User authorization method and electronic device for performing same

Abstract

Disclosed are a user authorization method and an electronic device for performing the method. The electronic device according to various embodiments may comprise a processor and a memory electrically connected to the processor and storing instructions that can be executed by the processor. When the instructions are executed, the processor may instruct the electronic device to receive the security level of the login-requested service and user information from a terminal. The processor may instruct the electronic device to determine, on the basis of the security level and the user information, an authentication method for authenticating the user logged into the service. The processor may instruct the electronic device to transmit an authentication request to the terminal according to the determined authentication method.

Description

User authentication method and electronic device performing the method

[0001] The disclosure below relates to a user authentication method and an electronic device performing the method.

[0002] When a user logs into a service, application or client on an electronic device, the user is authenticated to the same extent and in the same manner, regardless of the type and purpose of the service, application or client, in a specific manner set by the user.

[0003] When logging into a service, application, or client, users can log in by entering their configured ID and password. Depending on the authentication method set for the service, application, or client, users can prove their identity and authenticate themselves through additional authentication methods, such as text authentication or biometric authentication, in addition to their ID and password.

[0004] The above information may be provided as background art to aid in understanding the present disclosure. No claim or determination is made as to whether any of the above is applicable as prior art related to the present disclosure.

[0005] An electronic device according to various embodiments may include a processor and a memory electrically coupled to the processor and storing instructions executable by the processor. When the instructions are executed, the processor may cause the electronic device to receive a security level and user information for a service for which a login request has been made from a terminal. The processor may determine an authentication method for authenticating a user who has logged into the service based on the security level and the user information. The processor may transmit an authentication request to the terminal based on the determined authentication method.

[0006] An electronic device according to various embodiments may include a processor and a memory electrically coupled to the processor and storing instructions executable by the processor. The processor, when the instructions are executed, may cause the electronic device to receive a security level and user information for a service for which a login request has been made from a terminal. The processor may calculate a user probability that the user is an actual user based on the user information. The processor may determine a first authentication method for authenticating a user who has logged in to the service based on the security level and the user probability. The processor may calculate an authentication probability that the user will be successfully authenticated based on the first authentication method. The processor may transmit an authentication request to the terminal based on a second authentication method different from the first authentication method when the authentication probability is less than a set first threshold. The processor may transmit an authentication request to the terminal based on the first authentication method when the authentication probability is equal to or greater than the set first threshold.

[0007] A user authentication method according to various embodiments may include an operation of receiving a security level and user information for a service for which a login request has been made from a terminal, an operation of determining an authentication method for authenticating a user logged into the service based on the security level and the user information, and an operation of transmitting an authentication request to the terminal based on the determined authentication method.

[0008] FIG. 1 is a block diagram of an electronic device within a network environment according to various embodiments.

[0009] FIG. 2 is a flowchart of operations of an electronic device according to various embodiments.

[0010] Figure 3 is a flowchart of a user authentication method according to various embodiments.

[0011] FIG. 4 is a flowchart illustrating an operation of an electronic device according to various embodiments to determine an authentication method based on a user probability.

[0012] FIG. 5 is a flowchart illustrating an operation of an electronic device according to various embodiments to determine an authentication method based on an authentication probability.

[0013] Figure 6 is a flowchart of an authentication method according to various embodiments.

[0014] FIG. 7 and FIG. 8 are flowcharts illustrating operations of an electronic device according to various embodiments to determine an external electronic device to perform an authentication method.

[0015] FIG. 9 is a flowchart illustrating an operation of an electronic device according to various embodiments to determine a second authentication method based on an authentication probability of a determined authentication method.

[0016] Figure 10a is a table showing the costs by company for performing the character authentication method.

[0017] FIG. 10b is a table showing the expected cost according to the authentication method calculated by the electronic device according to various embodiments.

[0018] Hereinafter, embodiments will be described in detail with reference to the attached drawings. In the description with reference to the attached drawings, identical components are assigned the same reference numerals regardless of the drawing numbers, and redundant descriptions thereof will be omitted.

[0019] In this document, each of the phrases "A or B", "at least one of A and B", "at least one of A or B", "A, B, or C", "at least one of A, B, and C", and "at least one of A, B, or C" may include any one of the items listed together in that phrase, or all possible combinations thereof.

[0020]

[0021] FIG. 1 is a block diagram of an electronic device (101) within a network environment (100) according to various embodiments. Referring to FIG. 1, in the network environment (100), the electronic device (101) may communicate with the electronic device (102) via a first network (198) (e.g., a short-range wireless communication network), or may communicate with at least one of the electronic device (104) or the server (108) via a second network (199) (e.g., a long-range wireless communication network). According to one embodiment, the electronic device (101) may communicate with the electronic device (104) via the server (108). According to one embodiment, the electronic device (101) may include a processor (120), a memory (130), an input module (150), an audio output module (155), a display module (160), an audio module (170), a sensor module (176), an interface (177), a connection terminal (178), a haptic module (179), a camera module (180), a power management module (188), a battery (189), a communication module (190), a subscriber identification module (196), or an antenna module (197). In some embodiments, the electronic device (101) may omit at least one of these components (e.g., the connection terminal (178)), or may have one or more other components added. In some embodiments, some of these components (e.g., the sensor module (176), the camera module (180), or the antenna module (197)) may be integrated into one component (e.g., the display module (160)).

[0022] The processor (120) may, for example, execute software (e.g., a program (140)) to control at least one other component (e.g., a hardware or software component) of the electronic device (101) connected to the processor (120) and perform various data processing or operations. According to one embodiment, as at least a part of the data processing or operations, the processor (120) may store commands or data received from other components (e.g., a sensor module (176) or a communication module (190)) in a volatile memory (132), process the commands or data stored in the volatile memory (132), and store result data in a non-volatile memory (134). According to one embodiment, the processor (120) may include a main processor (121) (e.g., a central processing unit or an application processor) or an auxiliary processor (123) (e.g., a graphics processing unit, a neural processing unit (NPU), an image signal processor, a sensor hub processor, or a communication processor) that can operate independently or together with the main processor (121). For example, when the electronic device (101) includes the main processor (121) and the auxiliary processor (123), the auxiliary processor (123) may be configured to use less power than the main processor (121) or to be specialized for a given function. The auxiliary processor (123) may be implemented separately from the main processor (121) or as a part thereof.

