JP2004021591A - Management device and authentication device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a storage device capable of safely controlling a password of a user and to provide an authentication device capable of authenticating the user while maintaining the password safely. <P>SOLUTION: This management device is provided with a storage part 13, which stores a user ID given to the user as an identification information for identifying the user, and an encryption part 15 encrypting the user ID by using the password given in correspondence with the user as an encryption key. The user ID encrypted by the encryption part 15 is stored in the storage part 13 as authentication information for authenticating the user. This authentication device is provided with an authentication part 16 comparing the user ID with the identification information stored in the storage part 13 and comparing the user ID encrypted by the encryption part 15 according to the user ID and the password with the authentication information stored in the storage part 13 for performing authentication. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a management device, a management method, and a program for managing a password, and an authentication device, an authentication method, and an authentication program for authenticating a user using a password.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, in a system such as a network system, a user using the system accesses the terminal by logging in from a terminal, and starts using information in the system. When a user logs in to the system from a terminal, the system sends a user name (user name) to the user in order to verify whether the user attempting to log in is an authorized user. ID: Identification) and a password are required. When the user ID and the password are input, the system authenticates the user by comparing the user ID and the password stored in the system.
[0003]
User authentication is divided into an identification function and an authentication function. After identifying the user attempting to log in (identification function), it is determined whether the user attempting to log in is the user himself or herself. Authenticate (authentication function). In user authentication, the user's identification information and authentication information are registered in the system in advance, and if the information registered in the system matches the information specified by the user at the start of using the system, the user Is authenticated. At this time, the user ID is often used as the identification information and the password is used as the authentication information as the user identification information and the authentication information.
[0004]
However, when the system is a network system such as an in-house LAN (Local Area Network), the user ID given to each user is often a code based on a name or an employee code. It is possible to acquire and impersonate the user, and a spoofed user may leak his or her own information. Also, when the user ID is stored in the system, it is often stored as it is without encryption in order to facilitate management. Therefore, an intruder who has entered the system can easily steal the user ID stored as it is.
[0005]
For the user ID, the password is information that only the user himself / herself who does not know even the system operation manager knows, so that the user himself / herself manages it responsibly. The user prevents the password from being leaked by changing the password to a character string that cannot be easily guessed or by changing the password at regular intervals. When a password is managed in the system, it is often stored using an encrypted password method in which a password input by a user is encrypted and stored. As the password encryption method, a simple encryption storage method (FIG. 5A), which is a method of simply encrypting a password using an encryption algorithm and storing it in the system, or an encryption key is used. There is an encryption key utilization storage method (FIG. 5B) which is a method of storing the encrypted data in the system. In the encryption key storage method, a password may be used as an encryption key.
[0006]
In the simple encryption storage method, as shown in FIG. 5A, a user ID input by a user from a terminal is stored as identification information on the system side, and a password input by the user is encrypted by an encryption unit 114a. It is encrypted and stored in the system as authentication information. When authenticating the user, the system reads the authentication information of the user having the user ID based on the identification information from the transmitted user ID, and encrypts the authentication information and the transmitted password. Authentication is performed by comparing with the converted information.
[0007]
In the encryption key use storage method, as shown in FIG. 5B, a user ID input from a terminal by a user is stored as identification information on the system side, and is used by an encryption key stored on the system side. The password input by the user is encrypted by the encryption unit 114b and stored in the system as authentication information. When authenticating the user, the system reads the authentication information of the user having the user ID from the transmitted user ID based on the identification information, and transmits the authentication information and the transmitted password to the system. Authentication is performed by comparing the information encrypted with the encryption key stored in the storage device.
[0008]
However, in the method of storing passwords in the system by encrypting passwords such as the simple encryption storage method and the encryption key storage method, if the encryption algorithm that encrypts the password leaks, even if the encrypted password is decrypted, And it is possible to get a password. Therefore, even if the encryption key is not leaked, there is a risk that the passwords of all users stored in the system are leaked due to the leak of the encryption algorithm.
[0009]
[Problems to be solved by the invention]
As described above, with the conventional password storage method and user authentication method, even if the encryption key is not known, there is a problem that the leakage of the encryption algorithm puts the password of the user at risk. Was.
[0010]
The present invention has been made to solve such a problem, and a storage device, a storage method, a program for realizing the storage device, a storage medium, and a storage medium capable of securely managing a user's password are provided. An object of the present invention is to provide an authentication device, an authentication method, and a program for realizing the authentication device, which can authenticate a user with a secure password.
