Method, device and recording medium for providing multiple kinds of user authentication scheme
Patent Information
- Application Number
- TW113132870
- Authority / Receiving Office
- TW · TW
- Patent Type
- Patents
- Current Assignee / Owner
- Priority Date
- 2024-07-09
- Filing Date
- 2024-08-30
- Publication Date
- 2026-10-11
- Estimated Expiration
- 2044-08-29
AI Technical Summary
Existing user authentication methods require users to repeatedly enter information, leading to time and effort, and additional authentication processes when information is forgotten, and users may resist adopting new methods.
Implementing multiple user authentication methods, including first and second authentication methods with different information types, where the electronic device recommends the second method based on the presence of second authentication information, and provides visual cues to encourage its use.
Facilitates the adoption of new authentication methods by users familiar with existing ones, reducing time and effort by leveraging existing information and enhancing security through biometric and key-based authentication.
Smart Images

Figure TWG2TB001915176_001 
Figure TWG2TB001915176_002 
Figure TWG2TB001915176_003
Abstract
Description
Technical Field
[0001] This application relates to a method, apparatus, and recording medium for providing a plurality of types of user authentication methods. Prior Technology
[0002] Recently, services provided to multiple users based on the Internet and other networks are increasing. To utilize these services, service providers require users to create and authenticate user accounts. User authentication could be implemented by comparing the information entered by the user through their terminal with the information stored on the server or other device when the user's account was created. However, each time the service is used, users are required to spend considerable time and effort entering information. Furthermore, if users forget their information, a follow-up authentication process is needed, further increasing the time and effort required.
[0003] To address the aforementioned issues, an improved user authentication method is being proposed. However, users familiar with existing user authentication methods may not be familiar with the new method, or may not be adequately motivated to learn about it. Summary of the Invention
[0004] [The problem the invention aims to solve] One object of the present invention is to provide a method, apparatus and recording medium for providing a plurality of types of user authentication methods: even if a user is already familiar with a particular user authentication method, a new user authentication method can be recommended to the user. [Technical means to solve the problem]
[0005] According to one embodiment of the present invention, a method is provided for providing a plurality of types of user authentication methods implemented by an electronic device. The plurality of types of user authentication methods include a first authentication method based on first authentication information and a second authentication method based on second authentication information. The first authentication information and the second authentication information are set to be at least partially different, and each of the first authentication information and the second authentication information is set to include first data and second data. The method may include the following steps: receiving a request for a first page from a user terminal, the first page including an input interface for inputting first authentication information; determining whether at least a portion of the second authentication information exists in the electronic device; and, in response to the existence of at least a portion of the second authentication information in the electronic device, setting the first authentication information to... The page is transmitted to the user terminal, wherein the first page is configured to visualize the first recommendation information that recommends using the second authentication method; in response to the absence of at least a portion of the second authentication information in the electronic device, the first page is transmitted to the user terminal, wherein the first page is configured not to visualize the first recommendation information; in response to user authentication being completed by the first page configured not to visualize the first recommendation information, a second page including the second recommendation information is transmitted to the user terminal, wherein the second recommendation information recommends transmitting at least a portion of the second authentication information to the electronic device.
[0006] In one embodiment, the step of determining whether at least a portion of the second authentication information exists in the electronic device may include the following steps: determining whether the device identification information of the user terminal exists in a list including device identification information of user terminals using the second authentication method.
[0007] In one embodiment, the above method may further include the following steps: in response to completing user authentication by setting the first page in a manner that visualizes the first recommendation information, determining which of the first authentication method and the second authentication method was used to complete the user authentication; in response to the determination that the user authentication was completed based on the first authentication method, transmitting the second page including the second recommendation information to the user terminal.
[0008] In one embodiment, the first data of the first authentication information may include at least one of an identifier, an email address, and a telephone number, and the second data of the first authentication information may be the following data: data that is determined to be unique among the first data of the first authentication information before completing user authentication based on the first authentication method.
[0009] In one embodiment, the second authentication method described above may be the following authentication method: used to unlock the lock mode set in the manner that the user terminal only receives preset input.
[0010] In one embodiment, the first data of the second authentication information may be data generated based on user input, and the second data of the second authentication information may be data not generated based on user input.
[0011] In one embodiment, the first information of the second authentication information may include at least one of a PIN and biometric information.
[0012] In one embodiment, the aforementioned biometric information may include at least one of fingerprint information, iris information, and facial recognition information.
[0013] In one embodiment, the second data of the second authentication information may include a public key and a private key.
[0014] In one embodiment, the above method may further include the following step: the electronic device receives the public key from the user terminal.
[0015] In one embodiment, the above method may further include the following steps: storing the public key in association with the device identification information of the user terminal.
[0016] In one embodiment, the first recommendation information may include a trigger interface that triggers the display of the third page of the first data used to receive the second authentication information from the user on the user terminal. The method may further include the following steps: in response to the selection of the trigger interface, the third page of the first data used to receive the second authentication information is transmitted to the user terminal.
[0017] In one embodiment, prior to the step of transmitting the third page to the user terminal, the method may further include the following steps: determining whether there are two or more different second authentication information for the user terminal in the electronic device; and in response to the existence of two or more different second authentication information for the user terminal in the electronic device, transmitting a second authentication information selection interface for the user to select any one of the two or more second authentication information.
[0018] In one embodiment, the aforementioned second recommendation information may include a setting interface, which is configured such that the aforementioned second recommendation information is no longer visible on the aforementioned user terminal.
[0019] In one embodiment, the first page may include a first authentication information selection interface for users to select one of two or more different first authentication information.
[0020] An electronic device according to one embodiment of the present invention may include: one or more processors; and one or more memory stores commands executed by the one or more processors. The electronic device can be configured such that when the commands are executed by the one or more processors, the one or more processors execute the method of the present invention.
