JP2003069560A - Authentication system, information terminal, subscriber identifier issuing device, public key registering device, authentication method, program, and storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system and an authentication method capable of securing security tantamount to PKI (public key infrastructure) easily compared to PKI. SOLUTION: An enormous number of information terminals (clients) can be authenticated easily by conducting subscriber authentication using the telephone number of an information terminal 10, to which impersonation is extremely difficult. A subscriber identifier, which is difficult for speculation of the telephone number based on the authenticated telephone number, is issued, and a pair of this subscriber identifier and a public key generated by the information terminal 10 can be registered in an open public key database 300. Accordingly, a web server 50 can verify easily legitimacy that the information terminal 10 owns surely a secret key S, which forms a pair with a public key P associated with the subscriber identifier.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a subscriber who has subscribed to a communication network managed by a communication carrier and uses an information terminal to communicate with a service providing device on the Internet connected to the communication network. The present invention relates to an authentication system, and more particularly to an authentication system when a subscriber communicates with a web server using a browser phone.

[0002]

2. Description of the Related Art A subscriber who subscribes to a communication network managed and operated by a communication carrier uses an information terminal such as a browser phone to access a web server or the like on the Internet connected to the communication network. If so, various authentication methods are used to identify the subscriber. Conventionally, a subscriber ID (subscriber identifier) and a password associated with a telephone number of a browser phone are used in this authentication method. When a browser phone is used, the subscriber ID can be easily obtained on the communication network, and the password often uses a small number of digits such as 4 digits in order to simplify the input. Therefore, assuming a situation in which a so-called brute force attack is performed on the password and the password is decrypted, there is a problem that it is extremely difficult to prevent spoofing by the above authentication method. Even for denial attacks that claim that the sender has not sent it despite sending false information, it is difficult to authenticate the sender, so the above authentication method sufficiently prevents denial attacks. I can't. Further, since the password is often transmitted as it is, not only is there a high possibility that the content will be eavesdropped during transmission, but even if it has been tampered with during transmission, no trace will remain. Therefore, in the above authentication method, denial,
There is a problem that it is not possible to sufficiently prevent attacks such as wiretapping or tampering.

In order to solve the above problems, public key infrastructure (Public
Key Infrastructure: PKI) is said to be an effective coping method. The PKI indicates the environment of the entire system that generates and manages the encryption key or the electronic certificate. As an example in which PKI is implemented, SSL (Secure Sockets Layer), which is a protocol for ensuring the security of TCP / IP communication at the transport layer, is known. SSL is an encryption method using a public key,
Authentication of a server by a client, that is, server authentication for confirming an electronic certificate on the server side (hereinafter referred to as "server certificate") is performed.

[0004]

However, since the system construction of PKI is difficult and its operation is complicated,
The actual situation is that only the limited functions as described above, for example, the functions of encrypting the transmission contents or only the server authentication are operated. The fields used are limited,
For example, it is only used within a company.
The reason why system construction is difficult is that the digital certificate on the client side (hereinafter referred to as "client certificate") is much smaller than the certificates that are relatively few and relatively easy to issue, such as server certificates. This is because it is extremely difficult to register, issue, and verify the client certificate because the number of target information terminals is huge. By the way, it is said that the number of browser phones is more than several million. Also in the above-mentioned SSL, there is a problem that the server authentication, that is, the client authentication for confirming the client certificate is not actually performed.

Therefore, an object of the present invention is to solve the above problems, and to provide an authentication system, an authentication method and the like that can easily secure security equivalent to PKI as compared with PKI. To do.

[0006]

An authentication system of the present invention is an information terminal on the subscriber side of a communication network, a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber, and a public key of the subscriber. In the authentication system, a public key registration device for registering the information terminal is connected via the communication network, wherein the information terminal generates a public key and a secret key of the information terminal, and the key generation means. Public key transmission means for transmitting the public key generated by the above to a subscriber identifier issuing device, and performing authentication based on the subscriber identifier via the Internet connected to the communication network to the outside. The identifier issuing device relates to a telephone number authenticating unit that authenticates the telephone number of the information terminal that has transmitted the public key by the public key transmitting unit, and an information terminal whose telephone number has been authenticated by the telephone number authenticating unit. A subscriber identifier issuing means for issuing a subscriber identifier based on the telephone number, a public key of the information terminal whose telephone number is authenticated by the telephone number authenticating means, and a subscriber identifier issued by the subscriber identifier issuing means. A subscriber public key information transmitting means for transmitting the subscriber public key information including the subscriber public key information to the public key registration device, and transmitting the subscriber identifier issued by the subscriber identifier issuing means to the information terminal side, The public key registration device includes subscriber public key information registration means for registering the subscriber public key information transmitted by the subscriber public key information transmission means.

Here, in the authentication system of the present invention, a web server on the Internet to which a communication network is connected is further provided, and the information terminal is a subscriber who records the subscriber identifier transmitted from the subscriber identifier issuing device. An identifier recording unit, a secret key recording unit that records the secret key generated by the key generating unit, and a unit that transmits the subscriber identifier recorded in the subscriber identifier recording unit to the web server side, Encryption code transmitting means for encrypting a predetermined code transmitted from the web server side with the secret key recorded in the secret key recording section, and transmitting the encrypted code to the web server side. Further, the public key registration device is a subscriber public key in which the subscriber public key information registered by the subscriber public key information registration means is publicly recorded on the Internet. Further comprising a broadcast recording portion, wherein it is possible to send a public key corresponding to the subscriber identifier transmitted from the web server side from the subscriber public key information recording unit to the web server.

[0008] Here, in the authentication system of the present invention, the web server transmits to the public key registration device the subscriber identifier transmitted from the information terminal side,
From the public key registration device side, a code transmitting means for generating a predetermined code and transmitting the code to the information terminal side, and the encrypted code transmitted from the information terminal side by the encryption code transmitting means. Decoding means for decoding with the transmitted public key of the information terminal, wherein the code transmitted to the information terminal side by the code transmitting means is equal to the code decoded by the decoding means, The information terminal side can be confirmed.

Here, in the authentication system of the present invention, the key generation means can generate a public key and a secret key based on a terminal identifier unique to the information terminal and a predetermined random number.

Here, in the authentication system of the present invention, a key connected to a communication network for generating a public key and a secret key of the information terminal and transmitting the generated public key and secret key to the information terminal. The public key transmission means of the information terminal may further include a generation device, and may transmit the public key transmitted by the key generation device to the subscriber identifier issuing device.

