Apparatus and Method for Providing Personal Information Sharing Service Using Signed Callback Url Message

• US 20080301444A1
• Filed: 12/07/2006
• Published: 12/04/2008
• Est. Priority Date: 12/07/2005
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Choi, Dae Seon, Cho, Sang Rae, Jin, Seung Hun, Cho, Yeong Sub, Kim, Seung Hyun, Noh, Jong Hyouk
• Application Number:
  US12/096,415
• Publication Number:
  US 20080301444A1
• Time in Patent Office: Days
• US Class Current: 713/169
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

An apparatus and method for providing a service that securely and easily shares personal information using a signed callback uniform resource locator (URL) message in a mobile terminal environment are provided. The mobile terminal providing a personal information sharing service using a signed URL message includes; a personal information sharing service module which receives a message that includes a first callback URL and a personal information sharing request and is signed using a private key of a server, and creates a second callback URL by adding a user response result in response to the personal information sharing request to the first callback URL; and an authentication module which verifies a signature of the message using a public key of the server, and signs the second callback URL using a user private key.

Claims

1. A mobile terminal providing a personal information sharing service using a signed callback uniform resource locator (URL) message, comprising;

a personal information sharing service module receiving a message that includes a first callback URL and a personal information sharing request and is signed using a private key of a server, and creating a second callback URL by adding a user response result in response to the personal information sharing request to the first callback URL; and

an authentication module verifying a signature of the message using a public key of the server, and signing the second callback URL using a user private key.

2. The mobile terminal of claim 1, wherein the user response result is added to the first callback URL as a parameter.

3. The mobile terminal of claim 2, wherein information is added as the parameter is in the form of plain text, a signed string, or a cipher text.

4. The mobile terminal of claim 1, wherein the authentication module is contained in a device that is detachable from the mobile terminal.

5. The mobile terminal of claim 1, wherein the message includes an image of a person or a logo of institution that requests to share user personal information.

6. The mobile terminal of claim 1, further comprising:

a user information storage module storing the user personal information and a personal information sharing policy, and automatically performing a user'"'"'s response to the request to share the user personal information using the user personal information and the personal information sharing policy.

14. The server of claim 1, wherein the personal information storage module is detachable from the server.

7. A method of providing a personal information sharing service using a signed callback URL message in a mobile terminal, the method comprising:

if a message that includes a first callback URL and a personal information sharing request and is signed using a private key of a server is received, verifying a signature of the message using a public key of the server;

creating a second callback URL by adding a user response result in response to the personal information sharing request to the first callback URL; and

signing the second callback URL using a user private key.

8. The method of claim 7, wherein the user response result is added to the first callback URL as a parameter.

9. The method of claim 8, wherein information is added as the parameter in the form of plain text, a signed string, and a cipher text.

10. The method of claim 7, wherein the message includes an image of a person or a logo of institution that requests to share user personal information, in order to easily identify the person or institution.

11. The method of claim 7, further comprising:

storing the user personal information and a personal information sharing policy, and automatically performing a user'"'"'s response to the request to share the user personal information using the user personal information and the personal information sharing policy.

12. A server providing a personal information sharing service using a signed callback URL message, comprising;

a personal information request service module creating a message that includes a first callback URL and a personal information sharing request, transmitting a message that is signed using a private key of a server to a user'"'"'s mobile terminal, receiving a second callback URL-signed using a user private key-creased by adding a user response result in response to the personal information sharing request to the first callback URL, and providing a sharing service of personal information approved by a user;

an authentication module signing the message using the private key of the server and verifying a signature of the message using a user public key; and

a personal information storage module storing personal information of the user of the mobile terminal.

13. The server of claim 12, wherein the message to be transmitted to the mobile terminal includes an image of a person or a logo of institution that requests to share user personal information.

15. A method of providing a personal information sharing service using a signed callback URL message in a server, the method comprising:

creating a message that includes a first callback URL and a personal information sharing request, signing the message using a private key of the server, and transmitting the message to a user'"'"'s mobile terminal;

if the user'"'"'s mobile terminal accesses the server through a second callback URL obtained by adding a user response result in response to the personal information sharing request to the first callback URL, verifying a signature of the second callback URL signed using a user private key using a user public key; and

providing a sharing service of personal information that the user approves to share according to the user'"'"'s response result in response to the personal information sharing request.

16. The method of claim 15, wherein the message includes an image of a person or a logo of institution that requests to share user personal information.

17. The method of claim 15, further comprising:

if it is determined that a user signature is authentic as a result of verifying the signature of the second callback URL, returning an error message in order to prevent user personal information from being shared.

18. A method of providing a personal information sharing service using a signed callback URL message in a mobile terminal, the method comprising:

if a message that includes a first callback URL and summarized information relating to personal information sharing is received, accessing a server through the first callback URL;

receiving details relating to the personal information sharing and a signature of the server from the server and verifying the signature using a public key of the server;

adding a user response result in response to the details relating to the personal information sharing to the first callback URL and creating a second callback URL; and

signing the second callback URL using a user private key.

19. A method of providing a personal information sharing service using a signed callback URL message in a server, the method comprising:

creating a message that includes a first callback URL and summarized information relating to personal information sharing, and transmitting the message to a user'"'"'s mobile terminal;

if the user'"'"'s mobile terminal accesses the server through the first callback URL, transmitting details relating to the personal information sharing and a signature obtained by signing the details using a private key of the server to the user'"'"'s mobile terminal;

if the user'"'"'s mobile terminal accesses the server through a second callback URL obtained by adding a user response result in response to the details relating to the personal information sharing, verifying a signature of the second callback URL signed using a user private key using a user public key; and

providing a sharing service of personal information that the user approves to share according to the user'"'"'s response result in response to the details relating to the personal information sharing.