[0011]
[Means for Solving the Problems]
A management device according to the present invention is a management device that manages identification information and authentication information for allowing a user to use the system, and a user ID assigned to the user. Is stored as identification information for identifying the user (for example, the storage unit 13 in the embodiment of the present invention), and a password assigned to the user is stored in an encryption key. Encryption means for encrypting the user ID (for example, the encryption unit 15 in the embodiment of the present invention), and a user ID encrypted by the encryption means for authenticating the user. Authentication information storage means (for example, the storage unit 13 in the embodiment of the present invention) for storing as authentication information. With such a configuration, the password can be safely managed even when the encryption algorithm is leaked.
[0012]
Further, in the management device according to the present invention, the user ID and the password are input from a user terminal connected to the management device via a network. Thus, the password of the user can be safely managed even through the network.
[0013]
A management method according to the present invention is a management method for managing identification information and authentication information for permitting a user to use the system, and a user ID assigned to the user. Is stored as identification information for identifying the user, a step of encrypting the user ID using a password assigned to the user as an encryption key, and a step of encrypting the encrypted user ID. And storing the user ID as authentication information for authenticating the user. According to such a method, even if the encryption algorithm is leaked, the password can be managed safely.
[0014]
Further, in the management method according to the present invention, the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. . Thus, the password of the user can be safely managed even through the network.
[0015]
A program according to the present invention is a program for causing a computer to manage identification information and authentication information for permitting a user to use the system, and the program corresponds to the user. Storing the assigned user ID as identification information for identifying the user; and encrypting the user ID using a password assigned to the user as an encryption key. And storing the encrypted user ID as authentication information for authenticating the user. With such a program, even if the encryption algorithm is leaked, the password can be managed safely.
[0016]
Furthermore, in the program according to the present invention, the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. Thus, the password of the user can be safely managed even through the network.
[0017]
An authentication device according to the present invention is an authentication device that authenticates a user to authorize use of the system, and identifies a user ID assigned to the user to identify the user. Identification information storage means (for example, the storage unit 13 in the embodiment of the present invention) for storing the user ID as an identification key for encrypting the user ID using a password assigned to the user as an encryption key. Encryption means for encrypting (for example, the encryption unit 15 in the embodiment of the present invention), and authentication information for storing the user ID encrypted by the encryption means as authentication information for authenticating the user The storage unit (for example, the storage unit 13 in the embodiment of the present invention) compares the user ID input by the user with the identification information stored in the identification information storage unit, and inputs the user ID. An authentication unit (for example, a user ID) that compares the user ID encrypted by the encryption unit based on the user ID and the password with the authentication information stored in the authentication information storage unit and performs authentication based on the comparison result. Authentication unit 16) according to the embodiment of the present invention. With such a configuration, even when the encryption algorithm is leaked, the user can be authenticated while securely managing the password.
[0018]
Further, in the authentication device according to the present invention, the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. . Thus, the user can be authenticated while securely managing the password of the user even through the network.
[0019]
An authentication method according to the present invention is an authentication method for authenticating a user to authorize use of the system, and identifies a user ID assigned to the user by identifying the user. Storing the user ID as identification information for encrypting the user ID, using the password assigned to the user as an encryption key, and encrypting the encrypted user ID. Storing the user ID as authentication information for authenticating the user, comparing the user ID input by the user with the stored identification information, and performing the encryption based on the user ID and the password input by the user. Comparing the stored user ID with the stored authentication information, and performing authentication based on the comparison result. According to such a method, even when the encryption algorithm is leaked, the user can be authenticated while securely managing the password.
[0020]
Further, in the authentication method according to the present invention, the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. . Thus, the user can be authenticated while securely managing the password of the user even through the network.
[0021]
A program according to the present invention is a program for realizing a computer to authenticate a user to authorize use of the system, and includes a user ID assigned to the user. Storing the user ID as identification information for identifying the user; encrypting the user ID using a password assigned to the user as an encryption key; Storing the user ID as authentication information for authenticating the user, comparing the user ID input by the user with the stored identification information, and inputting the user ID and password input by the user Comparing the encrypted user ID with the stored authentication information based on the authentication information, and performing authentication based on the comparison result. It is intended to be. With such a program, even if the encryption algorithm is leaked, the user can be authenticated while securely managing the password.
[0022]
Furthermore, in the program according to the present invention, the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. Thus, the user can be authenticated while securely managing the password of the user even through the network.
