Apparatus and method for providing a security environment

A method for providing a security environment. The method includes detecting user information from an accessory in response to detection of the accessory, performing security authentication with input security information if the user information is detected; and providing the security environment when the security authentication is successful.

The present application is related to and claims the benefit under 35 U.S.C. § 119(a) of a Korean Patent Application filed in the Korean Intellectual Property Office on Jun. 24, 2013, and assigned Serial No. 10-2013-0072545, the entire disclosure of which is incorporated herein by reference.

TECHNICAL FIELD

The present disclosure relates generally to providing a security environment. More particularly, the present disclosure relates to an apparatus and method for providing a security environment efficiently.

BACKGROUND

With rapid development of modern electronic devices, a variety of services are emerging. In particular, services related to security environments for electronic devices have been provided.

The security environment refers to an environment under which tasks in need of security authentication can be performed. For example, it means an environment provided in performing tasks to deal with confidential data, such as office documents that require security.

In this regard, the electronic device first executes a program that requires security, and proceeds an authentication process in the program with data, e.g., password. The electronic device needs to enter respective data or password for each program in need of security, causing inconvenience to the user.

As a type of the electronic device, mobile devices are widely used for network communication.

The mobile device is easy to carry, but vulnerable to security issues. Furthermore, the mobile device has not yet been given any security environment.

Thus, a need exists for a technology to simply provide immediate security environment for electronic devices and especially for mobile devices.

In addition, a technology to conveniently enter the security environment is more needed.

SUMMARY

To address the above-discussed deficiencies, it is a primary object to provide an apparatus and method for providing a security environment by performing authentication with security information inputted onto a screen, upon detection of connection of an accessory.

In accordance with an aspect of the present disclosure, provided is a method for providing a security environment, the method including: detecting user information from an accessory in response to detection of the accessory; performing security authentication with input security information if the user information is detected; and providing the security environment if the security authentication is successful.

In accordance with another aspect of the present disclosure, provided is a security server including: a controller for performing security authentication by comparing security information received and pre-stored user's security information; and transmitting authentication token information indicating whether the security authentication is successful or failed to at least one electronic device; and a storage for storing the pre-stored user's security information.

In accordance with another aspect of the present disclosure, provided is an apparatus for providing a security environment, the apparatus including: a controller for detecting user information from an accessory in response to detection of the accessory; performing security authentication with input security information if the user information is detected; and providing the security environment if the security authentication is successful; a storage for storing the security information; and a display unit for displaying the security environment.

DETAILED DESCRIPTION

FIGS. 1 through 11, discussed below, and the various embodiments used to describe the principles of the present disclosure in this patent document are by way of illustration only and should not be construed in any way to limit the scope of the disclosure. Those skilled in the art will understand that the principles of the present disclosure may be implemented in any suitably arranged system or device. The disclosure now will be described more fully hereinafter with reference to the accompanying drawings, in which illustrative embodiments of the disclosure are shown. This disclosure may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art. Like numbers refer to like elements throughout.

It will be understood that, although the terms first, second, third, etc., may be used herein to describe various elements, components, regions, layers and/or sections, these elements, components, regions, layers and/or sections should not be limited by these terms. These terms are only used to distinguish one element, component, region, layer or section from another region, layer or section. Thus, a first element, component, region, layer or section discussed below could be termed a second element, component, region, layer or section without departing from the teachings of the present disclosure. Descriptions shall be understood as to include any and all combinations of one or more of the associated listed items when the items are described by using the conjunctive term “˜ and/or ˜,” or the like.

FIG. 1illustrates a block diagram of an electronic device100according to an embodiment of the present disclosure.

The electronic device100includes, but not limited to, a mobile device, smartphone, tap book, smart tap, smart television (TV), Personal Digital Assistant (PDA), MP3 player, tablet Personal Computer (PC), or desktop PC. The electronic device100may include all or some of components as will be described below in connection withFIGS. 1 to 3.

Referring toFIG. 1, the electronic device100may be connected to an external device (not shown) by using an external device connection, such as a sub-communication module130, a connector165, and an headset jack167.

The external device may include a variety of devices, such as earphones, external speakers, Universal Serial Bus (USB) memories, chargers, cradles, docking stations, Digital Multimedia Broadcasting (DMB) antennas, payment related devices, health care devices (e.g., blood sugar testers), game consoles, vehicle navigations, or the like, which are removably attached to the electronic device100via cable. The external device may also include a short range communication device that may be wirelessly connected to the electronic device100via short range communication, such as Bluetooth, Near Field Communication (NFC), etc., and a WiFi Direct communication device, a wireless access point (AP), etc. Furthermore, the external device may include a cell phone, smartphone, tablet PC, desktop PC, and server.

Referring toFIG. 1, the electronic device100includes a display unit190and a display controller195. In some embodiments, the electronic device100may include more than one display unit190and more than one display controller195. The display unit190may have at least one panel depending on input schemes, and the display controller195may have a controller for each panel, which detects an input command through the display unit190and forwards the input command to a controller of the electronic device100. The display unit190may include a pen detecting panel (also known as a pen recognition panel)191for detecting the movement, e.g., touching and/or hovering, of a pen, and a touch detecting panel (also known as a touch recognition panel)192for detecting touches of a human finger. The display controller195may include a pen detecting controller (not shown) for forwarding the input information detected from the pen detecting panel191to the controller110, and a touch detecting controller (not shown) for forwarding the input information detected from the touch detecting panel192to the controller110. The electronic device110also includes a controller110, the mobile communication module120, the sub-communication module130, a multimedia module140, a camera module150, a Global Positioning System (GPS) module155, an input/output module160, a sensor module170, a storage175, and a power supply180. The sub-communication module130includes at least one of Wireless Local Area Network (WLAN)131and a short-range communication module132, and the multimedia module140includes at least one of a broadcast communication module141, an audio play module142, and video play module143. The camera module150includes at least one of a first camera151and a second camera152; and the input/output module160includes at least one of buttons161, a microphone162, a speaker163, a vibration motor164, a connector165, a keypad166, and a headset jack167.