[0023] The auxiliary processor (123) may control at least a portion of functions or states associated with at least one component (e.g., a display module (160), a sensor module (176), or a communication module (190)) of the electronic device (101), for example, on behalf of the main processor (121) while the main processor (121) is in an inactive (e.g., sleep) state, or together with the main processor (121) while the main processor (121) is in an active (e.g., application execution) state. In one embodiment, the auxiliary processor (123) (e.g., an image signal processor or a communication processor) may be implemented as a part of another functionally related component (e.g., a camera module (180) or a communication module (190)). In one embodiment, the auxiliary processor (123) (e.g., a neural network processing unit) may include a hardware structure specialized for processing artificial intelligence models. The artificial intelligence models may be generated through machine learning. This learning can be performed, for example, on the electronic device (101) itself where the artificial intelligence model is executed, or can be performed through a separate server (e.g., server (108)). The learning algorithm can include, for example, supervised learning, unsupervised learning, semi-supervised learning, or reinforcement learning, but is not limited to the examples described above. The artificial intelligence model can include multiple artificial neural network layers.The artificial neural network may be one of a deep neural network (DNN), a convolutional neural network (CNN), a recurrent neural network (RNN), a restricted Boltzmann machine (RBM), a deep belief network (DBN), a bidirectional recurrent deep neural network (BRDNN), a deep Q-network, or a combination of two or more of the above, but is not limited to the examples described above. In addition to, or alternatively to, a hardware structure, an artificial intelligence model may include a software structure.

[0024] The memory (130) can store various data used by at least one component (e.g., processor (120) or sensor module (176)) of the electronic device (101). The data can include, for example, software (e.g., program (140)) and input data or output data for commands related thereto. The memory (130) can include volatile memory (132) or non-volatile memory (134).

[0025] The program (140) may be stored as software in the memory (130) and may include, for example, an operating system (142), middleware (144), or an application (146).

[0026] The input module (150) can receive commands or data to be used in a component of the electronic device (101) (e.g., a processor (120)) from an external source (e.g., a user) of the electronic device (101). The input module (150) can include, for example, a microphone, a mouse, a keyboard, a key (e.g., a button), or a digital pen (e.g., a stylus pen).

[0027] The audio output module (155) can output audio signals to the outside of the electronic device (101). The audio output module (155) can include, for example, a speaker or a receiver. The speaker can be used for general purposes, such as multimedia playback or recording playback. The receiver can be used to receive incoming calls. In one embodiment, the receiver can be implemented separately from the speaker or as part of the speaker.

[0028] The display module (160) can visually provide information to an external party (e.g., a user) of the electronic device (101). The display module (160) may include, for example, a display, a holographic device, or a projector and a control circuit for controlling the device. According to one embodiment, the display module (160) may include a touch sensor configured to detect a touch, or a pressure sensor configured to measure the intensity of a force generated by the touch.

[0029] The audio module (170) can convert sound into an electrical signal, or vice versa, convert an electrical signal into sound. According to one embodiment, the audio module (170) can acquire sound through the input module (150), output sound through the sound output module (155), or an external electronic device (e.g., electronic device (102)) (e.g., speaker or headphone) directly or wirelessly connected to the electronic device (101).

[0030] The sensor module (176) can detect the operating status (e.g., power or temperature) of the electronic device (101) or the external environmental status (e.g., user status) and generate an electrical signal or data value corresponding to the detected status. According to one embodiment, the sensor module (176) can include, for example, a gesture sensor, a gyro sensor, a barometric pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an IR (infrared) sensor, a biometric sensor, a temperature sensor, a humidity sensor, or an illuminance sensor.

[0031] The interface (177) may support one or more designated protocols that may be used to directly or wirelessly connect the electronic device (101) with an external electronic device (e.g., the electronic device (102)). In one embodiment, the interface (177) may include, for example, a high definition multimedia interface (HDMI), a universal serial bus (USB) interface, an SD card interface, or an audio interface.

[0032] The connection terminal (178) may include a connector through which the electronic device (101) may be physically connected to an external electronic device (e.g., electronic device (102)). According to one embodiment, the connection terminal (178) may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (e.g., a headphone connector).

[0033] The haptic module (179) can convert electrical signals into mechanical stimuli (e.g., vibration or movement) or electrical stimuli that a user can perceive through tactile or kinesthetic sensations. According to one embodiment, the haptic module (179) can include, for example, a motor, a piezoelectric element, or an electrical stimulation device.

[0034] The camera module (180) can capture still images and moving images. According to one embodiment, the camera module (180) may include one or more lenses, image sensors, image signal processors, or flashes.

[0035] The power management module (188) can manage power supplied to the electronic device (101). According to one embodiment, the power management module (188) can be implemented as, for example, at least a part of a power management integrated circuit (PMIC).

[0036] A battery (189) may power at least one component of the electronic device (101). In one embodiment, the battery (189) may include, for example, a non-rechargeable primary battery, a rechargeable secondary battery, or a fuel cell.

[0037] The communication module (190) may support the establishment of a direct (e.g., wired) communication channel or a wireless communication channel between the electronic device (101) and an external electronic device (e.g., electronic device (102), electronic device (104), or server (108)), and the performance of communication through the established communication channel. The communication module (190) may operate independently from the processor (120) (e.g., application processor) and may include one or more communication processors that support direct (e.g., wired) communication or wireless communication. According to one embodiment, the communication module (190) may include a wireless communication module (192) (e.g., a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module (194) (e.g., a local area network (LAN) communication module, or a power line communication module). Among these communication modules, the corresponding communication module can communicate with an external electronic device (104) via a first network (198) (e.g., a short-range communication network such as Bluetooth, wireless fidelity (WiFi) direct, or infrared data association (IrDA)) or a second network (199) (e.g., a long-range communication network such as a legacy cellular network, a 5G network, a next-generation communication network, the Internet, or a computer network (e.g., a LAN or WAN)). These various types of communication modules can be integrated into a single component (e.g., a single chip) or implemented as multiple separate components (e.g., multiple chips). The wireless communication module (192) can verify or authenticate the electronic device (101) within a communication network such as the first network (198) or the second network (199) by using subscriber information (e.g., an international mobile subscriber identity (IMSI)) stored in the subscriber identification module (196).

[0038] The wireless communication module (192) can support 5G networks and next-generation communication technologies following the 4G network, such as NR access technology (new radio access technology). The NR access technology can support high-speed transmission of high-capacity data (eMBB (enhanced mobile broadband)), minimization of terminal power and connection of multiple terminals (mMTC (massive machine type communications)), or high reliability and low latency (URLLC (ultra-reliable and low-latency communications)). The wireless communication module (192) can support, for example, a high-frequency band (e.g., mmWave band) to achieve a high data transmission rate. The wireless communication module (192) can support various technologies for securing performance in a high-frequency band, such as beamforming, massive multiple-input and multiple-output (MIMO), full dimensional MIMO (FD-MIMO), array antenna, analog beam-forming, or large scale antenna. The wireless communication module (192) can support various requirements specified in the electronic device (101), an external electronic device (e.g., the electronic device (104)), or a network system (e.g., the second network (199)). According to one embodiment, the wireless communication module (192) can support a peak data rate (e.g., 20 Gbps or more) for eMBB realization, a loss coverage (e.g., 164 dB or less) for mMTC realization, or a U-plane latency (e.g., 0.5 ms or less for downlink (DL) and uplink (UL), or 1 ms or less for round trip) for URLLC realization.

