System and method for secure login, and apparatus for same
Disclosed is a safe log-in system and method for allowing log-in of a user in association with a plurality of devices, and an apparatus for the same. The safe log-in method for allowing a safe log-in of a communication device which accesses a web site includes, by an authentication data providing device, determining whether the authentication data providing device and the communication device are located at the same place; by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place as a result of the determination; and by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site.
1. A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising:
by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in;
by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place;
by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place;
by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and
by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table;
wherein said acquiring of authentication-related data by the authentication data providing device includes:
requesting a decryption key to the communication device and receiving the decryption key from the communication device;
extracting encrypted log-in authentication information, and decrypting the extracted log-in authentication information by using the decryption key;
applying the checked security level when the authentication data providing device and the communication device are located at the same place; and
acquiring the authentication-related data based on the applied security level; and
wherein said providing of the authentication-related data includes providing the decrypted log-in authentication information to the web site or the communication device.
2. The safe log-in method according to claim 1 , further comprising:
by the authentication data providing device, checking an access token of the communication device,
wherein said providing of the authentication-related data includes providing the access token to the web site together with the decrypted log-in authentication information.
3. A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising:
by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in;
by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place;
by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place;
by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and
by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table;
wherein said acquiring of authentication-related data by the authentication providing device includes extracting encrypted log-in authentication information, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level,
wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted encrypted log-in authentication information to the communication device, and
wherein the method further comprises:
by the communication device, decrypting the encrypted log-in authentication information received from the authentication data providing device by using a decryption key which is already stored; and
by the communication device, performing an authentication for the web site by using the decrypted log-in authentication information.
4. A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising:
by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in;
by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place;
by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place;
by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and
by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table;
wherein said acquiring of authentication-related data by the authentication providing device includes extracting a decryption key, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level,
wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted decryption key to the communication device, and
wherein the method further comprises:
by the communication device, decrypting encrypted log-in authentication information, which is already stored, by using the decryption key, and
by the communication device, performing an authentication for the web site by using the decrypted log-in authentication information.
5. A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising:
by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in;
by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place;
by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place;
by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and
by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table;
wherein said acquiring of authentication-related data by the authentication providing device includes extracting an authentication information storage address, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level
wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted authentication information storage address to the communication device, and
wherein the method further comprises:
by the communication device, decrypting the authentication information storage address received from the authentication data providing device;
by the communication device, receiving authentication information stored in the decrypted authentication information storage address from an authentication information storage server; and
by the communication device, performing an authentication for the web site by using the received authentication information.
6. The safe log-in method according to claim 1 ,
wherein said acquiring of authentication-related data includes:
applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place.
7. The safe log-in method according to claim 6 ,
wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and
wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device.
8. The safe log-in method according to claim 6 ,
wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level.
9. The safe log-in method according to claim 6 ,
wherein said acquiring of authentication-related data includes:
outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and
acquiring the authentication-related data when an approval signal is input through the notification window.
10. The safe log-in method according to claim 1 , after said providing of the authentication-related data, further comprising:
by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and
by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place.
11. The safe log-in method according to claim 1 , further comprising:
by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place.
12. An authentication data providing device, comprising:
at least one processor;
a communication circuit;
a memory;
a data storage module configured to store encrypted log-in authentication information; and
at least one program stored in the memory and configured to be executed by the at least one processor,
wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
wherein the program includes:
a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and
an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
wherein the authentication data acquiring module requests a decryption key to the communication device and receives the decryption key from the communication device, then extracts encrypted log-in authentication information stored in the data storage module, and decrypts the extracted encrypted log-in authentication information by using the decryption key,
wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and
wherein the authentication data providing module provides the decrypted log-in authentication information to the web site or the communication device.
13. The authentication data providing device according to claim 12 ,
wherein the authentication data providing module checks an access token of the communication device and provides the access token to the web site together with the decrypted log-in authentication information.
14. An authentication data providing device, comprising:
at least one processor;
a communication circuit;
a memory;
a data storage module configured to store encrypted log-in authentication information; and
at least one program stored in the memory and configured to be executed by the at least one processor,
wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
wherein the program includes:
a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and
an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
wherein the authentication data acquiring module extracts encrypted log-in authentication information stored in the data storage module,
wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and
wherein the authentication data providing module provides the extracted encrypted log-in authentication information to the communication device.
15. An authentication data providing device, comprising:
at least one processor;
a communication circuit;
a memory;
a data storage module configured to store a decryption key for decrypting encrypted log-in authentication information stored in a communication device; and
at least one program stored in the memory and configured to be executed by the at least one processor,
wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
wherein the program includes:
a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and
an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
wherein the authentication data acquiring module extracts a decryption key from the data storage module,
wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and
wherein the authentication data providing module provides the extracted decryption key to the communication device.