The controller110may include a Central Processing Unit (CPU)111, a Read Only Memory (ROM)112for storing a control program to control the electronic device100, and a Random Access Memory (RAM)113for storing signals or data input from an outside or for being used as a memory space for working results in the electronic device100. The CPU111may include a single core as well as multiple cores, such as dual cores, triple cores, or quad cores. The CPU111, ROM112, and RAM113may be connected to each other via an internal bus.

The controller110may control the mobile communication module120, the sub-communication module130, the multimedia module140, the camera module150, the GPS module155, the input/output module160, the sensor module170, the storage175, the power supply180, the display unit190, and the display controller195.

In various embodiments of the present disclosure, the controller110determines if user information has been received from an accessory in response to detection of the accessory, performs security authentication with input security information if it is determined that the user information has been received, and switches the electronic device100into the security environment after successful security authentication. The accessory includes various means which are capable of providing a command or input to the electronic device by means of contact with or hovering over the display unit190. For example, the accessory may include a Resistor-Capacitor (RC) circuit for performing communication with the electronic device100, and in particular, the RC circuit may be included and activated in the accessory or in a controller of the accessory that controls overall operation of the accessory. The accessory may store user information authenticated by the user who actually owns or uses the accessory. The controller110may detect the accessory in wireless communication with the accessory. The security information is input onto a currently running screen. The controller110compares the input security information with user's security information stored in the storage175, and performs the security authentication based on the comparison. The security authentication is performed by comparing the input security information with pre-stored user's security information that corresponds to an identification of the accessory, i.e., an accessory ID. In other embodiments, the controller110may encrypt the input security information and send the encrypted security information to a security server. Upon reception of authentication token information in return for the security information sent, the controller110determines from the authentication token information whether the security authentication has been successful. The authentication token information is created by the security server comparing the encrypted security information with the pre-stored user's security information.

The controller110displays a security authentication screen on the display unit190upon detection of the accessory or upon detection of connection of the accessory. The accessory may include an electronic pen equipped with at least one button. The controller110may display the security authentication screen upon detection of the press or input of the button of the electronic pen.

The mobile communication module120connects the electronic device100to an external device through mobile communication using at least one—one or more—antennas (not shown) under control of the controller110. The mobile communication module120transmits/receives wireless signals for voice calls, video conference calls, Short Message Service (SMS) messages, or Multimedia Message Service (MMS) messages to/from a cell phone (not shown), a smart phone (not shown), a tablet PC (not shown), or another device, the phones having phone numbers to be entered into the electronic device100.

The sub-communication module130may include at least one of the WLAN module131and the short-range communication module132. For example, the sub-communication module130may include either the WLAN module131or the-short range communication module132, or both.

The WLAN module131may be connected to the Internet in a place where there is a wireless AP (not shown), under control of the controller110. The WLAN module131supports Institute of Electrical and Electronic Engineers' (IEEE's) WLAN standard IEEE802.11x.

The short-range communication module132may perform short-range communication between the electronic device100and an external device (not shown) under control of the controller110. The short-range communication may include Bluetooth, Infrared Data Association (IrDA), NFC, etc.

The electronic device100may include at least one of the mobile communication module120, the WLAN module131and the short-range communication module132depending on the performance. For example, the electronic device100may include a combination of the mobile communication module120, the WLAN module131and the short-range communication module132depending on the performance.

The multimedia module140may include the broadcast communication module141, the audio play module142, or the video play module143. The broadcast communication module141may receive broadcast signals (e.g., television broadcast signals, radio broadcast signals, or data broadcast signals) and additional broadcast information (e.g., Electric Program Guide (EPG) or Electric Service Guide (ESG)) transmitted from a broadcasting station through a broadcast communication antenna (not shown), under control of the controller110. The audio play module142may play digital audio files (e.g., files having extensions, such as mp3, wma, ogg, or way) stored or received under control of the controller110. The video play module143may play digital video files (e.g., files having extensions, such as mpeg, mpg, mp4, avi, move, or mkv) stored beforehand or received from outside, under control of the controller110. The video play module143may also play digital audio files.

The multimedia module140may include the audio play module142and the video play module143except for the broadcast communication module141.

The audio play module142or video play module143of the multimedia module140may be included in the controller110.

The camera module150may include at least one of the first and second cameras151and152for capturing still images or video images under control of the controller110. Furthermore, the first or second camera151or152may include an auxiliary light source (e.g., flash153,FIG. 3) for providing as much an amount of light as required for capturing. The first camera151may be placed on the front of the electronic device100and the second camera152may be placed on the back of the electronic device100. Alternatively, the first camera151and the second camera152may be closely arranged to capture three dimensional (3D) still images or 3D video footage.

The GPS module155receives radio signals from a plurality of GPS satellites (not shown) in Earth's orbit, and may calculate the position of the electronic device100by using time of arrival from the GPS satellites to the electronic device100.

The input/output module160may include at least one of a plurality of buttons161, the microphone162, the speaker163, the vibration motor164, the connector165, and the keypad166.

The at least one of buttons161may be arranged on the front, side, or back of the housing of the electronic device100, and may include at least one of power/lock button, volume button, menu button, home button, back button, and search button.

The microphone162generates electric signals from received voice or sound under control of the controller110.

The speaker163may output sounds corresponding to various signals (e.g., radio signals, broadcast signals, digital audio files, digital video files or photography signals) from the mobile communication module120, sub-communication module130, multimedia module140, or camera module150to the outside under control of the controller110. The speaker163may output sounds (e.g., button-press sounds or ringback tones) that correspond to functions performed by the electronic device100. There may be one or multiple speakers163arranged in a proper position or proper positions of the housing of the electronic device100.

