User authentication method using self-signed certificate of web server, client device and electronic device including web server performing the same

A user authentication method using a self-signed certificate of a web server, the user authentication method comprising:

• receiving inputs of a user ID and a password;
• generating, using at least one processor, a log-in message and a verification value by using a public key registered to the self-signed certificate of the web server, the user ID and the password;
• transmitting the generated log-in message to the web server;
• receiving a response message from the web server;
• verifying a reliability of the response message by using the public key and the verification value;
• and
• transmitting the verification value to the web server via a secure socket layer (SSL) channel connected by using the self-signed certificate of the web server if a reliability of the response message is verified.

A user authentication method using a self-signed certificate of a web server, the user authentication method comprising:

• an operation in which a client device receives inputs of a user ID and a password;
• an operation in which the client device generates a log-in message and a verification value by using a public key registered to the self-signed certificate of the web server, the user ID and the password;
• an operation in which the client device transmits the generated log-in message to the web server;
• an operation in which the web server generates a response message by using the log-in message and a secret key corresponding to the public key;
• an operation in which the web server transmits the generated response message to the client device;
• an operation in which the client device verifies a reliability of the response message by using the public key and the verification value;
• an operation in which, when the reliability of the response message is verified, the client device transmits the verification value to the web server via a secure socket layer (SSL) channel connected by using the self-signed certificate of the web server;
• an operation in which the web server verifies a reliability of the log-in message by using the verification value;
• and
• an operation in which the web server confirms completion of user authentication if a reliability of the log-in message is verified,
• wherein at least one operation uses at least one processor.

An electronic device having a web server, the electronic device comprising:

• a communication interface to communicate with a client device;
• a certificate generator to generate a self-signed certificate;
• a response message generator to generate a response message by using a secret key corresponding to a public key registered to the self-signed certificate in response to a log-in message received from the client device;
• a user authenticator to verify a reliability of the log-in message by using a verification value received from the client device via a secure socket layer (SSL) channel connected by using the self-signed certificate of the web server;
• a storage to store user authentication information;
• and
• a controller to control a user authentication process,
• wherein, when the log-in message is received from the client device via the communication interface unit, the control unit transmits a response message generated by the response message generator to the client device.

A client device comprising:

• a communication interface to communicate with a web server;
• a user authentication information inputting unit to receive inputs of a user ID and a password from a user;
• a security unit to obtain a public key registered to a self-signed certificate of the web server;
• a log-in message generator to generate a log-in message by using the public key obtained by the security unit and the user ID and the password input via the user authentication information inputting unit;
• a verification value generator to generate a verification value by using the public key obtained by the security unit and the user ID and the password input via the user authentication information inputting unit;
• a response verifier to verify a reliability of a response message received from the web server;
• and
• a controller to control a user authentication process,
• wherein the controller transmits the log-in message to the web server via the communication interface, and, when a reliability of the response message is verified, transmits a verification value generated by the verification value generator to the web server via a secure socket layer (SSL) channel connected by using the self-signed certificate of the web server.

At least one computer readable medium storing computer readable instructions that control at least one processor to implement a user authentication method using a self-signed certificate of a web server, the method comprising:

• receiving a log-in message generated by using a public key registered to the self-signed certificate of the web server from a client device;
• generating a response message by using the log-in message and a secret key corresponding to the public key using at least one processor;
• transmitting the generated response message to the client device;
• receiving a verification value from the client device via a secure socket layer (SSL) channel connected by using the self-signed certificate of the web server from the client device when a reliability of the response message is verified at the client device;
• verifying a reliability of the log-in message by using the received verification value;
• and
• confirming completion of user authentication if the reliability of the log-in message is verified.

At least one computer readable medium storing computer readable instructions that control at least one processor to implement a user authentication method using a self-signed certificate of a web server, the method comprising:

• receiving inputs of a user ID and a password;
• generating, using at least one processor, a log-in message and a verification value by using a public key registered to the self-signed certificate of the web server, the user ID and the password;
• transmitting the generated log-in message to the web server;
• receiving a response message from the web server;
• verifying a reliability of the response message by using the public key and the verification value;
• and
• transmitting the verification value to the web server via a secure socket layer (SSL) channel connected by using the self-signed certificate of the web server if a reliability of the response message is verified.

At least one computer readable medium storing computer readable instructions that control at least one processor to implement a user authentication method using a self-signed certificate of a web server, the method comprising:

• an operation in which a client device receives inputs of a user ID and a password;
• an operation in which the client device generates a log-in message and a verification value by using a public key registered to the self-signed certificate of the web server, the user ID and the password;
• an operation in which the client device transmits the generated log-in message to the web server;
• an operation in which the web server generates a response message by using the log-in message and a secret key corresponding to the public key;
• an operation in which the web server transmits the generated response message to the client device;
• an operation in which the client device verifies a reliability of the response message by using the public key and the verification value;
• an operation in which, when the reliability of the response message is verified, the client device transmits the verification value to the web server via a secure socket layer (SSL) channel connected by using the self-signed certificate of the web server;
• an operation in which the web server verifies a reliability of the log-in message by using the verification value;
• and
• an operation in which the web server confirms completion of user authentication if a reliability of the log-in message is verified,
• wherein at least one operation uses at least one processor.