Here, in the authentication system according to the present invention, there is provided a key recording device for generating a public key and a secret key of the information terminal and recording the generated public key and the secret key in a predetermined recording medium. Further, the public key transmitting means of the information terminal can read the public key recorded in the predetermined recording medium by the key recording device and transmit the public key to the subscriber identifier issuing device.

Here, in the authentication system of the present invention, the subscriber identifier issued by the subscriber identifier issuing means may be an identifier capable of identifying and disclosing the information terminal on the Internet.

In the information terminal of the present invention, a subscriber identifier issuing device for issuing a subscriber identifier for identifying a subscriber of the communication network and a public key registration device for registering the public key of the subscriber are provided via the communication network. An information terminal on the subscriber side of the communication network in the connected authentication system, wherein the subscriber identifier is based on the telephone number of the information terminal and generates a public key and a secret key of the information terminal. The key generation means and the public key transmission means for transmitting the public key generated by the key generation means to the subscriber identifier issuing device are provided, and authentication based on the subscriber identifier is performed externally via the Internet to which the communication network is connected. It is characterized by performing with.

Here, in the information terminal of the present invention, a subscriber identifier recording section recording the subscriber identifier transmitted from the subscriber identifier issuing device, and a secret key recording the secret key generated by the key generating means. A recording unit, a means for transmitting the subscriber identifier recorded in the subscriber identifier recording unit to the web server side on the Internet connected to the communication network, and a predetermined code transmitted from the web server side. An encryption code transmission means for encrypting with the secret key recorded in the secret key recording unit and transmitting the encrypted code to the web server side can be further provided.

The subscriber identifier issuing device of the present invention is a subscriber in an authentication system in which an information terminal on the subscriber side of a communication network and a public key registration device for registering the public key of the subscriber are connected via the communication network. A subscriber identifier issuing device for issuing a person identifier, which is a telephone number authenticating means for authenticating a telephone number of an information terminal which has transmitted a public key, and an information terminal whose telephone number is authenticated by the telephone number authenticating means. ,
A subscriber identifier issuing means for issuing a subscriber identifier based on the telephone number, a public key of the information terminal whose telephone number is authenticated by the telephone number authenticating means, and a subscriber identifier issued by the subscriber identifier issuing means. And a subscriber public key information transmitting means for transmitting subscriber public key information including the subscriber public key information to the public key registration device, and transmitting the subscriber identifier issued by the subscriber identifier issuing means to the information terminal side. To do.

The public key registration device of the present invention is an authentication system in which an information terminal on the subscriber side of a communication network and a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber are connected via the communication network. A public key registration device for registering a public key of a subscriber in the system, wherein subscriber public key information includes a public key and a subscriber identifier of an information terminal whose telephone number transmitted from a subscriber identifier issuing device has been authenticated. A subscriber public key information registration means, and a subscriber public key information recording section in which the subscriber public key information registered by the subscriber public key information registration means is publicly recorded on the Internet, Web on the Internet to which the communication network is connected
The public key corresponding to the subscriber identifier transmitted from the server side is obtained from the subscriber public key information recording unit and transmitted to the web server side.

The authentication method of the present invention is an information terminal on the subscriber side of a communication network, a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber, and a public key registration for registering the public key of the subscriber. An authentication method in a system in which an apparatus is connected via the communication network, comprising: a key generation step of generating a public key and a secret key of an information terminal; and a public key generated by the key generation step from the information terminal. A public key transmitting step for transmitting to the subscriber identifier issuing device; a telephone number authenticating step for the subscriber identifier issuing device to authenticate the telephone number of the information terminal that has transmitted the public key in the public key transmitting step; A subscriber identifier issuing step in which the subscriber identifier issuing device issues a subscriber identifier based on the telephone number of the information terminal whose telephone number has been authenticated by the step; From the subscriber identifier issuing device to the public key registration device, subscriber public key information including the public key of the information terminal whose telephone number has been authenticated in the telephone number authenticating step and the subscriber identifier issued in the subscriber identifier issuing step. And the subscriber public key information transmitted to the public key registration device in the subscriber public key information transmission step, is registered in the subscriber public key information registration section. A registration step, a subscriber identifier transmitting step of transmitting the subscriber identifier issued by the subscriber identifier issuing step from the subscriber identifier issuing device to the information terminal side, and an information terminal via the Internet connected to the communication network. And an authentication step of externally performing authentication based on the subscriber identifier transmitted by the subscriber identifier transmitting step. And it features.

Here, in the authentication method of the present invention, in the authentication step, the subscriber identifier transmitted in the subscriber identifier transmission step is transmitted from the information terminal to a web server on the Internet to which a communication network is connected. An information terminal side subscriber identifier transmitting step, and a web server side subscriber identifier transmitting step of transmitting the subscriber identifier transmitted by the information terminal side subscriber identifier transmitting step from a web server to the public key registration device. A public key registration device for obtaining a public key corresponding to the subscriber identifier transmitted in the web server side subscriber identifier transmission step from the subscriber public key information registration unit and transmitting the public key from the public key registration device to the web server Side transmitting step and a code transmitting step of transmitting the generated predetermined code from the web server to the information terminal An encryption code transmission step of encrypting the predetermined code transmitted in the code transmission step with the secret key generated in the key generation step, and transmitting the encrypted code to a web server; A decoding step of decoding the encrypted code transmitted to the web server by the code transmission step with the public key of the information terminal transmitted from the public key registration device to the web server; and the information transmission by the code transmission step. If the code transmitted to the terminal is equal to the code decoded in the decoding step, the step of confirming the information terminal can be provided.

According to the program of the present invention, a computer is configured such that a subscriber identifier issuing device for issuing a subscriber identifier for identifying a subscriber of a communication network and a public key registration device for registering the public key of the subscriber are connected to the communication network. An information terminal on the subscriber side of the communication network in the authentication system connected via the information terminal, the subscriber identifier being based on the telephone number of the information terminal, the public key and secret of the information terminal. Key generating means for generating a key, public key transmitting means for transmitting the public key generated by the key generating means to the subscriber identifier issuing device, and authentication based on the subscriber identifier via the Internet connected to the communication network. It is a program that causes it to function as a means to communicate with the outside.

Here, in the program of the present invention,
The subscriber identifier recording unit records the subscriber identifier transmitted from the subscriber identifier issuing device, the secret key recording unit records the secret key generated by the key generating means, and the subscriber identifier recording unit records the secret key. Means for transmitting the subscriber identifier to the web server on the Internet to which the communication network is connected, and a predetermined code transmitted from the web server side is encrypted with the secret key recorded in the secret key recording unit. Turned into
It can further comprise an encrypted code transmitting means for transmitting the encrypted code to the web server side.