The vibration motor164may convert an electric signal to a mechanical vibration under control of the controller110. For example, the electronic device100in a vibrating mode drives the vibration motor164when receiving a voice call from another device (not shown). There may be one or more vibration motors164inside the housing of the electronic device100. The vibration motor164may be driven in response to a touch activity or continuous touches of a user over the display unit190.

The connector165may be used as an interface for connecting the electronic device100to an external device (not shown) or a power source (not shown). Under control of the controller110, the electronic device100may transmit data stored in the storage175of the electronic device100to the external device via a cable connected to the connector165, or receive data from the external device. The external device may be a docking station and the data may be an input signal received from the external device, e.g., a mouse, a keyboard, or the like. Furthermore, the electronic device100may be powered by the power source via a cable connected to the connector165or may charge the battery (not shown) with the power source.

The keypad166may receive key inputs from the user to control the electronic device100. The keypad166includes a physical keypad (not shown) formed in the electronic device100, or a virtual keypad (not shown) displayed on the display unit190. The mechanical keypad formed in the electronic device100may be omitted depending on the performance or structure of the electronic device100.

A headset (not shown) may be inserted into the headset jack167and thus connected to the electronic device100.

The sensor module170includes at least one sensor for detecting a status of the electronic device100or external conditions. For example, the sensor module170may include a proximity sensor to detect the proximity of the user to the electronic device100and a light sensor to detect brightness of ambient light of the electronic device100. The sensor module170may also include a gyro sensor. The gyro sensor may detect operations of the electronic device100(e.g., rotation, acceleration, or vibration of the electronic device100), detect points of the compass using the Earth's magnetic field, and detect the direction of gravity. The sensor module170may also include a barometer to measure atmospheric pressure. At least one sensor may detect corresponding status, and generate and send a corresponding signal to the controller110. The sensor of the sensor module170may be added or removed depending on the performance of the electronic device100.

The storage175may store signals or data input/output according to operations of the mobile communication module120, the sub-communication module130, the multimedia module140, the camera module150, the GPS module, the input/output module160, the sensor module170, the display unit190under control of the controller110. The storage175may store the control programs and applications for controlling the electronic device100or the controller110.

The term “storage” implies not only the storage175, but also the ROM112, RAM113in the controller110, or a memory card (not shown) (e.g., an Secure Digital (SD) card, a memory stick) installed in the electronic device100.

The storage may also include a non-volatile memory, volatile memory, Hard Disc Drive (HDD), or Solid State Drive (SSD). The storage175stores at least one piece of security information input onto the display unit190and the authentication token information received from the security server. The storage175also stores at least one piece of user's security information to be compared with the security information input through the display unit190. The user's security information may vary depending on users.

The power supply180may supply power to one or more batteries (not shown) placed inside the housing of the electronic device100under control of the controller110. The one or more batteries power the electronic device100.

The power supply180may supply the electronic device100with the power input from the external power source (not shown) via a cable connected to the connector165. The power supply180may also supply the electronic device100with wireless power from an external power source using a wireless charging technology.

The display unit190may include a touchscreen. The touch screen may provide the user with user interfaces for various services (e.g., call, data transmission, broadcasting, photography services). The display unit190may send an analog signal corresponding to at least one touch input to the user interface to the display controller195. The display unit190may detect the at least one touch made by user's physical contact (e.g., by fingers including thumb) or by a touchable input device (e.g., an electronic pen or a stylus pen). The display unit190may also receive consecutive moves of a touch e.g., touch and drag. The display unit190may send an analog signal corresponding to the consecutive moves to the display controller195.

Upon reception of a command by the user's touch, the touch detecting panel192of the display unit190may recognize the command, and upon reception of a command by the stylus pen or electronic pen, the pen detecting panel191of the display unit190may recognize the command. The pen detecting panel191may detect a distance between the pen and the screen of the display unit190by means of a magnetic field, and may send a signal that corresponds to an input command to the pen detecting controller included in the display controller195. The touch detecting panel192may also receive consecutive moves of a touch, e.g., touch and drag. The touch detecting panel192may send an analog signal corresponding to the touch and drag to the touch detecting controller included in the display controller195. The touch detecting panel192may detect touched point by means of electric charges changed by the touch. The display controller195may include different controllers for input commands, and may further include a controller for an input of biological information, e.g., the user's iris.

The display unit190may display a security authentication screen in response to detection of the accessory, and receive the security information through the security authentication screen by means of touching or hovering. Specifically, under detection of an input of the button equipped on the accessory, under control of the controller110, the display unit190displays the security authentication screen and receives the security information through the security authentication screen. The security information may be set up or changed by the user.

The touch as used herein is not limited to the user's physical contact or touchable input device's contact but may include contactless touches. The detectable distance from the display unit190may vary depending on the performance or structure of the electronic device100.

The display device190may be implemented in various ways, such as in a resistive, capacitive, Electronic Magnetic Resonance (EMR), infrared, or acoustic wave scheme, or a combination thereof.

The display controller195converts the analog signal received from the display unit190to a digital signal (e.g., XY coordinates) and transmits the digital signal to the controller110. The controller110may control the display unit190with the digital signal received from the display controller195. For example, in response to the touch, the controller110may enable a shortcut icon (not shown) displayed on the display unit190to be selected or to be executed. The display controller195may also be incorporated in the controller110.

FIG. 2illustrates a perspective view of the front face of an electronic device, according to an embodiment of the present disclosure, andFIG. 3illustrates a perspective view of the rear face of an electronic device, according to an embodiment of the present disclosure.

