JP2002278929A - One time password generating module, system and method for distributing the same, portable terminal, one time password managing server, web server, program, and recording medium recorded with program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a one time password generating module where the complication of management on the distribution of hardware and the installation of software is eliminated and security can be enhanced and to provide a system and a method for distributing the module. SOLUTION: The system includes a portable terminal 10 requesting a one time password managing server 20 to generate the one time password generating module for generating a one time password, the one time password managing server 20 generating the one time password generating module and outputting it to a web server 30 and the web server 30 holding the one time password generating module which the one time password managing sever 20 outputs and outputting the one time password generating module to the portable terminal 10 in a binary code system in accordance with a request from the portable terminal on a web page.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a one-time password generation module for generating a one-time password used for user authentication (identity authentication) on a network, a distribution system and a distribution method thereof, and related technologies. .

[0002]

2. Description of the Related Art The Internet, which promotes network business, is convenient, but security is an important issue. The most important is user authentication (personal authentication). The user authentication on the network has expanded from remote access to a broad range of applications such as providing information to companies such as affiliated companies and business partners and important customers. A one-time password authentication system is known as a system for improving the security of such user authentication. This system uses not only the element that only the user knows, such as a fixed password, but also the second element, a one-time password that cannot be predicted by anyone and that is valid only once at each login. ,
User authentication is performed by combining these.

The following method has been conventionally used for generating a one-time password when a user uses the Internet using a personal computer or the like. (A) A method of distributing dedicated hardware (authentication token (Token)) for generating a one-time password to a user. The user operates the hardware to generate a one-time password. (B) A method in which software for generating a one-time password is installed in a personal computer. The user runs the software on a personal computer to generate a one-time password. (C) A method in which a one-time password generation module arranged on a web server is accessed from a personal computer, a one-time password is generated on the web server, and the one-time password is downloaded to the personal computer.

[0004]

However, the above-mentioned conventional method (a) requires distribution of hardware.
In addition, the method (b) is complicated in terms of labor and management of software installation work. Although (c) solves the problem of hardware distribution and the complexity of software, it is necessary to use the same fixed password every time the web server is accessed to generate a one-time password. Become. For this reason, the significance of the security protected by using a one-time password, which is valid only once, is substantially lost.

[0005] The present invention has been made in view of the above-mentioned problems of the conventional one-time password generation method, and an object of the present invention is to eliminate the complexity of managing hardware distribution and software installation. To provide a one-time password generation module capable of enhancing security, a distribution system and a distribution method thereof, a portable terminal, a one-time password management server, a web server, a program, and a recording medium on which the program is recorded. .

[0006]

With the recent development of electronic device technology, portable telephones, notebook personal computers, palmtop personal computers, navigation systems, and the like (hereinafter, these are collectively referred to as portable terminals). Miniaturization, higher performance, and lower prices are progressing. Against this background, mobile terminals have become increasingly popular in recent years, and mobile terminals play an important role in network business. The present invention has been made in view of such a point, and a portable terminal is provided with hardware (authentication token (T
The present invention solves the above-mentioned problem by functioning as an alternative to the above-mentioned method.

To solve the above problems, according to the present invention, a portable terminal, a one-time password management server,
A distribution system of a one-time password generation module including a web server is provided. Here, the mobile terminal requests the one-time password management server to create the one-time password generation module, and upon receiving the notification that the creation of the one-time password generation module has been completed, sends the one-time password to the web page managed by the web server. Access and request acquisition of one-time password generation module. One-time password management server
A one-time password generation module is created and output to the web server, and the portable terminal is notified that the creation of the one-time password generation module is completed.
The web server outputs and holds the one-time password generation module from the one-time password management server, and outputs the one-time password generation module to the mobile terminal in a binary code format in response to a request from the mobile terminal.

In the above-mentioned one-time password generation module distribution system, a one-time password generation module distribution method including the following steps can be adopted. (First stage) The mobile terminal requests the one-time password management server to create a one-time password generation module. (Second stage) The one-time password management server creates a one-time password generation module and outputs it to the web server. (Third stage) The one-time password management server outputs a one-time password generation module creation completion notification to the mobile terminal. (Fourth Step) The portable terminal accesses the web server to acquire the one-time password generation module. (Fifth stage) The web server outputs a one-time password generation module to the mobile terminal in response to access from the mobile terminal.

