Method of authenticating user, server and mobile terminal performing the same

• US 9,532,216 B2
• Filed: 04/02/2013
• Issued: 12/27/2016
• Est. Priority Date: 04/05/2012
• Status: Active Grant

• Current Assignee: LG CNS Company Limited (LBHunet Co., Ltd.)
• Original Assignee: LG CNS Company Limited (LBHunet Co., Ltd.)
• Inventors: Kang, Min
• Primary Examiner(s): Edwards, Linglan
• Assistant Examiner(s): CAREY, FORREST L
• Application Number:
  US13/855,204
• Publication Number:
  US 20140215563A1
• Time in Patent Office: 1,365 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

A user authenticating method is performed by a user authenticating server connectable to at least one mobile terminal and a user terminal. The user authenticating method includes: receiving access information of a network including an access identification code and an access location code from the user terminal; estimating an access location of a network based on the access location code; determining at least one mobile terminal associated with the access identification code; transmitting the estimated access location of a network to the at least one mobile terminal; and receiving a location-based access approval or access rejection determined based on the access location of a network and a location of a particular mobile terminal belonging to the at least one mobile terminal from the particular mobile terminal.

Claims

1. A user authenticating method performed by a user authenticating server connectable to at least one mobile terminal and a user terminal, the user authenticating method comprising:

receiving access information of a network including an access identification code, an access location code from the user terminal, wherein the access identification code corresponds to an ID, password, and certificate information, and wherein the access location code corresponds to a network address;

estimating an access location of a network based on the access location code;

determining at least one mobile terminal associated with the access identification code;

transmitting the estimated access location of a network to the at least one mobile terminal;

determining a scale of a map, to be displayed on a graphical user interface of the at least one mobile terminal, based on the estimated access location of the network and a location of the at least one mobile terminal;

displaying the map on the graphical user interface according to the determined scale;

presenting, on the map displayed on the graphical user interface, the estimated access location of the network and a location of the at least one mobile terminal;

overlaying a transparent pop-up window on the map, the pop-up window comprising a mechanism for receipt of an access approval or an access rejection; and

receiving a location-based access approval or access rejection determined based on the access location of a network, estimated based on the access location code, and a location of a particular mobile terminal belonging to the at least one mobile terminal from the particular mobile terminal.

2. The user authenticating method of claim 1, wherein the receiving of the location-based access approval or access rejection comprises:

when the estimated access location of a network and the location of the particular mobile terminal fall within a particular error range, receiving the location-based access approval automatically determined by the mobile terminal or determined by a user approval; and

when the estimated access location of a network and the location of the particular mobile terminal do not fall within the particular error range, receiving the location-based access rejection automatically determined by the mobile terminal.

3. The user authenticating method of claim 2, wherein the receiving of the location-based access approval or access rejection further comprises:

when the location-based access rejection is automatically received by the mobile terminal because the estimated access location and the location of the particular mobile terminal do not fall within the particular error range, requesting an access approval from a user associated with the network service.

4. The user authenticating method of claim 3, wherein the receiving of the location-based access approval or access rejection comprises:

when the location-based access approval is received from the particular mobile terminal, disregarding location-based access approvals or access rejections from the other remaining mobile terminals.

5. The user authenticating method of claim 4, further comprising:

when the location-based access approval or access rejection is finally determined, notifying at least some of the at least one mobile terminal about the determination.

6. The user authenticating method of claim 1, wherein the user authenticating server corresponds to at least one of:

an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

7. The user authenticating method of claim 1, wherein the access location code corresponds to a network address.

8. The user authenticating method of claim 7, wherein the estimating of the access location of a network further comprises:

converting the network address into location information already used by the at least one mobile terminal.

9. The user authenticating method of claim 8, wherein the already used location information includes location data converted by a global positioning system (GPS), a WiFi-based positioning system (WPS), or a cellular-based positioning system (CPS).

10. A user authenticating method performed by a mobile terminal connectable to a user authenticating server, the user authenticating method comprising:

receiving, using an access information receiving unit of the mobile terminal, an access location of a network, including an access identification code, an access location code, and an access approval request from the user authenticating server, wherein the mobile terminal is a computing device, wherein the access identification code corresponds to an ID, password, and certificate information, and wherein the access location code corresponds to a network address;

estimating, using a location estimating unit of the mobile terminal, a location of the mobile terminal;

determining a scale of a map, to be displayed on a graphical user interface of the mobile terminal, based on the access location of the network and the estimated location of the mobile terminal;

displaying the map on the graphical user interface according to the determined scale;

presenting, on the map displayed on the graphical user interface, the estimated access location of the network and a location of the mobile terminal, wherein the presenting is performed using an access approving unit of the mobile terminal computing device;

overlaying a transparent pop-up window on the map, the pop-up window comprising a mechanism for receipt of an access approval or an access rejection; and

approving or rejecting, using the access approving unit of the mobile terminal computing device, the access approval request based on location information regarding the access location of a network, estimated based on the access location code, and the estimated location of the mobile terminal.

11. The user authenticating method of claim 10, wherein the user authenticating server corresponds to at least one of:

an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

12. The user authenticating method of claim 10, wherein the approving or rejecting the access approval request comprises:

automatically approving the access approval request when the access location of a network and the estimated location of the mobile terminal fall within a particular error range.