[0021] The non-transitory computer-readable recording medium of the present invention is a non-transitory computer-readable storage medium storing commands that, when executed by one or more processors, cause the one or more processors to perform actions. The commands can be configured to cause the one or more processors to execute the method of the present invention. [Effects of the Invention]
[0022] According to the present invention, even if a user is already familiar with a particular user authentication method, a new user authentication method can be recommended to the user.
[0023] The effects of the technical concept of this invention are not limited to those mentioned above. Those skilled in the art can clearly understand other effects not mentioned based on the description in the specification. Simple Explanation of the Diagram
[0024] Figure 1 illustrates a system according to one embodiment of the present invention. Figure 2 shows a computing device that can implement one embodiment of the present invention. Figures 3a and 3b are illustrative diagrams of a login page for a first authentication method according to one embodiment of the present invention, and Figures 3c to 3f are illustrative diagrams of a login page for a second authentication method according to one embodiment of the present invention. Figures 4a and 4b show the first page of the first recommended information that is not visualized. Figure 5a is an illustrative diagram of a page including information recommending the registration of the second authentication method to an electronic device according to one embodiment of the present invention. Figures 5b to 5e are illustrative diagrams of a page for registering the second authentication method to an electronic device according to one embodiment of the present invention. Figure 6 is an illustrative diagram of a gate device page according to one embodiment of the present invention. Figures 7a and 7b illustrate an example of a registration access key and management page according to one embodiment of the present invention. Figure 8 is a flowchart of an embodiment of the present invention of a method for providing multiple types of user authentication methods. Implementation
[0025] The various embodiments described herein are illustrative of the technical concept of the invention and are not intended to limit them to specific implementations. The technical concept of the invention includes various modifications, equivalents, alternatives, and embodiments obtained by selectively combining all or part of the embodiments described herein. Furthermore, the scope of the technical concept of the invention is not limited to the various embodiments presented below or their specific descriptions.
[0026] The terms used herein, including technical or scientific terms, unless otherwise defined, shall have the meanings commonly understood by one of common knowledge in the technical field to which this invention pertains.
[0027] The use of terms such as "including," "may include," "possibly possess," "may possess," "has," and "may have" in this document implies the presence of object characteristics (e.g., functions, actions, or constituent elements), and does not exclude the existence of other additional characteristics. That is, the above-mentioned expressions should be understood as open-ended terms that have the possibility of including other embodiments.
[0028] The singular expressions used herein may include the meaning of the plural form unless otherwise stated in the context, and this also applies to the singular expressions described in the claims of this invention.
[0029] The terms "first," "second," "first," "second," etc., used in this article are used to distinguish one object from others when referring to multiple objects of the same kind, and are not used to specify the order or importance of such objects.
[0030] The expressions “A, B, and C”, “A, B, or C”, “A, B, and / or C”, or “at least one of A, B, and C”, “at least one of A, B, or C”, “at least one of A, B, and / or C”, “selected from at least one of A, B, and C”, “selected from at least one of A, B, or C”, “selected from at least one of A, B, and / or C” can refer to each of the listed items or all combinations of the listed items. For example, “selected from at least one of A and B” can refer to (1) A, (2) at least one of A, (3) B, (4) at least one of B, (5) at least one of A and at least one of B, (6) at least one of A and B, (7) at least one of B and A, (8) both A and B.
[0031] The term "based on" as used in this article refers to one or more factors described in the statement or article that influence a certain behavior or action, and does not exclude other factors that influence the corresponding certain behavior or action.
[0032] The expression used herein to describe a constituent element (e.g., the first constituent element) as "connected" or "linked" to another constituent element (e.g., the second constituent element) can refer not only to the direct connection or linking of the aforementioned constituent element to the other constituent element, but also to the connection or linking to the other constituent element through a new constituent element (e.g., the third constituent element).
[0033] Depending on the context, the phrase "configured to" as used in this article can mean "set up in a certain way," "possess the ability to perform certain actions," "change in a certain way," "manufactured in a certain way," or "capable of performing certain actions." This phrase is not limited to the meaning of "specially designed in hardware." For example, a processor configured to perform a specific action can refer to a special purpose computer (SPC) that is programmed to perform that specific action.
[0034] In this invention, the term "user interface" can refer to a physical or virtual medium that enables communication between a user and things, systems, machines, or computer programs. In this invention, the user interface can also be simply referred to as an interface. Users can utilize e-commerce services through a user interface. For example, a user interface may include basic elements for displaying specific information such as images or text, and elements for receiving user input, such as buttons that can be constructed using these basic elements. For example, a user interface selected (clicked) by the user can be described as receiving input from the user corresponding to the user interface.
[0035] Hereinafter, various embodiments of the present invention will be described with reference to the accompanying drawings. In the drawings and descriptions thereof, the same or substantially equivalent constituent elements may be given the same reference numerals. Furthermore, in the following descriptions of various embodiments, repeated descriptions of the same or corresponding constituent elements may be omitted, but this does not mean that such constituent elements are not included in the embodiments.
[0036] Figure 1 illustrates a system 100 according to one embodiment of the present invention. The system 100 shown in Figure 1 may include at least one of an electronic device 110, a user terminal 120, and a retailer terminal 130. Hereinafter, for ease of explanation, the user terminal 120 and the retailer terminal 130 will be collectively referred to as terminals 120 and 130.
[0037] Electronic device 110 and terminals 120 and 130 can be connected via network 140 to communicate with each other. On the other hand, Figure 1 shows an example of one user terminal 120 and one retailer terminal 130 communicating with electronic device 110 via network 140, but this is only for illustrative purposes; the number of terminals 120 and 130 that can communicate with electronic device 110 via network 140 can naturally be changed. That is, one or more user terminals 120 and one or more retailer terminals 130 can each connect to the e-commerce services provided by electronic device 110 via network 140. Furthermore, Figure 1 only shows a preferred embodiment for achieving the purpose of this invention; other components can be added to system 100 as needed.
[0038] The following is a more detailed explanation of each component shown in Figure 1.