[0039] The antenna module (197) can transmit or receive signals or power to or from an external device (e.g., an external electronic device). In one embodiment, the antenna module (197) may include an antenna including a radiator formed of a conductor or a conductive pattern formed on a substrate (e.g., a PCB). In one embodiment, the antenna module (197) may include a plurality of antennas (e.g., an array antenna). In this case, at least one antenna suitable for a communication method used in a communication network, such as the first network (198) or the second network (199), may be selected from the plurality of antennas, for example, by the communication module (190). A signal or power may be transmitted or received between the communication module (190) and an external electronic device via the at least one selected antenna. In some embodiments, in addition to the radiator, another component (e.g., a radio frequency integrated circuit (RFIC)) may be additionally formed as a part of the antenna module (197).

[0040] According to various embodiments, the antenna module (197) may form a mmWave antenna module. In one embodiment, the mmWave antenna module may include a printed circuit board, an RFIC disposed on or adjacent a first side (e.g., a bottom side) of the printed circuit board and capable of supporting a designated high-frequency band (e.g., a mmWave band), and a plurality of antennas (e.g., an array antenna) disposed on or adjacent a second side (e.g., a top side or a side side) of the printed circuit board and capable of transmitting or receiving signals in the designated high-frequency band.

[0041] At least some of the above components can be interconnected and exchange signals (e.g., commands or data) with each other via a communication method between peripheral devices (e.g., a bus, GPIO (general purpose input and output), SPI (serial peripheral interface), or MIPI (mobile industry processor interface)).

[0042] According to one embodiment, commands or data may be transmitted or received between the electronic device (101) and an external electronic device (104) via a server (108) connected to a second network (199). Each of the external electronic devices (102 or 104) may be the same or a different type of device as the electronic device (101). According to one embodiment, all or part of the operations executed in the electronic device (101) may be executed in one or more of the external electronic devices (102, 104, or 108). For example, when the electronic device (101) is to perform a certain function or service automatically or in response to a request from a user or another device, the electronic device (101) may, instead of or in addition to executing the function or service itself, request one or more external electronic devices to perform the function or at least a part of the service. One or more external electronic devices that receive the request may execute at least a portion of the requested function or service, or an additional function or service related to the request, and transmit the result of the execution to the electronic device (101). The electronic device (101) may process the result as is or additionally and provide it as at least a portion of a response to the request. For this purpose, cloud computing, distributed computing, mobile edge computing (MEC), or client-server computing technology may be used, for example. The electronic device (101) may provide an ultra-low latency service by using distributed computing or mobile edge computing, for example. In another embodiment, the external electronic device (104) may include an Internet of Things (IoT) device. The server (108) may be an intelligent server utilizing machine learning and / or a neural network. According to one embodiment, the external electronic device (104) or the server (108) may be included in the second network (199).The electronic device (101) can be applied to intelligent services (e.g., smart home, smart city, smart car, or healthcare) based on 5G communication technology and IoT-related technology.

[0043]

[0044] FIG. 2 is a flowchart illustrating an operation of an electronic device (e.g., the electronic device (101) of FIG. 1) according to various embodiments.

[0045] In the following FIGS. 2, 7, 8, and 9, the electronic device (101) is illustrated as including an authentication device (201) and an optimization device (202), but this is for convenience of explanation and is not limited to the embodiments illustrated in FIGS. 2, 7, 8, and 9. For example, operations performed by the authentication device (201) and the optimization device (202) may be substantially identically performed by the processor of the electronic device (101) (e.g., the processor (120) of FIG. 2).

[0046] In the following examples, the operations may be performed sequentially, but are not necessarily sequential. For example, the order of the operations may be changed, and at least two operations may be performed in parallel.

[0047] According to one embodiment, operations (205) to (255) may be understood to be performed in a processor (120) of an electronic device (101) (e.g., the electronic device (101) of FIG. 1).

[0048] Referring to FIG. 2, an electronic device (101) according to one embodiment may include an authentication device (201) and an optimization device (202). In FIG. 2, a user (300) may be understood to be substantially identical to a terminal that receives input from a user (300) or provides information.

[0049] For example, a user (300) may send a login request to a service (400) in operation (205). For example, the service (400) may include an application, a client, or a web browser. The service (400) may include devices, software, or programs for providing content and / or functions to the user (300).

[0050] For example, the service (400) may transmit a user (300) authentication request and security level to the authentication device (201) in operation (210). The service (400) may transmit a security level for the service (400) to the authentication device (201).

[0051] For example, the authentication device (201) may transmit an ID input request to the user (300) in operation (215).

[0052] For example, a user (300) can input an ID and transmit user (300) information in operation (220).

[0053] For example, the authentication device (201) can verify the validity of an ID in operation (225). For example, the operation of verifying the validity of an ID may include an operation of verifying whether the ID is registered for the service (400) and an operation of verifying whether the ID is entered in a valid character or format.

[0054] If the ID is determined to be valid in operation (225), the authentication device (201) may perform operation (230). If the ID is determined to be invalid in operation (225), the authentication device (201) may retransmit an ID input request to the user (300) according to operation (215).

[0055] For example, the authentication device (201) can transmit user (300) information to the optimization device (202) in operation (230). The authentication device (201) can transmit the ID and security level for the service (400) received in operation (230) to the optimization device (202).

[0056] For example, the optimization device (202) may determine an authentication method in operation (235). For example, the optimization device (202) may determine an authentication method for authenticating a user (300) logged into the service (400) based on a security level and user (300) information.

[0057] For example, the optimization device (202) can transmit the authentication method determined in operation (240) to the authentication device (201).

[0058] For example, the authentication device (201) may transmit the authentication method determined in operation (245) to the user (300). For example, the authentication device (201) may transmit information, control signals, or commands to the terminal for performing an operation for performing the determined authentication method.

[0059] For example, the user (300) can perform authentication according to the authentication method received in operation (250).

[0060] For example, if the authentication of the user (300) according to the operation (250) is determined to be valid, the authentication device (201) may transmit the authentication to the service (400) in the operation (255). For example, the authentication device (201) transmitting the authentication to the service (400) in the operation (255) may indicate that the user (300) is authenticated as a user (300) registered in the electronic device (101).

[0061]

[0062] Figure 3 is a flowchart of a user authentication method according to various embodiments.

[0063] In the following examples, the operations may be performed sequentially, but are not necessarily sequential. For example, the order of the operations may be changed, and at least two operations may be performed in parallel.

[0064] According to one embodiment, operations (310) to (340) may be understood to be performed in a processor (120) (e.g., processor (120) of FIG. 1) of an electronic device (101) (e.g., electronic device (101) of FIGS. 1 and 2).

