公开(公告)号：KR101388251B1

公开(公告)日：2014-04-24

申请号：KR1020120137987

申请日：2012-11-30

Applicant: 숭실대학교산학협력단

Inventor： 유명식 ,  전문길 ,  류디시 ,  김영석 ,  이원희 ,  황준호

IPC: G06F21/30 ,  G06Q50/30

CPC classification number: G06F21/31 ,  G06Q50/01 ,  G06Q50/30

Abstract: Disclosed are a method and apparatus for authenticating an unknown user in a social network service. The disclosed method for authenticating an unknown user comprises the steps of: receiving, from a terminal device of an unknown user, an access request message including identification information of the unknown user and a friend list of the unknown user in a social network service; searching the same friend as a friend of the unknown user in the social network service in the friend list of the unknown user; transmitting, to a terminal of the same friend, an authentication request message including the identification information of the unknown user; receiving, from the terminal of the same friend, an authentication confirmation message as a response to the authentication request message; and authenticating the unknown user in response to the reception of the authentication confirmation message. [Reference numerals] (210) User A; (230) User F; (S400) Receive an access request message transmitted from a user U; (S402) Decode the access request message; (S404) Extract a friend list of the user U and a first cryptogram from the decoded access request message; (S406) Decode the first cryptogram; (S408) Determine whether friend lists are identical to each other; (S410) Search whether the same friend as a friend of the user A exists in the friend list of the user U; (S412) Transmit an authentication request message; (S414) Decode the authentication request message; (S416) Extract identification information of the user A, identification information of the user U, and a second cryptogram from the decoded authentication request message; (S418) Decode the second cryptogram; (S420) Determine whether the identification information of the users are identical to one another; (S422) Search whether the identification information of the user F exists in one's own friend list; (S424) Transmit an authentication confirmation message; (S426) Authenticate the user U

Abstract translation: 公开了一种用于在社交网络服务中认证未知用户的方法和装置。 所公开的用于认证未知用户的方法包括以下步骤：从未知用户的终端设备接收包括未知用户的识别信息和社交网络服务中未知用户的朋友列表的接入请求消息; 在未知用户的朋友列表中的社交网络服务中搜索与未知用户的朋友相同的朋友; 向同一个朋友的终端发送包括未知用户的识别信息的认证请求消息; 从同一个朋友的终端接收作为对认证请求消息的响应的认证确认消息; 以及响应于所述认证确认消息的接收来认证所述未知用户。 （附图标记）（210）用户A; （230）用户F; （S400）接收从用户U发送的接入请求消息; （S402）解码访问请求消息; （S404）从解码的访问请求消息中提取用户U的朋友列表和第一密码; （S406）解码第一个密码; （S408）确定朋友列表是否相同; （S410）搜索用户U的朋友列表中是否存在与用户A的朋友相同的朋友; （S412）发送认证请求消息; （S414）解码认证请求消息; （S416）从解码的认证请求消息中提取用户A的识别信息，用户U的识别信息和第二密码; （S418）解码第二个密码; （S420）确定用户的识别信息是否相同; （S422）搜索用户F的识别信息是否存在于自己的朋友列表中; （S424）发送认证确认消息; （S426）验证用户U