[0023]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0024]
First, an outline of a system according to the present embodiment will be described. FIG. 1 is a schematic diagram illustrating a configuration example of a system according to the present embodiment. Here, a network system in which computers are connected to perform communication with each other will be described with reference to FIG. 1. However, the present invention is not limited to this. For example, when a system administrator logs in to a system server or when a terminal user For example, the user may log in to the computer system of the terminal. As shown in FIG. 1, the network system includes a host computer 10 (hereinafter, abbreviated as a host 10) serving as a system server and a terminal computer 11 (hereinafter, abbreviated as a terminal 11) accessing the host 10. The host 10 and the terminal 11 are connected by a network 12 and communicate via the network 12.
[0025]
The host 10 performs the main operation of the present system and is configured by a server, a computer, and the like. In particular, a hard disk stores a computer program for managing a user password and authenticating the user. . Here, “authentication” refers to confirming that the user is authorized to use the network system. The host 10 does not need to be physically single, and may be configured to perform processing in a distributed manner. As shown in FIG. 1, the host 10 stores a system database 14 storing data to be processed by a central processing unit (CPU), and stores a password and authenticates a user as described later. And a storage unit 13 for storing authentication information used for authentication. Further, when performing user authentication, the encryption unit 15 encrypts the user ID using the password received from the terminal 11 as an encryption key, and generates the encrypted password as authentication information. An authentication unit 16 that compares information with authentication information stored in the storage unit 13 and performs authentication based on the comparison result. At this time, for example, in the host 10, the storage unit 13 may be used as a separate computer to store the identification information and the authentication information in a physically separate computer for processing, or the encryption may be physically separated. It may be done by computer.
[0026]
The terminal 11 is, for example, a personal computer (PC), and includes a CPU, a ROM (Read Only Memory), a RAM (Random Access Memory), a hard disk, a display, a keyboard, a mouse, and the like. A login program and a browser program for use are stored. In addition, the terminal 11 includes a mobile terminal and a mobile phone with a network connection function. The network 12 that connects the host 10 and the terminal 11 is a communication network such as the Internet (Internet), a WAN (Wide Area Network), a LAN, a dedicated line, and a mobile communication network.
[0027]
A user who uses the network system uses the terminal system via the terminal 11. When the user starts using the network, the user inputs a user ID and a password to the terminal 11 and transmits the same to the host 10. The host 10 determines whether the user who operates the terminal 11 is a user who can use the network system based on the received user ID and password. If the host 10 recognizes that the user who uses the terminal 11 is the user who can use the network system, the user can start using the network system from the terminal 11, For example, the user can access another terminal or browse data stored in the host 10.
[0028]
Next, a description will be given of how a user sets a right to use the system and authenticates the user when using the system according to the present embodiment. Here, the personal authentication indicates authentication of the validity of a user who intends to use the network system. FIG. 2 is a block diagram showing the setting of the authority to use the system. As shown in FIG. 2, the user ID used at the time of login when the user uses the network system is transmitted to the user by various methods. For example, the user himself / herself can determine the user ID and transmit it to the host 10, and the host 10 can store the user ID determined by the user himself / herself in the storage unit 13. Further, for example, the fact that the user intends to use the network system is notified to the business entity that operates the network system, and the host 10 generates a user ID corresponding to the user, and outputs the user ID. The information may be stored in the storage unit 13 and transmitted to the user. When the user ID corresponding to the user is determined as described above, the host 10 encrypts the user ID to generate identification information as described later, and stores the user ID in the storage unit 13 as the identification information. At this time, the user ID stored in the storage unit 13 is managed for each user, and when performing user authentication as described below, the user ID of the user to be authenticated is stored in the center of the host 10. The data is read out to the processing device (CPU). As will be described later, the encryption of the user ID is performed using a password as an encryption key.
[0029]
When the user uses the network system, the password input to the host 10 together with the user ID is determined by various methods, similarly to the user ID. For example, the user himself / herself can determine a password and transmit it to the host 10, and the host 10 can store the password determined by the user in the storage unit 13. When the passwords individually possessed by the users are determined in this way, the host 10 generates the authentication information by encrypting the user ID using the passwords as the encryption keys as described later, and stores the passwords as the authentication information in the storage unit 13 is stored. Since the authentication information is information obtained by encrypting the user ID using the password as an encryption key, the authentication information is information dependent on the password, and is information reflecting characteristics of the password. The authentication information stored in the storage unit 13 is read out to the central processing unit (CPU) of the host 10 based on identification information managed for each user when performing user authentication as described below. This is a comparison target when performing personal authentication.