Referring toFIG. 2, the front face100aof the electronic device100has the display unit190arranged in the center. The display unit190may be formed to take up almost all the front face100aof the electronic device100. InFIG. 2, the display unit190shows an example of displaying a main home screen. The main home screen is supposed to be displayed first on the display unit190when the electronic device100is powered on. In a case the electronic device100has several pages of different home screens, the main home screen may be the first of the several pages of home screens. In the main home screen, shortcut icons191-1,191-2,191-3for running frequently-used applications, an application key191-4, time, weather, etc. may be displayed. If selected, the application key191-4displays application icons representative of respective applications on the display unit190. In an upper part of the display unit190, there may be a status bar192for displaying statuses of the electronic device100, such as a battery charging state, intensity of received signals, current time, etc.

In a lower part of the display unit190, there may be a home button161a, a menu button161b, and a back button161carranged.

The home button161ais to display the main home screen on the display unit190. For example, if the home button161ais pressed (or touched) while any home screen other than the main home screen or a menu screen is displayed in the display unit190, the main home screen may be displayed on the display unit190. Furthermore, while applications are running on the display unit190, if the home button161ais pressed (or touched), the main home screen, as shown inFIG. 2, may be displayed on the display unit190. The home button161amay also be used to display recently used applications or a task manager on the display unit190.

The menu button161bprovides a link menu that may be used on the display unit190. The link menu may include a widget addition menu, background change menu, search menu, edit menu, environment setting menu, etc. While an application is running, a menu related to the application may be provided.

The back button161c, when touched, may display a screen that was displayed right before the current screen or stop a most recently used application.

On the edge of the front face100aof the electronic device100, the first camera151, the illumination sensor171, and the proximity sensor172may be placed. On the back of the electronic device100, the second camera152, the flash153, and the speaker163may be placed.

On the side100bof the electronic device100, e.g., a power/reset button161d, a volume button161e, a terrestrial DMB antenna141afor broadcast reception, one or more microphones162, etc. may be placed. The DMB antenna141amay be fixed to the electronic device100, or be removably arranged.

On the lower side of the electronic device100, the connector165is formed. The connector165has a number of electrodes and may be connected to an external device via a cable. On the upper side of the electronic device100, the headset jack167may be formed. The headset jack167may receive a headset.

Referring toFIG. 3, on the back of the electronic device100, the second camera152, the flash153, and the speaker163may be placed on the upper part of the electronic device100.

On the lower side of the electronic device100, there may be an inlet168for a separate electronic pen200.

The electronic device100may include a first touch panel for detecting touching of the user's finger and a second touch panel for detecting touching or hovering of the electronic pen200. The controller110of the electronic device100may thus discriminatingly detect hovering or touching by the user's finger from hovering or touching by the electronic pen200.

The electronic pen200may include a button220. When the button220is pressed, the controller110may detect the pressure of the button220from a change of electromagnetic signals exchanged between the electronic pen200and the electronic device100.

FIG. 4is flowchart illustrating operations of a method for providing security environment, according to an embodiment of the present disclosure, andFIGS. 5 and 6each illustrate an electronic device performing a method for providing security environment, according to an embodiment of the present disclosure.

Referring toFIG. 4, in the embodiment of the method for providing security environment, in step1110, an accessory is detected. The controller110of the electronic device100may detect the accessory. The controller110detects connection of the accessory in response to communication between the accessory and the electronic device100or in response to an input of a button equipped in the accessory. The accessory includes at least one of an electronic pen and an ID card. The controller110may detect connection of the accessory, such as the electronic pen or the ID card.

The detection of connection of the accessory may be made through wireless communication. Specifically, the controller110may control the short-range communication module132to perform wireless communication with the accessory. For example, the controller110may detect the connection of the accessory through wireless communication, such as Bluetooth, Infrared, WLAN, or NFC communication. The accessory may also include a short-range communication module for wireless communication. For example, upon reception of a proximity signal from the accessory through the wireless communication, the controller110may detect the connection of the accessory.

The controller110may display an ordinary screen to be under an ordinary environment rather than the security environment. The ordinary screen may refer to a screen that does not require security, such as home screen.

Referring toFIG. 5A, the controller110may detect connection of an accessory, such as the electronic pen200. The controller110may control the short-range communication module132to perform short-range communication, such as Bluetooth, Infrared, NFC communication, etc., or to perform WLAN communication, such as WiFi, with the accessory. The controller110may then detect connection of the accessory, e.g., electronic pen200. The electronic pen200may also include a short-range communication module for wireless communication. As shown inFIG. 5A, the controller110may display an ordinary screen, such as the home screen on the display unit190. The controller110may detect reception of a signal from the accessory through at least one communication, the signal including user information. The user information includes information regarding the user who actually owns or uses the accessory.

Subsequently, in step1112, the controller110detects the user information from the signal received from the accessory. The controller110may detect the user information by analyzing the signal received from the accessory, or directly receive the user information from the accessory. In the latter case, the accessory may transmit the signal that includes the user information to the electronic device100. The user information may indicate that the accessory may be used in the security environment. Thus, if the accessory's user information has been detected, the electronic device100is allowed to receive security information, as will be described later. Otherwise, if the user information of the accessory has not been detected, the controller110ends the process.

In step1120, after detection of the accessory's user information, the controller110receives the security information. The security information may correspond to a password required for security authentication. For example, the security information may be signature information, number information, or gesture pattern information. The display unit190of the electronic device100may be a touch screen. For example, the controller110may receive the security information, such as the signature information, number information, or gesture pattern information through the display unit110. In other words, the controller110may receive the security information by detecting a signature, number or gesture pattern input onto the display unit190.

Referring toFIG. 5B, the controller110may receive the security information, e.g., signature information300. For example, the controller110may detect touching or hovering of the electronic pen200, which corresponds to the signature information300. In other words, the controller110may receive the security information, such as the signature information300by means of touching or hovering of the electronic pen200.

