Method and service-providing server for secure transmission of user-authenticating information

Patent metadata

Field	Value
Publication number	US-10594498-B2
Application number	US-201916419009-A
Country	US
Kind code	B2
Filing date	May 22, 2019
Priority date	Jan 5, 2016
Publication date	Mar 17, 2020
Grant date	Mar 17, 2020

Abstract

A method for secure transmission of user-authenticating information is provided. The method includes steps of: a service-providing server (a) determining whether a public key of the user is registered in a blockchain network, and instructing a user-authenticating information generator to generate user-authenticating information for reference, instructing an encrypting engine to encrypt the generated user-authenticating information for reference by using the public key of the user retrieved from the blockchain network, and instructing a message-sending part to transmit the encrypted user-authenticating information for reference to a mobile device of the user; and (b) in case that user-authenticating information for comparison is acquired from the user device and if the user-authenticating information for comparison is determined as identical to the user-authenticating information for reference, providing the user device with the service desired by the user.

First claim

What is claimed is:

1. A method for secure transmission of user-authenticating information, comprising steps of:
(a) a service-providing server, in response to a service request for a service desired by a user being acquired from a user device, determining whether a public key of the user is registered in a blockchain network or supporting another device connected with the service-providing server to determine whether the public key of the user is registered in the blockchain network, and in response to the public key of the user being determined as registered in the blockchain network, instructing a user-authenticating information generator to generate user-authenticating information for reference, instructing an encrypting engine to encrypt the generated user-authenticating information for reference by using the public key of the user retrieved from the blockchain network, and instructing a message-sending part to transmit the encrypted user-authenticating information for reference to a mobile device of the user or supporting another device connected with the service-providing server to transmit the encrypted user-authenticating information for reference to the mobile device of the user; and
(b) the service-providing server, in case that user-authenticating information for comparison is acquired from the user device, wherein the mobile device instructs a decrypting engine to decrypt the encrypted user-authenticating information for reference received from the service-providing server into decrypted information by using a private key of the user which has been stored beforehand, and displays the decrypted information, and then the user-authenticating information for comparison is inputted by the user via the user device after the user confirms the decrypted information displayed on the mobile device, and in response to the user-authenticating information for comparison being determined as identical to the user-authenticating information for reference, providing the user device with the service desired by the user who has sent the service request or supporting another device connected with the service-providing server to provide the user device with the service desired by the user who has sent the service request,
wherein, at the step of (a), the service-providing server, in response to the public key of the user being determined as not registered in the blockchain network, transmits a generation request for the public key of the user to the mobile device of the user, to thereby allow the mobile device of the user to generate the private key of the user and its corresponding public key of the user by way of a key-generating engine, allows the private key of the user to store in the mobile device and the public key of the user to transmit to the service-providing server, and in response to the public key of the user being acquired from the mobile device of the user, transmits the public key of the user to at least one blockchain node included in the blockchain network, to thereby instruct the at least one blockchain node to register the public key of the user in the blockchain network, and acquires a transaction ID for registration corresponding to the public key of the user registered in the blockchain network, and
wherein the service-providing server, in response to the public key of the user is-being acquired from the mobile device of the user, transmits the public key of the user and user identification information on the user to a key server, to thereby instruct the key server to (i) generate transaction information for registration to be used for registering the public key of the user in the blockchain network and its corresponding transaction ID for registration by way of a transaction-processing engine, (ii) match and manage the user identification information and the transaction ID for registration, and (iii) transmit the transaction information for registration to the at least one blockchain node, to thereby allow the transaction information for registration to register in the blockchain network.

2. A method for secure transmission of user-authenticating information, comprising steps of:
(a) a service-providing server, in response to a service request for a service desired by a user being acquired from a user device, determining whether a public key of the user is registered in a blockchain network or supporting another device connected with the service-providing server to determine whether the public key of the user is registered in the blockchain network, and in response to the public key of the user being determined as registered in the blockchain network, instructing a user-authenticating information generator to generate user-authenticating information for reference, instructing an encrypting engine to encrypt the generated user-authenticating information for reference by using the public key of the user retrieved from the blockchain network, and instructing a message-sending part to transmit the encrypted user-authenticating information for reference to a mobile device of the user or supporting another device connected with the service-providing server to transmit the encrypted user-authenticating information for reference to the mobile device of the user; and
(b) the service-providing server, in case that user-authenticating information for comparison is acquired from the user device, wherein the mobile device instructs a decrypting engine to decrypt the encrypted user-authenticating information for reference received from the service-providing server into decrypted information by using a private key of the user which has been stored beforehand, and displays the decrypted information, and then the user-authenticating information for comparison is inputted by the user via the user device after the user confirms the decrypted information displayed on the mobile device, and in response to the user-authenticating information for comparison being determined as identical to the user-authenticating information for reference, providing the user device with the service desired by the user who has sent the service request or supporting another device connected with the service-providing server to provide the user device with the service desired by the user who has sent the service request,
wherein, at the step of (a), the service-providing server transmits a key request for the public key of the user, using the transaction ID for registration corresponding to the public key of the user registered in the blockchain network, to the at least one blockchain node included in the blockchain network, to thereby instruct the at least one blockchain node to transmit the public key of the user, which is registered in the blockchain network as corresponding to the transaction ID for registration, to the service-providing server,
wherein the service-providing server transmits the user identification information, as the key request for the public key of the user, to the key server, to thereby instruct the key server to (i) transmit the transaction ID for registration, which is managed according to the user identification information, to the at least one blockchain node, to thereby acquire the transaction information for registration corresponding to the transaction ID for registration, and (ii) transmit the public key of the user included in the transaction information for registration to the service-providing server.

3. The method of claim 1 , wherein the user-authenticating information for reference includes numbers, characters, symbols, or any combination thereof.

4. The method of claim 1 , wherein, at the step of (a), the service-providing server transmits the encrypted user-authenticating information for reference to the mobile device of the user by using a phone number corresponding to the user.

5. The method of claim 1 , wherein, at th

Assignees

• Coinplug Inc

Inventors

• Uhr Joon Sun
• Hong Jay Wu
• Song Joo Han

Classifications

• H04L9/0861 Primary

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title