According to the one-time password generation module distribution system or method, the one-time password can be generated using the one-time password generation module operating on the portable terminal, so that the one-time password is generated. It is not necessary to distribute hardware for this.

In addition, the one-time generation module is output (downloaded) to the portable terminal in a format that can be executed immediately without the need for installation work on the portable terminal, for example, in a binary format, so that the installation work and software management can be performed. Can eliminate the complexity of
High usability. It also has the advantage of being resistant to hacking such as source code analysis.

Further, by storing the one-time password generation module in the portable terminal, the one-time password can be generated off-line without connecting to a network. Compared with the above-described conventional technology in which a web server is accessed using the same fixed password every time to generate a one-time password, security can be significantly improved.

A user of a portable terminal can perform user authentication (personal authentication) on a network using a one-time password generated offline. As a usage form of such a mobile terminal, (a) a mobile terminal is used,
In addition to the form of functioning as a substitute for hardware (authentication token (Token)) for generating a one-time password, (b) a user connects to a network using a mobile terminal to collect information and is required for collecting information. There is a form in which generation and transmission of a one-time password are all performed by the same portable terminal. In (b), the user of the mobile terminal can generate a one-time password with the mobile terminal in response to a request for the one-time password and immediately transmit the password.

Further, it is preferable that the creation completion notification in the third step includes, as information, a password used when the portable terminal accesses the web server in the fourth step. Such a password is a fixed password that is valid only once. By using a password when accessing the web server from a mobile terminal, unauthorized access to the web server by a third party,
It is possible to prevent the one-time password generation module from being stolen.

The communication when the web server outputs the one-time password generation module to the portable terminal in response to access from the portable terminal is, for example, SSL (Sequence).
It is preferable that the communication be performed in an encrypted manner by means of a secure sockets layer (encrypted communication).

According to another aspect of the present invention, a one-time password that is stored in a portable terminal in a binary code format, operates on the portable terminal, and is used on a network for personal authentication is generated. Is provided. Here, when the personal authentication is performed on the network, the user of the portable terminal connects to the network using the portable terminal, and connects to the network using a personal computer different from the portable terminal. There are cases. In the former case, the user of the portable terminal can collect information on the network, generate a one-time password, authenticate the user, etc., all with the same portable terminal. In the latter case, the user of the mobile terminal can use the mobile terminal storing the one-time password generation module as a substitute for hardware (authentication token (Token)) for generating the one-time password.

According to another aspect of the present invention, the following portable terminal, one-time password management server, and web server are provided. A portable terminal of the present invention is connected to a request unit for requesting creation of a one-time password generation module for generating a one-time password used for personal authentication on a network;
A communication unit for outputting a request by the request unit and inputting the one-time password generation module; a module storage unit for storing the input one-time password generation module; and executing the one-time password generation module to store the one-time password. It is characterized by comprising a module execution unit for generating and a display unit for displaying a one-time password.

Further, according to the present invention, there is provided a program for causing a portable terminal to execute the functions of the portable terminal of the present invention, and a recording medium readable by the portable terminal recording the program.

Further, the one-time password management server of the present invention comprises: a receiving unit for receiving a one-time password generation module for generating a one-time password used for personal authentication on a network from a portable terminal; A module creation unit that creates a password generation module, a module output unit that outputs the one-time password generation module to a web server that manages a web page accessible by the mobile terminal, and a message that the creation of the one-time password generation module is completed. And a notifying unit for notifying the mobile terminal.

Further, according to the present invention, there are provided a program for causing a computer to execute the function of the one-time password management server of the present invention, and a computer-readable recording medium storing the program.

Further, the web server of the present invention has a module input section for inputting a one-time password generation module for generating a one-time password used for personal authentication on a network, and a one-time password generation module. Module holding part,
The mobile terminal is provided with a receiving unit that receives a request for outputting a one-time password generation module from a mobile terminal on a web page, and a module output unit that outputs the one-time password generation module to the mobile terminal.

Further, according to the present invention, there are provided a program for causing a computer to execute the functions of the web server of the present invention, and a computer-readable recording medium storing the program.

