System and method for secure login, and apparatus for same

A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising:

• by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in;
• by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place;
• by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place;
• by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site;
• and
• by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table;
• wherein said acquiring of authentication-related data by the authentication providing device includes extracting encrypted log-in authentication information, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level,
• wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted encrypted log-in authentication information to the communication device, and
• wherein the method further comprises:
• by the communication device, decrypting the encrypted log-in authentication information received from the authentication data providing device by using a decryption key which is already stored;
• and
• by the communication device, performing an authentication for the web site by using the decrypted log-in authentication information.

A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising:

• by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in;
• by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place;
• by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place;
• by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site;
• and
• by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table;
• wherein said acquiring of authentication-related data by the authentication providing device includes extracting a decryption key, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level,
• wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted decryption key to the communication device, and
• wherein the method further comprises:
• by the communication device, decrypting encrypted log-in authentication information, which is already stored, by using the decryption key, and
• by the communication device, performing an authentication for the web site by using the decrypted log-in authentication information.

A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising:

• by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in;
• by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place;
• by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place;
• by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site;
• and
• by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table;
• wherein said acquiring of authentication-related data by the authentication providing device includes extracting an authentication information storage address, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level
• wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted authentication information storage address to the communication device, and
• wherein the method further comprises:
• by the communication device, decrypting the authentication information storage address received from the authentication data providing device;
• by the communication device, receiving authentication information stored in the decrypted authentication information storage address from an authentication information storage server;
• and
• by the communication device, performing an authentication for the web site by using the received authentication information.

An authentication data providing device, comprising:

• at least one processor;
• a communication circuit;
• a memory;
• a data storage module configured to store encrypted log-in authentication information;
• and
• at least one program stored in the memory and configured to be executed by the at least one processor,
• wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
• wherein the program includes:
• a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
• an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place;
• and
• an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
• wherein the authentication data acquiring module requests a decryption key to the communication device and receives the decryption key from the communication device, then extracts encrypted log-in authentication information stored in the data storage module, and decrypts the extracted encrypted log-in authentication information by using the decryption key,
• wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place;
• and acquires the authentication-related data based on the applied security level, and
• wherein the authentication data providing module provides the decrypted log-in authentication information to the web site or the communication device.

An authentication data providing device, comprising:

• at least one processor;
• a communication circuit;
• a memory;
• a data storage module configured to store encrypted log-in authentication information;
• and
• at least one program stored in the memory and configured to be executed by the at least one processor,
• wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
• wherein the program includes:
• a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
• an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place;
• and
• an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
• wherein the authentication data acquiring module extracts encrypted log-in authentication information stored in the data storage module,
• wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place;
• and acquires the authentication-related data based on the applied security level, and
• wherein the authentication data providing module provides the extracted encrypted log-in authentication information to the communication device.

An authentication data providing device, comprising:

• at least one processor;
• a communication circuit;
• a memory;
• a data storage module configured to store a decryption key for decrypting encrypted log-in authentication information stored in a communication device;
• and
• at least one program stored in the memory and configured to be executed by the at least one processor,
• wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
• wherein the program includes:
• a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
• an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place;
• and
• an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
• wherein the authentication data acquiring module extracts a decryption key from the data storage module,
• wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place;
• and acquires the authentication-related data based on the applied security level, and
• wherein the authentication data providing module provides the extracted decryption key to the communication device.

An authentication data providing device, comprising:

• at least one processor;
• a communication circuit;
• a memory;
• a data storage module configured to store an authentication information storage address at which log-in authentication information is stored;
• and
• at least one program stored in the memory and configured to be executed by the at least one processor,
• wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server,
• wherein the program includes:
• a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device;
• an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place;
• and
• an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device;
• wherein the authentication data acquiring module extracts an authentication information storage address of the web site from the data storage module,
• wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place;
• and acquires the authentication-related data based on the applied security level, and
• wherein the authentication data providing module provides the extracted authentication information storage address to the communication device.