13. The user authenticating method of claim 10, wherein the approving or rejecting the access approval request further comprises:

displaying the access location of a network and the estimated location of the mobile terminal on a map.

14. The user authenticating method of claim 13, wherein the approving or rejecting the access approval request further comprises:

prompting an access approval request from a user on the displayed map.

15. The user authenticating method of claim 10, wherein the approving or rejecting the access approval request further comprises:

prompting the access approval, determined based on a distance between the access location of a network and the estimated location of the mobile terminal, from the user.

16. The user authenticating method of claim 10, wherein the estimating of the location of the mobile terminal includes at least one of global positioning system (GPS)-based location information, WiFi-based positioning system (WPS)-based location information, and cellular-based positioning system (CPS)-based location information.

17. A system including a user authenticating server connectable to at least one mobile terminal and a user terminal, the system comprising:

one or more memory media comprising program code instructions; and

one or more processors, which when executing the program code instructions, cause the system to;

receive access information including an access identification code and an access location code from the user terminal, wherein the access identification code corresponds to an ID, password, and certificate information, and wherein the access location code corresponds to a network address;

estimate an access location of a network based on the access location code;

determine at least one mobile terminal associated with the access identification code, and transmit the estimated access location of a network to the at least one mobile terminal;

determine a scale of a map, to be displayed on a graphical user interface of the at least one mobile terminal, based on the estimated access location of the network and a location of the at least one mobile terminal;

display the map on the graphical user interface according to the determined scale;

present, on the map displayed on the graphical user interface, the estimated access location of the network and the location of the at least one mobile terminal;

overlay a transparent pop-up window on the map, the pop-up window comprising a mechanism for receipt of an access approval or an access rejection; and

receive a location-based access approval or access rejection determined based on the estimated access location of a network, estimated based on the access location code, and a location of a particular mobile terminal belonging to the at least one mobile terminal from the particular mobile terminal.

18. The system of claim 17, wherein, when the estimated access location of a network and the location of the particular mobile terminal fall within a particular error range, an access permission receiving unit receives the location-based access approval automatically determined by the mobile terminal or determined under a user approval, and when the estimated access location of a network and the location of the particular mobile terminal do not fall within the particular error range, the access permission receiving unit receives the location-based access rejection automatically determined by the mobile terminal.

19. The system of claim 18, wherein, when the location-based access rejection is automatically received by the mobile terminal because the estimated access location of a network and the location of the particular mobile terminal do not fall within the particular error range, the access permission receiving unit requests an access approval from a user associated with the network service.

20. The system of claim 19, wherein, when the location-based access approval is received from the particular mobile terminal, the access permission receiving unit disregards location-based access approvals or access rejections by the other remaining mobile terminals.

21. The system of claim 20, the program code instructions further causing the system to:

notify at least some of the at least one mobile terminal about content of determination, when the location-based access approval or access rejection is finally determined.

22. The system of claim 17, wherein the user authenticating server corresponds to an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

23. The system of claim 17, wherein the access location code corresponds to a network address.

24. The system of claim 23, wherein an access location estimating unit converts the network address into location information already used by the at least one mobile terminal.

25. The system of claim 24, wherein the already used location information includes location data converted by a global positioning system (GPS), a WiFi-based positioning system (WPS), or a cellular-based positioning system (CPS).

26. A system including a mobile terminal connectable to a user authenticating server and performing network service accessing, the mobile terminal comprising:

a memory medium comprising program code instructions; and

a processor, which when executing the program code instructions, causes the system to;

receive an access location of a network, including an access identification code, an access location code, and an access approval request from the user authenticating server, wherein the access identification code corresponds to an ID, password, and certificate information, and wherein the access location code corresponds to a network address;

estimate a location of the mobile terminal;

determine a scale of a map, to be displayed on a graphical user interface of the mobile terminal, based on the access location of the network and the estimated location of the mobile terminal;

displaying the map on the graphical user interface according to the determined scale;

present, on the map displayed on the graphical user interface, the estimated access location of the network and a location of the mobile terminal;

overlay a transparent pop-up window on the map, the pop-up window comprising a mechanism for receipt of an access approval or an access rejection; and

approve or reject the access approval request based on location information regarding the access location of a network, estimated based on the access location code, and the estimated location of the mobile terminal.

27. The system of claim 26, wherein the user authenticating server corresponds to an Internet portal server, an Internet shopping mall server, an Internet service server, a cloud computing server, a main service server, or a banking service server.

28. The system of claim 26, wherein when the access location of a network and the estimated location of the mobile terminal fall within a particular error range, the access approving unit automatically approves the access approval request.

29. The system of claim 26, wherein an access approving unit displays the access location of a network and the estimated location of the mobile terminal on a map.

30. The system of claim 29, wherein the access approving unit prompts an access approval request from a user displayed on the map.

31. The system of claim 26, wherein the access approving unit prompts an access approval request, determined based on a distance between the access location of a network and the estimated location of the mobile terminal, from a user.

32. The system of claim 26, wherein a location estimating unit determines the location of the mobile terminal based on at least one of global positioning system (GPS)-based location information, WiFi-based positioning system (WPS)-based location information, and cellular-based positioning system (CPS)-based location information.