[0039] In one embodiment, electronic device 110 may be a server device operating under the management of an e-commerce service provider to provide e-commerce services. The e-commerce service may be an environment providing users with a digital platform enabling them to purchase goods such as objects, food, and manufactured products, while simultaneously providing sellers with an environment enabling them to sell such goods. Alternatively, the e-commerce service provided by electronic device 110 may include intermediary services for sellers selling goods to users.
[0040] In one embodiment, the electronic device 110 can manage information about users, sellers, and goods. The information about users, sellers, and goods may differ in content.
[0041] Specifically, user information managed by electronic device 110 may include, for example, the user's name, age, address, contact information, and payment method. Furthermore, the management of user information can be broadly defined as all actions performed using control over that information. For example, the management of user information may include storing, updating, modifying, and deleting that information.
[0042] Furthermore, the seller information managed by electronic device 110 may include, for example, the seller's name, address, contact information, account information, sales history, etc. Also, the management of seller information can be broadly defined as all actions performed using control over that information. For example, the management of seller information may include storing, updating, modifying, and deleting that information.
[0043] Furthermore, the product information managed by electronic device 110 may include, for example, product identification information, name, manufacturer, price, unit price, capacity, size, weight, attributes, image, category to which the product belongs, and information about the items constituting the product. In this case, a product may refer to a unit of more than one item for sale, and the same item may be offered to the user as different products. For example, the same type of item may be sold as different products by changing the quantity sold and the price. Therefore, different products sharing item information may exist. The management of product information can be collectively referred to as all actions performed using control over that information. For example, the management of product information may include storing, updating, modifying, and deleting that information.
[0044] On the other hand, electronic device 110 can provide pages related to e-commerce services in response to requests from users or sellers. The action of electronic device 110 providing pages to users or sellers can be achieved by electronic device 110 providing pages to terminals 120 and 130. The action of electronic device 110 providing pages to terminals 120 and 130 can be achieved by electronic device 110 generating, modifying, or storing information or data related to the page, and transmitting at least a portion of such information or data to terminals 120 and 130.
[0045] Specifically, electronic device 110 can generate, modify, or store display (output) information (e.g., page information) to display (output) pages related to e-commerce services to terminals 120 and 130, and transmit the display information to terminals 120 and 130. Here, the display information is information that enables pages related to e-commerce services to be displayed on the displays of terminals 120 and 130, for example, through images or text. Based on receiving the above display information, terminals 120 and 130 can display (output) various pages of e-commerce services.
[0046] Pages related to the e-commerce services provided to user terminal 120 may include the following: pages providing various information related to goods that the user can purchase; pages providing a catalog of goods retrieved in various ways based on user input; pages providing detailed information on goods specified by the user; shopping cart pages for purchasing goods specified by the user; and pages providing information for checkout.
[0047] Furthermore, the e-commerce service-related pages provided to the seller terminal 130 may include the following pages: a seller management page for managing various information about sellers and the goods they sell; a page for the sales history and related statistics of the goods; and a detailed page for the description of the goods or items and related sales.
[0048] In one embodiment, electronic device 110 can transmit various responses corresponding to various requests received from terminals 120 and 130 for e-commerce services. For example, terminals 120 and 130 can receive various inputs through a user interface (e.g., interface toolset or buttons) displayed on the e-commerce service page and transmit them to electronic device 110. Furthermore, terminals 120 and 130 can receive responses (e.g., information) from electronic device 110 corresponding to the input and perform actions defined in the responses (e.g., displaying the received information on the page).
[0049] In addition to the examples described above, electronic device 110 may perform operations related to known technologies that are capable of being performed by server devices providing e-commerce services. Therefore, applying the technical concept of the present invention with reference to operations related to known technologies is not excluded from the scope of the present invention.
[0050] In one embodiment, terminals 120 and 130 can display various pages of e-commerce services provided by electronic device 110 on their displays. These pages can be used as user interfaces defined as functions associated with the e-commerce services. The application of such user interfaces can be managed via the electronic device 110. Furthermore, terminals 120 and 130 can receive input from users or sellers on the pages, process the received input, or transmit it to electronic device 110. For example, terminals 120 and 130 can receive input corresponding to the user interface displayed on the page and transmit it to electronic device 110. Input received from users may include various forms of input such as mouse clicks, touch controls using a touch panel or touch screen, voice recognition, and other electronic inputs. Terminals 120 and 130 receive responses from electronic device 110 corresponding to the transmitted input, thereby enabling terminals 120 and 130 to perform actions defined in accordance with the transmitted input. For example, terminals 120 and 130 can receive specific information corresponding to the transmitted input from electronic device 110, and display the specific information or a page containing the specific information on the display screen. In this way, specific information corresponding to the received input can be provided to the user or seller. As described above, in order for users and sellers to utilize e-commerce services through terminals 120 and 130, a web browser or application can be installed in terminals 120 and 130.
[0051] Terminals 120 and 130 may be, for example, any of desktop computers, laptop computers, tablet computers, wearable devices, or smartphones, but are not limited thereto. Terminals 120 and 130 may be any of the following devices: including input / output interfaces capable of receiving information from or sending information to users or sellers, and capable of communicating with electronic device 110 or other devices via network 140.
[0052] Network 140 serves to connect electronic device 110 to terminals 120, 130, or other external devices. For example, network 140 provides a connection path so that terminals 120, 130 can connect to electronic device 110 and send and receive packet data with electronic device 110. Network 140 can be implemented as any type of wired or wireless network, such as a Local Area Network (LAN), Wide Area Network (WAN), Mobile Radio Communication Network, or Wibro (Wireless Broadband Internet).
[0053] In one embodiment, electronic device 110 and terminals 120 and 130 can operate as a single device. Terminals 120 and 130 can be included in electronic device 110 as all or part of its constituent elements. For example, the various information transmitted and received between electronic device 110 and terminals 120 and 130 via network 140 can be various information transmitted and received between constituent elements within a single device.
[0054] Figure 2 illustrates a computing device 200 that can implement the devices 110, 120, and 130 according to one embodiment of the present invention. That is, the aforementioned electronic device 110 or terminals 120 and 130 can be implemented by one or more computing devices 200.