[0022]

BRIEF DESCRIPTION OF THE DRAWINGS FIG.
A one-time password generation module according to the present invention,
A preferred embodiment of the distribution system and the distribution method and their related technologies will be described in detail.
In this specification and the drawings, components having substantially the same function and configuration are denoted by the same reference numerals, and redundant description is omitted.

In the present embodiment, a computer which is connected to a network to collect information, and is required to input a one-time password as required is called a "personal computer", and generates a one-time password. A computer that stores a one-time password generation module for the purpose of the present invention is referred to as a “mobile terminal”, and the two are distinguished and described, but the present invention is not limited to this. In other words, the present invention can be similarly applied to a case where a mobile terminal is used to connect to a network, and information collection and generation and transmission of a one-time password required at that time are all performed from the same mobile terminal. It is. Further, the mobile terminal is a property of the user or a proprietary property, but the personal computer is not necessarily a property of the user or a property of the user. One user may use a plurality of personal computers and one personal computer may be shared by a plurality of users.

A distribution system for a one-time password generation module according to the present embodiment (hereinafter, referred to as the present distribution system) will be described. As shown in FIG. 1, the distribution system includes a mobile terminal 10, a one-time password management server 20, and a web server 30. In the example shown in FIG. 1, the mobile terminal 10 connects to the network 50 via the mobile phone packet network 40 and accesses the one-time password management server 20 and the web server 30 which are other components of the present distribution system. Can be. The one-time password management server 20 and the web server 30 are also connected to each other via the network 50, and are configured to be able to transmit and receive data. Here, the network 50 may be any device that can perform two-way communication by connecting a personal computer, a portable terminal, or the like, which is a data transmitting / receiving unit, by wire or wirelessly. In particular, the concept includes the Internet, which is a network using a public line network.

In the present distribution system, when the user
This is a system for connecting to the network 50 by using, and downloading the one-time password generation module onto the portable terminal 10. The system is based on the one-time password authentication system described above and is characterized by a method for generating a one-time password in the mobile terminal 10. In the following, the mobile terminal 10, one-time password management server 20,
The web server 30 will be described in detail.

(Portable Terminal 10) First, the portable terminal 10 will be described. The mobile terminal 10 according to the present embodiment
It is possible for the user to carry it,
Is a terminal having a function of accessing and transmitting information. As such a mobile terminal, there is a mobile phone having a network connection function shown in FIG. Note that a notebook personal computer, a palmtop personal computer, a navigation system, and the like that can be connected to a network via wireless communication means such as a mobile phone are also included in the mobile terminal in a broad sense.

An example of the configuration of the portable terminal 10 will be described with reference to FIG. As shown in the block diagram of FIG. 2, the mobile terminal 10 includes an input unit 11, a communication unit 12, a storage unit 13, an execution unit 14, and a display unit 15.

The input unit 11 is provided with numeric keys (0, 1,...
, 9 etc.) and keys such as character keys (Hiragana, Katakana, English characters, etc.), and a voice input unit for the user to input voice. The user makes a request for the one-time password generation module by creating an electronic mail by combining these keys or making a telephone call from the voice input unit. Further, the user can input a password by combining these keys.

The communication section 12 performs communication between the portable terminal 10 and the telephone line packet network 40 shown in FIG. The user of the mobile terminal 10 transmits a request for a one-time password generation module, a password, and the like via the communication unit 12, and downloads the one-time password generation module. The telephone function and the e-mail function, which are general functions of the mobile terminal, are also performed via the communication unit 12.

The module storage unit 13 stores the one-time password generation module downloaded via the communication unit 12. The one-time password generation module is a module for generating a one-time password valid only once. By downloading the one-time password generation module once and storing it in the module storage unit 13, it can be repeatedly used for generating the one-time password. It should be noted that the module storage unit 13 stores a RAM (RandomAccess).
ss Memory) or the like.

The execution section 14 executes the one-time password generation module stored in the module storage section 13 to generate a one-time password. The one-time password generation module, as described later,
0 is downloaded in a format that can be executed immediately without the need for installation work, for example, a binary code format. Therefore, the one-time password generation module can be immediately executed by the execution unit 14 without requiring an installation operation.

