Apparatus and method for performing user authentication by proxy in wireless communication system

• US 9,419,974 B2
• Filed: 03/27/2013
• Issued: 08/16/2016
• Est. Priority Date: 03/27/2012
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd. (Samsung Group), University-Industry Cooperation Group of KyungHee University
• Original Assignee: Samsung Electronics Co. Ltd. (Samsung Group), University-Industry Cooperation Group of KyungHee University
• Inventors: Lim, Han-Na, Lee, Sung-Won, Lee, Ji-Cheol
• Primary Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US13/851,669
• Publication Number:
  US 20130263239A1
• Time in Patent Office: 1,238 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A method of performing user authentication of a mobile station by proxy in a communication system is provided. The method includes receiving an authentication request, which requests authentication of a user, from an Internet service provider having received information indicating that the mobile station can perform authentication based on only the mobile station'"'"'s own information, requesting the user to provide security identification information for authentication, receiving the security identification information input by the user, authenticating the user by determining whether the security identification information is valid information, through security-requiring information managed by the mobile station, and transmitting an authentication result to the Internet service provider and receiving an authorized authentication result from the Internet service provider and providing a service according to the authorized authentication result to the user.

Claims

1. A method of performing user authentication of a mobile station by proxy in a communication system, the method comprising:

receiving an authentication request including information of an Internet site, and user identification information to be used for authentication of the user from an internet service provider;

determining whether to allow the user to access the Internet site, in consideration of database information managed by the mobile station;

requesting security identification information for authentication of the user;

receiving the security identification information;

authenticating, by the mobile station, the user by determining whether the received security identification information comprises valid information, based on security-requiring information managed by the mobile station and the user identification information;

transmitting an authentication result to the internet service provider;

receiving an authorized authentication result from the internet service provider; and

displaying the authorized authentication result to provide a service related to authentication success or failure.

2. The method of claim 1, wherein the mobile station manages a plurality of local internet protocol (IP) addresses/port numbers, and the authentication request is received through a local IP address/port number indicated by a web access address extracted by the internet service provider.

3. The method of claim 1, wherein the database information comprises a black list including information of Internet sites not allowed to be accessed and a white list including information of Internet sites allowed to be accessed, and the black list and the white list are updated through a communication link set between a mobile communication service provider and the mobile station.

7. The method of claim 1, wherein the security-requiring information includes at least one of authorized application database information, subscriber information, internet protocol multimedia subsystem (IMS) authentication information, secured signature, and database information.

4. A mobile station for performing authentication of a user by proxy in a communication system, the mobile station comprising:

an integrated circuit; and

a user interface configured to;

request security identification information for authentication of a user, and

receive the security identification information; and

a security local web server configured to;

receive an authentication request including information of an Internet site, and user identification information to be used for authentication of the user from an internet service provider,

determine whether to allow the user to access the Internet site, in consideration of database information managed by the mobile station,

authenticate the user by determining whether the received security identification information comprises valid information, based on security-requiring information managed by the mobile station and the user identification information,

transmit an authentication result to the internet service provider,

receive an authorized authentication result from the internet service provider, and

display the authorized authentication result to provide a service related to authentication success or failure.

5. The mobile station of claim 4,

wherein the security local web server is further configured to manage a plurality of local internet protocol (IP) addresses/port numbers, and

wherein the authentication request is received through a local IP address/port number indicated by a web access address extracted by the internet service provider.

6. The mobile station of claim 4, wherein the database information comprises a black list including information of Internet sites not allowed to be accessed and a white list including information of Internet sites allowed to be accessed, the black list and the white list being updated through a communication link set between a mobile communication service provider and the mobile station.

8. The mobile station of claim 4, wherein the security-requiring information includes at least one of authorized application database information, subscriber information, internet protocol multimedia subsystem (IMS) authentication information, secured signature, and database information.