[0055] In one embodiment, the computing device 200 may include one or more processors 210, one or more memory units 220, or a communication interface 230. In one embodiment, some components of the computing device 200 may be removed, or other components (e.g., a display or input device) may be added to the computing device 200. Furthermore, some components may be additionally or alternatively integrated to achieve, or implemented as a single or multiple entities. In this invention, "one or more processors 210" may refer to processor 210. Unless otherwise explicitly stated herein, the term "processor 210" may refer to a collection of one or more processors. Similarly, in this invention, "one or more memory units 220" may refer to memory units 220. Unless otherwise explicitly stated herein, the term "memory units 220" may refer to a collection of one or more memory units. Furthermore, in this invention, unless otherwise explicitly stated in the text, the term "communication interface 230" may refer to a collection of one or more communication circuits.
[0056] The following is a more detailed explanation of each component shown in Figure 2.
[0057] In one embodiment, the processor 210 can control the various components of the computing device 200, or perform computations or information processing related to communication. Specifically, the processor 210 can drive software (or computer programs) received from other components to control at least one component of the computing device 200 connected to the processor 210. As an example, the processor 210 can load commands (e.g., instructions, codes, or code segments) or information into the memory 220, process the commands or information stored in the memory 220, and store the result information obtained from the processing into the memory 220. Furthermore, the processor 210 can be operatively connected to the components of the computing device 200 to perform various computations, processing, generation, or manipulation actions related to the present invention.
[0058] In one embodiment, memory 220 may store various types of information. The information stored in memory 220 is information obtained, processed, or used by at least one component of computing device 200, and may include software. For example, memory 220 may store the history of users utilizing e-commerce services. The software may include one or more commands that, when loaded into memory 220, cause processor 210 to perform actions according to various embodiments of the present invention. That is, processor 210 may perform actions according to various embodiments of the present invention by executing one or more of the aforementioned commands. Memory 220 may include, for example, volatile or non-volatile memory. In one embodiment, the program is software stored in memory 220, and may include an operating system, application program, or middleware for controlling the resources of computing device 200, the middleware providing various functions to the application program so that the application program can utilize the resources of computing device 200.
[0059] In one embodiment, the communication interface 230 can establish wired or wireless communication channels with other devices to send and receive various information. In one embodiment, for wired communication with other devices, the communication interface 230 may include at least one port for connecting to other devices via a wired cable. In this case, the communication interface 230 can communicate with other wired devices via at least one port. In one embodiment, the communication interface 230 can be configured to include a cellular communication module and connect to a cellular network (e.g., 3G, LTE, 5G, Wibro, or WiMAX). In one embodiment, the communication interface 230 may include a short-range communication module to use short-range communication (e.g., Wi-Fi, Bluetooth, Bluetooth Low Energy (BLE), UWB) to send and receive information with other devices. In one embodiment, the communication interface 230 may include a contactless communication module for contactless communication. Contactless communication may include, for example, at least one short-range contactless communication technology such as NFC (Near Field Communication), RFID (Radio Frequency Identification), or MST (Magnetic Secure Transmission). In addition to the various examples described above, the computing device 200 can also be implemented in various known ways for communicating with other devices; the scope of this invention is not limited to the examples described above.
[0060] In one embodiment, the computing device 200 may include a display. The display may display various screens (e.g., more than one page) under the control of the processor 210. To display screens with various interfaces on the display, a web browser or dedicated application may be installed on the computing device 200, for example. Furthermore, the display is configured to interact with a user and can receive user input. Such a display can be implemented in the form of a touch sensor panel (TSP) that can recognize the contact or proximity of various external objects (e.g., a user's finger or a pen).
[0061] In one embodiment, the computing device 200 may include an input device (e.g., a mouse or keyboard). The input device may receive information from outside the computing device 200 (e.g., a user) that will be used in the components of the computing device 200.
[0062] The processor 210, memory 220, and communication interface 230 shown in Figure 2 are connected to each other via buses, GPIO (General Purpose Input / Output), SPI (Serial Peripheral Interface), or MIPI (Mobile Industry Processor Interface), thereby enabling the transmission and reception of information or signals.
[0063] The following describes the user authentication methods related to the method of this invention.
[0064] The method of this invention provides a plurality of user authentication methods, that is, a user can choose any one of the plurality of different user authentication methods, thereby enabling the user terminal and / or electronic device to perform user authentication. The electronic device can recommend that the user use a specific user authentication method. For ease of explanation, it is assumed below that the plurality of user authentication methods include a first authentication method and a second authentication method, and the electronic device recommends that the user use the second authentication method. The plurality of user authentication methods can be based on different authentication information. For ease of explanation, it is assumed below that the first authentication method is implemented based on first authentication information, the second authentication method is implemented based on second authentication information, and the first authentication information and the second authentication information are at least partially different.
[0065] Each certification information may include more than one piece of information that differs from the others. For ease of explanation, it is assumed below that certification information 1 and certification information 2 each include data 1 and data 2.
[0066] At least a portion of the various user authentication methods may be based solely on information entered by the user, and other portions may be based at least partially on information not entered by the user. For ease of explanation, it is assumed below that the second data of the first authentication information is determined to be the only data in the first data of the first authentication information before user authentication based on the first authentication method is completed; however, the first data may be information entered by the user or information not entered by the user. Furthermore, it is assumed that the first data of the second authentication information used for the second authentication method may be data generated based on user input, and conversely, the second data of the second authentication information may be data not generated based on user input.
[0067] Examples of the first and second authentication methods that conform to the above assumptions are as follows. First, the first data in the first authentication information may include at least one of an identifier, email address, or telephone number. The second data in the first authentication information may be a user-set password, an email account corresponding to the first data, an authentication string received via telephone, an authentication number, or an internet address. Furthermore, the second authentication method includes a so-called access key method, and the first data in the second authentication information may include at least one of a PIN and biometric information, wherein biometric information may include at least one or more of fingerprint information, iris information, and facial recognition information. The second data in the second authentication information may include an encryption key, which may include a public key and a private key. A portion of the second authentication information, for example, the public key, may be transmitted to an electronic device and may be stored in the electronic device or a storage facility accessible to the electronic device. In one embodiment, the second authentication method may be an authentication method for unlocking a lockout mode, which is a mode set so that the user terminal only receives restricted inputs (e.g., power on / off, input for sending an emergency call, input for switching vibration mode or ringtone mode, etc.).