The controller110may receive the security information on a currently running screen. Referring toFIG. 5B, for example, the controller110may display a home screen on the display unit190, and receive the security information, such as the signature information300directly on the currently running home screen. In an embodiment of the present disclosure, upon detection of connection of an accessory, the security information may be received on the currently running screen immediately or in a predetermined period of time. The present disclosure is not limited to receiving the security information immediately or in a predetermined time. For example, in other embodiments, the security information may be received in response to connection of the accessory.

In step1130, security authentication is performed with the security information received. That is, the controller110may perform the security authentication with the security information. The security authentication may refer to determining whether the authentication is successful by comparing the security information received with pre-stored user's security information. The pre-stored user's security information may be security information of the user, which was registered and authenticated beforehand. The user's security information may be stored in the storage175beforehand. The controller110may authenticate the security information received, if the security information received matches the pre-stored user's security information. For example, the pre-stored user's security information may be the user's signature information, number information or gesture pattern information, which was authenticated beforehand. The controller110may perform the authentication by comparing the security information received with the pre-stored user's security information. For example, as shown inFIG. 5B, the controller110may perform the authentication by comparing the signature information300with pre-stored user's security information. Specifically, the controller110may perform the authentication by comparing the signature information300included in the security information with signature information included in the pre-stored user's security information. The controller110may authenticate the security information received, if the security information received matches the pre-stored user's security information. On the contrary, the controller110may not authenticate the security information received, if the signature information300included in the security information received does not match or correspond to signature information included in the pre-stored user's security information.

In step1140, whether the authentication was successful or failed may be determined. That is, the controller110may determine whether the authentication was successful or failed. The controller110switches the electronic device100into the security environment if the authentication was successful. Otherwise, if the authentication was failed, the controller110goes back to step1120to receive security information again.

If it is determined that the authentication was successful, in step1150, the electronic device110enters the security environment. The controller110switches the electronic device100into the security environment if the authentication was successful. The security environment refers to an environment entered only if the security authentication is successful. For example, the security environment may be a company environment, individual private environment, or public agency environment that requires the security authentication. In the security environment, tasks in need of security may be performed. For example, applications in need of security may be executed in the security environment. In addition, in the security environment, tasks to deal with confidential data may be performed.

As shown inFIG. 5B, when the security information received is authenticated since the security information, such as the signature information300matches signature information included in the pre-stored user's security information, the controller110may switch the electronic device100into the security environment.FIG. 6illustrates the electronic device under a company environment as a security environment. Referring toFIG. 6, in the company environment, a company page302including secure company information may be displayed on the electronic device100when the security environment has been provided.

In the company environment, the electronic device100runs applications in need of security, such as a company e-mail application, a business intelligent application, etc. In addition, in the company environment, tasks to deal with confidential data e.g., related to customer management may be performed. The controller110may display a shortcut icon304for running the company e-mail application, a shortcut icon306for running the business intelligent application, or a shortcut icon308for opening a customer management folder on the display unit190.

According to various embodiments of the present disclosure, a running screen may receive security information as soon as the connection of an accessory is detected. That is, without undergoing a separate step, the electronic device100may detect the connection of the accessory and receive the security information. In addition, once the authentication was successful with the security information, the electronic device may be switched into the security environment and the user of the electronic device100can access secure information, such as the company page302.

FIG. 7is flowchart illustrating operations of a method for providing security environment, according to an embodiment of the present disclosure, andFIG. 8illustrates multiple electronic devices and a security server in connection with a method for providing security environment, according to an embodiment of the present disclosure.

Referring toFIG. 7, in the embodiment of the method for providing security environment, in step1210, connection of an accessory is detected.

That is, the controller110of the electronic device100may detect the connection of the accessory. The accessory includes at least one of an electronic pen and an ID card. The controller110may detect connection of the at least one of the electronic pen or the ID card.

The detection of connection of the accessory may be made through wireless communication. Specifically, the controller110may control the short-range communication module132to perform wireless communication with the accessory. For example, the controller110may control the short-range communication module132to perform short-range communication, such as Bluetooth, Infrared, NFC communication, etc., or to perform WLAN communication, such as WiFi communication. The controller110may detect connection of the accessory. The accessory may also include a short-range communication module for wireless communication. For example, upon reception of a proximity signal from the accessory in the wireless communication, the controller110may detect the connection of the accessory.

While doing this, the controller110may display an ordinary screen under an ordinary environment rather than the security environment. The ordinary screen may not require security, such as home screen.

The controller110may detect connection of an accessory, such as the electronic pen200. The controller110may control the short-range communication module132to perform short-range communication, such as Bluetooth, Infrared, NFC communication, etc., or to perform WLAN communication, such as WiFi communication. With the communication, the controller110may then detect connection of the accessory, e.g., electronic pen200. The electronic pen200may also include a short-range communication module for wireless communication. While doing this, the controller110may display the ordinary screen, such as the home screen on the display unit190.

Subsequently, in step1212, the controller110detects the user information from the signal received from the accessory. The controller110may detect the user information by analyzing the signal received from the accessory, or directly receive the user information from the accessory. The user information may indicate that the accessory may be used in the security environment. If the accessory's user information is detected, the controller110is allowed to receive security information. If the accessory's user information is not detected, the controller110ends the process. After detection of the accessory's user information, in step1220, the controller110may receive security information. The security information may correspond to a password required for security authentication. In other words, the controller110may receive the security information by detecting a signature, number or gesture pattern input onto the display unit190. For example, the controller110may receive the signature information300as the security information. The controller110may detect touching or hovering of the electronic pen200, which corresponds to the signature information300. In other words, the controller110may receive the security information, such as the signature information300by means of touching or hovering of the electronic pen200. The controller110may also receive the security information on a currently running screen.

