# US 12,120,121 B2 · Apparatus and method for online service access control > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,120,121 B2 - Document ID: US12120121B2 - Status: Granted - Kind: B2 - Application number: 16/897,708 - Filed: 2020-06-10 - Published: 2021-06-17 - Granted: 2024-10-15 - Earliest claimed: 2019-12-16 - Assignees: NCSOFT Corporation - Applicants: NCSOFT Corporation - Inventors: Taekhun Kim - Web page: https://patentgrep.com/patent/US12120121B2 ## CPC - H04L 63/102: {Entity profiles} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/104: {Grouping of entities} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 67/303: Terminal profiles - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An apparatus and method for online service access control are provided. The method for online service access control according to one embodiment includes determining a device having control right for an online service from among a plurality of user devices accessing a user's account for the online service, providing data generated, by a server, for the online service to the plurality of user devices, and providing data generated, by the device having control right, for the online service to the server. ## Claims ### Claim 1 A method for online service access control, the method being performed by an access control apparatus, the method comprising: determining, by the access control apparatus, a device having control right for an online service from among a plurality of user devices that are concurrently logged into a same user account through a login procedure using authentication information of the same user account; providing, by the access control apparatus, first data generated, by a server providing the online service, for the online service to each of the plurality of user devices; and providing, by the access control apparatus and while the plurality of user devices are concurrently logged into the same user account through the login procedure using the authentication information of the same user account, second data generated by the device having control right for the online service to the server, such that only data generated by the device having control right is provided to the server and data for the online service generated by the remaining devices of the plurality of user devices not having control right is not provided to the server. ### Claim 2 (depends on 1) The method of claim 1, wherein the determining comprises determining the device having control right based on priorities preset for the plurality of user devices. ### Claim 3 (depends on 1) The method of claim 1, wherein the determining comprises determining the device having control right based on an access time of each of the plurality of user devices accessing the same user account. ### Claim 4 (depends on 1) The method of claim 1, wherein the determining comprises determining the device having control right based on a type of each of the plurality of user devices. ### Claim 5 (depends on 1) The method of claim 1, wherein the determining comprises determining the device having control right based on a selection of a user. ### Claim 6 (depends on 1) The method of claim 1, wherein the determining comprises determining the device having control right based on performance information of each of the plurality of user devices. ### Claim 7 (depends on 1) The method of claim 1, further comprising, based on an access of all of the plurality of user devices to the same user account being terminated, switching, by the access control apparatus, a state of the same user account to a log-off state. ### Claim 8 (depends on 1) The method of claim 1, further comprising, based on an additional user device accessing the same user account, notifying, by the access control apparatus, the device having control right of an access of the additional user device to the same user account. ### Claim 9 (depends on 1) The method of claim 1, further comprising, based on an access of at least one user device of the plurality of user devices to the same user account being terminated, notifying, by the access control apparatus, the device having control right of the determination of the access of the at least one user device. ### Claim 10 (depends on 1) The method of claim 1, further comprising providing, by the access control apparatus, information related to the plurality of user devices accessing the same user account to the device having control right. ### Claim 11 An apparatus for online service access control, comprising: one or more communication interfaces; a memory storing one or more commands; and one or more processors configured to execute the one or more commands, wherein the one or more processors are configured to: determine a device having control right for an online service from among a plurality of user devices that are concurrently logged into a same user account through a login procedure using authentication information of the same user account; provide first data generated, by a server providing the online service, for the online service to each of the plurality of user devices through the one or more communication interfaces; provide, while the plurality of user devices are concurrently logged into the same user account through the login procedure using the authentication information of the same user account, second data generated, by the device having control right for the online service to the server through the one or more communication interfaces, such that only data generated by the device having control right is provided to the server and data for the online service generated by the remaining devices of the plurality of user devices not having control right is not provided to the server. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to determine the device having control right based on priorities preset for the plurality of user devices. ### Claim 13 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to determine the device having control right based on an access time of each of the plurality of user devices for the same user account. ### Claim 14 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to determine the device having control right based on a type of each of the plurality of user devices. ### Claim 15 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to determine the device having control right based on a selection of a user. ### Claim 16 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to determine the device having control right based on performance information of each of the plurality of user devices. ### Claim 17 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to, based on an access of all of the plurality of user devices to a state of the same user account being terminated, switch the same user account to a log-off state. ### Claim 18 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to, based on an additional user device accessing the same user account, notify the device having control right of an access of the additional user device to the same user account. ### Claim 19 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to, based on an access of at least one user device of the plurality of user devices to the same user account being terminated, notify, through the one or more communication interfaces, the device having control right of the determination of the access of the at least one user device. ### Claim 20 (depends on 11) The apparatus of claim 11, wherein the one or more processors are further configured to provide information related to the plurality of user devices accessing the same user account to the device having control right.