The program of the present invention is a subscriber in an authentication system in which a computer is connected to an information terminal on the subscriber side of a communication network and a public key registration device for registering the public key of the subscriber via the communication network. In the subscriber identifier issuing device for issuing the identifier of, the telephone number authenticating means for authenticating the telephone number of the information terminal that has transmitted the public key, the information terminal whose telephone number is authenticated by the telephone number authenticating means,
A subscriber identifier issuing means for issuing a subscriber identifier based on the telephone number, a public key of the information terminal whose telephone number is authenticated by the telephone number authenticating means, and a subscriber identifier issued by the subscriber identifier issuing means. A program for functioning as subscriber public key information transmitting means for transmitting the subscriber public key information including the subscriber public key information to the public key registration device, and means for transmitting the subscriber identifier issued by the subscriber identifier issuing means to the information terminal side. is there.

The program of the present invention authenticates a computer by connecting an information terminal on the subscriber side of a communication network and a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber via the communication network. In the public key registration device for registering the public key of the subscriber in the system, the subscriber public key information including the public key and the subscriber identifier of the information terminal whose telephone number transmitted from the subscriber identifier issuing device is authenticated, Subscriber public key information registering means for registering in the subscriber public key information recording section that is publicly recorded on the Internet, and corresponds to the subscriber identifier transmitted from the web server side on the Internet connected to the communication network. It is a program for functioning as a means for obtaining a public key from the subscriber public key information recording unit and transmitting it to the web server side.

The recording medium of the present invention is a computer-readable recording medium in which the program according to any one of claims 13 to 16 is recorded.

[0024]

BEST MODE FOR CARRYING OUT THE INVENTION Each embodiment of the present invention will be described in detail below.

Embodiment 1. FIG. 1 shows an outline of the authentication system of the present invention. In FIG. 1, reference numeral 20 is a communication network of a communication carrier, 10 is an information terminal on the side of a subscriber subscribed to the communication network 20, 22 is a subscriber identifier issuing device for issuing a subscriber identifier for identifying a subscriber, Reference numeral 24 denotes a public key registration device for registering a subscriber identifier of a subscriber and a public key as a pair, and 3
0 is the Internet to which the communication network 20 is connected, 42 is an authentication / accounting device that authenticates subscribers and collectively deducts call charges or makes credit settlement, and 40 is a web of a payment institution which is the front end of the authentication / charging device 42. Server and 52 are content service providers (CS
P) or a service providing device such as a mail server operated by an application service provider (ASP), 50 is a CSP or an ASP (hereinafter, referred to as “CSP / AS”).
(Abbreviated as “P”) web server.

The information terminal 10 is preferably a browser phone such as a mobile phone or a PHS phone that can send and receive e-mail by itself and can access various contents on the Internet 30. Alternatively, the information terminal 10 may be a portable information terminal such as a personal computer or a PDA connected by dial-up.
The telephone number of the information terminal 10 is one that has been contracted with a subscriber of the information terminal 10 in advance by a telecommunications carrier who operates the communication network 20, and the identity of the subscriber has already been confirmed. Is. The authentication system of the present invention focuses on the fact that such a telephone number is associated with the subscriber himself, and that impersonation is extremely difficult. Connection to the communication network 20 in the form of a so-called prepaid telephone, which does not require a contract with a subscriber, is not included. The communication network 20 is an analog telephone network, ISDN,
It is a network that is closed compared to the Internet 30, such as a mobile communication network. Subscriber identifier issuing device 2 described above
Reference numeral 2 is a gateway such as a router. It is assumed that the subscriber identifier issuing device 22 and the public key registration device 24 are operated in the communication network 20 by the communication carrier.

As shown in FIG. 1, processing at the time of use registration is performed between the information terminal 10 and the subscriber identifier issuing device 22 (steps S10 to S20. Here, steps are the authentication of the present invention described later). These are the steps in the method, and so on). The subscriber identifier of the subscriber is registered with the public key (step S18). When the information terminal 10 uses a service such as the service providing device 52 and makes a payment for the service, the public key registration device 24 communicates with the CSP / ASP web server 50 and the payment institution web server 40 via the Internet 30. The processing at the time of using the service is performed during the period (steps S30, S36 and S38 or steps S30 to S40 in the authentication method of the present invention described later). The service providing device 52 reads the public key as needed (step S3).
4). In the following, regarding the authentication system and the authentication method of the present invention, the processing at the time of use registration of the information terminal 10 will be described first, and then the Internet 30 is accessed to access the CSP /
ASP web server 50 and payment agency web
The process of mutually authenticating with the server 40 will be described.

FIG. 2 is a block diagram showing processing at the time of use registration of the information terminal 10 in the first embodiment of the present invention. In FIG. 2, the portions denoted by the same reference numerals as those in FIG. In FIG. 2, reference numeral 12 is the information terminal 1.
A display unit of 0, 200 is a private subscriber ID database in which the telephone number of the subscriber of the information terminal 10 and the subscriber identifier issued by the subscriber identifier issuing device 22 are recorded.
Reference numeral 00 is a public public key database in which subscriber public key information including a subscriber identifier issued by the subscriber identifier issuing device and an authenticated public key of the information terminal 10 is recorded. Here, public or private means the Internet 30.
It means that it is accessible or not from the CSP / ASP web server 50 or the payment institution web server 40 connected to the.

In FIG. 2, the key generating means of the information terminal 10 has a key pair (P and S) of a secret key P and a public key S in the information terminal 10 at the time of online sign-up or the first access to the Internet 30. ) Is generated (step S10). In FIG. 2, the public key P is shown with its key teeth facing upward, and the private key S is shown with its key teeth facing downward. Hereinafter, the same applies to other figures. The key generation means can generate a key pair by using a terminal identifier (device identifier or device ID) such as a serial number unique to the information terminal 10 and an arbitrary random number such as a timer count value as initial values. As a result, it is possible to generate a key pair that the telecommunications carrier of the communication network 20 or the manufacturer of the information terminal 10 cannot know. On the contrary, when the communication carrier manages the key pair, the communication network 20
It is also possible to generate a key pair with a key generation device (not shown) on the side and transmit the generated key pair to the information terminal 10 online or offline. The private key S can be recorded in a private key recording unit (not shown). The private key recording unit is preferably stored in a memory that cannot be rewritten by normal processing, such as a telephone number. Furthermore, it is preferable to set the secret key S so that the value cannot be viewed or transmitted to the outside by operating the information terminal 10. In addition to the above-described key generation means or key generation device, a key pair is generated by another device (key recording device) off-line and written in a desired recording medium such as an IC card, and this recording medium is stored in the information terminal 10. It can also be mounted on, inserted into, or embedded in a recording medium mounting portion (not shown). Alternatively, at the factory shipment stage of the information terminal 10,
The key pair may be burned in advance. Information terminal 10
Can also read the key pair from this recording medium or read the key pair from the burned state and send the read public key to the subscriber identifier issuing device 22.

