User authentication method and system using user's e-mail address and hardware information

• US 8,056,122 B2
• Filed: 05/26/2003
• Issued: 11/08/2011
• Est. Priority Date: 05/25/2002
• Status: Active Grant

• Current Assignee: Fasoo, Inc.
• Original Assignee: Fasoo Com Co Ltd
• Inventors: Kim, In Gee, Cho, Ku Gon, Kang, Ho Gab, Kim, Kyu Soo
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): Louie; Oscar
• Application Number:
  US10/515,949
• Publication Number:
  US 20050165698A1
• Time in Patent Office: 3,088 Days
• Field of Search: 726 2- 7, 726 16- 21, 726 26- 30, 726/9, 713150-152, 713/162, 713/168, 713/182, 713/183, 713/172, 713/185, 380/59
• US Class Current: 726/5
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A user authentication method of authenticating a user on an on-line basis using a user'"'"'s e-mail address and hardware information is provided. The user authentication method includes the steps of: transmitting a user'"'"'s authentication client platform hardware information and e-mail address to an authentication server module through an authentication client module installed in the authentication client platform; and the authentication client module determining user authentication according to whether or not the e-mail address and hardware information received from the authentication server module is identical to user'"'"'s e-mail address and hardware information stored in an authentication database. A user'"'"'s authentication request and authentication is confirmed through an e-mail in the case that authentication fails in the primary authentication process. The user authentication method performs authentication by using a user'"'"'s hardware information and e-mail address, their uniqueness of which is verified. Accordingly, since a user'"'"'s password is not required, inconveniences of reissuing the user'"'"'s password due to losing the same can be reduced.

Claims

1. A user authentication method of authenticating a user in an authentication server module installed in a server, said module using information specifically indicative of the user'"'"'s hardware platform and the user'"'"'s e-mail address, the user authentication method comprising the steps of:

Determining whether an authentication client module including a hardware identification symbol uniquely identifying the hardware is present on the user'"'"'hardware, said authentication client module reading said identification symbol and storing it in said user'"'"'s authentication platform;

if an authentication client module is not present, sending an authentication client module from the authentication server module to a user'"'"'s authentication platform for installation in said user'"'"'s authentication platform, said user'"'"'s authentication platform including a hardware having a hardware identification symbol that uniquely identifies said hardware and being readable by said authentication client module, said authentication client module reading said identification symbol;

said server obtaining the user'"'"'s e-mail address and said hardware identification symbol as the user'"'"'s ID from said authentication client module;

determining a user authentication by said authentication server module in said server according to whether or not the e-mail address and hardware identification symbol obtained from the authentication server module is identical to a user'"'"'s e-mail address and hardware identification symbol stored in an authentication database;

said authentication server module transmitting a confirmation e-mail to a user in the case that an e-mail address which is identical to the received e-mail address does not exist in the authentication database;

said server receiving from said user an identifier of the user'"'"'s e-mail address and the hardware identification symbol in response to said confirmation e-mail; and

said authentication server module recognizing the identifier of the e-mail as a response e-mail for the confirmation e-mail transmitted to the user, storing the hardware identification symbol in the authentication database, and performing user authentication registration, wherein the confirmation e-mail is made up of a message written in hypertext markup language (HTML);

activating said message and causing the e-mail address and the hardware identification symbol to be transmitted to the authentication server module.

2. The user authentication method of claim 1, wherein the confirmation e-mail is attached with an execution file, wherein when execution file is executed at the user'"'"'s authentication platform, the user'"'"'s e-mail address and the hardware identification symbol are transmitted to the authentication server.

3. The user authentication method of claim 1, wherein a user is associated with several user authentication platforms related to the same user e-mail address, further comprising storing authentication platform information for each said authentication platform in said authentication database and generating an authentication when the user'"'"'s e-mail is received from any one of said user'"'"'s authentication platforms.

4. The user authentication method of claim 1, wherein the hardware identification symbol is an inherent identification symbol which is permanently input for each hardware device when being manufactured by a hardware manufacturer in which the inherent identification symbol cannot be changed.

5. The user authentication method of claim 1, wherein the user'"'"'s authentication platform can transmit and receive e-mail via a network.

6. The user authentication method of claim 1 wherein the user is identified and authenticated only from the user'"'"'s email address and hardware identification symbol.

7. The method of claim 1 wherein said user authentication platform includes several hardware devices, each device having a unique hardware identification symbol, further comprising detecting said hardware identification symbols by said client authentication module, receiving an input command from the user designating one of said hardware identification symbols and storing said selected authentication symbol in said user platform.

8. A system comprising a server communicating with a user platform over a communication channel, wherein said user platform is controlled by a user who has an e-mail address and said platform including a hardware indicator indicative of the hardware of a device within the platform, and said server including a platform authentication module reading said hardware indicator;

wherein said server is associated with a database including a stored e-mail address and a stored hardware indicator;

said server obtaining the user'"'"'s e-mail address and said hardware indicator from said user platform; and

determining user authentication by said authentication server module in said server by comparing the user e-mail address and hardware indicator with the stored e-mail address and stored hardware identification and providing an authentication signal when the comparison indicates a match;

wherein said user authentication platform includes several hardware devices, each device having a unique hardware indicator symbol, further comprising detecting said hardware identification symbols by said client authentication module, receiving an input command from the user designating one of said hardware indicator symbols and storing said selected authentication symbol in said user platform.

9. The system of claim 8 said server determining if said user platform includes said platform authentication module and if said platform authentication module is not found then said server downloading to said user platform said platform authentication module, said platform authentication model then obtaining said hardware indicator and storing said hardware identification on said platform.

10. The system of claim 8 wherein said server communicates with a plurality of user platforms, each user platform being associated with the same user and having the same user e-mail address.

11. The system of claim 10 wherein said database includes several stored hardware indicator sets, all indicator sets being associated with a single user e-mail address.