# US 9,882,896 B2 · System and method for secure login, and apparatus for same > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,882,896 B2 - Document ID: US9882896B2 - Status: Granted - Kind: B2 - Application number: 14/655,868 - Filed: 2013-06-28 - Published: 2015-12-03 - Granted: 2018-01-30 - Earliest claimed: 2012-12-27 - Assignees: Rowem Inc. - Applicants: Rowem Inc. - Inventors: Giho Yang; Jaeyeob Hwang - Web page: https://patentgrep.com/patent/US9882896B2 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - G06F 21/31: User authentication - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Disclosed is a safe log-in system and method for allowing log-in of a user in association with a plurality of devices, and an apparatus for the same. The safe log-in method for allowing a safe log-in of a communication device which accesses a web site includes, by an authentication data providing device, determining whether the authentication data providing device and the communication device are located at the same place; by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place as a result of the determination; and by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site. ## Claims ### Claim 1 A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising: by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in; by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place; by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place; by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table; wherein said acquiring of authentication-related data by the authentication data providing device includes: requesting a decryption key to the communication device and receiving the decryption key from the communication device; extracting encrypted log-in authentication information, and decrypting the extracted log-in authentication information by using the decryption key; applying the checked security level when the authentication data providing device and the communication device are located at the same place; and acquiring the authentication-related data based on the applied security level; and wherein said providing of the authentication-related data includes providing the decrypted log-in authentication information to the web site or the communication device. ### Claim 2 (depends on 1) The safe log-in method according to claim 1, further comprising: by the authentication data providing device, checking an access token of the communication device, wherein said providing of the authentication-related data includes providing the access token to the web site together with the decrypted log-in authentication information. ### Claim 3 A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising: by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in; by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place; by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place; by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table; wherein said acquiring of authentication-related data by the authentication providing device includes extracting encrypted log-in authentication information, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level, wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted encrypted log-in authentication information to the communication device, and wherein the method further comprises: by the communication device, decrypting the encrypted log-in authentication information received from the authentication data providing device by using a decryption key which is already stored; and by the communication device, performing an authentication for the web site by using the decrypted log-in authentication information. ### Claim 4 A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising: by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in; by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place; by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place; by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table; wherein said acquiring of authentication-related data by the authentication providing device includes extracting a decryption key, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level, wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted decryption key to the communication device, and wherein the method further comprises: by the communication device, decrypting encrypted log-in authentication information, which is already stored, by using the decryption key, and by the communication device, performing an authentication for the web site by using the decrypted log-in authentication information. ### Claim 5 A safe log-in method for allowing a safe log-in of a communication device which accesses a web site, the method comprising: by an authentication data providing device, receiving a log-in notification message from a security relay server notifying that a communication device is attempting log-in; by the authentication providing device, determining whether the authentication data providing device and the communication device are located at a same place; by the authentication data providing device, acquiring authentication-related data of the communication device when the authentication data providing device and the communication device are located at the same place; by the authentication data providing device, providing the acquired authentication-related data to the communication device or the web site; and by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from a security policy table; wherein said acquiring of authentication-related data by the authentication providing device includes extracting an authentication information storage address, applying the checked security level when the authentication data providing device and the communication device are located at the same place, and acquiring the authentication-related data based on the applied security level wherein said providing of the authentication-related data by the authentication providing device includes providing the extracted authentication information storage address to the communication device, and wherein the method further comprises: by the communication device, decrypting the authentication information storage address received from the authentication data providing device; by the communication device, receiving authentication information stored in the decrypted authentication information storage address from an authentication information storage server; and by the communication device, performing an authentication for the web site by using the received authentication information. ### Claim 6 (depends on 1) The safe log-in method according to claim 1, wherein said acquiring of authentication-related data includes: applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place. ### Claim 7 (depends on 6) The safe log-in method according to claim 6, wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device. ### Claim 8 (depends on 6) The safe log-in method according to claim 6, wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level. ### Claim 9 (depends on 6) The safe log-in method according to claim 6, wherein said acquiring of authentication-related data includes: outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and acquiring the authentication-related data when an approval signal is input through the notification window. ### Claim 10 (depends on 1) The safe log-in method according to claim 1, after said providing of the authentication-related data, further comprising: by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place. ### Claim 11 (depends on 1) The safe log-in method according to claim 1, further comprising: by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place. ### Claim 12 An authentication data providing device, comprising: at least one processor; a communication circuit; a memory; a data storage module configured to store encrypted log-in authentication information; and at least one program stored in the memory and configured to be executed by the at least one processor, wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server, wherein the program includes: a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device; an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device; wherein the authentication data acquiring module requests a decryption key to the communication device and receives the decryption key from the communication device, then extracts encrypted log-in authentication information stored in