[0068] In the above examples, when the second piece of information for the first authentication method used in the first authentication method is a password, if the user forgets the password, additional time and effort may be required to retrieve it. Similarly, when the second piece of information for the first authentication method used in the first authentication method is an authentication string, authentication number, or internet address received via email or telephone, additional time and effort may be required to obtain this second piece of information when verifying the email viewer or telephone call. Conversely, when the second piece of information for the second authentication method used in the second authentication method is a password key, the user does not need to remember the encryption key or store it on a separate device; the encryption key can be maintained on the user terminal using their PIN or biometric information. Compared to a password, an encryption key also offers an improvement in security.
[0069] The following describes, by way of various embodiments of the present invention, examples of pages output from a user terminal. It should be noted that the page order described below for the purpose of implementing the methods of the present invention does not imply that the pages must be displayed on the user terminal in that order.
[0070] Figures 3a and 3b are illustrative diagrams of a login page for a first authentication method according to one embodiment of the present invention. Hereinafter, for ease of explanation, the login page for the first authentication method will be referred to as the first page P1. In the present invention, login may have the same meaning as user authentication.
[0071] Page 1 P1 can be displayed on the user terminal 120 when the user or user terminal 120 has not yet logged into the electronic device 110. Therefore, while the user or user terminal 120 is in the state of being logged into the electronic device 110, page 1 P1 may not be displayed.
[0072] Page P1 includes an input interface for users to enter first authentication information, such as: an identifier login interface R1 as shown in Figure 3a for receiving an identifier and password from the user, and a telephone number login interface R2 as shown in Figure 3b for receiving a telephone number and authentication number from the user.
[0073] Page P1 includes a first authentication information selection interface for users to choose from two or more different first authentication information entries. For example, if the "Email Login" tab R11 at the top of the identifier login interface R1 is activated (e.g., by touch or mouse click), the identifier and password input fields and the "Login" button will be visualized; if the "Phone Number Login" tab R21 at the top of the phone number login interface R2 is activated, the phone number input field and the "Send Authentication Number" button will be visualized. That is, in the above example, the "Email Login" tab R11 and the "Phone Number Login" tab R21 are first authentication information selection interfaces.
[0074] If information is entered into the identifier and password input fields of the identifier login interface R1 and the "Login" button is activated, the entered information can be transmitted from the user terminal 120 to the electronic device 110. As shown in the example of Figure 3a, the user's email address can also serve as an identifier; in this case, the email address can be entered into the identifier login interface area R1 as the identifier. Alternatively, if information is entered into the phone number input field of the phone number login interface R2 and the "Send Authentication Number" button is activated, an authentication number will be received on the phone corresponding to the phone number matching the entered information.
[0075] Page 1 (P1) may further include information recommending the use of the second authentication method for user authentication; for ease of explanation, this will be referred to as the first recommendation information.
[0076] In one embodiment, the first recommendation information may be visualized or not visualized depending on whether at least a portion of the second authentication information is present in the electronic device 110. For example, when at least a portion of the second authentication information (e.g., a public key) is present in the electronic device, as shown in Figures 3a and 3b, the first recommendation information may also be visualized on the first page P1 as a recommendation interface R3. Conversely, when the second authentication information is not present in the electronic device, as shown in Figures 4a and 4b, the first recommendation information may not be visualized on the first page P1. In another embodiment, the first recommendation information may be visualized or not visualized depending on whether at least a portion of the second authentication information is present in the user terminal 120.
[0077] The first recommended information includes a trigger interface, which is used to trigger the display of a portion of the second authentication information received by the user on the user's terminal, such as the page for obtaining the first data (hereinafter referred to as the third page, the details of which are described below). When the first recommended information is visualized on the first page P1, as shown in Figures 3a and 3b, the trigger interface can be visualized as a "Log in with Password" button R31 at the bottom of the recommended interface R3.
[0078] It should be noted that when the first recommended information is visualized on page P1, even if the user selects either login interface area R1 or phone number login interface R2 and enters information for user authentication, the recommended interface R3 will continue to be visualized (until the "Login" button or "Send Authentication Number" button is pressed). This increases the likelihood that the user will change their mind and use the second authentication method when attempting to use the first authentication method.
[0079] Furthermore, as shown in Figures 3a and 3b, the first page P1 may further include an interface R4 that triggers other pages, which are used to receive various information for membership registration for users who do not yet have a user account.
[0080] Figures 3c and 3f are illustrative diagrams of a login page for a second authentication method according to one embodiment of the present invention. The pages shown in Figures 3c and 3f can be displayed on the user terminal after the trigger interface R31 is activated. Among them, the page shown in Figure 3e is the input page P32 for receiving the first data of the second authentication information, which will be referred to as the third page for ease of explanation below.
[0081] In one embodiment, when a second authentication information associated with the user terminal 120 exists in the electronic device, in response to activating the trigger interface R31 within the first page P1, as shown in FIG3d, a confirmation page P31 can be displayed on the user terminal 120. This confirmation page P31 requests the user to confirm whether they are authenticating using the second authentication method based on the second authentication information. When a preset interface within the confirmation page P31 is activated, such as a "Continue" button, the third page P32 shown in FIG3f can be displayed on the user terminal following the confirmation page P31. Conversely, when there are two or more different second authentication information for user terminal 120 in electronic device 110, before displaying the confirmation page P31 shown in FIG3d on user terminal 120, as shown in FIG3c, an authentication information selection page P30 can be displayed on user terminal. The authentication information selection page P30 includes a second authentication information selection interface R301 for users to select any one of two or more second authentication information. In response to selecting any one of the visualized multiple second authentication information in the authentication information selection page P30, the confirmation page P31 is displayed on user terminal. The confirmation page P31 only visualizes the selected second authentication information in the authentication information selection page P31.
