Patent ID: 9208304
Filing Date: 2015-12-08
Classification: G06F,H04L,H04W

Abstract:
1. A method for web service user authentication, comprising: creating, by a web server, a code including a public key of a web service and displaying the created code on a web browser screen; creating, by a user, a user ID and a key pair if it is confirmed that the user does not loin the web service using information received from the code including a public key of the web service, the key pair including a public key and a secret key; transmitting, by an authentication device, a message obtained by encoding the user ID, the public key of the key pair, a bit string, the public key of the web service, a signature for the bit string, and a signature for the public key of the web service using the public key of the web service to the web server; displaying, by the web server of the web service, the code including an authentication server uniform resource locator (URL) of the web service on the web browser screen; when the user photographs the code on the web browser screen using the authentication device, confirming, by the authentication device, the authentication server URL of the web service included in the code to confirm whether a user confidential is stored; if it is determined that the user confidential is stored, generating, by the authentication device, an authentication token including the confidential being encoded and transmitting the authentication token to the authentication server URL of the web service included in the code; and confirming, by an authentication server of the web service, a result obtained by decoding the received authentication token and if it is confirmed that the message is normal and a normal user attempts a login, notifying the web server of the web service that normal authentication is made.