The display unit 15 displays the one-time password generated by the execution unit 14. The user of the portable terminal 10 can perform personal authentication using the one-time password displayed on the display unit 15. That is, the user of the mobile terminal 10 uses the mobile terminal 10 in which the one-time password generation module is stored with hardware (authentication token (Toke) for generating the one-time password.
n)).

The configuration of the portable terminal 10 described above is only an example. In particular, in FIG. 2, components that perform other functions not directly related to the present embodiment are omitted from the description, but those skilled in the art can come up with various modified examples or modified examples. Obviously gaining.

Next, a processing flow in the portable terminal 10 will be described with reference to FIG. When a user of the mobile terminal 10 connects to a network using a personal computer and accesses another computer at a remote location to acquire information, for example, a one-time password may be required. In preparation for such a case, the user of the mobile terminal 10 downloads a one-time password generation module for generating a one-time password to the mobile terminal 10 using the present distribution system in advance,
Store it. The processing flow in the mobile terminal 10 in such a case will be described with reference to FIG.

The user of the portable terminal 10 requests a one-time password management server 20, which will be described later, to create a one-time password generation module for generating a one-time password. Although a request for creating a one-time password generation module may be made by using any means, it is preferable that the system be configured so that the request can be made using the portable terminal 10. From this point of view, it is realistic to provide a system that requests creation of a one-time password generation module by e-mail or telephone.

At the time of the request for creating the one-time password generation module, the user of the portable terminal 10 sends information for the administrator of the one-time password management server 20 to recognize the user of the portable terminal 10 (step S101). Such information includes the name, registration name, registration number, nickname, department to which the user of the portable terminal 10 belongs, and the like.

After the request for creating the one-time password generation module, a notification of completion of the creation of the one-time password generation module is sent from the one-time password management server 20 to the portable terminal 10 (step S10).
2). The creation completion notification is notified by the same method as the one-time password generation module creation request. That is, the creation completion notification is sent by e-mail or telephone. If the creation completion notification is not sent after the elapse of a certain period, the mobile terminal 10 notifies the one-time password management server 20 to that effect (step S103).

The completed one-time password generation module is stored in a web server 30 described later. The user of the mobile terminal 10 accesses the web server 30 after confirming the creation completion notification of the one-time password generation module (step S104). Note that the user of the mobile terminal 10 sends the creation completion notification to the web server 3.
It is preferable that the password is used as information to access the web server 30 using this password, and the user of the portable terminal 10 accesses the web server 30 using the password. The web server 30 authenticates the password (step S105). If the password is not authenticated, the web server 30 notifies the fact (step S106).

FIG. 4 shows an example of a display screen when the user of the portable terminal 10 accesses a web page managed by the web server 30. Here, when a request to download the one-time password generation module is made by an operation on the display screen, the web server 3
0, the one-time password generation module is downloaded to the portable terminal 10 (step S10).
7). The communication at the time of downloading the one-time password generation module is preferably performed in an encrypted form. The web server checks whether the download was successful (step S108). If the download failed, the web server 30 notifies the fact (step S109).

As described above, the portable terminal 10 can acquire the one-time password generation module. The user of the mobile terminal 10 checks the operation of the one-time password generation module (step S110). If the operation cannot be checked (step S111), the mobile terminal 10 notifies the one-time password management server 20 of the fact. (Step S112). After confirming the operation of the one-time password generation module, the user of the portable terminal 10 can generate a one-time password by using the one-time password generation module and use the generated one-time password for user authentication (personal authentication). (Step S113).

Through the processing flow described above, the user of the portable terminal 10 can generate a one-time password by using the one-time password generation module and use the generated one-time password for user authentication (personal authentication). The function of the mobile phone 10 described above may be incorporated in the mobile phone in advance as a function inherent to the mobile phone. Alternatively, the above-described function may be realized by optionally incorporating a program into a mobile phone. In this case, the program is recorded on a recording medium,
It can be distributed in the form of tangible objects.

(One-time password generation module)
A one-time password generation module that operates on the above-described portable terminal 10 will be described. The one-time password generation module operates on the JAVA terminal 10
A (registered trademark) applet. The one-time password generation module, as described above,
It is downloaded to the portable terminal 10 (step S107). Such a one-time password generation module is preferably downloaded to the portable terminal 10 in a binary code format. The portable terminal 10 can be executed immediately without the need for installation work, and has high usability. It also has the advantage of being resistant to hacking such as source code analysis.