[0065] For example, the electronic device (101) can receive a security level and user information for a service (400) requested for login from the terminal in operation (310).

[0066] For example, the electronic device (101) can identify an authentication method that can be requested from the terminal in operation (320). The authentication method that can be requested from the terminal can be determined based on the type of the terminal, the configuration of the terminal, the service (400), and / or the authentication method supported by the terminal.

[0067] For example, the electronic device (101) may determine an authentication method for authenticating a user logged into the service (400) based on the security level and user information in operation (330).

[0068] For example, the electronic device (101) can determine an authentication method based on a security level and user information, thereby utilizing information that can determine the security level of the service (400) (or client) and the identity of the actual user, and thereby determine an authentication method at a minimum level and in a manner that satisfies the security level set for the service (400) (or client). By determining an authentication method based on a security level and user information, the electronic device (101) can optimize usability while simultaneously optimizing the authentication success rate and cost.

[0069] For example, the electronic device (101) may transmit an authentication request to the terminal according to the authentication method determined in operation (340).

[0070]

[0071] FIG. 4 is a flowchart illustrating an operation of an electronic device (e.g., the electronic device (101) of FIG. 1 and FIG. 2) according to various embodiments to determine an authentication method based on a user probability.

[0072] For example, after operation (320) of FIG. 3, the electronic device (101) can calculate the probability that the user is an actual user based on the user information in operation (410).

[0073] For example, the electronic device (101) can calculate the user probability (or trust level) according to the mathematical expression 1 below.

[0074]

[0075] In mathematical equation 1, is the source IP address, whether there is a consecutive login failure or the number of consecutive login failures, is geo-fence info., may indicate a wearable device connection status (e.g., BLE (Bluetooth low energy)). , , , can represent a weight for each element (e.g., source IP address, consecutive login failures, geofence information, wearable device connection status).

[0076] The above mathematical expression 1 is an example for calculating the user probability, and the electronic device (101) is not limited to the above mathematical expression 1 and can calculate the user probability.

[0077] For example, elements for calculating user probability may include geo-location, geo-velocity, attempted action, entity type, version or type of operating system, and client version.

[0078] For example, the electronic device (101) can determine an authentication method based on a user probability that the user is an actual user, calculated based on user information.

[0079] For example, the electronic device (101) may compare the user probability with a set threshold in operation (420).

[0080] For example, if it is determined that the user probability exceeds the threshold value in operation (420), the electronic device (101) may determine an authentication method as an authentication method corresponding to a security level lower than the security level for the service (400) in operation (430).

[0081] For example, if the user probability is determined to be below the threshold value in operation (420), the electronic device (101) may determine an authentication method as an authentication method corresponding to a security level higher than the security level for the service (400) in operation (440).

[0082] For example, if the user probability is determined to be below the threshold value in operation (420), the electronic device (101) may determine an authentication method corresponding to the security level for the service (400).

[0083] After operation (430) or operation (440), the electronic device (101) can perform operation (340) of FIG. 3.

[0084] Table 1 below shows the security level and degree of security for each authentication method.

[0085]

[0086] In Table 1 above, the security level for each authentication method is exemplary, and the security level for each authentication method may be set differently from Table 1. Even if an authentication method is not listed in Table 1, a security level for that authentication method may be set.

[0087] For example, the electronic device (101) can determine an authentication method based on a security level set for each service (e.g., service (400) of FIG. 2). Since the security level is set based on the service (400), the electronic device (101) can perform user authentication based on a minimal or optimized authentication method while complying with the security level.

[0088] For example, the security level for a service (400) may be determined based on the content, functions, and / or the extent of damage caused by information leakage provided by the service (400). For example, a service (400) that provides financial functions may be assigned a high security level due to the significant damage caused by information leakage. For example, a service (400) that provides functions related to product sales inquiry records and thus has a low risk of information leakage may be assigned a low security level.

[0089] For example, when the security level for a service (400) is 6, an operation of an electronic device (101) determining an authentication method based on a user probability and a threshold value is described. For example, when the user probability exceeds the threshold value, the electronic device (101) may determine an authentication method (e.g., hardware OTP token, SMS password) corresponding to a security level (e.g., 4, 5) lower than the security level 6 for the service (400) in operation (430).

[0090] For example, if the user probability is below a threshold, the electronic device (101) may determine an authentication method (e.g., biometric, U2F, and WebAuthn security key) corresponding to a security level higher than security level 6 (e.g., 7, 8) for the service (400) in operation (440) as the authentication method.

[0091] For example, if the user probability is below a threshold, the electronic device (101) may determine an authentication method (e.g., software OTP token, push notification) corresponding to security level 6 for the service (400) in operation (440).

[0092] Existing methods for performing user authentication require the same security level and / or authentication method regardless of the degree of damage caused by the function, content, and / or information leak provided by the service (400), so that users have to perform unnecessary authentication procedures. An electronic device (101) according to various embodiments can improve and / or enhance the user experience by determining an authentication method in consideration of the security level of the service (400). An electronic device (101) according to various embodiments can improve and / or enhance the user experience by determining an authentication method in consideration of the user probability.

[0093]

[0094] FIG. 5 is a flowchart illustrating an operation of an electronic device (e.g., the electronic device (101) of FIG. 1 and FIG. 2) according to various embodiments to determine an authentication method based on an authentication probability.

[0095] For example, after operation (330) of FIG. 3, the electronic device (101) can calculate the authentication probability that user authentication will be successful according to the authentication method determined in operation (510).

[0096] For example, the electronic device (101) can calculate an authentication probability using user information, terminal information (e.g., terminal type, location), terminal communication status, type of authentication method, and past authentication success rate. The elements for calculating the above authentication probability are exemplary and are not limited to the examples described above.

[0097] For example, the electronic device (101) can compare the authentication probability with a set threshold value in operation (520).

[0098] For example, if it is determined that the authentication probability exceeds the threshold value in operation (520), the electronic device (101) may transmit an authentication request to the terminal according to the authentication method determined in operation (530).

[0099] For example, if it is determined in operation (520) that the authentication probability is less than or equal to the threshold value, the electronic device (101) may determine an authentication method corresponding to a security level higher than or equal to the security level corresponding to the authentication method determined in operation (540) as the second authentication method.

[0100] For example, the authentication probability according to the second authentication method may be higher than the authentication probability and / or threshold of the determined authentication method.

[0101] For example, the electronic device (101) may transmit an authentication request to the terminal according to the second authentication method in operation (550).

[0102] If the authentication probability according to the determined authentication method is below the threshold, there is a high probability that user authentication will not be successfully completed even if user authentication is performed according to the determined authentication method. As shown in FIG. 5, if the authentication probability according to the determined authentication method is below the threshold, the electronic device (101) can perform user authentication according to a second authentication method different from the determined authentication method, thereby increasing the probability of successful user authentication.