The public key transmitting means of the information terminal 10 transmits the public key P generated by the key generating means to the subscriber identifier issuing device 22 (step S12). The subscriber may send a desired e-mail address when sending the public key.

The telephone number authenticating means of the subscriber identifier issuing device 22 authenticates the telephone number of the information terminal 10 which has transmitted the public key P by the public key transmitting means (numbering authentication) (step S14). This number authentication is performed by the subscriber identifier issuing device 22.
It can also be performed by a dedicated device other than.

The subscriber identifier issuing means of the subscriber identifier issuing device 22 issues a subscriber identifier for the information terminal 10 whose telephone number has been authenticated by the telephone number authenticating means based on this telephone number (step S16). The subscriber identifier is preferably such that the telephone number cannot be or is very difficult to deduce from the identifier. The subscriber identifier can be an identifier that can identify and publish the information terminal 10 on the Internet 30. For example, the device identifier of the information terminal 10 (device I
D), a mail address, a fixed IP address, or the like. The subscriber identifier issuing device 22 uses the information terminal 10
The subscriber's telephone number and the subscriber identifier issued by the subscriber identifier issuing device 22 can be recorded in the secret subscriber ID database 200.

The subscriber public key information transmitting means of the subscriber identifier issuing device 22 is the public key P of the information terminal 10 whose telephone number is authenticated by the telephone number authenticating means and the subscriber identifier issued by the subscriber identifier issuing means. Subscriber public key information including and is public key registration device (subscriber public key information recording unit) 24
To (step S17).

The subscriber public key information registration means of the public key registration device 24 stores the subscriber public key information transmitted by the subscriber public key information transmission means in the public public key database 300.
(Step S18). Writing to the public public key database 300 is for the information terminal 10 that has been issued and authenticated.
Is permitted only at the time of online sign-up from, and is only readable and not writable on the Internet 30. The subscriber identifier issuing device 22 transmits the subscriber identifier issued by the subscriber identifier issuing means to the information terminal 10 side (step S20). Information terminal 10
Can record the subscriber identifier transmitted from the subscriber identifier issuing device 22 in a subscriber identifier recording unit (not shown).

FIG. 3 shows the data structure of the private subscriber ID database 200 in the authentication system of the present invention. In FIG. 3, reference numeral 202 is the telephone number of the information terminal 10 (for example, “012-345”), and 204 is the telephone number 2.
The subscriber identifier of the subscriber who signed the contract in 02 (eg, “960-381”), 206 is the electronic mail address of the subscriber of the subscriber identifier 204 (eg, “miyahi
ro@kccs.co.jp ”), and 208 is the date (for example,“ 2001.1.1 (indicating January 1, 2001) ”when the subscriber with the subscriber identifier 204 first signed up online. ], 210 is the name of the subscriber of the subscriber identifier 204 (for example, “Miyahiro”), 212 is the address of the subscriber of the subscriber identifier 204 (for example, “Kyoto”), and 214 is the subscriber of the subscriber identifier 204. An account number that can be settled by the authentication / charging device 42 (for example, "Public 12"
3-456 (indicating ordinary account 123-456).
The telephone number 202 and the subscriber identifier 204 are three-digit numbers hyphenated, but this is an example and is not limited to these examples. In particular, the subscriber identifier 204 may include letters or symbols. The full name 210 is only a surname, but this is an example and may be a surname or a company name. Address 212
Shows only the city name, but this is an example and may be a detailed address display. Although the account number 214 indicates a normal account, it is needless to say that this is an example and may be a current number.

FIG. 4 shows the data structure of the public public key database 300 in the authentication system of the present invention. 4, reference numeral 204 is a subscriber identifier as in FIG. 3, and reference numeral 302 is a public key corresponding to the subscriber identifier 204. The public key is "AB6F3002 C52C9D0.
1 ”, but this is an example and is not limited to such data. As described above, the public key 302 is generated by the information terminal 10, and the telephone number of the information terminal 10 is the subscriber identification device 22.
It has been certified by.

5A and 5B show examples displayed on the display unit 12 of the information terminal 10 in the first embodiment of the present invention. The display example of FIG. 5A is displayed before the above key pair generation (step S1). In FIG. 5A, reference numeral 100 is an example of a screen displayed on the display unit 12 before step S10 described above, 101 is a display indicating that online sign-up is performed at the time of use registration, and 102 is an information terminal. A display for inquiring the desired e-mail address to the subscriber of 10; 104 is an input field in which the user login name of the desired e-mail address of the subscriber of the information terminal 10 can be entered; 106 is a service providing device 52 is a display of a fee payment method when a paid content provided by 52 or the like is used. The subscriber can select "> 3 credit card" or the like on the display 106.
Reference numeral 108 indicates that the subscriber has entered the above-mentioned input field 104 and display 106.
Sign-up selection button to select when making an online sign-up after making a selection for
Reference numeral 09a denotes a cancel button for canceling the input value or the like after the selection in the input field 104 and the display 106 is performed.

The display example of FIG. 5B is displayed during the above-described use registration (steps S10 to S20). In FIG. 5B, reference numeral 110 is an example of a screen displayed on the display unit 12 during steps S10 to S20 described above, 111 is a display indicating that online sign-up is being performed at the time of use registration, and 112 is a series. Display during processing, display indicating that the public key or the like is being transmitted (step S12) (for example, "transmit one key (about 10 seconds)"), and data is being transmitted and received (steps S12 to S20). Display to the effect (for example, "2 data transmission / reception (about 15 seconds)")
And a display indicating that the browser is being automatically set (for example, "3 browsers are automatically set (about 5 seconds)"). The stage currently being executed can be displayed in a manner distinguishable from other stages, such as a display indicating that the data of the display 112 is being transmitted / received. Reference numeral 114 is a display showing the degree of progress of the usage registration process, and as the progress progresses, the square column can be filled in with black and displayed as shown by the arrow in FIG. 5 (B). Reference numeral 109b is a cancel button for canceling the use registration process on the way.

As described above, according to the first embodiment of the present invention, the subscriber is authenticated by using the telephone number of the information terminal 10 which is associated with the subscriber and is extremely difficult to spoof, resulting in a huge number of subscribers. Authentication of several information terminals (clients) can be easily performed. Further, a subscriber identifier that is difficult to guess based on the authenticated telephone number is issued, and the public identifier is made public by pairing the subscriber identifier with the public key generated on the information terminal 10 side. It can be registered in the database 300. Therefore, it is possible to easily verify the correctness.

