公开(公告)号：US20140115661A1

公开(公告)日：2014-04-24

申请号：US14028011

申请日：2013-09-16

Applicant: Electronics and Telecommunications Research Institute

Inventor： Jae Hoon NAH

IPC: G06F21/31

CPC classification number: G06F21/31 ,  G06F21/6218 ,  H04L63/08 ,  H04L63/10

Abstract: The present invention relates to an information protection technology for management of a web mashup content authority. An exemplary embodiment of the present invention provides a user authentication method for using a web multi content, which includes: confirming whether to include authority information of a user for at least one content to request a domain which supplies the content to verify an authority of the user; performing authentication for the user who wants to use the content; verifying whether a request of the user to use the content is within an authenticated authority; and decoding the content to be supplied. According to the present invention, in a web service environment where only one protocol is used by the same origin policy, access control for data convergence is provided. In a web convergence service environment, a modification or plagiarism of a content (data or code) is prevented in advance.

Abstract translation: 本发明涉及一种用于管理web混搭内容授权的信息保护技术。 本发明的示例性实施例提供了一种用于使用网络多内容的用户认证方法，其包括：确定是否包括至少一个内容的用户的权限信息，以请求提供内容的域来验证 用户; 对想要使用该内容的用户进行认证; 验证用户使用内容的请求是否在认证机构内; 并对要提供的内容进行解码。 根据本发明，在同一起始策略中仅使用一个协议的Web服务环境中，提供用于数据收敛的访问控制。 在网络融合服务环境中，预先防止内容（数据或代码）的修改或抄袭。

公开(公告)号：US20150295918A1

公开(公告)日：2015-10-15

申请号：US14666992

申请日：2015-03-24

Applicant: Electronics and Telecommunications Research Institute

Inventor： Jae Hoon NAH ,  Sang Woo LEE ,  Jung Chan NA

IPC: H04L29/06

CPC classification number: H04L63/0838 ,  G06F21/33 ,  G06F21/44 ,  G06F2221/2133 ,  H04L63/0884 ,  H04L63/1483

Abstract: Disclosed is a user authenticating method in a web mash-up circumstance, including: requesting, by a mash-up server, updating an access authority token for accessing a data server to an authentication server; requesting, by the authentication server, a user authentication to the mash-up server; and issuing, by the authentication server, the updated access authority token to the mash-up server based on a response result to the user authentication request.

Abstract translation: 公开了一种网络互联情况下的用户认证方法，包括：由混搭服务器请求更新访问权限令牌以访问认证服务器的数据服务器; 由所述认证服务器向所述混搭服务器请求用户认证; 以及基于所述用户认证请求的响应结果，由所述认证服务器向所述混搭服务器发出所述更新的访问权限令牌。