[0103] The electronic device (101) can satisfy the security level required by the service (e.g., the service (400) of FIG. 2) by performing user authentication according to a second authentication method corresponding to a security level higher than the security level of the determined authentication method.

[0104]

[0105] Figure 6 is a flowchart of an authentication method according to various embodiments.

[0106] In the following examples, the operations may be performed sequentially, but are not necessarily sequential. For example, the order of the operations may be changed, and at least two operations may be performed in parallel.

[0107] According to one embodiment, operations (610) to (680) may be understood to be performed in a processor (e.g., processor (120) of FIG. 1) of an electronic device (e.g., electronic device (101) of FIGS. 1 and 2).

[0108] For example, the electronic device (101) can receive a security level and user information for a service (400) requested for login from the terminal in operation (610).

[0109] For example, the electronic device (101) can identify an authentication method that can be requested from the terminal in operation (620).

[0110] With respect to the operations (610) and (620) of FIG. 6, the descriptions regarding the operations (310) and (320) of FIG. 3 can be applied substantially identically.

[0111] For example, the electronic device (101) can calculate the probability that the user is an actual user based on the user information in operation (630).

[0112] For example, the electronic device (101) can calculate the user probability by using the sum of the weights multiplied by the elements for calculating the user probability, as in the mathematical expression 1 above.

[0113] For example, the electronic device (101) may determine a first authentication method for authenticating a user logged into the service (400) based on the security level and user probability in operation (640).

[0114] For example, if the user probability exceeds the set second threshold, the electronic device (101) may determine an authentication method corresponding to a security level lower than the security level for the service (400) as the first authentication method.

[0115] For example, if the user probability is less than or equal to the set second threshold, the electronic device (101) may determine an authentication method corresponding to a security level higher than the security level for the service (400) as the first authentication method.

[0116] For example, the electronic device (101) can calculate the authentication probability that user authentication will be successful according to the first authentication method in operation (650).

[0117] For example, the electronic device (101) can compare the authentication probability with a first threshold value in operation (660).

[0118] For example, the electronic device (101) can calculate an authentication probability according to the first authentication method by using information such as the first authentication method, terminal information (e.g., terminal type, type, performance), terminal communication status, past authentication performance history, user information, and terminal location.

[0119] For example, if it is determined that the authentication probability exceeds the first threshold value in operation (660), the electronic device (101) may transmit an authentication request to the terminal according to the first authentication method in operation (670).

[0120] For example, if it is determined that the authentication probability is less than or equal to the first threshold value in operation (660), the electronic device (101) may transmit an authentication request to the terminal according to a second authentication method different from the first authentication method in operation (680).

[0121]

[0122] FIG. 7 and FIG. 8 are flowcharts illustrating operations of an electronic device (e.g., the electronic device (101) of FIG. 1 and FIG. 2) according to various embodiments to determine an external electronic device to perform an authentication method.

[0123] In the following examples, the operations may be performed sequentially, but are not necessarily sequential. For example, the order of the operations may be changed, and at least two operations may be performed in parallel.

[0124] According to one embodiment, operations (705) to (760) of FIG. 7 and operations (805) to (830) of FIG. 8 may be understood to be performed in a processor (e.g., processor (120) of FIG. 1) of an electronic device (e.g., electronic device (101) of FIG. 1, FIG. 2).

[0125] The following FIGS. 7 and 8 can be understood as examples of operations performed after operation (330) of FIG. 3 when the authentication method determined in operation (330) of FIG. 3 is a character authentication method.

[0126] In addition, FIGS. 7 and 8 can be understood as examples of operations performed after operation (640) of FIG. 6 when the first authentication method determined in operation (640) of FIG. 6 is a character authentication method.

[0127] Referring to FIG. 7, an electronic device (101) according to one embodiment may determine an external electronic device to perform an authentication method based on an authentication probability and a cost according to a determined authentication method.

[0128] For example, the terminal (501) may transmit a phone number authentication request to the authentication device (201) of the electronic device (101) in operation (705).

[0129] For example, the authentication device (201) can transmit user information and an authentication code to the optimization device (202) in operation (710).

[0130] For example, the optimization device (202) may determine an external electronic device to perform the authentication method in operation (715). For example, the optimization device (202) may determine an external electronic device (e.g., a telecommunications company, a vendor) to perform the character authentication method based on a split ratio in operation (715).

[0131] For example, the optimization device (202) can determine the distribution ratio of an external electronic device that will perform the authentication method as in the following mathematical expression 2.

[0132]

[0133] In the above mathematical expression 2, K may represent the total number of external electronic devices, k may represent the index of the external electronic device, n may represent the date index, and N may represent the total date to be predicted.

[0134] In the above mathematical formula 2, is the expected total number of SMS needed on day n, is the split ratio of vendor k on day n, is the expected success ratio of vendor k on day n, may represent the expected SMS cost per SMS of vendor k.

[0135] For example, the above mathematical expression 1 is a constraint , can be calculated according to the above constraints is a constraint for calculating SMS success rate, and constraint may be a constraint to limit abrupt changes in the distribution rate. The constants of the constraints may be determined according to the settings.

[0136] The above mathematical expression 2 represents the authentication probability of each external electronic device (e.g., the expected success rate of external electronic device k on date n). ), the cost of performing the authentication method (e.g. ( ), while minimizing the authentication success rate (e.g. ) to maximize the distribution rate (e.g. ) can be expressed as an equation for determining .

[0137] The electronic device (101) can determine a distribution rate to minimize the cost according to the authentication method while maximizing the authentication success rate (or success rate, authentication probability) using the above mathematical expression 2. Depending on the distribution rate, an external electronic device for performing the authentication method can be determined.

[0138] The optimization device (202) can determine a distribution rate with the highest success rate and the lowest cost based on the SMS transmission success rate of each external electronic device (e.g., external electronic device 1 (502-1), external electronic device 2 (502-2)) monitored in real time in operation (715) and the cost per SMS for each external electronic device.

[0139] For example, the optimization device (202) may transmit an authentication request and an authentication code to the external electronic device 1 (502-1) in operation (720). Operation (720) of FIG. 7 is an example of a case in which the optimization device (202) determines the external electronic device to perform the authentication method as the external electronic device 1 (502-1) based on the distribution ratio (or authentication probability and cost) determined in operation (715).

[0140] For example, external electronic device 1 (502-1) can transmit an authentication code to terminal (501) in operation (730).

[0141] For example, the terminal (501) can transmit the authentication code entered in operation (735) to the authentication device (201). For example, the terminal (501) can receive the authentication code from the user.

[0142] For example, external electronic device 1 (502-1) may transmit an authentication status to the optimization device (202) in operation (740). For example, the authentication status may include whether SMS transmission was successful.

