Reinforced authentication system and method using context information at the time of access to mobile cloud service
AssigneeKorea Internet & Security Agency
InventorsHwan-Kuk Kim, Chang-Yong Lee, Jeong-Wook Kim, Il-Ahn Cheong, Hyun-Cheol Jeong
Life of this patent
Estimating the term…
Abstract
Provided are a reinforced authentication system and method using context information at the time of access to a mobile cloud service. The system comprises a mobile terminal transmitting a context information message, which comprises context information, and authentication information and a context information-based authentication server receiving the context information message and the authentication information, determining an authentication mechanism based on the context information message, and authenticating a user of the mobile terminal.
Claims25
A reinforced authentication system using context information at the time of access to a mobile cloud service, the system comprising:
- a mobile terminal transmitting a context information message, which comprises context information, and authentication information;
- and
- a context information-based authentication server receiving the context information message and the authentication information, determining an authentication mechanism based on the context information message, and authenticating a user of the mobile terminal,
- wherein the context information message comprises a user ID item which identifies the user of the mobile terminal, an Internet protocol (IP)/port item which identifies an IP and port used by the mobile terminal, a time item which identifies a time when the context information was collected, a place item which identifies the location of the mobile terminal, a model name item of the mobile terminal, a terminal ID item of the mobile terminal, an access network item which identifies an access network to which the mobile terminal is connected, and an access network security item which indicates whether the access network applies encryption.
A reinforced authentication method using context information at the time of access to a mobile cloud service, the method comprising:
- generating a context information message, which comprises context information, by using a mobile terminal;
- transmitting the context information message to a context information-based authentication server by using the mobile terminal;
- determining an authentication mechanism based on the context information message by using the context information-based authentication server;
- receiving authentication information, which corresponds to the authentication mechanism, from the mobile terminal by using the context information-based authentication server;
- and
- executing authentication based on the authentication information and the authentication mechanism by using the context information-based authentication server,
- wherein the context information message comprises a user ID item which identifies the user of the mobile terminal, an IP/port item which identifies an IP and port used by the mobile terminal, a time item which identifies a time when the context information was collected, a place item which identifies the location of the mobile terminal, a model name item of the mobile terminal, a terminal ID item of the mobile terminal, an access network item which identifies an access network to which the mobile terminal is connected, and an access network security item which indicates whether the access network applies encryption.
Dependencies are inferred from the claim text.