USER AUTHENTICATION SYSTEM IN WEB MASH-UP CIRCUMSTANCE AND AUTHENTICATING METHOD THEREOF

• US 20150295918A1
• Filed: 03/24/2015
• Published: 10/15/2015
• Est. Priority Date: 04/09/2014
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: NAH, Jae Hoon, LEE, Sang Woo, NA, Jung Chan
• Application Number:
  US14/666,992
• Publication Number:
  US 20150295918A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

Disclosed is a user authenticating method in a web mash-up circumstance, including: requesting, by a mash-up server, updating an access authority token for accessing a data server to an authentication server; requesting, by the authentication server, a user authentication to the mash-up server; and issuing, by the authentication server, the updated access authority token to the mash-up server based on a response result to the user authentication request.

Claims

1. A user authenticating method in a web mash-up circumstance, the method comprising:

requesting, by a mash-up server, an update of an access authority token for accessing a data server to an authentication server;

requesting, by the authentication server, a user authentication to the mash-up server; and

issuing, by the authentication server, the updated access authority token to the mash-up server based on a response result to the user authentication request.

2. The method of claim 1, wherein the user authentication includes an OTP authentication or CAPTCHA authentication.

3. The method of claim 2, wherein in the issuing, by the authentication server, the updated access authority token to the mash-up server based on a response result to the user authentication request,

when the user authentication is successful, the authentication sever issues the updated access authority token to the mash-up server.

4. The method of claim 2, wherein in the issuing, by the authentication server, the updated access authority token to the mash-up server based on a response result to the user authentication request,

when the user authentication is unsuccessful, the authentication server does not issue the updated access authority token to the mash-up server.

5. The method of claim 2, further comprising:

receiving, by the authentication server, an authentication key corresponding to the user authentication request from the mash-up server.

6. The method of claim 5, wherein in the issuing, by the authentication server, the updated access authority token to the mash-up server based on a response result to the user authentication request,

when the authentication key matches a predetermined authentication key, the authentication server issues the updated access authority token to the mash-up server.

7. The method of claim 1, further comprising:

accessing, by the mash-up server, the data server by using the updated access authority token.

8. The method of claim 1, wherein the requesting, by a mash-up server, an update of an access authority token for accessing a data server to an authentication server is performed according to a predetermined cycle.

9. A user authentication system in a web mash-up circumstance, the system comprising:

a data server;

an authentication server; and

a mash-up server requesting an update of an access authority token for accessing the data server to the authentication server and transmitting an authentication key input from a user to the authentication server in response to a user authentication request from the authentication server,

wherein the authentication server issues the updated access authority token to the mash-up server based on a response result of the mash-up server to the user authentication request.

10. The system of claim 9, wherein the user authentication includes an OTP authentication or CAPTCHA authentication.

11. The system of claim 10, wherein when the authentication key transferred from the mash-up server matches a predetermined authentication key, the authentication server issues the updated access authority token to the mash-up server.

12. The system of claim 9, wherein the mash-up server accesses the data server by using the updated access authority token transferred from the authentication server.

13. The system of claim 9, wherein the mash-up server requests an update of the access authority token to the authentication server according to a predetermined cycle.