Subsequently, in step1222, the controller110encrypts the security information. The controller110may encrypts the security information based on at least one encryption techniques. The encryption technique may be determined in the security server410in advance, and data exchanged between the security server410and the electronic device100may be encrypted or decrypted based on the encryption technique.

In step1230, the electronic device100transmits the encrypted security information to the security server. Specifically, the controller110may control at least one of the mobile communication module120, and the WLAN module131and the short-range communication module132included in the sub-communication module130to transmit the encrypted security information to the security server. Referring toFIG. 8, there may be multiple electronic devices.

The security server410may receive the encrypted security information from a first electronic device, e.g., the electronic device100among the multiple electronic devices. The security server410may also include at least one communication module to perform communication with the multiple electronic devices.

The security server410may receive the encrypted security information from at least one of the multiple electronic devices. In step1232, the security server410may perform security authentication with the encrypted security information. Specifically, the security server410may perform the security authentication by comparing the encrypted security information with the user's security information pre-stored in the security server410. The security authentication may refer to determining whether authentication is successful by comparing the encrypted security information with pre-stored user's security information. The pre-stored user's security information may be security information of the user, which was authenticated beforehand. The user's security information may be stored in a storage of the security server410beforehand. The security server410may authenticate the security information received, if the encrypted security information matches the pre-stored user's security information.

For example, the pre-stored user's security information may be the user's signature information, number information or gesture pattern information, which was authenticated beforehand. The security server410may perform the authentication by comparing the encrypted security information with the pre-stored user's security information. For example, the security server may perform the authentication by comparing the security information received, such as the signature information with the pre-stored user's security information. Specifically, the security server410may perform the authentication by comparing the signature information included in the input security information with signature information included in the pre-stored user's security information.

The security server410may authenticate the encrypted security information, if the signature information included in the encrypted security information matches signature information included in the pre-stored user's security information. After authentication of the encrypted security information, the security server410may create authentication token information. The authentication token information may prove that the encrypted security information was authenticated.

In step1234, the security server410may send the authentication token information to the electronic device100. The electronic device100may then receive the authentication token information from the security server410.

Otherwise, if the encrypted security information does not match the pre-stored user's security information, the security server410may not authenticate the encrypted security information. In this case where the encrypted security information was not authenticated, the security server410may create unauthentication token information. The unauthentication token information may prove that the encrypted security information was not authenticated. In step1236, the security server410may send the unauthentication token information to the electronic device100. The electronic device100may then receive the unauthentication token information from the security server410. The controller110may return to step1212to determine if the accessory's user information has been detected. Alternatively, after step1236, the controller110may stop the process. After ending the process, the controller110may resume displaying the ordinary screen.

As such, the security authentication is performed by the security server outside of the electronic device, so the electronic device may not need to retain the security information. If the electronic device retains the security information, the electronic device is likely to be a victim of hacking. However, as described above, in various embodiments of the present disclosure, since the encrypted security information is sent to the security server, which performs the security authentication, the electronic device does not need to store the security information.

In step1240, it is determined from the authentication token information received whether the authentication was successful or failed. The controller110may determine from the authentication token information received whether the authentication was successful or failed. Specifically, when receiving the authentication token information from the security server410, the controller110may determine that the authentication was successful and thus switch the electronic device100into the security environment, in step1250. On the contrary, when receiving the unauthentication token information from the security server410, the controller110may determine that the authentication was failed and go to step1220to receive security information again.

If it is determined that the authentication was successful, in step1250, the electronic device110is switched into the security environment. That is, the controller110switches the electronic device100into the security environment if the authentication was successful. The security environment refers to an environment entered only if the authentication is successful. For example, the security environment may be a company environment, individual private environment, or public agency environment that requires security authentication. In the security environment, tasks in need of security may be performed. For example, applications in need of security may be executed in the security environment. In addition, in the security environment, tasks to deal with confidential data may be performed.

Turning back toFIG. 8, there may be multiple electronic devices. For example, there may be a first electronic device, e.g., the electronic device100and a second electronic device, e.g., the electronic device400. The first electronic device100may detect connection of an accessory, such as the electronic pen200, receive security information, such as signature information, and send the security information to the security server410. After successful authentication through a security authentication process in the security server410, the first electronic device100may be switched into the security environment. If the second electronic device400also detects connection of the accessory, such as the electronic pen200, the second electronic device400may also receive the security information, such as the signature information and send the security information to the security server410as the first electronic device100did. After successful authentication through the security authentication process in the security server410, the second electronic device400may be switched into the security environment.

According to various embodiments of the present disclosure, multiple electronic devices may be switched into security environments by using the security server410that performs the security authentication for the multiple electronic devices. Then, the user may switch the multiple electronic devices into the security environment even while using the multiple electronic devices. For example, the user may switch his mobile device, e.g., the first electronic device100into the security environment by approaching the electronic pen200to the first electronic device100and perform a task in the first electronic device100under the security environment, in office A, and the user may leave the office A and go into office B, in which the user may switch a tablet device, e.g., the second electronic device400into the same security environment by approaching the electronic pen200to the second electronic device400and then resume the task in the second electronic device400.

FIG. 9is flowchart illustrating operations of a method for providing security environment, according to another embodiment of the present disclosure, andFIGS. 10 and 11illustrate the electronic device performing a method for providing security environment, according to the embodiment of the present disclosure.

Referring toFIG. 9, in the embodiment of the method for providing security environment, in step1310, connection of an accessory is detected.

That is, the controller110of the electronic device100may detect the connection of the accessory. The accessory includes at least one of an electronic pen and an ID card. The controller110may detect connection of the accessory, e.g., at least one of the electronic pen or the ID card.

