Patent ID: 8683607

Claim:
A web service method, comprising the steps of: receiving a web service request message by a web service apparatus directly from a client browser independent of a Security Assertion Markup Language (SAML) authority server; determining whether a SAML assertion is included in the received message; when, as a result of the determination, the SAML assertion is not included in the received web service request message, requesting SAML assertion issuance to the SAML authority and receiving the newly issued SAML assertion from the SAML authority server and performing user authentication; and when, as a result of the determination, the SAML assertion is included in the received web service request message, performing user authentication using the SAML assertion; and after the authentication is completed, performing a web service according to the received web service request message; when the web service request message has been received from one of harmful site addresses that have been previously stored in a harmful site database, rejecting the received message; and when, as a result of the determination, the SAML assertion is not included in the received web service request message, but a SAML artifact is included in the received web service request message, obtaining the SAML assertion that has been previously issued from the SAML authority server using the SAML artifact.