[0082] On the other hand, on page 3, P32, for example, as shown in FIG3e, an image for requesting fingerprint information can be visualized. Furthermore, as the first data of the second authentication information, an interface (not shown) for activating input of PIN information or other types of biometric information instead of fingerprint information can be visualized. When user authentication via the second authentication method is successful, as shown in FIG3f, an authentication success notification page P33, including an image indicating successful authentication, can be displayed on the user terminal 120. Then, as shown in FIG6, a page for services provided by the electronic device 110, such as a gateway page P4, can be displayed on the user terminal 120.
[0083] Figures 4a and 4b show the first page P1 without visualizing the first recommended information. This first page P1 is the same as the first page P1 shown in Figures 3a and 3b except that the first recommended information is not displayed. Therefore, repeated descriptions are omitted here.
[0084] Figure 5a is an illustrative diagram of a page including information recommending the registration of a second authentication method to an electronic device, according to one embodiment of the present invention. Registering the second authentication method in the electronic device 110 may refer to transmitting at least a portion of the second authentication information to the electronic device 110. Furthermore, for ease of explanation, the information recommending the transmission of at least a portion of the second authentication information to the electronic device is referred to as the second recommendation information. Furthermore, for ease of explanation, the page including the second recommendation information is referred to as the second page P2. The second recommendation information visualized on the second page P2, like the first recommendation information, may include a trigger interface that triggers the display of a third page on the user terminal for receiving the first data of the second authentication information. For example, as shown in Figure 5a, it may include a "Use Access Key" button R5. Furthermore, the second recommendation information may include a setting interface that allows the second recommendation information to no longer be visualized on the user terminal. For example, as shown in Figure 5a, it may include a "Later" button R6. In one embodiment, if the "Later" button R6 is activated, for example, the gateway page P4 shown in FIG6 can be displayed in the user terminal 120. At the same time, a request set as follows can be transmitted to the electronic device 110: the electronic device will not transmit the second page to the user terminal within a preset period or a preset number of user authentications.
[0085] Figures 5b and 5e are illustrative diagrams of a page used to register a second authentication method to an electronic device according to one embodiment of the present invention. The page shown in Figures 5b and 5e can be displayed on the user terminal 120 after the trigger interface of the second page P2 is activated, for example, after the "Use Access Key" button R5 is activated. Among them, the page shown in Figure 5d is the input page P32' for receiving the first data of the second authentication information. Hereinafter, for ease of explanation, it will be referred to as the third page, the same as the input page P32 shown in Figure 3e.
[0086] Figures 7a and 7b illustrate an example of a registration access key and management page according to one embodiment of the present invention. In one embodiment, when a user wishes to register or add second authentication information on electronic device 110 for the first time, or to manage the registered second authentication information by viewing or deleting it through a page other than the second page, the user can receive a preset page through the user terminal, such as the security and login settings page shown in Figures 7a and 7b. In one embodiment, if at least a portion of the second authentication information is not stored in the user terminal 120 or electronic device 110, a "Use Access Key" button can be visualized in the settings page, as shown in Figure 7a. This "Use Access Key" button is functionally the same as the "Use Access Key" R5 button in the second page P2 shown in Figure 5a; therefore, repeated descriptions are omitted here. Furthermore, if at least a portion of the second authentication information is stored in the user terminal 120 or electronic device 110, as shown in FIG7b, details related to the second authentication information can be visualized on the settings page, as well as a "Delete" button for deleting the second authentication information. Additionally, an interface for adding new second authentication information, such as an "Add Access Key" button, can also be visualized.
[0087] The methods of various embodiments of the present invention will now be described in detail. It should be noted that actions are represented in a specific order in the following figures, but it is not necessary to perform the actions only in the specific order or sequentially shown, or to perform all the shown actions in order to obtain the desired result.
[0088] Furthermore, the actions of the method described with reference to the following figures can be implemented by electronic device 110. In other words, the actions of the method can be implemented by one or more instructions executed by processor 210 of one or more computing devices 200 that can implement electronic device 110. All actions included in this method can be executed by a single physical computing device, but for example, the first action of the method can be executed by a first computing device, and the second action of the method can be executed by a second computing device. That is, the actions included in the method can also be divided among multiple computing devices for execution.
[0089] The following description assumes that the operation of the above method is substantially performed by a processor 210 capable of implementing the electronic device 110 or one or more computing devices 200 of the electronic device 110 shown in FIG. 1. However, the purpose of this assumption is not to exclude the possibility that a portion of the operation of the above method is performed by a processor 210 capable of implementing the terminals 120, 130 or one or more computing devices 200 of the terminals 120, 130 shown in FIG. 1. Furthermore, for ease of explanation, the main body of the operation included in the method may be omitted, but unless otherwise stated in the context, it should be interpreted as the operation being performed by a processor 210 capable of implementing the electronic device 110 or one or more computing devices 200 of the electronic device 110.
[0090] Figure 8 is a flowchart illustrating the operation of a method for providing multiple types of user authentication methods according to one embodiment of the present invention. The method for providing multiple types of user authentication methods can be implemented by electronic device 110.
[0091] Referring to Figure 8, firstly, in step S10, the electronic device can receive a request for the first page from the user terminal. The first page includes an input interface for inputting the first authentication information.
[0092] In step S20, the electronic device can determine whether at least a portion of the second authentication information exists in the electronic device. Here, step S20, determining whether at least a portion of the second authentication information exists in the electronic device, may include the following steps: determining whether the device identification information of the user terminal transmitting the aforementioned request exists in a list including device identification information of user terminals using the second authentication method. In other words, the electronic device receives at least a portion of the second authentication information transmitted by the user terminal and stores it in the form of a list associated with the device identification information of the user terminal within the electronic device or in another storage library accessible to the electronic device. Whenever a request for the first page is received, it can determine whether the device identification number of the user terminal transmitting the request exists in the list.