FIG. 5 shows a display screen on the portable terminal 10 when the one-time password OTP is generated using the one-time password generation module. Here, a six-digit number “242904” is displayed as the one-time password OTP. Note that the one-time password authentication system itself as a user authentication system is a well-known technology, and thus will not be described here.

(One-time password management server 20)
Next, the one-time password management server 20 that creates the above-described one-time password generation module will be described. The one-time password management server 20 is a server that creates a one-time password generation module in response to a request for creating a one-time password generation module from the mobile terminal 10 described above.

An example of the configuration of the one-time password management server 20 will be described with reference to FIG. As shown in the block diagram of FIG. 6, the one-time password management server 20 includes a receiving unit 21 for receiving a creation of a one-time password generation module, a module creation unit 22 for creating a one-time password generation module, and a one-time password creation module. It comprises a module output unit 23 for outputting a password generation module and a notification unit 24 for notifying the completion of creation of the one-time password generation module.

Next, the processing flow in the one-time password management server 20 will be described with reference to FIG. Upon receiving the one-time password generation module creation request from the portable terminal 10 described above, the one-time password management server 20 scrutinizes the contents of the creation request and confirms whether the user is an authorized user (step S20).
1). As described above, the creation request includes the name, registration name, registration number, nickname, department, and the like of the user of the mobile terminal 10, and the one-time password management server 20 based on these information, Check if it is a creation request from. When it cannot be confirmed that the request is a creation request from an authorized user (step S20)
2), the one-time password management server 20 notifies the mobile terminal 10 that has made the creation request (step S203).

The one-time password management server 20
The information used to generate a one-time password called a “seed” and a user ID (user IDentification) are assigned to the mobile terminal 10 that has requested creation. Here, the user ID refers to a registration number set together with a password to confirm that the user is a valid user when accessing a network or a file. The seed and the user ID are managed by the one-time password management server 20. Then, a one-time password generation module dedicated to the user of the mobile terminal 10 is created (step S204). If the creation of the one-time password generation module has failed (step S205), the module is re-created (step S206).

The one-time password management server 20
The created one-time password generation module is transmitted to a web server 30 described later connected to the network (step S207). If the transmission of the one-time password generation module has failed (step S208), the one-time password management server 20
Can retransmit the one-time password generation module by correcting the error that causes the error (step S209).

After transmitting the one-time password generation module to the web server 30, the one-time password management server 20 notifies the portable terminal 10 of the completion of the one-time password generation module creation (step S2).
10). The creation completion notification referred to here includes a URL (Uniform Resource L) as information for the user of the mobile terminal 10 to access the web server 30.
In addition to the information such as the password of the web server 30, a password for accessing the web server 30 is preferably included. When the notification of the creation completion notification has failed (step S2
11), a re-notification is performed (step S212).

The processing flow of the one-time password management server is as described above. Note that the one-time password management server may be configured as dedicated hardware. The functions of the one-time password management server may be executed by incorporating a program into a computer. In this case, the program can be distributed in the form of a tangible entity by recording it on a recording medium.

(Web Server 30) Web Server 30
Is connected to the portable terminal 10 and the one-time password management server 20 described above on the network.
By managing the web page shown in the example, the server mediates the transmission and reception of the one-time password generation module between the mobile terminal 10 and the one-time password management server 20.

An example of the configuration of the web server 30 will be described with reference to FIG. As shown in the block diagram of FIG. 8, the web server 30 includes an input unit 31 to which the one-time password generation module is input, a storage unit 32 for storing the one-time password generation module, and a one-time password from the mobile terminal 10. It includes a receiving unit 33 for receiving a request for output of the password generation module, and an output unit 34 for outputting the one-time password generation module.

The web server 30 is a web page management server accessible from the mobile terminal 10. The one-time password generation module stored in the storage unit 32 can perform a download operation by an operation on a web page. FIG. 4 shows an example of a web page displayed on the mobile terminal 10. Mobile terminal 10
Can select whether to download the one-time password generation module on the web page.

