METHOD AND APPARATUS FOR SUPPORTING LOGIN THROUGH USER TERMINAL

• US 20150281229A1
• Filed: 03/25/2015
• Published: 10/01/2015
• Est. Priority Date: 03/25/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd., SungKyunKwan University's Research & Business Foundation (SungKyunKwan University)
• Original Assignee: Samsung Electronics Co. Ltd., SungKyunKwan University's Research & Business Foundation (SungKyunKwan University)
• Inventors: KANG, Bo-Gyeong, KIM, Hyoung-Shick, SON, Jung-Je, SONG, Young-Bae, KANG, Jin-A, LEE, DucKey
• Granted Patent: US 9,602,506 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method of supporting a login for a web service of a user terminal using a portable device is provided. The method includes registering the portable device through a wireless communication with the portable device, encrypting login information for at least one web service and transmitting the login information to the registered portable device, and transmitting a request message requesting a transmission of the login information of the web service to the portable device. The request message includes a service identification (ID) identifying the web service.

Claims

1. A method of supporting a login for a web service of a user terminal using a portable device, the method comprising:

registering the portable device through a wireless communication with the portable device;

encrypting login information for at least one web service and transmitting the login information to the registered portable device; and

transmitting a request message requesting a transmission of the login information of the web service to the portable device,

wherein the request message includes a service identification (ID) identifying the web service.

2. The method of claim 1, further comprising:

receiving login information corresponding to the service ID in response to the request message.

3. The method of claim 1, further comprising:

establishing a communication session with a server of the web service, before the transmitting of the request message,

wherein the request message further includes at least one of login uniform resource locator (URL) information of the web service and a session ID of the established session.

4. The method of claim 2, further comprising:

decrypting the received login information; and

transmitting the decrypted login information to a server of the web service.

5. The method of claim 4, wherein the transmitting the decrypted login information to the server of the web service comprises:

inputting the decrypted login information to a login information input window of a browser; and

transmitting the login information input to the login information input window to the server of the web service.

6. The method of claim 1, further comprising:

determining whether the portable device directly transfers the login information to a server of the web service, before the transmitting of the request message.

7. The method of claim 1, further comprising:

receiving a login success message from a server of the web service.

8. The method of claim 1, wherein the login information is encrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the portable device.

9. A method of supporting a login of a portable device which supports a web service login of a user terminal, the method comprising:

registering the portable device to the user terminal through a wireless communication with the user terminal;

receiving login information for at least one web service from the user terminal and storing the login information;

receiving a request message requesting a transmission of the login information of the web service from the user terminal; and

transmitting the login information of the web service in response to the request message,

wherein the request message includes a service identification (ID) identifying the web service.

10. The method of claim 9, further comprising:

transmitting login information corresponding to the service ID to the user terminal in response to the request message.

11. The method of claim 9, wherein the request message includes at least one of login uniform resource locator (URL) information of the web service and a session ID of a session established with a server of the web service by the user terminal.

12. The method of claim 11, further comprising:

transmitting login information corresponding to the service ID to the server of the web service directed by the login URL information in response to the request message,

wherein the transmitted login information includes a user ID, a password and the received session ID.

13. The method of claim 12, further comprising, before the transmitting:

extracting the login information of the web service; and

decrypting the extracted login information.

14. The method of claim 9, further comprising, before the transmitting:

determining whether the received request message further includes at least one of login URL information of the web service and a session ID of a session established with a server of the web service by the user terminal to determine a destination to which the login information of the web service is transmitted.

15. The method of claim 13, wherein the login information is decrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the user terminal.

16. The method of claim 9, wherein the portable device comprises one of a watch, glasses or an arm band.

17. A user terminal for supporting a login for a web service using a portable device, the user terminal comprising:

a login manager configured to register the portable device through a wireless communication with the portable device, to encrypt login information for at least one web service, to transmit the login information to the registered portable device, and to transmit a request message requesting a transmission of the login information of the web service to the portable device,

wherein the request message includes a service identification (ID) identifying the web service.

18. The user terminal of claim 17, wherein the login manager is further configured to receive login information corresponding to the service ID in response to the request message.

19. The user terminal of claim 17, wherein the login manager is further configured to establish a communication session with a server of the web service before the transmitting of the request message, and the request message further includes at least one of login uniform resource locator (URL) information of the web service and a session ID of the established session.

20. The user terminal of claim 18, wherein the login manager is further configured to decrypt the received login information, and to transmit the decrypted login information to a server of the web service.

21. The user terminal of claim 20, wherein the login manager is further configured to input the decrypted login information to a login information input window of a browser, and to transmit the login information input to the login information input window to the server of the web service.

22. The user terminal of claim 17, wherein the login manager is further configured to determine whether the portable device directly transfers the login information to a server of the web service, before the transmitting of the request message.

23. The user terminal of claim 17, wherein the login manager is further configured to receive a login success message from a server of the web service.

24. The user terminal of claim 17, wherein the login information is encrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the portable device.

25. A portable device for supporting a login for a web service of a user terminal, the portable device comprising:

a password manager configured to register the portable device to the user terminal through a wireless communication with the user terminal, to receive login information for at least one web service from the user terminal, to store the login information in a storage unit, to receive a request message requesting a transmission of the login information of the web service from the user terminal, and to transmit the login information of the web service in response to the request message,

wherein the storage unit is configured to store the login information received from the user terminal, and

wherein the request message includes a service identification (ID) identifying the web service.

26. The portable device of claim 25, wherein the password manager is further configured to transmit login information corresponding to the service ID to the user terminal in response to the request message.

27. The portable device of claim 25, wherein the request message includes at least one of login uniform resource locator (URL) information of the web service and a session ID of a session established with a server of the web service by the user terminal.

28. The portable device of claim 27, wherein the password manager is further configured to transmit login information corresponding to the service ID to the server of the web service directed by the login URL information in response to the request message, and

wherein the transmitted login information includes a user ID, a password and the received session ID.

29. The portable device of claim 28, wherein the password manager is further configured to extract the login information of the web service and to decrypt the extracted login information.

30. The portable device of claim 25, wherein the password manager is further configured to determine whether the received request message further includes at least one of login URL information of the web service and a session ID of a session established with a server of the web service by the user terminal to determine a destination to which the login information of the web service is transmitted.

31. The portable device of claim 29, wherein the login information is decrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the user terminal.

32. The portable device of claim 25, wherein the portable device comprises one of a watch, glasses, or an arm band.