[0030]
FIG. 3 is a block diagram showing personal authentication when the system is used. As shown in FIG. 3, when the user logs in when using the network system, the host 10 requests transmission of information for authentication in order to authenticate whether the user is the person who uses the network system. Is performed on the terminal 11. The host 10 requests transmission of information for authentication, for example, requesting transmission of a user ID and password, and requesting transmission of biological information and non-biological information other than the user ID and password. Or Here, the biological information is information such as fingerprint information, retinal information, iris information, voiceprint information, and handwriting information of an individual, and the non-biological information is information such as a seal, a passport, a license, and a card. In the present embodiment, a request for transmitting information for authentication performed by the host 10 is a request for transmitting a user ID and a password. However, when the host 10 requests transmission of biometric information or non-biological information. It may be.
[0031]
In response to the authentication request from the host 10, the user inputs a user ID and a password to the terminal 11 and transmits the user ID and the password to the host 10. The host 10 that has received the user ID reads the identification information into a storage device such as a memory based on the user ID stored in the storage unit 13 and recognizes a user who is going to log in to the network system. Based on the read identification information, the authentication information stored in the storage unit 13 is read out to a storage device such as a memory as a previous stage for performing user authentication.
[0032]
When a password is transmitted from the user via the terminal 11 and the host 10 receives the password, the host 10 encrypts the user ID using the password as an encryption key. At this time, the user ID and the password are sent to an encryption unit 15 described later, and are encrypted by the encryption unit 15. When the user ID is encrypted, authentication information used for user authentication is generated from the user ID, and the authentication information generated from the user ID is read into a storage device such as a memory.
[0033]
An auxiliary computer such as a hard disk of the host 10 stores an encryption computer program created based on an encryption algorithm. The central processing unit (CPU) reads the encrypted computer program from the auxiliary storage device into the storage device, and generates authentication information from the user ID and the password stored in the storage device according to the computer program. The encryption algorithm for the encryption may be any algorithm that encrypts the user ID using the password as a key. For example, in a common key encryption algorithm or a public key encryption algorithm, a user ID can be encrypted using a password as an encryption key.
[0034]
As an example, a case will be described in which authentication is performed using a common key encryption algorithm and the same encryption device is provided on the host 10 side and the terminal 11 side of the network system. The user holds a user ID and a password that is secret information, and the user ID and the password are stored in the storage unit 13 of the host 10. At this time, when the user uses the network system, the user first sends a user ID and a password to the host 10, and then the host 10 generates a random number and sends it to the user. The user encrypts the data obtained by combining the random number with the user ID using the password as the encryption key and sends the encrypted data to the host 10 using the encryption device. Then, the host 10 combines the received user ID with the random number generated by itself, and then encrypts the data in which the random number and the user ID are combined using the password transmitted from the terminal 11, and performs encryption. The generated data is compared with the data transmitted from the terminal 11. If the data match, the host 10 authenticates the user as a valid user.
[0035]
As described above, the authentication information stored in the storage unit 13 of the host 10 and the authentication information generated from the user ID and the password transmitted from the user are sent to the authentication unit 16, and both the authentication information are The comparison is made by a central processing unit (CPU) or the like. If the authentication information matches, the host 10 authenticates that the user who has input the user ID and the password is the user, and the host 10 gives the user permission to use the network system. If the authentication information does not match, the host 10 cannot authenticate that the user who has input the user ID and the password is the user, and the host 10 uses the network system. Refuse to do. When the user receives permission to use the network system, for example, the user can use data stored in the system database 14 or access another terminal computer via the network 12.
[0036]
Next, encryption of a user ID using a password as an encryption key will be described. FIG. 4 is a block diagram showing encryption of the user ID. As shown in FIG. 4, the user ID and the password transmitted by the user via the terminal 11 are used to encrypt the user ID using the password as an encryption key in the encryption unit 15 and perform authentication for personal authentication. Generate information. Here, the encryption of the user ID is performed in order to store the encrypted user ID in the storage unit 13 of the host 10 when the user registers the user ID and the password in the host 10. The encryption may be performed using the same encryption algorithm as the above-described encryption, or may be performed using a different encryption algorithm. When an encryption algorithm different from the encryption performed when the encrypted user ID is stored in the storage unit 13 is used, the authentication information generated by the encryption is the same as the authentication information stored in the storage unit 13 in the authentication unit 16. Since the comparison is performed for authentication, the data is converted into comparable data or a code for comparison is added.