Embodiment 2. FIG. 6 is a block diagram showing an authentication process when the information terminal 10 accesses the web server 50 or the like via the Internet 30 in the second embodiment of the present invention. In FIG. 6, the parts denoted by the same reference numerals as those in FIG. 1 or FIG. Figure 6
Reference numeral 60 is the clearing house web server 40 and the CSP.
An authentication module for authenticating the information terminal 10 installed in the / ASP web server 50, and 400 has registered a password used by the web server 40 of the payment institution and used for authenticating the information terminal 10. A password registration database 500 is a content registration database in which the content used by the CSP / ASP web server 50 for providing services is registered. The authentication module 60 such as the web server 50 includes a code transmitting means, a decoding means, etc. described below.

In FIG. 6, the information terminal 10 is connected to the communication network 20.
A case of accessing a desired web server 50 or the like on the Internet 30 connected to the Internet will be described. It is assumed that a server certificate issued by a third-party certification body is distributed to the web server 50 and the like, and that the public key of the server is distributed to the information terminal 10 from the third-party certification body. To do. By using these, the information terminal 1
0 can establish an SSL session. However, only this SSL session can perform only server authentication and the like, and cannot authenticate the information terminal 10, that is, the client. In the authentication system of the present invention, P
When KI level security is required, first, the information terminal 10 transmits the subscriber identifier recorded in the subscriber identifier recording section to the web server 50 side. On this occasion,
The subscriber identifier can be transmitted by embedding it in the HTTP header (step S30).

The web server 50 or the like transmits the subscriber identifier transmitted from the information terminal 10 side to the public key registration device 24 (step S32). Here, the public key registration device 2
It is assumed that a server certificate issued by a third party certification authority 4 is distributed, and encryption is performed after mutual authentication with the CSP / ASP web server 50.

The public key registration device 24 obtains from the public key database 300 the public key P corresponding to the subscriber identifier transmitted from the CSP / ASP web server 50 side,
It is transmitted to the web server 50 side of CSP / ASP (step S34).

The code transmitting means of the CSP / ASP web server 50 generates a code such as an arbitrary random number and transmits the code to the information terminal 10 side (step S36).

The encryption code transmitting means of the information terminal 10 is C
The secret key S in which a code such as an arbitrary random number transmitted from the SP / ASP web server 50 side is recorded in the secret key recording unit.
And the encrypted code is transmitted to the CSP / ASP web server 50 side (step S38).

The decrypting means of the CSP / ASP web server 50 uses the encrypted code transmitted from the information terminal 10 by the encrypted code transmitting means as the public key registration device 2
It decrypts with the public key P of the information terminal 10 transmitted from the 4 side. The CSP / ASP web server 50 confirms the information terminal 10 side when the code such as an arbitrary random number transmitted to the information terminal 10 side by the code transmitting means is equal to the code decoded by the decoding means. (Step S40). That is, it can be confirmed that the information terminal 10 side surely has the secret key S that is a pair of the public key P associated with the subscriber identifier. In steps S36 to S40 described above, a hash value obtained by a desired hash function may be used instead of the code such as an arbitrary random number.

In addition to the confirmation method on the side of the information terminal 10 described above, a method of synchronizing time may be used. For example, the real time that the information terminal 10 has, for example, 200
If it is 20:15:32 on July 12, 1st, "2
"0010712201532" and the information terminal 1
An ID unique to 0, for example, a value obtained by concatenating a subscriber identifier or a serial number can be encrypted with the secret key S of the information terminal 10 and sent to the CSP / ASP web server 50. On the CSP / ASP web server 50 side,
The value sent by the public key P of the information terminal 10 can be decrypted to confirm the validity in real time and the validity of the ID unique to the information terminal 10.

When the CSP / ASP web server 50 is operated by a clearing house having a clearing house web server 40, the information terminal 10 is connected to the Internet 30.
It is also possible to input a password together with the subscriber identifier at the time of first access to and to register the set of the subscriber identifier and the password in the password registration database 400. This processing can be performed continuously with the processing at the time of use registration in the first embodiment. If PKI level security is not required, the password is entered together with the subscriber identifier from the information terminal 10 at the time of access in step S30, and this password is used on the SSL session for CSP /
It may be transmitted to the ASP web server 50 or the like. C
The SP / ASP web server 50 can authenticate the subscriber from the validity of the subscriber identifier / password pair.

FIG. 7 shows the data structure of the password registration database 400 in the authentication system of the present invention.
The password registration database 400 is managed by a clearing house having a web server 40 of the clearing house.
In FIG. 4, reference numeral 204 is a subscriber identifier (for example, “9
60-381 "), 402 is the password corresponding to the subscriber identifier 204 (for example," 1234 "), 404 is the date and time when the password 402 was registered in the database 400 (for example," 2001.1.1 (January 2001) ". 1))), and 406 is the setting state of the password 402 (for example, "active"). Subscriber identifier 204 is 3
The digits are connected by hyphens, but this is an example and is not limited to this example, and may include alphabetic characters or symbols. Similarly, the password 402 is also an example and is not limited to this example, and may include an alphabetic character or a symbol.

FIG. 8 shows the data structure of the content registration database 500 in the authentication system of the present invention.
The content registration database 500 is managed by a service provider having a CSP / ASP web server 50. In FIG. 8, reference numeral 502 is a content number for identifying the content (for example, “001-00”).
7 ”), 504 is the name of the content corresponding to the content number 502 (for example,“ IP temptation ”), 506 is the price of the content corresponding to the content number 502 (for example,“ 200 yen ”), and 508 is the content number 502. Price 506 that supports content to be played
Payment method (for example, “credit or collective call withdrawal”). The content number 502 is formed by connecting three-digit numbers with a hyphen, but this is an example and is not limited to this example, and may include an alphabetic character or a symbol.

FIGS. 9A and 9B show an example displayed on the display unit 12 of the information terminal 10 when the payment method is registered in the settlement organization in the second embodiment of the present invention. FIG. 9 (A),
The display example of (B) is displayed after the above steps S40 are completed. In FIG. 9A, reference numeral 1
20 is an example of a screen displayed on the display unit 12 when the payment method is registered with the payment institution, 121 is a display indicating that the payment method is registered, and 122 is a content for the subscriber of the information terminal 10. A display indicating that a password is registered if it is desired to deduct the charge together with the call charge, and 124 is an input field in which the subscriber can enter the password,
126 indicates that the site is encrypted, 12
8a is an OK button that is selected when the payment method registered by the subscriber is accepted, and 109c is the above-mentioned input field 124.
This is a cancel button for canceling the entered value, etc., after the entry has been made.