the data storage module, and decrypts the extracted encrypted log-in authentication information by using the decryption key, wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and wherein the authentication data providing module provides the decrypted log-in authentication information to the web site or the communication device. ### Claim 13 (depends on 12) The authentication data providing device according to claim 12, wherein the authentication data providing module checks an access token of the communication device and provides the access token to the web site together with the decrypted log-in authentication information. ### Claim 14 An authentication data providing device, comprising: at least one processor; a communication circuit; a memory; a data storage module configured to store encrypted log-in authentication information; and at least one program stored in the memory and configured to be executed by the at least one processor, wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server, wherein the program includes: a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device; an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device; wherein the authentication data acquiring module extracts encrypted log-in authentication information stored in the data storage module, wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and wherein the authentication data providing module provides the extracted encrypted log-in authentication information to the communication device. ### Claim 15 An authentication data providing device, comprising: at least one processor; a communication circuit; a memory; a data storage module configured to store a decryption key for decrypting encrypted log-in authentication information stored in a communication device; and at least one program stored in the memory and configured to be executed by the at least one processor, wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server, wherein the program includes: a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device; an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device; wherein the authentication data acquiring module extracts a decryption key from the data storage module, wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and wherein the authentication data providing module provides the extracted decryption key to the communication device. ### Claim 16 An authentication data providing device, comprising: at least one processor; a communication circuit; a memory; a data storage module configured to store an authentication information storage address at which log-in authentication information is stored; and at least one program stored in the memory and configured to be executed by the at least one processor, wherein the communication circuit receives a log-in notification message notifying that a communication device is attempting log-in, from a security relay server, wherein the program includes: a location checking module configured to determine whether the communication device is located at a same place as the authentication data providing device; an authentication data acquiring module configured to acquire authentication-related data of a web site accessed by the communication device when the location checking module determines that the communication device and the authentication data providing device are located at the same place; and an authentication data providing module configured to provide the acquired authentication-related data to the web site or the communication device; wherein the authentication data acquiring module extracts an authentication information storage address of the web site from the data storage module, wherein the authentication data acquiring module checks a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, checks a security level mapped with the web site identification information from a security policy table, applies the checked security level when the authentication data providing device and the communication device are located at the same place; and acquires the authentication-related data based on the applied security level, and wherein the authentication data providing module provides the extracted authentication information storage address to the communication device. ### Claim 17 (depends on 12) The authentication data providing device according to claim 12, further comprising: a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place, wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module. ### Claim 18 (depends on 17) The authentication data providing device according to claim 17, wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place. ### Claim 19 (depends on 18) The authentication data providing device according to claim 18, wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device. ### Claim 20 (depends on 18) The authentication data providing device according to claim 18, wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level. ### Claim 21 (depends on 19) The authentication data providing device according to claim 19, wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window. ### Claim 22 (depends on 12) The authentication data providing device according to claim 12, wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place. ### Claim 23 (depends on 12) The authentication data providing device according to claim 12, wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device. ### Claim 24 (depends on 3) The safe log-in method according to claim 3, further comprising: by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from the security policy table, wherein said acquiring of authentication-related data includes: applying the checked security level when the authentication data providing device and the communication device are located at the same place; and acquiring the authentication-related data based on the applied security level. ### Claim 25 (depends on 24) The safe log-in method according to claim 24, wherein said acquiring of authentication-related data includes: applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place. ### Claim 26 (depends on 25) The safe log-in method according to claim 25, wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device. ### Claim 27 (depends on 25) The safe log-in method according to claim 25, wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level. ### Claim 28 (depends on 25) The safe log-in method according to claim 25, wherein said acquiring of authentication-related data includes: outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and acquiring the authentication-related data when an approval signal is input through the notification window. ### Claim 29 (depends on 4) The safe log-in method according to claim 4, further comprising: by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from the security policy table, wherein said acquiring of authentication-related data includes: applying the checked security level when the authentication data providing device and the communication device are located at the same place; and acquiring the authentication-related data based on the applied security level. ### Claim 30 (depends on 29) The safe log-in method according to claim 29, wherein said acquiring of authentication-related data includes: applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place. ### Claim 31 (depends on 30) The safe log-in method according to claim 30, wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device. ### Claim 32 (depends on 30) The safe log-in method according to claim 30, wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level. ### Claim 33 (depends on 30) The safe log-in method according to claim 30, wherein said acquiring of authentication-related data includes: outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and acquiring the authentication-related data when an approval signal is input through the notification window. ### Claim 34 (depends on 5) The safe log-in method according to claim 5, further comprising: by the authentication data providing device, checking a security level of the web site accessed by the communication device by extracting web site identification information from the log-in notification message, and checking a security level mapped with the web site identification information from the security policy table, wherein said acquiring of authentication-related data includes: applying the checked security level when the authentication data providing device and the