[0037]
As an example of such an authentication operation on the host 10 side, authentication can be performed by encrypting a user ID using a password as a key as follows. First, when a user logs in from the terminal 11, a login request is transmitted from the terminal 11 to the host 10. The host 10 that has received the login request reads the application for executing the login function from the auxiliary storage device into the storage device, activates the login function, and transmits a user ID and a password transmission request to the user side. When the user inputs the user ID and the password to the terminal 11 and transmits the same to the host 10, the host 10 that has received the user ID and the password transmits the user Modify passwords with different lengths (number of digits) to a certain length. Next, a random number is generated as communication information used for communication with the authentication unit 16. Then, in order to recognize the date and time at which the user intends to log in, time information indicating the date and time is obtained from the internal clock of the host 10, and then the communication information and the time information are combined with the user ID. The encrypted user ID is encrypted with a password. The communication information and the time information are combined, and the encrypted user ID is transmitted to the authentication unit 16 as authentication information.
[0038]
The host 10 that has received the user ID searches for the identification information stored in the storage unit 13 based on the received user ID. Based on the identification information corresponding to the received user ID, a login table for the currently logged-in user stored in the storage unit 13 or the system database 14 is searched, and a user having the same user ID logs in. Check if it is. If a user with the same user ID has not logged in, that is, if there is no identical user ID in the login table, an authentication table is used to confirm the expiration date of the password corresponding to the transmitted user ID. Search for and confirm the password has expired. If the password is out of the validity period, the login by the user ID is rejected, and the user's terminal 11 is requested to register a new password. If the password is within the validity period, the authentication information corresponding to the user ID is obtained from the authentication table stored in the storage unit 13.
[0039]
The authentication unit 16 compares the authentication information obtained from the authentication table with the authentication information generated from the received user ID. At this time, since the authentication information generated from the received user ID includes the user ID, time information, and communication information, information about the user ID encrypted with the password is extracted from the authentication information and extracted. The obtained user ID is compared with the authentication information obtained from the authentication table. For example, the authentication information sent to the authentication unit 16 is decrypted using the password transmitted by the user as a decryption key, and the user ID is obtained from the individual information of the authentication information in which the time information and the communication information are combined. Extract. Further, the authentication information acquired from the authentication table is decrypted using the password transmitted from the user as a decryption key to generate a user ID, and the generated user ID is compared with the extracted user ID. If the two user IDs are compared with each other and they match, the user who has logged in is determined to be valid based on the comparison.
[0040]
As described above, in the host 10 which is the management device for managing the password, the password possessed by the user is stored as authentication information in the storage unit 13 of the host 10 with the user ID encrypted using the password as an encryption key. It is managed in a state where password information is added to user ID information. At this time, the user ID is stored and managed in the storage unit 13 of the host 10 as identification information, and the password is not directly stored in the storage unit 13 but is incorporated in the information of the user ID. , And is managed as information obtained by subtracting the identification information from the authentication information. Therefore, even if the encryption algorithm for encrypting the user ID together with the user ID is leaked, it is the user ID that is generated by decrypting the authentication information and the password is not leaked. It can be avoided reliably.
[0041]
Further, when the host 10 that manages the password authenticates the user as an authentication device, the host 10 compares the user ID and the password transmitted by the user with the authentication information stored in the storage unit 13 of the host 10. To generate authentication information. At this time, the encryption unit 15 of the host 10 uses the password as an encryption key to encrypt the user ID. Therefore, even if the encryption algorithm is leaked together with the authentication information, the authentication information is decrypted. The generated user ID is the user ID, and the user can be authenticated without leaking the password.
[0042]
By using such a management device and an authentication device, not only can authentication not only prevent unauthorized users from using the network system, but also all unauthorized users can steal passwords of all users. Can be prevented. Furthermore, even if an encryption algorithm is stolen, passwords can be prevented from being stolen by intrusion by an unauthorized third party, thereby not only improving the security of the network system, but also improving the security of the network system. Damage can be minimized.
[0043]
Also, when storing the password, the equipment is changed from the conventional management device / authentication device to the management device / authentication device in the present embodiment in order to generate the authentication information by encrypting the user ID using the password as the encryption key. It can be easily changed simply by changing the encryption key to use a password. Therefore, a more secure network system can be realized without imposing an extra burden on network security.
