received from the server,

wherein the server transmits the second information and the encrypted information to the second terminal through the message server.

5. The system of claim 1, wherein the encrypted information further includes server information, and

the second terminal acquires the server information together with the authentication information by using the generated key and transmits the authentication information to the server by using the server information.

6. The system of claim 1, wherein the encrypted information further includes an authentication purpose, and

the second terminal acquires the authentication purpose together with the authentication information by using the generated key and displays the authentication information and the authentication purpose on a screen.

7. The system of claim 1, wherein the encrypted information further includes an authentication purpose, and

the second terminal acquires the authentication purpose together with the authentication information by using the generated key, displays the authentication purpose on a screen, and transmits the authentication information to the server when the user verifies the authentication purpose.

8. The system of claim 1, wherein the second terminal acquires the first information from the first terminal by using at least one of camera photographing, a near field communication (NFC) touch, a Bluetooth connection button click, and a WiFi connection button click.

9. The system of claim 1, wherein the first terminal displays the first information received from the server on a screen in a quick response code (QR code) or bar code format, and

the second terminal reads the QR code or barcode displayed on the screen of the first terminal by using a camera to acquire the first information.

10. The system of claim 1, wherein the server transmits the second information and the encrypted information to the second terminal by using at least one of Internet connection with the second terminal, a short message service (SMS), a multimedia message service (MMS), and push notification.

11. A method for security authentication via a mobile device, comprising:

receiving, by a server performing mobile authentication, a request for mobile authentication from a first terminal of a user;

generating, by the server, authentication information and a key for encryption in response to the request for the mobile authentication;

encrypting, by the server, the authentication information with the key;

dividing, by the server, the key into first information and second information;

transmitting, by the server, the first information to the first terminal; and

transmitting, by the server, the second information and the encrypted information to a second terminal of the user different from the first terminal.

12. The method of claim 11, further comprising:

receiving the authentication information from the second terminal; and

approving the request for mobile authentication of the first terminal based on the received authentication information,

wherein the second terminal acquires the received authentication information by the key generated by the second terminal based on information received from the server and the first terminal.

13. The method of claim 11, further comprising:

receiving authentication information from a third terminal of the user different from the first terminal and the second terminal; and

approving the request for mobile authentication of the first terminal based on the received authentication information,

wherein the third terminal acquires the received authentication information by the key generated by the third terminal based on information received from the first terminal and the second terminal.

14. The method of claim 11, further comprising:

receiving identification information from the first terminal; and

transmitting the identification information to a message server,

wherein in the transmitting of the second information and the encrypted information,

the second information and the encrypted information are transmitted to the second terminal through the message server.

15. The method of claim 11, wherein in the encrypting, at least one of server information and an authentication purpose is encrypted together with the authentication information by using the key.

16. A method for security authentication via a mobile device, comprising:

receiving, by a second terminal of a user, encrypted information and second information of a key for encryption from a server;

acquiring, by the second terminal, first information of the key from a first terminal of the user which requests the server for mobile authentication;

generating, by the second terminal, the key based on the first information and the second information;

acquiring, by the second terminal, the authentication information by decrypting the encrypted information using the key; and

transmitting, by the second terminal, the acquired authentication information to the server.

17. The method of claim 16, further comprising:

displaying an authentication purpose on a screen,

wherein the encrypted information is acquired by encrypting the authentication information and the authentication purpose,

in the acquiring of the authentication information,

the authentication purpose is acquired together with the authentication information by using the generated key, and

in the transmitting of the authentication information,

when the user verifies the authentication purpose, the authentication information is transmitted to the server.

18. The method of claim 16, wherein the encrypted information is acquired by encrypting the authentication information and server information, in the acquiring of the authentication information,

the server information is acquired together with the authentication information by using the generated key, and

in the transmitting of the authentication information,

the authentication information is transmitted to the server by using the server information.

19. The method of claim 16, wherein in the acquiring of the first information, a QR code or a barcode displayed on a screen of the first terminal is read to acquire the first information from the first terminal.

20. The method of claim 16, wherein in the receiving, the second information and the encrypted information are received from the server by using at least one of Internet connection with the server, a short message service (SMS), a multimedia message service (MMS), and push notification.