# US 8,474,030 B2 · User authentication system using IP address and method thereof > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,474,030 B2 - Document ID: US8474030B2 - Status: Granted - Kind: B2 - Application number: 12/195,010 - Filed: 2008-08-20 - Published: 2009-02-26 - Granted: 2013-06-25 - Earliest claimed: 2007-08-21 - Assignees: Nhn Business Platform Corporation - Applicants: Inhyuk Choi; Youngsik Jung; Minchol Song; Jongwon Paek; Haneul Lee; Jungyun Son; Hyoungjun Lee; Sungho Lee; Sanghun Jeon - Inventors: Inhyuk Choi; Youngsik Jung; Minchol Song; Jongwon Paek; Haneul Lee; Jungyun Son; Hyoungjun Lee; Sungho Lee; Sanghun Jeon - Web page: https://patentgrep.com/patent/US8474030B2 ## CPC - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 21/46: by designing passwords or checking the strength of passwords - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - G06F 2221/2101: Auditing as a secondary aspect - G06F 2221/2129: Authenticate client device independently of the user - G06F 2221/2137: Time limited access, e.g. to a computer or data - G06F 2221/2151: Time stamp - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for authenticating a user by IP address check includes: receiving a URL and a session cookie from a client; determining whether or not an IP address of the client has been changed based on the session cookie; resetting the session cookie, if the IP address has been changed, by adding the changed IP address as a temporary IP address thereto; determining whether or not the URL is required to perform IP address check; requesting a re-login to the client if it is determined that the URL is required to perform IP address check; and adding the temporary IP address to a valid IP address list for the user if the re-login is successful. ## Claims ### Claim 1 A user authentication system, the system comprising: a login server configured to control login by using a user identification (ID) and a password; a log database (DB) configured to store log records of users, the log records comprising an IP address used for login; and an IP address check authentication module configured to receive a cookie and a Uniform Resource Locator (URL) and to determine whether or not an IP address of the respective users having been changed, wherein the cookie is reset by adding the changed IP address to the cookie as a temporary IP address, and the IP address check authentication module is configured to provide a login window to perform the re-login process upon detection of the IP address being changed and the URL being required for an authentication, wherein the temporary IP address is added into a valid IP address list upon detection of a successful re-login process, and wherein a web service corresponding to a requested URL is provided. ### Claim 2 (depends on 1) The user authentication system of claim 1, wherein the IP address check authentication module is configured to provide a web service corresponding to a URL requested from the user having an IP address in the valid IP address list. ### Claim 3 (depends on 1) The user authentication system of claim 1, wherein the URL being required for an authentication comprises one of URLs of web services comprising reading and writing e-mails, messages, articles, secret writings or any combination thereof. ### Claim 4 (depends on 1) The user authentication system of claim 1, wherein each IP address of the valid IP address list is expressed as one of a first class represented by first three octet values of the IP address or a second class represented by four octet values. ### Claim 5 (depends on 4) The user authentication system of claim 4, wherein the first class or the second class is selected by the user by providing a user interface comprising an IP address check option in response to detection of the successful re-login process. ### Claim 6 (depends on 4) The user authentication system of claim 4, wherein the cookie comprises a value of an IP address check option, the user ID and the valid IP address list corresponding to each of the first class and the second class. ### Claim 7 (depends on 1) The user authentication system of claim 1, further comprising: a user interface is provided, wherein either one of use of IP address or non-use of IP address associated with setting a security is selected, wherein the use of IP address comprises use of single IP address and use of valid IP address list according to a security level. ### Claim 8 A computer-implemented method for authenticating a user, the method comprising: receiving a cookie and a URL; determining whether or not an IP address of a user having been changed, if changed the cookie being reset by adding the changed IP address to the cookie as a temporary IP address; providing a user with a user interface for a re-login process upon detection of the IP address being changed and the URL being required for an authentication, wherein the temporary IP address is added to a valid IP address list in response to detection of a successful re-login process; and providing a web service. ### Claim 9 (depends on 8) The method of claim 8, further comprising: providing a first class represented by first three octet values of the IP address in the valid IP address list and a second class represented by four octet values thereof; and adding information to the cookie data for specifying the use of the first class or the second class. ### Claim 10 (depends on 9) The method of claim 9, further comprising: providing an option to set an IP address checking, wherein the option comprises one of using valid IP address list of the first class, using valid IP address list of the second class, using only a single IP address, or any combination thereof according to a security level. ### Claim 11 A method for authenticating a user by IP address check, the method comprising: receiving a URL and a session cookie from a client; determining whether or not an IP address of the client has been changed based on the session cookie; resetting the session cookie, upon detection of the IP address being changed, by adding the changed IP address as a temporary IP address thereto; determining whether or not the URL is required to be checking comprising whether the IP address of the client being changed and the URL being required for an authentication; requesting a re-login to the client in response to the determination of the URL being required an authentication and the IP address being changed; and adding the temporary IP address to a valid IP address list in response to detection of the re-login being successful. ### Claim 12 (depends on 11) The method of claim 11, wherein the session cookie comprises the valid IP address list. ### Claim 13 (depends on 12) The method of claim 12, wherein the valid IP address list comprises a group of IP addresses from log records of the client. ### Claim 14 (depends on 13) The method of claim 13, wherein the valid IP address list comprises first three octet values. ### Claim 15 (depends on 13) The method of claim 13, further comprising: providing a client interface to perform the re-login, wherein the converted temporary IP address is stored in a non-transitory storage medium as a valid IP address upon detection of the successful re-login. ### Claim 16 A non-transitory computer-readable storage medium comprising an executable program, which when executed, for performing steps for user authentication according to a security level, the steps comprising: determining a first valid IP address list of a first class, which records first three octet values of each of IP addresses to generate a group of the IP addresses used by a first user from access log records associated with accessing information activities or login/logout activities of the first user; determining a first valid IP address list of a second class, which records first four octet values of each of IP addresses to generate a group of the IP addresses used by a second user from access log records of the second user; determining a second valid IP address list of a first class, which records first three octet values of each of IP addresses to generate a group of the IP addresses used by a second user, the second valid IP address comprising a temporary IP address which is added into the first valid IP address list of the first class in response to detection of a successful re-login process; and determining a second valid IP address list of a second class, which records first four octet values of each of IP addresses to generate a group of IP addresses the second valid IP address comprising a temporary IP address which is added into the first valid IP address list of the second class in response to detection of a successful re-login process. ### Claim 17 (depends on 16) The computer-readable storage medium of claim 16, wherein the first valid IP address list of the first class and the second valid IP address list of the first class are used for a lower security level than the first valid IP address list of the second class and the second valid IP address list of the second class.