[0044]
In this embodiment, the case where the user ID is encrypted using the password received from the terminal and the password is managed as authentication information or used for personal authentication has been described. It can also be applied to signature technology. For example, when sending and receiving electronic data, the data is given a sender or receiver ID, and then the password is encrypted as an encryption key. An unauthorized third party keeps the data confidential and leaks the password. Can be prevented.
[0045]
Further, in the present embodiment, personal biometric information such as fingerprint information, retina information, iris information, voice print information, and handwriting information, and economic personal information such as passports, licenses, and cards are used as passwords. Can be used. In the present embodiment, even if the encryption algorithm for encrypting the user ID is leaked, the password is not stolen, so that important personal information can be safely used as a password. Can be used to build strong network security.
[0046]
【The invention's effect】
ADVANTAGE OF THE INVENTION According to this invention, the storage device which can manage a user's password safely, the storage method, the program for realizing it, and authenticating a user with a user's password in a safe state Authentication device, an authentication method, and a program for realizing the authentication device.
[Brief description of the drawings]
FIG. 1 is a schematic diagram showing a system according to an embodiment of the present invention.
FIG. 2 is a schematic diagram showing password registration according to the embodiment of the present invention.
FIG. 3 is a schematic diagram illustrating personal authentication according to the embodiment of the present invention.
FIG. 4 is a block diagram illustrating personal authentication according to the embodiment of the present invention.
5A and 5B are block diagrams showing authentication in a conventional example, in which FIG. 5A shows a case of a simple encryption system and FIG. 5B shows a case of an encryption key utilizing system.
[Explanation of symbols]
Reference Signs List 10 host computer, 11 terminal computer, 12 network, 13 storage unit, 14 system database, 15 encryption unit, 16 authentication unit

Claims (12)

A management device that manages identification information and authentication information for allowing a user to use the system,
Identification information storage means for storing a user ID assigned to the user as identification information for identifying the user;
Encryption means for encrypting the user ID using a password assigned to the user as an encryption key;
A management device comprising: an authentication information storage unit that stores the user ID encrypted by the encryption unit as authentication information for authenticating the user. The management device according to claim 1, wherein the user ID and the password are input from a user terminal connected to the management device via a network. A management method for managing identification information and authentication information for permitting a user to use the system,
Storing a user ID assigned to the user as identification information for identifying the user;
Encrypting the user ID using a password assigned to the user as an encryption key;
Storing the encrypted user ID as authentication information for authenticating the user. The method according to claim 3, wherein the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. Management method. A program for causing a computer to manage identification information and authentication information for allowing a user to use the system,
Storing a user ID assigned to the user as identification information for identifying the user;
Encrypting the user ID using a password assigned to the user as an encryption key;
Storing the encrypted user ID as authentication information for authenticating the user. 6. The device according to claim 5, wherein the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. program. An authentication device that authenticates a user to authorize use of the system,
Identification information storage means for storing a user ID assigned to the user as identification information for identifying the user;
Encryption means for encrypting the user ID using a password assigned to the user as an encryption key;
Authentication information storage means for storing the user ID encrypted by the encryption means as authentication information for authenticating the user;
The user ID input by the user is compared with the identification information stored in the identification information storage means, and the user ID encrypted by the encryption means based on the user ID and the password input by the user. And authentication means for comparing the authentication information with authentication information stored in the authentication information storage means and performing authentication based on the comparison result. The method according to claim 7, wherein the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. Authentication device. An authentication method for authenticating a user to authorize use of the system,
Storing a user ID assigned to the user as identification information for identifying the user;
Encrypting the user ID using a password assigned to the user as an encryption key;
Storing the encrypted user ID as authentication information for authenticating the user;
The user ID input by the user is compared with the stored identification information, and the encrypted user ID is compared with the stored authentication information based on the user ID and the password input by the user. And performing authentication based on the comparison result. The device according to claim 9, wherein the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. Authentication method. A program that causes a computer to authenticate to allow a user to use the system,
Storing a user ID assigned to the user as identification information for identifying the user;
Encrypting the user ID using a password assigned to the user as an encryption key;
Storing the encrypted user ID as authentication information for authenticating the user;
The user ID input by the user is compared with the stored identification information, and the encrypted user ID is compared with the stored authentication information based on the user ID and the password input by the user. And performing the authentication based on the comparison result. 12. The apparatus according to claim 11, wherein the user ID and the password are input from a user terminal connected to a management device that manages the identification information and the authentication information via a network. program.

Images