[0143] For example, the optimization device (202) can verify the validity of the received authentication code in operation (745). For example, the optimization device (202) can receive the authentication code from the authentication device (201).

[0144] For example, the optimization device (202) may update the success rate in operation (755). For example, the success rate may represent an authentication probability for external electronic device 1 (502-1).

[0145] For example, the optimization device (202) can update the distribution rate in operation (760). For example, the optimization device (202) can update the distribution rate according to Equation 2 above using the success rate updated in operation (755). For example, the optimization device (202) can update the distribution rate according to operation (760) at set intervals.

[0146]

[0147] Operations (805) to (830) illustrated in FIG. 8 are examples of operations performed by the electronic device (101) after operation (730) of FIG. 7. For example, in operation (730) of FIG. 7, if external electronic device 1 (502-1) fails to transmit an authentication code to terminal (501), the electronic device (101) may perform operations (805) to (830) of FIG. 8.

[0148] For example, external electronic device 1 (502-1) may transmit an authentication failure in operation (805). For example, the authentication failure may indicate a failure to deliver an SMS to the terminal (501).

[0149] For example, the optimization device (202) may determine an external electronic device in operation (810). For example, the optimization device (202) may determine an external electronic device to perform an authentication method based on an authentication probability and a cost according to the authentication method. For example, the optimization device (202) may determine a distribution ratio that minimizes the cost and maximizes the authentication probability, as shown in Equation 2. The optimization device (202) may determine an external electronic device based on the determined distribution ratio.

[0150] As shown in FIG. 8, if external electronic device 1 (502-1) fails to transmit a text message to terminal (501), the optimization device (202) can determine an external electronic device to perform the authentication method according to the distribution ratio among the remaining external electronic devices excluding external electronic device 1 (502-1) in operation (810). Operation (810) of FIG. 8 illustrates an example in which the external electronic device to perform the authentication method is determined to be external electronic device 2 (502-2).

[0151] For example, the optimization device (202) can transmit an authentication request and authentication code to an external electronic device 2 (502-2) in operation (815).

[0152] For example, external electronic device 2 (502-2) can transmit an authentication code to terminal (501) in operation (820).

[0153] For example, the terminal (501) can transmit the authentication code entered in operation (825) to the authentication device (201).

[0154] For example, external electronic device 2 (502-2) can transmit the authentication status to the optimization device (202) in operation (830).

[0155] With respect to the above operations (815), (820), (825), and (830), the descriptions of operations (720), (730), (735), and (740) of FIG. 7 can be substantially equally applied.

[0156]

[0157] FIG. 9 is a flowchart illustrating an operation of an electronic device (e.g., the electronic device (101) of FIG. 1, FIG. 2, FIG. 7, and FIG. 8) according to various embodiments to determine a second authentication method based on an authentication probability of a determined authentication method.

[0158] Referring to FIG. 9, an electronic device (101) according to one embodiment can calculate an authentication probability of successful user authentication based on a determined authentication method. The electronic device (101) can compare the authentication probability with a set threshold value and perform user authentication using a second authentication method different from the determined authentication method.

[0159] The following FIG. 9 can be understood as an example of an operation performed after the operation (330) of FIG. 3 when the authentication method determined in the operation (330) of FIG. 3 is a character authentication method.

[0160] In addition, FIG. 9 can be understood as an example of an operation performed after operation (640) of FIG. 6 when the first authentication method determined in operation (640) of FIG. 6 is a character authentication method.

[0161] For example, the terminal (501) may transmit a phone number authentication request to the authentication device (201) in operation (905).

[0162] For example, the authentication device (201) can transmit user information and an authentication code to the optimization device (202) in operation (910).

[0163] For example, the optimization device (202) can determine the external electronic device in operation (915).

[0164] With respect to actions (905), (910), and (915), the descriptions of actions (705), (710), and (715) of FIG. 7 can be substantially equally applied.

[0165] For example, the optimization device (202) can calculate the authentication probability in operation (920). For example, if the external electronic device k is determined as the external electronic device to perform the authentication method according to the distribution ratio in operation (915), the authentication probability is calculated as in the mathematical expression 2 above. can be expressed.

[0166] In the case where the authentication method (or first authentication method) determined in operation (920) of FIG. 9 is a character authentication method (or SMS authentication method, SMS password), the operation of the optimization device (202) calculating the authentication probability is shown, but is not limited thereto.

[0167] For example, even if the determined authentication method is a different authentication method from the character authentication method, such as a push notification, email link, or QR code, the optimization device (202) can calculate the authentication probability according to the authentication method.

[0168] For example, the optimization device (202) can calculate the authentication probability according to the authentication method by considering factors such as the past authentication success rate according to the authentication method, the location of the terminal (501), the communication status of the terminal (501), and information of the terminal (501).

[0169] For example, the optimization device (202) may determine a second authentication method if the authentication probability is less than a set threshold. For example, the security level corresponding to the second authentication method may be higher than or equal to the security level corresponding to the determined authentication method (or the first authentication method). For example, the second authentication method may be a different authentication method from the determined authentication method (or the first authentication method), and the authentication probability according to the second authentication method may be higher than or equal to the authentication probability (or threshold) according to the determined authentication method (or the first authentication method).

[0170] For example, the optimization device (202) may request the authentication device (201) to perform a second authentication method in operation (925). The optimization device (202) may transmit a request to the authentication device (201) to perform user authentication according to a second authentication method different from the authentication method determined in operation (925).

[0171] For example, the authentication device (201) may determine a second authentication method in operation (930). For example, the authentication device (201) may determine the second authentication method as an authentication method for performing user authentication. The authentication device (201) may transmit an authentication request to the terminal (501) according to the second authentication method.

[0172] As illustrated in FIG. 9, if the probability of authentication success (e.g., authentication probability) according to the determined authentication method (or the first authentication method) is less than a set threshold, the electronic device (101) may perform user authentication using a second authentication method different from the determined authentication method, since there is a high probability that authentication will fail even if the user authentication is performed using the determined authentication method. By performing user authentication using the second authentication method, the electronic device (101) may reduce and / or improve user inconvenience and reduce the cost of performing user authentication.

[0173]

[0174] The following Figures 10a and 10b are examples of tables illustrating an operation of an electronic device (101) calculating a distribution ratio according to the above mathematical expression 2 when performing authentication according to a character authentication method.

[0175] Figure 10a is a table showing the costs by company for performing the character authentication method.

[0176] In FIG. 10a, table (1010) shows the SMS cost per case (Price of table (1010)) according to the total number of SMS (No. of SMS of table (1010)) of external electronic device 1 (e.g., external electronic device 1 (502-1) of FIG. 7, FIG. 8, FIG. 9) (or vendor 1). In FIG. 10a, table (1020) shows the SMS cost per case (Price of table (1020)) according to the total number of SMS (No. of SMS of table (1020)) of external electronic device 2 (e.g., external electronic device 2 (502-2) of FIG. 7, FIG. 8, FIG. 9) (or vendor 2).