The detection of connection of the accessory may be made through wireless communication. Specifically, the controller110may control the short-range communication module132to perform wireless communication with the accessory. For example, the controller110may detect the connection of the accessory through wireless communication, such as Bluetooth, Infrared, WLAN, Wi-Fi or NFC communication. The accessory may also include a short-range communication module for wireless communication. For example, upon reception of a proximity signal from the accessory in the wireless communication, the controller110may detect the connection of the accessory.

While doing this, the controller110may display an ordinary screen under an ordinary environment rather than the security environment. The ordinary screen may not require security, such as home screen.

Referring toFIG. 10A, the controller110may detect connection of an accessory, such as the electronic pen200. The controller110may detect connection of the accessory by controlling the short-range communication module132to perform short-range communication, such as Bluetooth, Infrared, NFC communication, etc., or to perform WLAN communication, such as WiFi communication with the accessory. The electronic pen200may also include a short-range communication module for wireless communication. As shown inFIG. 10A, the controller110may display an ordinary screen, such as a home screen on the display unit190.

The accessory may include an identification (ID). The accessory ID may be unique to the accessory. The accessory ID may also include information regarding the user of the accessory. For example, the accessory ID may include, but not limited to, the name of the user, the user's post, the user's phone number, the user's age, or the user's address. The controller110may receive the accessory ID from the accessory through wireless communication. The controller110may thus identify the accessory connected to the electronic device100based on the accessory ID. The controller110may detect the information regarding the user, e.g., the name of the user from the accessory ID.

Subsequently, in step1312, it is determined whether the user information has been detected. That is, the controller110may determine if the accessory's user information has been detected. Alternatively, the accessory may also detect the user information and transmit the user information to the electronic device100. The user information may indicate that the accessory may be used in a security environment. If the accessory's user information is detected, the controller110is allowed to receive security information. If the accessory's user information is not detected, the controller110ends the process.

In step1320, a security authentication screen is displayed. The controller110may control the display unit110to display the security authentication screen. The security authentication screen may include a window to receive the security information.

Referring toFIG. 10B, a security authentication screen310is illustrated. The security authentication screen310may include a pop-up window314to receive the security information.

Alternatively, the controller110may display the security authentication screen upon detection of button220press. When the button220is pressed, the controller110may detect the pressure of the button220from a change of electromagnetic signals exchanged between the electronic pen200and the electronic device100. The controller110may then display the security authentication screen310upon detection of the pressure of the button220. The security authentication screen310may include the pop-up window314to receive the security information.

Subsequently, in step1322, security information is received. That is, the controller110may receive the security information. The security information may correspond to a password required for security authentication. For example, the security information may be signature information, number information, or gesture pattern information. The security information may be entered through the security authentication screen310. For example, the controller110may receive the security information, such as signature information, number information, or gesture pattern information through the security authentication screen310displayed in the display unit110, which may be in the form of a touch screen. In other words, the controller110may receive the security information by detecting a signature, number or gesture pattern input onto the security authentication screen displayed in the display unit190.

Referring toFIG. 10B, the controller110may receive the security information, e.g., signature information300through the security authentication screen310. The controller110may also display notification312that security information be entered. The controller110may display the notification as well as information regarding the user of the accessory, e.g. the name of the user, which is included in the accessory ID received. For example, if the name of the accessory user is Kim′, the controller110may display the notification312of “Mr./Ms. Kim, please enter your signature”. In addition, the controller110may detect touching or hovering of the electronic pen200on the security authentication screen310, which corresponds to the signature information300. In other words, the controller110may receive the security information, such as the signature information300by means of touching or hovering of the electronic pen200on the security authentication screen310.

In step1330, security authentication is performed with the security information received. That is, the controller110may perform the security authentication with the security information. The security authentication may refer to determining whether authentication is successful by comparing the security information received with pre-stored user's security information that corresponds to the accessory ID. The pre-stored user's security information may be security information of the user, which was authenticated beforehand. The user's security information may be stored in the storage175beforehand. The controller110may authenticate the security information received, if the security information received matches the pre-stored user's security information that corresponds to the accessory ID. For example, the pre-stored user's security information that corresponds to the accessory ID may be the user's signature information, number information or gesture pattern information that corresponds to the accessory ID, which was authenticated beforehand. The controller110may perform the authentication by comparing the security information received with the pre-stored user's security information that corresponds to the accessory ID. For example, as shown inFIG. 10B, the controller110may perform the authentication by comparing the signature information300with pre-stored user's security information that corresponds to the accessory ID. Specifically, the controller110may perform the authentication by comparing the signature information300included in the security information with signature information included in the pre-stored user's security information that corresponds to the accessory ID.

The accessory ID may include, but not limited to, information regarding the name of the user, the user's post, the user's phone number, the user's age, or the user's address. For example, if the accessory user is ‘Kim’ according to the accessory ID, the controller110may detect signature information included in the pre-stored user's security information of the user ‘Kim’. The controller110may perform the authentication by comparing the signature information300included in the security information with signature information included in the pre-stored user's security information of the user ‘Kim’.

The controller110may authenticate the security information received, if the security information received matches the pre-stored user's security information of the user ‘Kim’. On the contrary, the controller110may not authenticate the security information received, if the signature information300included in the security information received does not match or correspond to signature information included in the pre-stored user's security information of the user ‘Kim’.

In another embodiment of the present disclosure, the controller110may encrypt the security information. That is, the controller110may encrypt the security information so as to be decrypted by the security server. The controller110may send the encrypted security information to the security server. Specifically, the controller110may control at least one of the mobile communication module120, and the WLAN module131and the short-range communication module132included in the sub-communication module130to transmit the encrypted security information to the security server. Turning back toFIG. 8, there may be multiple electronic devices. Among the multiple electronic devices, the first electronic device100may transmit the encrypted security information to the security server410. The security server410may also include at least one communication module to perform communication with the multiple electronic devices.