[0093] If, in step S20, it is determined that at least a portion of the second authentication information is missing from the electronic device, the electronic device can respond by transmitting a first page, configured without visualizing the first recommendation information, to the user terminal in step S31. Therefore, in step S32, the electronic device can perform user authentication using only the first authentication method based on the information entered through the input interface of the first page. Since the first recommendation information is not visually displayed on the first page, user authentication using the second authentication method will not be triggered. Therefore, the second authentication method can be recommended to users who cannot yet use it, preventing confusion for those users. In step S33, the electronic device can determine whether the user authentication in step S32 was successful. If unsuccessful, it returns to step S32 and performs user authentication again. This process can be repeated until user authentication is successful.
[0094] In step S33, if the first page, which is set in a way that does not visualize the first recommendation information, determines that the user authentication is successful, the electronic device can respond by transmitting the second page to the user terminal in step S40. This second page includes second recommendation information that recommends transmitting at least a portion of the second authentication information to the electronic device. It should be noted that in step S20, it has already been determined that at least a portion of the second authentication information does not exist in the electronic device; therefore, the process can proceed to step S40 without repeating the other processes used to determine whether to proceed to step S40. For details regarding the second page, for example, regarding the second page P2 shown in Figure 5a and the corresponding diagram, please refer to the content described above.
[0095] In step S41, the electronic device can determine whether there is a request from the user terminal to register the second authentication information to the electronic device. For example, if after the second page is transmitted to the user terminal, the request received from the user terminal is a request to transmit the third page using the trigger interface R5 within the second page P2, then the electronic device can determine that there is a request from the terminal to register the second authentication information to the electronic device, and in response, in step S42, transmit the third page to the user terminal. In one embodiment, before transmitting the third page to the user terminal, it can be determined whether there are two or more different second authentication information for the user terminal in the electronic device, and in response to the existence of two or more different second authentication information for the user terminal in the electronic device, page P30' including a second authentication information selection interface R301' for the user to select any one of two or more second authentication information is transmitted. Next, in step S43, a portion of the second authentication information, such as the second data of the second authentication information that discloses the key, is received from the user terminal. The received portion of the second authentication information is then stored in the electronic device or in another storage accessible to the electronic device, in association with the corresponding device identification information of the user terminal. Then, in step S50, a page for utilizing the services of the electronic device, such as the gateway page P4, can be transmitted to the user terminal.
[0096] Conversely, in step S41, if after transmitting the second page to the user terminal, the request received from the user terminal is not a request to transmit the third page but another request, such as a request to configure the device in a manner that the second page transmitted using the configuration interface R6 of the second page P2 is not displayed, then the electronic device can determine that the terminal does not have a request to register the second authentication information to the electronic device, and in response, in step S50, transmit the gateway page P4 to the user terminal. In one embodiment, in response to a request to configure the device in a manner that the second page is not displayed, the electronic device can configure the device as follows: within a preset period or a preset number of user authentications, after successful user authentication based on the first authentication method implemented for the corresponding user terminal, the second page is not transmitted to the user terminal and the gateway page is displayed on the user terminal. Therefore, repeatedly recommending the registration of the second authentication information to users who do not want to register the second authentication information, at least temporarily, can reduce the adverse impact on the user's user experience.
[0097] On the other hand, in step S20, if it is determined that at least a portion of the second authentication information exists in the electronic device, the electronic device can respond by transmitting a first page, configured to visually recommend the use of the second authentication method, to the user terminal in step S31'. For details regarding the first page, for example, regarding the first page P1 shown in Figures 3a and 3b, refer to the content described above. Next, in step S32', the electronic device can perform user authentication using the second authentication method triggered by the visual first recommendation information within the first page, or, based on information entered through the input interface of the first page, perform user authentication using the first authentication method. Specifically, in step S32', when the trigger interface R31, which displays the first data used to receive the second authentication information from the user, is activated, the electronic device can respond by transmitting the third page of the first data used to receive the second authentication information to the user terminal. In one embodiment, before transmitting the third page to the user terminal, it is determined whether there are two or more different second authentication information in the user terminal. In response to the existence of two or more different second authentication information in the user terminal, page P30 is transmitted. Page P30 includes a second authentication information selection interface R301 for the user to select any one of the two or more second authentication information.
[0098] In step S33', the electronic device determines whether the user authentication in step S32 was successful. If it is determined to be unsuccessful, it can return to step S32 and perform user authentication again. This process can be repeated until user authentication is successful.
[0099] In step S33', when the user authentication is determined to be successful by setting the first page in a way that visualizes the first recommended information, the electronic device can respond to this and in step S34, determine which of the first authentication method and the second authentication method has been used to complete the user authentication.
[0100] In step S34, if it is determined that user authentication has been completed based on the first authentication method, the electronic device proceeds to step S40, that is, transmitting the second page, including the second recommendation information, to the user terminal. Conversely, in step S34, if it is determined that user authentication has ended based on the second authentication method, the electronic device proceeds to step S50, that is, transmitting the gateway page. Therefore, it is unnecessary to recommend registering the second authentication information to users who have already used the second authentication information for authentication, thereby reducing the adverse impact on the user's user experience.
[0101] The above describes various embodiments of the advertising delivery method recommended in this invention.
[0102] In the flowcharts shown herein, program steps, method steps, and algorithms are described sequentially. However, these programs, methods, and algorithms can be configured to operate in any suitable order. In other words, the steps of the programs, methods, and algorithms described in the various embodiments of the present invention need not be performed in the order described in the present invention. Furthermore, even if some steps are described as not being performed simultaneously, such some steps may be performed simultaneously in other embodiments. Moreover, the examples of programs described in the figures do not imply that the illustrated programs exclude other variations and modifications, nor do they imply that any of the illustrated programs or their steps are essential to one or more embodiments of the present invention, nor do they imply that the illustrated programs are preferred programs.