[0177] FIG. 10b is a table (1030) showing expected costs according to authentication methods calculated by an electronic device (e.g., the electronic device (101) of FIGS. 1, 2, 7, 8, and 9) according to various embodiments.

[0178] The electronic device (101) can use past data to determine the future distribution rate. For example, in FIG. 10b, the electronic device (101) can use past data (e.g., the total number of SMS from Days 15 to 21) to determine the future distribution rate. , distribution rate , success rate (or authentication probability) , number of SMS , monthly cost ) to obtain future data (or distribution rate) (e.g. total number of SMS from Days 22 to 30) , distribution rate , success rate (or authentication probability) , number of SMS , monthly cost , total cost) can be predicted.

[0179] Electronic devices (101) monthly cost Alternatively, a distribution rate that minimizes the total cost can be determined. The electronic device (101) can determine an external electronic device to perform the authentication method based on the determined distribution rate.

[0180] The above-described FIGS. 10a and 10b illustrate a table regarding an operation of an electronic device (101) to determine an external electronic device to perform an authentication method by considering cost and authentication probability when the authentication method is a character authentication method, but is not limited thereto.

[0181] For example, even if it is an authentication method other than a character authentication method, if the authentication method is performed by one of a plurality of external electronic devices and a cost is incurred to perform the authentication, the electronic device (101) can determine the external electronic device to perform the authentication method based on the cost and authentication probability.

[0182] In Figures 10a and 10b, the total number of past SMS is used to determine the distribution rate (or external electronic device). , distribution rate , success rate (or authentication probability) , number of SMS , monthly cost An example of determining a future distribution rate (or external electronic device) using the method is shown, but is not limited thereto. For example, the electronic device (101) may determine an external electronic device by considering factors that affect the success rate (or authentication probability) among the success rate (or authentication probability) of a past authentication method, information about the terminal, information about the user, information about the authentication method, and information about the external electronic device.

[0183]

[0184] An electronic device (e.g., the electronic device (101) of FIGS. 1, 2, 7, 8, and 9) according to various embodiments may include a processor (e.g., the processor (120) of FIG. 1) and a memory (e.g., the memory (130) of FIG. 1) electrically coupled to the processor (120) and storing instructions executable by the processor (120). When the instructions are executed, the processor (120) may cause the electronic device (101) to receive a security level and user information for a service (e.g., the service (400) of FIG. 2) requested to be logged in from a terminal. The processor (120) may determine an authentication method for authenticating a user who has logged in to the service (400) based on the security level and the user information. The processor (120) may transmit an authentication request to the terminal according to the determined authentication method.

[0185] The above processor (120) may determine the authentication method based on the probability that the user is an actual user calculated based on the user information.

[0186] The processor (120) may determine the authentication method as an authentication method corresponding to a security level lower than the security level for the service (400) when the user probability is equal to or greater than a set threshold value. The processor (120) may determine the authentication method as an authentication method corresponding to a security level higher than the security level for the service (400) when the user probability is less than the threshold value.

[0187] The above processor (120) can calculate the authentication probability that user authentication will be successful according to the determined authentication method.

[0188] The processor (120) may determine, if the authentication probability is less than a set threshold, an authentication method corresponding to a security level higher than or equal to the security level corresponding to the determined authentication method as the second authentication method. The processor (120) may transmit an authentication request to the terminal according to the determined second authentication method.

[0189] The above processor (120) can determine an external electronic device (101) to perform the authentication method based on the authentication probability and the cost according to the determined authentication method.

[0190] An electronic device (e.g., the electronic device (101) of FIGS. 1, 2, 7, 8, and 9) according to various embodiments may include a processor (e.g., the processor (120) of FIG. 1) and a memory (e.g., the memory (130) of FIG. 1) electrically coupled to the processor (120) and storing instructions executable by the processor (120). When the instructions are executed, the processor (120) may cause the electronic device (101) to receive a security level and user information for a service (e.g., the service (400) of FIG. 2) requested for login from a terminal. The processor (120) may calculate a user probability that the user is an actual user based on the user information. The processor (120) may determine a first authentication method for authenticating a user who has logged in to the service (400) based on the security level and the user probability. The processor (120) may calculate an authentication probability that user authentication will succeed according to the first authentication method. If the authentication probability is less than a set first threshold, the processor (120) may transmit an authentication request to the terminal according to a second authentication method different from the first authentication method. If the authentication probability is equal to or greater than the set first threshold, the processor (120) may transmit an authentication request to the terminal according to the first authentication method.

[0191] The processor (120) may determine the first authentication method as an authentication method corresponding to a security level lower than the security level for the service (400) when the user probability is equal to or greater than the set second threshold value. The processor (120) may determine the first authentication method as an authentication method corresponding to a security level higher than the security level for the service (400) when the user probability is less than the second threshold value.

[0192] The processor (120) may determine, if the authentication probability is less than the first threshold value, an authentication method corresponding to a security level higher than or equal to the security level corresponding to the first authentication method as the second authentication method. The processor (120) may transmit an authentication request to the terminal according to the second authentication method.

[0193] The processor (120) may determine an external electronic device (101) to perform the first authentication method or the second authentication method based on the authentication probability and the cost according to the first authentication method or the second authentication method.

[0194] A user authentication method according to various embodiments may include an operation of receiving a security level and user information for a service for which a login request has been made from a terminal (e.g., a service (400) of FIG. 2), an operation of determining an authentication method for authenticating a user who has logged in to the service (400) based on the security level and the user information, and an operation of transmitting an authentication request to the terminal based on the determined authentication method.

[0195] The operation of determining the authentication method may include an operation of determining the authentication method based on a probability that the user is an actual user calculated based on the user information.

[0196] The operation of determining the authentication method may include an operation of determining the authentication method as an authentication method corresponding to a security level lower than the security level for the service (400) when the user probability is equal to or greater than the set threshold value. The operation of determining the authentication method may include an operation of determining the authentication method as an authentication method corresponding to a security level higher than the security level for the service (400) when the user probability is less than the threshold value.

[0197] The above user authentication method may further include an operation of calculating an authentication probability that the user authentication will be successful according to the determined authentication method.

[0198] The user authentication method may further include an operation of determining, as a second authentication method, an authentication method corresponding to a security level higher than or equal to the security level corresponding to the determined authentication method, if the authentication probability is less than a set threshold value. The user authentication method may further include an operation of transmitting an authentication request to the terminal according to the determined second authentication method.

[0199] The above user authentication method may further include an operation of determining an external electronic device (101) to perform the authentication method based on the authentication probability and the cost according to the determined authentication method.

