Abstract:
PURPOSE: An identity management server, a system and a method using the same are provided to safely and conveniently stores user identities to a smart card of a user through a standard web technology. CONSTITUTION: A portable terminal(10) includes a smart card(11), and a management server(110) is mounted at the smart card. The management server manages a user identity, and a web server(20) generates the identity related to a user. The web server provides the management server with the generated identity through wired/wireless networks(50). A service terminal(30) receives an essential identity from the portable terminal through a local network communication.
Abstract:
PURPOSE: A method for preventing a cellular phone phishing attack by managing caller identification is provided to reduce the damages resulting from a malicious phishing attack. CONSTITUTION: A phishing discrimination request message for the caller ID of a received voice call is received from a mobile communication terminal, which receives a voice call, through a communication network(S300). It is judged whether or not the caller ID of the received voice call is a phishing calling number by referring to an internal DB(S310). The judgment result is transmitted to the mobile communication terminal through the communication network(S320).
Abstract:
PURPOSE: An identity information management apparatus and a method are provided to solve a problem that all identity information of user is provided to the identity consumer by contracting a sharing contract about shared data item. CONSTITUTION: A contract matter management unit(220) manages share contract facts of the identity information fixed and contracted between user and identity providers. If the identity consumer inputs the identity information request about the user, an identity provider selector unit(230) selects the identity provider capable of proving the identity information about the user based on the share contract facts. An information provider unit(240) provides the information according to the identity information request to the identity consumer.
Abstract:
PURPOSE: A method for enrollment, an authentication using private internet access devices, and a system thereof are provided to safely authenticate without inputting user ID and password. CONSTITUTION: An authentication unit(132) encrypts the special purpose key using the authentication key which it is input from the service provider server. The authentication unit decrypts the server intrinsic creation information encrypted to the authentication key received from the service provider server. The authentication unit ciphers the personal information of user by the hard coded using the key and decoded server intrinsic creation information as described above. A user interaction unit(134) displays the server information which can confirm the service provider server received from the service provider server to user.
Abstract:
PURPOSE: A user terminal equipping an identity selector and an identity authentication method using the identity selector are provided to solve a problem about not remembering an I-PIN or G-PIN about which a user subscribes a site by adding the identity selector. CONSTITUTION: A user terminal(100) equipped with an identity selector includes an identity administration module(130), and an identity selector module. The identity selector provides identity information for the identification certification of a user between the identity certificate server, and the web service providing server. The identity administration module stores the information of the identity certificate server for issuing the crustaceous personal identification information for the corresponding user and information for identity of the corresponding user.
Abstract:
There is provided a method of sharing identities in a ubiquitous environment, the method including: allowing an identity sharing apparatus to receive a service message transmitted from a service provider; allowing a relationship module of the identity sharing apparatus to check whether to have a relationship with a service of the service provider that transmits the service message; displaying a portion of the received service message such that a user can select a service, when it is determined that no relationship is established; displaying relationship establishment conditions including the content of the selected service and an identity list to be provided to the service provider; allowing the service provider and the identity sharing apparatus to perform a relationship establishment protocol; and storing relationship establishment information.
Abstract:
A certificate transmitting server and system for transmitting a certificate stored in a fixed terminal to a mobile terminal, and a method thereof are provided to authenticate the mobile terminal and the fixed terminal through the certificate transmitting server and transmit the certificate through a safely set communication channel, thereby providing a safe mobile electronic business service. A method for transmitting a certificate stored in a fixed terminal to a mobile terminal comprises the following steps of: configuring the mobile terminal and a security channel to authenticate the mobile terminal(S301~S305); configuring the fixed terminal and a security channel to authenticate the fixed terminal(S309~S313); and receiving the certificate from the fixed terminal and transmitting the certificate to the mobile terminal if all authentication succeeds(S319).
Abstract:
An authentication system between a server and a client through the various kinds of certification media and a method thereof are provided to select an authentication method suitable for a right level required from the server by providing an authentication method regardless of the authentication mechanism. A client(200) requests general-purpose authentication list to a server(300). The client provides the general purpose authorization index to a user(100). The authentication type is selected user. The server determines whether the user is authenticated. The response message is transmitted from the server to the client. The authentication system between a server and a client through the various kinds of certification media selects an authentication method suitable for a right level.
Abstract:
웹사이트 로그인 처리 방법 및 장치가 개시된다. 어느 웹사이트에 대한 여러 개의 사용자 ID 및 패스워드를 포함하는 사용자 정보가 사용자 컴퓨터에 저장되어 있다. 본 발명에 따른 웹사이트 로그인 장치가 사용자 컴퓨터의 하나의 예가 될 수 있다. 사용자가 웹사이트에 대한 로그인을 시도하면, 사용자 컴퓨터에 저장되어 있던 사용자 정보가 사용자에게 시각적으로 표시되며, 사용자는 그 여러 개의 사용자 정보 중에서 하나를 선택한다. 사용자가 선택한 ID 및 패스워드에 의해 해당 웹사이트에 대한 로그인이 처리된다. 난수에 의해 사용자 정보에 대한 암호키가 생성되고, 이 암호키에 의해 로그인의 정당성이 확인된다. 사용자 컴퓨터에 저장된 사용자 정보를 조회함으로써 사용자는 자신이 가입한 웹사이트의 현황을 파악한다.
Abstract:
A method and an apparatus for controlling distribution of personal information among privacy domains are provided to enhance efficiency in distributing the personal information on the basis of a BPP(Bridge Privacy Policy) list via a BPC(Bridge Privacy Controller) without each PC(Privacy Controller)'s considering the information of the sites within all the domains. An apparatus for controlling distribution of personal information includes an AC(Attribute Consumer) list receiver(201), a BPP list generator(202) and a BPP list transmitter(203). The AC list receiver receives an AC list, which is a trust level list on the sites within a privacy domain, from each PC, which manages distribution of personal information among the sites within the privacy domain. The BPP list generator generates a BPP list for making each PC process a query on a request of the personal information from a specific site within other privacy domain by integrating the received AC list. The BPP list transmitter transmits the generated BPP list to each PC.