The display example of FIG. 9B is displayed when the registration of the above-mentioned payment method is completed. FIG. 9 (B)
In the figure, reference numeral 140 is an example of a screen displayed on the display unit 12 when the payment method registration is completed, 121 is a display indicating that the payment method is registered, and 142 is a notification that the payment method registration is completed. A display 144 for the subsequent use of the password is a return button 144 that is selected when returning to the top menu (not shown), and 146 is a password change button that is selected when changing the password.

10A and 10B show the information terminal 10 when the pay service is used in the second embodiment of the present invention.
An example displayed on the display unit 12 of is shown. FIG. 10 (A),
The display example of (B) is first displayed at the time of access in step S30 described above. In FIG. 10 (A),
Reference numeral 160 is an example of a screen that is first displayed on the display unit 12 at the time of access in step S30, 161 is a display indicating that the new music is downloaded, and 162 is a content registration database 500 for subscribers of the information terminal 10. Is a display showing the data registered in, such as the new song title or name 504 (for example, “IP temptation”), the new song price 5
06 (for example, “200 yen”) and the payment method 508 (for example, “call charge and collective withdrawal”) supported for the new music are displayed. Reference numeral 164 is a display asking whether or not to download, 128b is an OK button selected when the subscriber approves the download, 1
09c is a cancel button for not performing the download.

The display example of FIG. 10B is the above step S.
It is displayed when up to 40 is completed. Figure 1
In 0 (B), reference numeral 180 is a screen example displayed on the display unit 12 when step S40 is completed, 161
Indicates that the screen is for downloading new music, 18
2 is a display prompting the subscriber of the information terminal 10 to enter a password, 124 is an input field in which the subscriber can enter the password, 126 is a display that the site is encrypted, and 128c is a subscription An OK button selected when the person accepts the password input by the person, 109d is a cancel button for canceling the input value or the like after the input in the input field 124 is performed.

As described above, according to the second embodiment of the present invention, when the PKI level security is required when the information terminal 10 accesses the web server 50 or the like on the Internet 30, first, the information terminal 10 The subscriber identifier is transmitted to the web server 50 side. The web server 50 or the like transmits the subscriber identifier transmitted from the information terminal 10 side to the public key registration device 24, and the public key registration device 24
Obtains the public key P corresponding to the subscriber identifier transmitted from the web server 50 side from the public key database 300 and transmits it to the web server 50 side. Next, the web
The code transmitting means of the server 50 generates a code such as an arbitrary random number and transmits the code to the information terminal 10 side, and the information terminal 1
The encryption code transmitting means of 0 encrypts a code such as an arbitrary random number transmitted from the web server 50 side with the secret key S recorded in the secret key recording unit, and the encrypted code is transmitted to the web server. Send to 50 side. The decryption means of the web server 50 sends the encrypted code transmitted from the information terminal 10 side by the encryption code transmission means to the public key registration device 2
It decrypts with the public key P of the information terminal 10 transmitted from the 4 side. As described above, when the code such as an arbitrary random number transmitted to the information terminal 10 side by the code transmitting means is equal to the code decoded by the decoding means, the web server 50 uses the information terminal 10 as the subscriber identifier. It can be confirmed that the private key S that is a pair of the associated public key P is surely possessed. Therefore, it is possible to easily confirm the legitimacy of a huge number of information terminals 10 (clients).

In a normal PKI, the expiration date of the key is recorded in the electronic certificate distributed to the information terminal 10. The process of confirming this effectiveness is extremely complicated. However, according to the authentication system and the like of the present invention, CSP /
The expiration date of the key is managed on the side of the ASP web server 50, and the expired key or the key confirmed to be leaked may be deleted from the public key DB 300. If deleted, clearing house web server 40 or CSP
/ The ASP web server 50, etc. cannot confirm the validity of the key. Therefore, by issuing a message such as "The key is invalid. Please sign up again." Person) can be notified that the key has expired. The user can update to a new key by signing up in the same way as the first time. The expiration date of the key may be, for example, 1 year, 5 years, or indefinitely (that is, the expiration date management is not performed), but this can be arbitrarily set by the communication carrier.
It may be changed as appropriate depending on the circumstances of the communication carrier, such as the introduction of a new encryption method or simultaneous update.

A computer program that realizes the functions of the above-described embodiments is appropriately supplied to the information terminal 10, the subscriber identifier issuing device 22, and the public key registration device 24 in the authentication system of the present invention, and the CPU of the device, etc. Needless to say, the object of the present invention can be achieved by executing the computer program. The computer program can be supplied via a network such as the Internet 30 or the communication network 20, or can be supplied in the form of a recording medium to a recording medium reading unit (not shown) of the above apparatus. In the above case, the computer program itself realizes the novel functions of the above-mentioned device of the present invention. Furthermore, a recording medium having the computer program recorded therein also constitutes the present invention. As a recording medium recording the computer program, for example,
CD-ROM, memory card, DVD, optical disk,
An FD, hard disk, ROM or the like can be used.

[0058]

As described above, according to the authentication system, the authentication method, and the like of the present invention, the subscriber is authenticated by using the telephone number of the information terminal 10 that is associated with the subscriber and is extremely difficult to impersonate. By doing so, it is possible to easily authenticate a huge number of information terminals (clients), and to provide an authentication system and an authentication method that can easily secure security equivalent to PKI compared to PKI. can do.

[Brief description of drawings]

FIG. 1 is a diagram showing an outline of an authentication system of the present invention.

FIG. 2 is an information terminal 10 according to the first embodiment of the present invention.
It is a block diagram showing a process at the time of use registration.

FIG. 3 is a diagram showing a data structure of a private subscriber ID database 200 in the authentication system of the present invention.

FIG. 4 is a diagram showing a data structure of a public public key database 300 in the authentication system of the present invention.

FIG. 5 is an information terminal 10 according to the first embodiment of the present invention.
It is a figure which shows the example displayed on the display part 12 of this.

FIG. 6 is an information terminal 10 according to the second embodiment of the present invention.
6 is a block diagram showing an authentication process when a user accesses a web server 50 or the like via the Internet 30. FIG.

FIG. 7 is a diagram showing a data structure of a password registration database 400 in the authentication system of the present invention.

FIG. 8 is a diagram showing a data structure of a content registration database 500 in the authentication system of the present invention.

FIG. 9 is a diagram showing an example displayed on the display unit 12 of the information terminal 10 when the payment method is registered in the settlement organization in the second embodiment of the present invention.

FIG. 10 is a diagram showing an example displayed on a display unit 12 of the information terminal 10 when using a pay service in Embodiment 2 of the present invention.