communication device are located at the same place; and acquiring the authentication-related data based on the applied security level. ### Claim 35 (depends on 34) The safe log-in method according to claim 34, wherein said acquiring of authentication-related data includes: applying a reinforced security level higher than the checked security level when the authentication data providing device and the communication device are not located at the same place. ### Claim 36 (depends on 35) The safe log-in method according to claim 35, wherein said acquiring of authentication-related data includes acquiring reinforced authentication information when the applied security level is higher than a threshold level, and wherein said providing of the authentication-related data includes providing the reinforced authentication information to the web site or the communication device. ### Claim 37 (depends on 35) The safe log-in method according to claim 35, wherein said acquiring of authentication-related data includes acquiring the authentication-related data when a user performs user authentication successfully, in case the applied security level is higher than a threshold level. ### Claim 38 (depends on 35) The safe log-in method according to claim 35, wherein said acquiring of authentication-related data includes: outputting a notification window for requesting the communication device to allow log-in when the applied security level is a preset specific security level; and acquiring the authentication-related data when an approval signal is input through the notification window. ### Claim 39 (depends on 3) The safe log-in method according to claim 3, after said providing of the authentication-related data, further comprising: by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place. ### Claim 40 (depends on 4) The safe log-in method according to claim 4, after said providing of the authentication-related data, further comprising: by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place. ### Claim 41 (depends on 5) The safe log-in method according to claim 5, after said providing of the authentication-related data, further comprising: by the authentication data providing device, monitoring whether the authentication data providing device and the communication device are continuously located at the same place; and by the authentication data providing device, performing log-out of the communication device when the authentication data providing device and the communication device are not continuously located at the same place. ### Claim 42 (depends on 3) The safe log-in method according to claim 3, further comprising: by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place. ### Claim 43 (depends on 4) The safe log-in method according to claim 4, further comprising: by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place. ### Claim 44 (depends on 5) The safe log-in method according to claim 5, further comprising: by the authentication data providing device, providing a safe log-in activation message to the communication device when it is determined that the authentication data providing device and the communication device are located at the same place. ### Claim 45 (depends on 14) The authentication data providing device according to claim 14, further comprising: a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place, wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module. ### Claim 46 (depends on 45) The authentication data providing device according to claim 45, wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place. ### Claim 47 (depends on 46) The authentication data providing device according to claim 46, wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device. ### Claim 48 (depends on 46) The authentication data providing device according to claim 46, wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level. ### Claim 49 (depends on 46) The authentication data providing device according to claim 46, wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window. ### Claim 50 (depends on 15) The authentication data providing device according to claim 15, further comprising: a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place, wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module. ### Claim 51 (depends on 50) The authentication data providing device according to claim 50, wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place. ### Claim 52 (depends on 51) The authentication data providing device according to claim 51, wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device. ### Claim 53 (depends on 51) The authentication data providing device according to claim 51, wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level. ### Claim 54 (depends on 51) The authentication data providing device according to claim 51, wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window. ### Claim 55 (depends on 16) The authentication data providing device according to claim 16, further comprising: a security policy application module configured to check a security level of the web site, and apply the checked security level when the location checking module determines that the communication device and the authentication data providing device are located at the same place, wherein the authentication data acquiring module acquires the authentication-related data based on the security level applied by the security policy application module. ### Claim 56 (depends on 55) The authentication data providing device according to claim 55, wherein the security policy application module applies a reinforced security level higher than the checked security level when the communication device and the authentication data providing device are not located at the same place. ### Claim 57 (depends on 56) The authentication data providing device according to claim 56, wherein the authentication data acquiring module acquires reinforced authentication information when the security level applied by the security policy application module is higher than a threshold level, and wherein the authentication data providing module provides the reinforced authentication information to the web site or the communication device. ### Claim 58 (depends on 56) The authentication data providing device according to claim 56, wherein the authentication data acquiring module acquires the authentication-related data when a user performs user authentication successfully, in case the security level applied by the security policy application module is higher than a threshold level. ### Claim 59 (depends on 56) The authentication data providing device according to claim 56, wherein in case the security level applied by the security policy application module is a preset specific security level, the authentication data acquiring module outputs a notification window for requesting the communication device to allow log-in, and acquires the authentication-related data when an approval signal is input through the notification window. ### Claim 60 (depends on 14) The authentication data providing device according to claim 14, wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place. ### Claim 61 (depends on 15) The authentication data providing device according to claim 15, wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place. ### Claim 62 (depends on 16) The authentication data providing device according to claim 16, wherein in case the communication device successfully logs in the web site, the location checking module monitors whether the communication device and the authentication data providing device are continuously located at the same place, and performs log-out of the communication device when the communication device and the authentication data providing device are not located at the same place. ### Claim 63 (depends on 14) The authentication data providing device according to claim 14, wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device. ### Claim 64 (depends on 15) The authentication data providing device according to claim 15, wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device. ### Claim 65 (depends on 16) The authentication data providing device according to claim 16, wherein when it is determined that the communication device and the authentication data providing device are located at the same place, the location checking module transmits a safe log-in activation message to the communication device to activate a safe log-in menu of the communication device.