[0200]

[0201] Electronic devices according to the various embodiments disclosed in this document may take various forms. Electronic devices may include, for example, portable communication devices (e.g., smartphones), computer devices, portable multimedia devices, portable medical devices, cameras, wearable devices, or home appliances. Electronic devices according to the embodiments of this document are not limited to the aforementioned devices.

[0202] The various embodiments of this document and the terminology used therein are not intended to limit the technical features described in this document to specific embodiments, but should be understood to include various modifications, equivalents, or substitutes of the embodiments. In connection with the description of the drawings, similar reference numerals may be used for similar or related components. The singular form of a noun corresponding to an item may include one or more of the items, unless the context clearly indicates otherwise. In this document, each of the phrases "A or B", "at least one of A and B", "at least one of A or B", "A, B, or C", "at least one of A, B, and C", and "at least one of A, B, or C" can include any one of the items listed together in the corresponding phrase among those phrases, or all possible combinations thereof. Terms such as "first," "second," or "first" or "second" may be used merely to distinguish one component from another, and do not limit the components in any other respect (e.g., importance or order). When a component (e.g., a first component) is referred to as "coupled" or "connected" to another (e.g., a second component), with or without the terms "functionally" or "communicatively," it means that the component can be connected to the other component directly (e.g., wired), wirelessly, or through a third component.

[0203] The term "module" used in various embodiments of this document may include a unit implemented in hardware, software, or firmware, and may be used interchangeably with terms such as logic, logic block, component, or circuit. A module may be an integral component, or a minimum unit or part of such a component that performs one or more functions. For example, according to one embodiment, a module may be implemented in the form of an application-specific integrated circuit (ASIC).

[0204] Various embodiments of the present document may be implemented as software (e.g., a program (140)) including one or more instructions stored in a storage medium (e.g., an internal memory (136) or an external memory (138)) readable by a machine (e.g., an electronic device (101)). For example, a processor (e.g., a processor (120)) of the machine (e.g., an electronic device (101)) may call at least one instruction among the one or more instructions stored from the storage medium and execute it. This enables the machine to operate to perform at least one function according to the at least one called instruction. The one or more instructions may include code generated by a compiler or code executable by an interpreter. The machine-readable storage medium may be provided in the form of a non-transitory storage medium. Here, 'non-transitory' simply means that the storage medium is a tangible device and does not contain signals (e.g., electromagnetic waves), and the term does not distinguish between cases where data is stored semi-permanently or temporarily on the storage medium.

[0205] According to one embodiment, the method according to various embodiments disclosed in this document may be provided as included in a computer program product. The computer program product may be traded as a product between a seller and a buyer. The computer program product may be distributed in the form of a machine-readable storage medium (e.g., compact disc read-only memory (CD-ROM)), or may be distributed online (e.g., downloaded or uploaded) through an application store (e.g., Play Store™) or directly between two user devices (e.g., smart phones). In the case of online distribution, at least a portion of the computer program product may be temporarily stored or temporarily generated in a machine-readable storage medium, such as the memory of a manufacturer's server, an application store's server, or an intermediary server.

[0206] According to various embodiments, each component (e.g., a module or a program) of the above-described components may include one or more entities, and some of the entities may be separated and arranged in other components. According to various embodiments, one or more components or operations of the aforementioned components may be omitted, or one or more other components or operations may be added. Alternatively or additionally, a plurality of components (e.g., a module or a program) may be integrated into a single component. In such a case, the integrated component may perform one or more functions of each of the plurality of components identically or similarly to those performed by the corresponding component among the plurality of components prior to the integration. According to various embodiments, the operations performed by a module, program, or other component may be executed sequentially, in parallel, iteratively, or heuristically, or one or more of the operations may be executed in a different order, omitted, or one or more other operations may be added.

Claims

1. In an electronic device (101), Processor (120); and A memory (130) electrically coupled to the processor (120) and storing instructions executable by the processor (120) Including, The above processor (120) When the above command is executed, the electronic device (101) receives a security level and user information for a service (400) requested to log in from the terminal; Based on the above security level and the user information, an authentication method for authenticating a user logged in to the service (400) is determined; According to the authentication method determined above, to transmit an authentication request to the terminal, Electronic devices (101).

2. In paragraph 1, The above processor (120) Determine the authentication method based on the probability that the user is an actual user calculated based on the user information. Electronic devices (101).

3. In either of paragraphs 1 and 2, The above processor (120) If the user probability is greater than or equal to the set threshold, the authentication method is determined as an authentication method corresponding to a security level lower than the security level for the service (400). If the user probability is less than the threshold value, the authentication method is determined as an authentication method corresponding to a security level higher than the security level for the service (400). Electronic devices (101).

4. In any one of paragraphs 1 to 3, The above processor (120) To calculate the authentication probability that the user authentication will be successful according to the authentication method determined above. Electronic devices (101).

5. In any one of paragraphs 1 to 4, The above processor (120) If the above authentication probability is less than the set threshold value, an authentication method corresponding to a security level higher than or equal to the security level corresponding to the determined authentication method is determined as the second authentication method; According to the second authentication method determined above, to transmit an authentication request to the terminal, Electronic devices (101).

6. In any one of paragraphs 1 to 5, The above processor (120) Based on the above authentication probability and the cost according to the above determined authentication method, an external electronic device to perform the authentication method is determined. Electronic device (101).

7. An operation for receiving a security level and user information for a service (400) requested to log in from a terminal; An operation of determining an authentication method for authenticating a user logged into the service (400) based on the security level and the user information; and An operation of transmitting an authentication request to the terminal according to the authentication method determined above. Including, How to authenticate users.

8. In paragraph 7, The action of determining the above authentication method is: An operation for determining the authentication method based on the probability that the user is an actual user calculated based on the user information. Including, How to authenticate users.

9. In either of paragraphs 7 and 8, The action of determining the above authentication method is: If the user probability is greater than or equal to the set threshold, an operation of determining the authentication method as an authentication method corresponding to a security level lower than the security level for the service (400); and If the user probability is less than the threshold value, an operation of determining the authentication method as an authentication method corresponding to a security level higher than the security level for the service (400) Including, How to authenticate users.

10. In any one of paragraphs 7 to 9, An operation for calculating the authentication probability that user authentication will succeed based on the authentication method determined above. Including more, How to authenticate users.

11. In any one of paragraphs 7 to 10, If the above authentication probability is less than the set threshold value, an operation of determining an authentication method corresponding to a security level higher than or equal to the security level corresponding to the determined authentication method as the second authentication method; and An operation of transmitting an authentication request to the terminal according to the second authentication method determined above. Including more, How to authenticate users.

12. In any one of paragraphs 7 to 11, An operation of determining an external electronic device to perform the authentication method based on the authentication probability and the cost according to the determined authentication method. Including more, How to authenticate users.

13. A computer-readable recording medium having recorded thereon a program for executing a user authentication method according to any one of clauses 7 to 12.

Images