Next, the processing flow in the web server 30 will be described with reference to FIG. Web server 3
No. 0 receives the one-time password generation module dedicated to the user of the portable terminal 10 sent from the one-time password management server 20 (step S301). When the reception of the one-time password has failed (step S3
02), the web server 30 notifies the one-time management server 20 of the fact (step S30).
3). The web server 30 holds the one-time password generation module until there is access from the user of the mobile terminal 10. If there is no access from the user of the mobile terminal 10 for a certain period, the one-time password generation module is discarded.

When the web server 30 authenticates the access from the user of the portable terminal 10 using the password (step S304), the web server 30 performs password authentication using the user ID and the password. When the password authentication fails (step S305), the web server 30 notifies the portable terminal 10 of the failure (step S30).
6).

If the authentication of the password is successful, the web server 30 responds to the download request of the one-time password generation module from the portable terminal 10 and sends the one-time password dedicated to the user of the portable terminal 10 to the portable terminal 10. The password generation module is downloaded (Step S307). Preferably, the one-time password generation module is encrypted and downloaded. If the download of the one-time password generation module has failed (step S308), the web server 30 notifies the portable terminal 10 of the failure (step S309).

Through the processing flow described above, the work of downloading the one-time password generation module to the portable terminal 10 by the web server 30 is completed (step S310). Note that the web server may be configured as dedicated hardware. The functions of the web server may be executed by incorporating a program into a computer. In this case, the program can be distributed in the form of a tangible entity by recording it on a recording medium. This distribution system is configured as described above.

Next, a method for distributing the one-time password generation module according to the present embodiment (hereinafter referred to as the present distribution method) will be described with reference to FIGS. FIG. 11 shows the overall flow of the distribution method of the one-time password generation module in the present distribution system in chronological order.

As shown in FIGS. 10 and 11, first, the user of the portable terminal 10 that needs the one-time password generation module for generating the one-time password sends a one-time password management server 20 to the one-time password management server 20. A request is made to create a time password generation module (step S1). One-time password management server 20
Creates a one-time password generation module dedicated to the user of the portable terminal 10 and outputs it to the web server 30 (step S2). At the same time, the one-time password management server 20 notifies the user of the portable terminal 10 that the creation of the one-time password generation module has been completed (step S3).

Then, the user of the portable terminal 10 accesses the web server 30 with the password (step S).
4) Download the one-time password generation module from the web server 30 (step S5). Download the one-time password generation module is SS
This is performed by L-encrypted communication. FIG. 11 shows the above steps S1 to S5 in chronological order.

The present distribution method is as described above. The details of each step are as described above for the description of the present distribution system, and therefore, redundant description will be omitted here.

The preferred embodiments of the one-time password generation module, the distribution system and the distribution method thereof, and the related technologies according to the present invention have been described above with reference to the accompanying drawings. Not limited. It is clear that a person skilled in the art can conceive various changes or modifications within the scope of the technical idea described in the claims, and those modifications naturally fall within the technical scope of the present invention. It is understood to belong.

[0063]

As described above, according to the present invention,
It is possible to provide a one-time password generation module, a distribution system and a distribution method thereof that can eliminate the complexity of hardware distribution and software installation management and can enhance security. Further, according to the present invention, it is possible to provide a portable terminal, a one-time password management server, a web server, a program, and a recording medium on which the program is recorded, which are applicable to the distribution system and the distribution method of the one-time password generation module. It is.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram showing a system configuration of a distribution system of a one-time password generation module.

FIG. 2 is a block diagram illustrating an example of a configuration of a mobile terminal.

FIG. 3 is an explanatory diagram showing a processing flow in the mobile terminal.

FIG. 4 is an explanatory diagram showing an example of a web page managed by a web server.

FIG. 5 is an explanatory diagram showing a display screen on a mobile terminal when a one-time password is generated using a one-time password generation module.

FIG. 6 is a block diagram illustrating an example of a configuration of a one-time password management server.

FIG. 7 is an explanatory diagram showing a processing flow in the one-time password management server.

FIG. 8 is a block diagram illustrating an example of a configuration of a web server.

FIG. 9 is an explanatory diagram showing a processing flow in a web server.

FIG. 10 is an explanatory diagram schematically showing a method of distributing a one-time password generation module.