Authentication token information may be created by the security server410when the encrypted security information is authenticated based on the comparison of the security information with the user's security information pre-stored in the security server410. The controller110may receive the authentication token information from the security server410.

Explaining in more detail, the security server may receive the encrypted security information. The security server may perform security authentication with the encrypted security information. That is, the security server may perform the security authentication by comparing the encrypted security information with the user's security information pre-stored in the security server.

The security authentication may refer to determining whether authentication is successful by comparing the encrypted security information with pre-stored user's security information. The pre-stored user's security information may be security information of the user, which was authenticated beforehand. The user's security information may be stored in a storage of the security server beforehand. The security server may authenticate the security information received, if the encrypted security information matches the pre-stored user's security information.

For example, the security server may perform the authentication by comparing the encrypted security information with the pre-stored user's security information. The security server may authenticate the encrypted security information if the encrypted security information matches the pre-stored user's security information. If the authentication of the encrypted security information was successful, the security server may create the authentication token information. The authentication token information may prove that the encrypted security information was authenticated. The security server may then transmit the authentication token information to the electronic device100. Thus, the electronic device100may receive the authentication token information from the security server410.

Otherwise, if the encrypted security information does not match the pre-stored user's security information, the security server410may not authenticate the encrypted security information. In this case where the encrypted security information is not authenticated, the security server410may create unauthentication token information. The unauthentication token information may prove that the encrypted security information was not authenticated. The security server410may then transmit the unauthentication token information to the electronic device100. Thus, the electronic device100may receive the unauthentication token information from the security server410. The controller110of the electronic device100may determine again if the accessory's user information has been detected. Alternatively, the controller110may stop the authentication process. After ending the authentication process, the controller110may resume displaying the ordinary screen.

In step1340, it is determined whether the authentication was successful or failed. That is, the controller110may determine whether the authentication was successful or failed. In step1350, the controller110switches the electronic device100into the security environment if the authentication was successful. Otherwise, if the authentication was failed, the controller110may go back to step1322to receive security information again.

If it is determined that the authentication was successful, in step1350, the electronic device110is switched into the security environment. That is, the controller110switches the electronic device100into the security environment if the authentication was successful. The security environment refers to an environment entered only if authentication is successful. For example, the security environment may be a company environment, individual private environment, or public agency environment that requires the security authentication process. In the security environment, tasks in need of security may be performed. For example, applications in need of security may be executed in the security environment. In addition, in the security environment, tasks to deal with confidential data may be performed.

As shown inFIG. 10B, when the security information received is authenticated since the security information, such as the signature information300matches signature information included in the pre-stored user's security information, the controller110may switch the electronic device100into the security environment.

FIG. 11illustrates the electronic device under a company environment as the security environment. Referring toFIG. 11, in the company environment, a company page302may be displayed on the electronic device100.

In the company environment, the electronic device100runs applications in need of security, such as a company e-mail application, a business intelligent application, etc. In addition, in the company environment, tasks to deal with confidential data e.g., related to customer management may be performed. The controller110may display the shortcut icon304for running the company e-mail application, the shortcut icon306for running the business intelligent application, or the shortcut icon308for opening a customer management folder on the display unit190. The controller110may display information regarding the user, which is included in the accessory ID, such as the name of the user, the user's post, the user's phone number, the user's age, or the user's address. For example, as shown inFIG. 11, ‘Kim’316, the name of the accessory user, included in the accessory ID may be displayed.

According to various embodiments of the present disclosure, upon detection of connection of an accessory, the electronic device receives the accessory ID and performs the authentication by comparing input security information to pre-stored user's security information that corresponds to the accessory ID.

According to various embodiments of the present disclosure, upon detection of connection of an accessory, the electronic device may receive the accessory ID and display user information that corresponds to the accessory ID while being switched into the security environment.

According to various embodiments of the present disclosure, security information may be entered through a currently running screen, upon detection of connection of an accessory.

The security information may be entered immediately upon detection of connection of the accessory, without separate steps.

In addition, once the authentication was successful with the security information, the electronic device may be immediately switched into the security environment.

In some embodiments, authentication may be performed by a security server outside of the electronic device, so the electronic device may not retain the security information.

Multiple electronic devices may be switched into the security environment through security authentication processes performed by the security server, and a user who uses the multiple electronic devices may switch them into the security environment.

Furthermore, upon detection of connection of an accessory, an electronic device receives the accessory's identification (ID) and performs the authentication by comparing input security information with pre-stored user's security information that corresponds to the accessory ID.

While being switched into the security environment, the electronic device may display the user information that corresponds to the accessory ID.

It will be appreciated that the embodiments of the present disclosure may be implemented in a form of hardware, software, or a combination of hardware and software. The software may be stored as program instructions or computer readable codes executable on the processor on a computer-readable medium. Examples of the computer readable recording medium include magnetic storage media (e.g., ROM, floppy disks, hard disks, etc.), and optical recording media (e.g., CD-ROMs, or DVDs). The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion. This media can be read by the computer, stored in the memory, and executed by the processor. The memory included in the power transmitter or the power receiver may be an example of the computer readable recording medium suitable for storing a program or programs having instructions that implement the embodiments of the present disclosure. The exemplary embodiments may be implemented by a program having codes for embodying the apparatus and method described in claims, the program being stored in a machine (or computer) readable storage medium. The program may be electronically carried on any medium, such as communication signals transferred via wired or wireless connection, and the present disclosure suitably includes its equivalent.

The electronic device may receive the program from a program provider wired/wirelessly connected thereto, and store the program. The program provider may include a memory for storing programs having instructions to perform the embodiments of the present disclosure, information necessary for the embodiments of the present disclosure, etc., a communication unit for wired/wirelessly communicating with the electronic device, and a controller for sending the program to the transceiver at the request of the electronic device or automatically.