Method and apparatus for supporting login through user terminal

• US 9,602,506 B2
• Filed: 03/25/2015
• Issued: 03/21/2017
• Est. Priority Date: 03/25/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd., SungKyunKwan University's Research & Business Foundation (SungKyunKwan University (SKKU))
• Original Assignee: Samsung Electronics Co. Ltd., SungKyunKwan University's Research & Business Foundation (SungKyunKwan University (SKKU))
• Inventors: Song, Young-Bae, Kang, Jin-A, Lee, DucKey, Kang, Bo-Gyeong, Kim, Hyoung-Shick, Son, Jung-Je
• Primary Examiner(s): SIMITOSKI, MICHAEL J
• Application Number:
  US14/667,984
• Publication Number:
  US 20150281229A1
• Time in Patent Office: 727 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method of supporting a login for a web service of a user terminal using a portable device is provided. The method includes registering the portable device through a wireless communication with the portable device, encrypting login information for at least one web service and transmitting the login information to the registered portable device, and transmitting a request message requesting a transmission of the login information of the web service to the portable device. The request message includes a service identification (ID) identifying the web service.

Claims

1. A method of supporting a login for a web service in a user terminal using a portable device, the method comprising:

registering the portable device through a wireless communication with the portable device;

encrypting login information for at least one web service and transmitting the login information to the registered portable device;

establishing a communication session with a server of the web service;

determining whether the portable device directly transfers the login information to the server of the web service; and

transmitting a request message requesting a transmission of the login information of the web service to the portable device,

wherein the request message includes a service identification (ID) identifying the web service if the portable device is determined to transfer the login information to the user terminal, and

wherein the request message includes the service ID identifying the web service, login uniform resource locator (URL) information of the web service, and a session ID of the established session if the portable device is determined to directly transfer the login information to the server of the web service.

2. The method of claim 1, further comprising:

receiving login information corresponding to the service ID in response to the request message.

3. The method of claim 2, further comprising:

decrypting the received login information; and

transmitting the decrypted login information to the server of the web service.

4. The method of claim 3, wherein the transmitting the decrypted login information to the server of the web service comprises:

inputting the decrypted login information to a login information input window of a browser; and

transmitting the login information input to the login information input window to the server of the web service.

5. The method of claim 1, further comprising:

receiving a login success message from the server of the web service.

6. The method of claim 1, wherein the login information is encrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the portable device.

7. A method of supporting a login in a portable device which supports a web service login of a user terminal, the method comprising:

registering to the user terminal through a wireless communication with the user terminal;

receiving login information for at least one web service from the user terminal and storing the login information;

receiving a request message requesting a transmission of the login information of the web service from the user terminal, the request message including a service identification (ID) identifying the web service;

determining whether the received request message further includes login uniform resource locator (URL) information of the web service, and a session ID of a session established with a server of the web service;

transmitting the login information of the web service to the user terminal if the login URL information and the session ID is not included in the received request message; and

transmitting the login information of the web service to the server of the web service directed by the login URL information if the login URL information and the session ID is included in the received request message.

8. The method of claim 7,

wherein the login information transmitted to the server of the web service includes a user ID, a password and the received session ID.

9. The method of claim 7, further comprising, before transmitting the login information:

extracting the login information of the web service; and

decrypting the extracted login information.

10. The method of claim 7, wherein the login information is decrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the user terminal.

11. The method of claim 7, wherein the portable device comprises one of a watch, glasses or an arm band.

12. A user terminal for supporting a login for a web service using a portable device, the user terminal comprising:

a processor configured to;

register the portable device through a wireless communication with the portable device,

encrypt login information for at least one web service,

transmit the login information to the registered portable device,

establish a communication session with a server of the web service,

determine whether the portable device directly transfers the login information to the server of the web service, and

transmit a request message requesting a transmission of the login information of the web service to the portable device,

wherein the request message includes a service identification (ID) identifying the web service if the portable device is determined to transfer the login information to the user terminal, and

wherein the request message includes the service ID identifying the web service, login uniform resource locator (URL) information of the web service, and a session ID of the established session if the portable device is determined to directly transfer the login information to the server of the web service.

13. The user terminal of claim 12, wherein the processor is further configured to receive login information corresponding to the service ID in response to the request message.

14. The user terminal of claim 13, wherein the processor is further configured to:

decrypt the received login information, and

transmit the decrypted login information to the server of the web service.

15. The user terminal of claim 14, wherein the processor is further configured to:

input the decrypted login information to a login information input window of a browser, and

transmit the login information input to the login information input window to the server of the web service.

16. The user terminal of claim 12, wherein the processor is further configured to receive a login success message from the server of the web service.

17. The user terminal of claim 12, wherein the login information is encrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the portable device.

18. A portable device for supporting a login for a web service of a user terminal, the portable device comprising:

a processor configured to;

register to the user terminal through a wireless communication with the user terminal,

receive login information for at least one web service from the user terminal,

store the login information in a storage unit,

receive a request message requesting a transmission of the login information of the web service from the user terminal, the request message including a service identification (ID) identifying the web service,

determine whether the received request message further includes login uniform resource locator (URL) information of the web service, and a session ID of a session established with a server of the web service,

transmit the login information of the web service to the user terminal if the login URL information and the session ID is not included in the received request message, and

transmit the login information of the web service to the server of the web service directed by the login URL information if the login URL information and the session ID is included in the received request message,

wherein the storage unit is configured to store the login information received from the user terminal.

19. The portable device of claim 18,

wherein the login information transmitted to the server of the web service includes a user ID, a password and the received session ID.

20. The portable device of claim 18, wherein the processor is further configured to extract the login information of the web service and decrypt the extracted login information.

21. The portable device of claim 18, wherein the login information is decrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the user terminal.

22. The portable device of claim 18, wherein the portable device comprises one of a watch, glasses, or an arm band.