[Explanation of symbols]

10 information terminal, 12 display section of information terminal 10, 2
0 communication carrier's communication network, 22 subscriber identifier issuing device, 24 public key registration device, 30 Internet, 40 settlement institution web server, 42 authentication / billing device, 50 CSP / ASP web server, 52 service provision Device, 60 authentication module, 100, 110, 120, 140, 160, 18
0 An example of a screen displayed on the display unit 101 A display indicating that it is a screen for online signup, 10
2 Display asking subscribers for their desired e-mail address, 104 User login name input field,
106 display of fee payment method, 108 sign-up selection button, 109a, 109b, 109c, 10
9d cancel button, 111 online sign-up display, 112 a series of processing in progress, 114 display showing the degree of progress of usage registration processing, 121 a screen for registering a payment method Display, 122 display showing password registration, 12
4 Password input field, 126 Display that the site is encrypted, 128a, 128b, 128c
OK button, 142 Display regarding completion of registration of payment method, 144 Return button, 146 Password change button, 161 Display indicating that screen is for downloading new music, 162 Display showing data registered in content registration database 500, etc., 164 Display asking whether to download, 182 Display prompting for password, 200 Subscriber ID database, 202 Telephone number, 204 Subscriber identifier, 206 E-mail address, 208 Year of online sign-up Date and time, 210 Subscriber name, 212 Subscriber address, 214 Subscriber account number, 300 Public key database, 3
02 public key, 400 password registration database, 402 password, 404 password registration date, 406 password setting status, 500 content registration database, 502 content number, 504 content name, 506 content price, 508 content is supported How to pay the price.

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04M 11/00 302 H04L 9/00 673B 601C 601F F term (reference) 5B085 AE01 AE23 AE29 BG03 5J104 AA07 AA16 EA16 EA26 KA02 MA01 NA02 PA02 PA10 5K024 AA62 AA63 AA71 BB04 CC07 CC09 CC10 CC11 DD01 DD02 FF03 FF04 GG01 GG05 GG06 GG08 5K101 KK16 KK17 KK18 LL00 MM07 NN48 PP03 PP04

Claims (18)

