Method and apparatus for supporting login through user terminal

Patent metadata

Field	Value
Publication number	US-9602506-B2
Application number	US-201514667984-A
Country	US
Kind code	B2
Filing date	Mar 25, 2015
Priority date	Mar 25, 2014
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

A method of supporting a login for a web service of a user terminal using a portable device is provided. The method includes registering the portable device through a wireless communication with the portable device, encrypting login information for at least one web service and transmitting the login information to the registered portable device, and transmitting a request message requesting a transmission of the login information of the web service to the portable device. The request message includes a service identification (ID) identifying the web service.

First claim

What is claimed is:

1. A method of supporting a login for a web service in a user terminal using a portable device, the method comprising:
registering the portable device through a wireless communication with the portable device;
encrypting login information for at least one web service and transmitting the login information to the registered portable device;
establishing a communication session with a server of the web service;
determining whether the portable device directly transfers the login information to the server of the web service; and
transmitting a request message requesting a transmission of the login information of the web service to the portable device,
wherein the request message includes a service identification (ID) identifying the web service if the portable device is determined to transfer the login information to the user terminal, and
wherein the request message includes the service ID identifying the web service, login uniform resource locator (URL) information of the web service, and a session ID of the established session if the portable device is determined to directly transfer the login information to the server of the web service.

2. The method of claim 1 , further comprising:
receiving login information corresponding to the service ID in response to the request message.

3. The method of claim 2 , further comprising:
decrypting the received login information; and
transmitting the decrypted login information to the server of the web service.

4. The method of claim 3 , wherein the transmitting the decrypted login information to the server of the web service comprises:
inputting the decrypted login information to a login information input window of a browser; and
transmitting the login information input to the login information input window to the server of the web service.

5. The method of claim 1 , further comprising:
receiving a login success message from the server of the web service.

6. The method of claim 1 , wherein the login information is encrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the portable device.

7. A method of supporting a login in a portable device which supports a web service login of a user terminal, the method comprising:
registering to the user terminal through a wireless communication with the user terminal;
receiving login information for at least one web service from the user terminal and storing the login information;
receiving a request message requesting a transmission of the login information of the web service from the user terminal, the request message including a service identification (ID) identifying the web service;
determining whether the received request message further includes login uniform resource locator (URL) information of the web service, and a session ID of a session established with a server of the web service;
transmitting the login information of the web service to the user terminal if the login URL information and the session ID is not included in the received request message; and
transmitting the login information of the web service to the server of the web service directed by the login URL information if the login URL information and the session ID is included in the received request message.

8. The method of claim 7 ,
wherein the login information transmitted to the server of the web service includes a user ID, a password and the received session ID.

9. The method of claim 7 , further comprising, before transmitting the login information:
extracting the login information of the web service; and
decrypting the extracted login information.

10. The method of claim 7 , wherein the login information is decrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the user terminal.

11. The method of claim 7 , wherein the portable device comprises one of a watch, glasses or an arm band.

12. A user terminal for supporting a login for a web service using a portable device, the user terminal comprising:
a processor configured to:
register the portable device through a wireless communication with the portable device,
encrypt login information for at least one web service,
transmit the login information to the registered portable device,
establish a communication session with a server of the web service,
determine whether the portable device directly transfers the login information to the server of the web service, and
transmit a request message requesting a transmission of the login information of the web service to the portable device,

wherein the request message includes a service identification (ID) identifying the web service if the portable device is determined to transfer the login information to the user terminal, and
wherein the request message includes the service ID identifying the web service, login uniform resource locator (URL) information of the web service, and a session ID of the established session if the portable device is determined to directly transfer the login information to the server of the web service.

13. The user terminal of claim 12 , wherein the processor is further configured to receive login information corresponding to the service ID in response to the request message.

14. The user terminal of claim 13 , wherein the processor is further configured to:
decrypt the received login information, and
transmit the decrypted login information to the server of the web service.

15. The user terminal of claim 14 , wherein the processor is further configured to:
input the decrypted login information to a login information input window of a browser, and
transmit the login information input to the login information input window to the server of the web service.

16. The user terminal of claim 12 , wherein the processor is further configured to receive a login success message from the server of the web service.

17. The user terminal of claim 12 , wherein the login information is encrypted by an encryption key, the encryption key is configured as one of a value obtained by applying a hash function to the login information and a random value determined by a user, and the encryption key is shared with the portable device.

18. A portable device for supporting a login for a web service of a user terminal, the portable device comprising:
a processor configured to:
register to the user terminal through a wireless communication with the user terminal,
receive login information for at least one web service from the user terminal,
store the login information in a storage unit,
receive a request message requesting a transmission of the login information of the web service from the user terminal, the request message including a service identification (ID) identifying the web service,
determine whether the received request message further includes login uniform resource locator (URL) information of the web service, and a session ID of a session established with a server of the web service,
transmit the login information of the web service to the user terminal if the login URL information and the session ID is not included in the received request message, and
transmit the login information of the web service to the server of the web service directed by the login URL information if the login

Assignees

• Samsung Electronics Co Ltd
• Univ Sungkyunkwan Res & Bus
• Res & Business Found Sungkyunkwan Univeresity

Inventors

• Kang Bo-Gyeong
• Kim Hyoung-Shick
• Song Young-Bae
• Kang Jin-A
• Son Jung-Je
• Lee Duckey

Classifications

• H04W4/008

  Electricity · mapped topic

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title