[0103] Although the method described above has been illustrated with reference to specific embodiments, it can also be implemented as computer-readable code in a computer-readable recording medium. A computer-readable recording medium may include all types of recording devices storing data readable by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage devices, etc. Furthermore, the computer-readable recording medium is distributed across a computer system connected to a network, thereby enabling the distributed storage and execution of computer-readable code. Moreover, programmers in the art to which this invention pertains can readily deduce the functional programs, code, and code segments used to implement the above embodiments.
[0104] 100: System 110: Electronic devices 120: User Terminal 130: Seller Terminal 140: Internet 200: Computing device 210: Processor 220: Memory 230: Communication Interface Page 1 Page 2 P4: Gateway Page P30: Certification Information Selection Page P30': Page P31: Confirmation Page P32: Page P32': Page P33: Authentication Success Notification Page R1: Identifier Login Interface R2: Phone Number Login Interface R3: Recommended Interface R301: Second Authentication Information Selection Interface R301': Second Authentication Information Selection Interface R4: Interface R5: Trigger Interface R6: Settings Interface R11: Tag R21: Tag R31: Trigger Interface SS: Start S10: Steps S20: Steps S31: Steps S31': Steps S32: Steps S32': Steps S33: Steps S33': Steps S34: Steps S40: Steps S41: Steps S42: Steps S43: Steps S50: Steps SE: End
Claims
1. A method for providing a plurality of types of user authentication methods, implemented via an electronic device, wherein the plurality of types of user authentication methods include a first authentication method based on first authentication information and a second authentication method based on second authentication information, wherein the first authentication information and the second authentication information are set to be at least partially different, and each of the first authentication information and the second authentication information is set to include first data and second data, the method comprising the following steps: receiving a request for a first page from a user terminal, the first page including an input interface for inputting the first authentication information; determining whether at least a portion of the second authentication information exists in the electronic device; and, in response to the existence of at least a portion of the second authentication information in the electronic device, transmitting the first page to the user terminal, the first page being configured to visualize first recommendation information recommending the use of the second authentication method; In response to the absence of at least a portion of the second authentication information in the aforementioned electronic device, the first page is transmitted to the aforementioned user terminal, wherein the first page is configured to not visualize the first recommendation information; In response to user authentication being completed via the first page configured to not visualize the first recommendation information, a second page including second recommendation information is transmitted to the aforementioned user terminal, wherein the second recommendation information recommends transmitting at least a portion of the second authentication information to the aforementioned electronic device, wherein the second recommendation information includes a setting interface, wherein the setting interface is configured to not visualize the second recommendation information in the aforementioned user terminal within a preset period or a preset number of user authentications.
2. The method for providing a plurality of types of user authentication methods as described in Request 1, wherein the step of determining whether at least a portion of the second authentication information exists in the electronic device includes the following step: determining whether the device identification information of the user terminal exists in a list including device identification information of user terminals using the second authentication method.
3. The method for providing a plurality of types of user authentication methods as described in request item 1 further includes the following steps: In response to user authentication being completed via the first page configured to visualize the first recommendation information, determining which of the first authentication method and the second authentication method was used to complete the user authentication; In response to the determination that the user authentication was completed based on the first authentication method, transmitting the second page including the second recommendation information to the user terminal.
4. As in Request 1, the method of providing multiple types of user authentication methods, wherein the first data of the first authentication information includes at least one of an identifier, an email address, and a telephone number, and the second data of the first authentication information is the data that is unique among the first data of the first authentication information before completing user authentication based on the first authentication method.
5. As requested in item 1, the method of providing multiple types of user authentication methods, wherein the second authentication method is the following: used to unlock the lock mode set by the user terminal to only receive preset input.
6. As in request item 1, the method of providing multiple types of user authentication methods, wherein the first data of the second authentication information is data generated based on user input, and the second data of the second authentication information is data not generated based on user input.
7. As in request item 6, the method of providing multiple types of user authentication methods, wherein the first information of the second authentication information includes at least one of PIN and biometric information.
8. As in request item 7, the method of providing multiple types of user authentication methods, wherein the aforementioned biometric information includes at least one of fingerprint information, iris information, and facial recognition information.
9. As in request item 6, the method of providing multiple types of user authentication methods, wherein the second information of the second authentication information includes a public key and a private key.
10. The method for providing a plurality of types of user authentication methods as requested in claim 9 further includes the following steps: the electronic device receives the public key from the user terminal.
11. The method for providing multiple types of user authentication methods as described in claim 10 further includes the following steps: storing the public key in association with the device identification information of the user terminal.
12. The method of providing a plurality of types of user authentication methods as requested in Request 1, wherein the first recommendation information includes a trigger interface that triggers the display of the third page of the first data used to receive the second authentication information from the user on the user terminal, the method further includes the following steps: in response to the selection of the trigger interface, the third page of the first data used to receive the second authentication information is transmitted to the user terminal.
13. The method for providing a plurality of types of user authentication methods as described in claim 12, prior to the step of transmitting the third page to the user terminal, further includes the following steps: determining whether there are two or more different second authentication information for the user terminal in the electronic device; and in response to the existence of two or more different second authentication information for the user terminal in the electronic device, transmitting a second authentication information selection interface for the user to select any one of the two or more second authentication information.
14. The method of providing multiple types of user authentication methods as requested in Request 1, wherein the aforementioned first page includes a first authentication information selection input interface for users to select any one of two or more different first authentication information.
15. An electronic device comprising: One or more processors; and one or more memory stores commands executed by the one or more processors. The electronic device is configured such that, when the commands are executed by the one or more processors, the one or more processors perform the method as described in any one of claims 1 to 14.
16. A non-transitory computer-readable storage medium storing commands that, when executed by one or more processors, cause the one or more processors to perform actions, wherein the commands are configured to cause the one or more processors to perform any one of claims 1 to 14.
Citation Information
Patent Citations
Methods, devices, and equipment for pushing and displaying login methods
CN110032860B
Certificate application methods, devices, terminal equipment, gateway equipment, and servers
TWI732458B
Methods of authenticating users to a site
US9344419B2