[Claims] 1. An information terminal on the subscriber side of a communication network, a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber, and a public key registration device for registering the public key of the subscriber are the communication network. An authentication system connected via the information terminal, wherein the information terminal has a key generation means for generating a public key and a secret key of the information terminal, and a public key generated by the key generation means for issuing a subscriber identifier. A public key transmitting means for transmitting to the device, for externally performing authentication based on a subscriber identifier via the Internet connected to the communication network, wherein the subscriber identifier issuing device is configured by the public key transmitting means. For a telephone number authenticating unit that authenticates the telephone number of the information terminal that has transmitted the public key, and for the information terminal whose telephone number has been authenticated by the telephone number authenticating unit, issue a subscriber identifier based on the telephone number Subscriber public key information including a subscriber identifier issuing means, a public key of the information terminal whose telephone number is authenticated by the telephone number authenticating means, and a subscriber identifier issued by the subscriber identifier issuing means. A subscriber public key information transmitting means for transmitting to the registration device,
The subscriber identifier issued by the subscriber identifier issuing means is transmitted to the information terminal side, and the public key registration device registers the subscriber public key information transmitted by the subscriber public key information transmitting means. An authentication system characterized by comprising a subscriber public key information registering means. 2. The authentication system according to claim 1, further comprising a web server on the Internet connected to a communication network, wherein the information terminal records a subscriber identifier transmitted from a subscriber identifier issuing device. A subscriber identifier recording unit, a secret key recording unit that records the secret key generated by the key generation unit, and a subscriber identifier recorded in the subscriber identifier recording unit,
Means for transmitting to the web server side, a predetermined code transmitted from the web server side is encrypted with a secret key recorded in the secret key recording unit, and the encrypted code is transmitted to the web server The public key registration device is a subscriber whose public key information registered by the subscriber public key information registration means is publicly recorded on the Internet. A public key information recording unit is further provided, and a public key corresponding to the subscriber identifier transmitted from the web server side is obtained from the subscriber public key information recording unit and transmitted to the web server side. Authentication system characterized by. 3. The authentication system according to claim 2, wherein the web server transmits a subscriber identifier transmitted from an information terminal side to the public key registration device, generates a predetermined code, A code transmitting means for transmitting a code to the information terminal side, and an encrypted code transmitted by the encryption code transmitting means from the information terminal side for disclosure of the information terminal transmitted from the public key registration device side Decoding means for decoding with a key is provided, and when the code transmitted to the information terminal side by the code transmitting means is equal to the code decoded by the decoding means, the information terminal side is confirmed. An authentication system characterized by that. 4. The authentication system according to claim 1, wherein the key generation means generates a public key and a secret key based on a terminal identifier unique to the information terminal and a predetermined random number. Characteristic authentication system. 5. The authentication system according to any one of claims 1 to 3, wherein a public key and a secret key of the information terminal are generated, and the generated public key and secret key are transmitted to the information terminal. The authentication system further comprising a key generation device connected to a communication network, wherein the public key transmission means of the information terminal transmits the public key transmitted by the key generation device to a subscriber identifier issuing device. 6. The authentication system according to claim 1, wherein a public key and a secret key of the information terminal are generated, and the generated public key and secret key are recorded in a predetermined recording medium. A public key transmitting means of the information terminal reads the public key recorded in a predetermined recording medium by the key recording device, and transmits the public key to the subscriber identifier issuing device. Characteristic authentication system. 7. The authentication system according to claim 1, wherein the subscriber identifier issued by the subscriber identifier issuing means is:
An authentication system characterized by being an identifier that can identify and publish an information terminal on the Internet. 8. An authentication system in which a subscriber identifier issuing device for issuing a subscriber identifier for identifying a subscriber of a communication network and a public key registration device for registering the public key of the subscriber are connected via the communication network. An information terminal on the subscriber side of the communication network in which the subscriber identifier is based on the telephone number of the information terminal, and key generation means for generating a public key and a secret key of the information terminal, Public key transmission means for transmitting the public key generated by the key generation means to the subscriber identifier issuing device, and performing authentication based on the subscriber identifier via the Internet connected to the communication network to the outside. And information terminal. 9. The information terminal according to claim 8, wherein a subscriber identifier recording unit that records a subscriber identifier transmitted from the subscriber identifier issuing device, and a secret that records a secret key generated by the key generation means. A key recording unit, a subscriber identifier recorded in the subscriber identifier recording unit,
A means for transmitting to the web server side on the internet connected to the communication network, and a predetermined code transmitted from the web server side is encrypted by the secret key recorded in the secret key recording section, and the encrypted An information terminal further comprising: an encrypted code transmitting means for transmitting the encoded code to the web server side. 10. A subscriber who issues an identifier of a subscriber in an authentication system to which an information terminal on the subscriber side of a communication network and a public key registration device for registering the public key of the subscriber are connected via the communication network. An identifier issuing device, a telephone number authenticating means for authenticating a telephone number of an information terminal that has transmitted a public key, and an information terminal whose telephone number is authenticated by the telephone number authenticating means, based on the telephone number Subscriber public key information including subscriber identifier issuing means for issuing an identifier, a public key of the information terminal whose telephone number is authenticated by the telephone number authenticating means, and a subscriber identifier issued by the subscriber identifier issuing means And a subscriber public key information transmitting means for transmitting to the public key registration device,
A subscriber identifier issuing device, which transmits the subscriber identifier issued by the subscriber identifier issuing means to the information terminal side. 11. A public key of a subscriber in an authentication system in which an information terminal on the subscriber side of a communication network and a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber are connected via the communication network. Which is a public key registration device for registering subscriber public key information including the public key and subscriber identifier of the information terminal of which the telephone number transmitted from the subscriber identifier issuing device has been authenticated. An internet to which the communication network is connected, comprising an information registering means and a subscriber public key information recording section in which the subscriber public key information registered by the subscriber public key information registering means is releasably recorded on the internet. Public key registration, characterized in that the public key corresponding to the subscriber identifier transmitted from the above web server side is obtained from the subscriber public key information recording section and transmitted to the web server side. Location. 12. An information terminal on the subscriber side of a communication network, a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber, and a public key registration device for registering the public key of the subscriber are the communication network. A method for authenticating in a system connected via a key generation step of generating a public key and a secret key of an information terminal, and a public key generated by the key generation step from the information terminal to a subscriber identifier issuing device. A public key transmitting step for transmitting to the public key transmitting step, a telephone number authenticating step in which the subscriber identifier issuing device authenticates the telephone number of the information terminal that transmitted the public key in the public key transmitting step, and a telephone number in the telephone number authenticating step. A subscriber identifier issuing step for the subscriber identifier issuing device to issue a subscriber identifier based on the telephone number for the authenticated information terminal; Subscribe to send subscriber public key information including the public key of the information terminal whose telephone number has been authenticated in step and the subscriber identifier issued in the subscriber identifier issuing step from the subscriber identifier issuing device to the public key registration device. A public key information transmission step, a subscriber public key information registration step of registering the subscriber public key information transmitted to the public key registration device in the subscriber public key information transmission step in a subscriber public key information registration section, A subscriber identifier transmitting step of transmitting the subscriber identifier issued by the subscriber identifier issuing step from the subscriber identifier issuing device to the information terminal side, and the information terminal via the Internet connected to the communication network An authentication step of externally performing authentication based on the subscriber identifier transmitted by the identifier transmitting step. Method. 13. The authentication method according to claim 12, wherein in the authenticating step, the subscriber identifier transmitted in the subscriber identifier transmitting step is transmitted from an information terminal to a web server on the Internet connected to a communication network. An information terminal side subscriber identifier transmitting step, and a web server side subscriber identifier transmitting step of transmitting the subscriber identifier transmitted in the information terminal side subscriber identifier transmitting step from a web server to the public key registration device. And public key registration in which the public key corresponding to the subscriber identifier transmitted in the web server side subscriber identifier transmitting step is obtained from the subscriber public key information registration unit and transmitted from the public key registration device to the web server. The device side transmission step and the code transmission step for transmitting the generated predetermined code from the web server to the information terminal. And flop, encrypts predetermined code transmitted by said code transmission step with the private key generated by the key generating step,
An encrypted code transmitting step of transmitting the encrypted code to the web server, and the encrypted code transmitted to the web server in the encrypted code transmitting step from the public key registration device to the web server. Decoding step of decoding with the transmitted public key of the information terminal, and if the code transmitted to the information terminal in the code transmitting step and the code decoded in the decoding step are the same, confirmation of the information terminal An authentication method comprising the step of: 14. A computer is connected to a subscriber identifier issuing device for issuing a subscriber identifier for identifying a subscriber of a communication network and a public key registration device for registering a public key of the subscriber via the communication network. An information terminal on the subscriber side of the communication network in the authentication system, wherein the subscriber identifier is based on the telephone number of the information terminal, and generates a public key and a secret key of the information terminal. Key generating means, public key transmitting means for transmitting the public key generated by the key generating means to the subscriber identifier issuing device, means for externally performing authentication based on the subscriber identifier via the Internet connected to the communication network Program to function as. 15. The program according to claim 14, wherein the subscriber identifier recording unit records the subscriber identifier transmitted from the subscriber identifier issuing device, and the secret key records the secret key generated by the key generation means. A recording unit, a subscriber identifier recorded in the subscriber identifier recording unit,
A means for transmitting to the web server side on the internet connected to the communication network, and a predetermined code transmitted from the web server side is encrypted by the secret key recorded in the secret key recording section, and the encrypted And a cryptographic code transmitting means for transmitting the encoded code to the web server side. 16. An information terminal on the side of a subscriber of a communication network and a public key registration device for registering the public key of the subscriber are connected to the computer via the communication network to issue an identifier of the subscriber in the authentication system. In the subscriber identifier issuing device, the telephone number authenticating means for authenticating the telephone number of the information terminal that has transmitted the public key, the information terminal whose telephone number is authenticated by the telephone number authenticating means, the subscriber based on the telephone number Subscriber identifier issuing means for issuing an identifier, subscriber public key information including a public key of the information terminal whose telephone number is authenticated by the telephone number authenticating means and a subscriber identifier issued by the subscriber identifier issuing means Subscriber public key information transmitting means for transmitting to the public key registration device, and means for transmitting the subscriber identifier issued by the subscriber identifier issuing means to the information terminal side. Program to function. 17. A subscriber in an authentication system in which a computer is connected to an information terminal on the subscriber side of a communication network and a subscriber identifier issuing device for issuing a subscriber identifier for identifying the subscriber through the communication network. The public key registration device for registering the public key of the subscriber public key information including the public key and the subscriber identifier of the information terminal whose telephone number has been authenticated transmitted from the subscriber identifier issuing device is published on the Internet. Subscriber public key information registration means for registering in the subscriber public key information recording section recorded as possible, the public key corresponding to the subscriber identifier transmitted from the web server side on the Internet to which the communication network is connected, A program to be obtained from the subscriber public key information recording unit and to function as a means for transmitting to the web server side. 18. A computer-readable recording medium in which the program according to any one of claims 14 to 17 is recorded.