FIG. 11 is an explanatory diagram showing a time-series distribution method of a one-time password generation module.

[Explanation of symbols]

 REFERENCE SIGNS LIST 10 mobile terminal 11 module input unit 12 communication unit 13 module storage unit 14 module execution unit 15 display unit 20 one-time password management server 21 entrustment unit 22 module generation unit 23 module output unit 24 notification unit 30 web server 31 module input unit 32 module Holder 33 Receiving unit 34 Module output unit OTP One-time password 40 Cellular phone packet network 50 Network

Continued on the front page F term (reference) 5B017 AA03 BA05 BB09 5B082 EA12 GA11 5B085 AA08 AE03 AE08 5J104 AA16 EA03 EA15 EA23 KA21 NA05 PA07

Claims (15)

[Claims] 1. A distribution system of a one-time password generation module for generating a one-time password used for personal authentication on a network,
Requesting the creation of the one-time password generation module to the one-time password management server, and receiving a notification that the creation of the one-time password generation module is completed, accessing a web page managed by a web server and A mobile terminal that requests acquisition of a time password generation module, and the one-time password generation module that creates and outputs the module to the web server, and notifies the mobile terminal that creation of the one-time password generation module is completed. The one-time password management server and the one-time password management module output and hold the one-time password generation module from the one-time password management server, and convert the one-time password generation module into a binary in response to a request from the portable terminal. Wherein characterized in that it comprises a web server, a distribution system of one-time password generation module in over de format output to the portable terminal. 2. A request unit for requesting creation of a one-time password generation module for generating a one-time password used for personal authentication on a network, connected to a network, outputting a request by the request unit and outputting the one-time password. A communication unit for inputting a time password generation module; a module storage unit for storing the input one-time password generation module; and a module execution unit for executing the one-time password generation module and generating a one-time password. ,
And a display unit for displaying the one-time password. 3. A program for causing a portable terminal to function as the portable terminal according to claim 2. 4. A recording medium on which the program according to claim 3 is recorded and which can be read by a portable terminal. 5. A one-time password generation module, wherein the one-time password generation module is stored in a portable terminal in a binary code format, operates on the portable terminal, and generates a one-time password used for personal authentication on a network. 6. A receiving section for receiving a one-time password generation module for generating a one-time password used for personal authentication on a network from a portable terminal, and a module generating section for generating the one-time password generation module. A module output unit that outputs the one-time password generation module to a web server that manages a web page accessible by the mobile terminal, and notifies the mobile terminal that the creation of the one-time password generation module is completed. A one-time password management server, comprising: a notification unit. 7. A program for causing a computer to function as the one-time password management server according to claim 6. 8. A computer-readable recording medium on which the program according to claim 7 is recorded. 9. A web server for managing a web page: a module input unit for inputting a one-time password generation module for generating a one-time password used for personal authentication on a network, and the one-time password generation module A module holding unit that holds a request for an output of the one-time password generation module from the mobile terminal on the web page; and a module output that outputs the one-time password generation module to the mobile terminal. And a web server. 10. A program for causing a computer to function as the web server according to claim 9. 11. A computer-readable recording medium on which the program according to claim 10 is recorded. 12. A method of distributing a one-time password generation module for generating a one-time password used for personal authentication on a network, wherein the mobile terminal sends a one-time password management module to a one-time password management server. A first step of requesting creation, a second step in which the one-time password management server creates the one-time password generation module, and outputs the module to a web server; A third step of outputting a creation completion notification to the portable terminal, a fourth step of the portable terminal accessing a web page managed by the web server to acquire the one-time password generation module, and the web server Is the mobile terminal A step of outputting the one-time password generation module to the portable terminal in response to an access from the mobile terminal. 13. In the third step, the creation completion notification includes, as information, a password used when the mobile terminal accesses the web page in the fourth step. 13. The method of claim 12, wherein the mobile terminal accesses the web page using the password. 14. The method according to claim 12, wherein in the fifth step, the one-time password generation module is output to the portable terminal in a binary code format.
Or a method for distributing a one-time password generation module according to item 13. 15. The method according to claim 12, wherein, in the fifth step, communication at the time of outputting the one-time password generation module from the web server is performed in an encrypted manner. Distribution method of the one-time password generation module described in any of the above.