16. An authentication data providing device, comprising:
at least one processor;
a communication circuit;
a memory;
a data storage module configured to store an authentication information storage address at which log-in authentication information is stored; and
at least one program stored in the memory and configured to be executed by the at least one processor,
wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
wherein the program includes:
a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and
an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
wherein the authentication data acquiring module extracts an authentication information storage address of the web site from the data storage module,
wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and
wherein the authentication data providing module provides the extracted authentication information storage address to the communication device.
17. The authentication data providing device according to claim 12 , further comprising:
a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place,
wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module.
18. The authentication data providing device according to claim 17 ,
wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place.
19. The authentication data providing device according to claim 18 ,
wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and
wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device.
20. The authentication data providing device according to claim 18 ,
wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level.
21. The authentication data providing device according to claim 19 ,
wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window.
22. The authentication data providing device according to claim 12 ,
wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place.
23. The authentication data providing device according to claim 12 ,
wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device.
24. The safe log-in method according to claim 3 , further comprising:
by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from the security policy table,
wherein said acquiring of authentication-related data includes:
applying the checked security level when the authentication data providing device and the communication device are located at the same place; and
acquiring the authentication-related data based on the applied security level.
25. The safe log-in method according to claim 24 ,
wherein said acquiring of authentication-related data includes:
applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place.
26. The safe log-in method according to claim 25 ,
wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and
wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device.
27. The safe log-in method according to claim 25 ,
wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level.
28. The safe log-in method according to claim 25 ,
wherein said acquiring of authentication-related data includes:
outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and
acquiring the authentication-related data when an approval signal is input through the notification window.
29. The safe log-in method according to claim 4 , further comprising:
by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from the security policy table,
wherein said acquiring of authentication-related data includes:
applying the checked security level when the authentication data providing device and the communication device are located at the same place; and
acquiring the authentication-related data based on the applied security level.
30. The safe log-in method according to claim 29 ,
wherein said acquiring of authentication-related data includes:
applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place.
31. The safe log-in method according to claim 30 ,
wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and
wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device.
32. The safe log-in method according to claim 30 ,
wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level.
33. The safe log-in method according to claim 30 ,
wherein said acquiring of authentication-related data includes:
outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and
acquiring the authentication-related data when an approval signal is input through the notification window.
34. The safe log-in method according to claim 5 , further comprising:
by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from the security policy table,
wherein said acquiring of authentication-related data includes:
applying the checked security level when the authentication data providing device and the communication device are located at the same place; and
acquiring the authentication-related data based on the applied security level.
35. The safe log-in method according to claim 34 ,
wherein said acquiring of authentication-related data includes:
applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place.
36. The safe log-in method according to claim 35 ,
wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and
wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device.
37. The safe log-in method according to claim 35 ,
wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level.
38. The safe log-in method according to claim 35 ,
wherein said acquiring of authentication-related data includes:
outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and
acquiring the authentication-related data when an approval signal is input through the notification window.
39. The safe log-in method according to claim 3 , after said providing of the authentication-related data, further comprising:
by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and
by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place.
40. The safe log-in method according to claim 4 , after said providing of the authentication-related data, further comprising:
by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and
by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place.
41. The safe log-in method according to claim 5 , after said providing of the authentication-related data, further comprising:
by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and
by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place.
42. The safe log-in method according to claim 3 , further comprising:
by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place.
43. The safe log-in method according to claim 4 , further comprising:
by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place.
44. The safe log-in method according to claim 5 , further comprising:
by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place.
45. The authentication data providing device according to claim 14 , further comprising:
a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place,
wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module.
46. The authentication data providing device according to claim 45 ,
wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place.
47. The authentication data providing device according to claim 46 ,
wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and
wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device.
48. The authentication data providing device according to claim 46 ,
wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level.
49. The authentication data providing device according to claim 46 ,
wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window.
50. The authentication data providing device according to claim 15 , further comprising:
a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place,
wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module.
51. The authentication data providing device according to claim 50 ,
wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place.
52. The authentication data providing device according to claim 51 ,
wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and
wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device.
53. The authentication data providing device according to claim 51 ,
wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level.
54. The authentication data providing device according to claim 51 ,
wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window.
55. The authentication data providing device according to claim 16 , further comprising:
a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place,
wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module.
56. The authentication data providing device according to claim 55 ,
wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place.
57. The authentication data providing device according to claim 56 ,
wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and
wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device.
58. The authentication data providing device according to claim 56 ,
wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level.
59. The authentication data providing device according to claim 56 ,
wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window.
60. The authentication data providing device according to claim 14 ,
wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place.
61. The authentication data providing device according to claim 15 ,
wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place.
62. The authentication data providing device according to claim 16 ,
wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place.
63. The authentication data providing device according to claim 14 ,
wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device.
64. The authentication data providing device according to claim 15 ,
wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device.
65. The authentication data providing device according to claim 16 ,
wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device.