JP2005063088A - Authentication procuration server, authentication procuration method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a third person from illegally accessing a provider by a spoofing, and to execute authentication on an individual basis. <P>SOLUTION: An integrator server 2 manages the URL of a provider server 4 from which a user receives a service and the individual ID and password of the user in the provider by using the mail address of the user. The integrator server 2 specifies the individual ID and password by using a telephone number notified from a telephone network 5, URL received from a user terminal 3, and mail address decided as the result of inquiry to the user. The integrator server 2 transmits the integrator address and the specified individual ID or the like through an L2-MPLS network 6 to the provider server 4. The provider server 4 decides whether or not the data has been received from the integrator server 2 based on the integrator address. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an authentication agent server that performs user authentication, an authentication agent method, and a program.

  In recent years, various services have been provided by providers on networks such as the Internet. When receiving the service provided by the provider, the person (user) who receives the service inputs login information (user ID and password). Then, the input login information is compared with the login information registered in advance, and if they match, the service provided by the provider can be received (for example, Patent Document 1, Patent Document 2, Patent Document 3, Patent Document) 4). However, when a third party obtains login information by some method, there is a problem that the third party can use the obtained login information to impersonate a legitimate user and receive services illegally. .

In order to solve this problem, the user's telephone number and password are registered in advance with the provider. When the user is provided with the provider's server, the server receives the telephone number notified by the caller telephone number notification function (the telephone number transmitted by the exchange in the telephone network) and receives the user's password. . Then, the received telephone number and password are compared with the user's registered telephone number and password, and if they match, it is determined that the user is a legitimate user (see, for example, Patent Document 5).
JP 2002-334056 A JP 2002-032340 A JP 2001-249984 A JP 2001-209611 A JP 2002-033827 A

  However, the above-described user authentication mechanism has a problem that passwords are registered in units of telephone numbers, and passwords cannot be registered in units of individuals when there are a plurality of users who use the same telephone number.

  Therefore, an object of the present invention is to provide an authentication proxy server, an authentication proxy method, and a program that can prevent unauthorized access to a provider due to impersonation of a third party and that can be authenticated on an individual basis.

  The invention according to claim 1 is connected to a telephone network and an L2-MPLS network, performs data transmission / reception with one or a plurality of terminal devices via the telephone network, and one or a plurality of data via the L2-MPLS network. In the authentication proxy server that transmits and receives data to and from the server, the telephone number is associated with the mail address of each user who uses the telephone number, and the mail address is associated with the URL of each server to which the user with this mail address is connected, User information management means for managing the URL by associating and managing the personal identifier and password of the user in the server of the URL, number receiving means for receiving the telephone number of the terminal device transmitted by the telephone network, and the terminal device URL receiving means for receiving the URL of the server transmitted by the telephone number received by the calling number receiving means and the U An e-mail address specifying means for specifying one or more e-mail addresses managed by the user information management means in association with the URL received by the L receiving means, and one or more specified by the e-mail address specifying means The mail address determining means for determining the mail address based on the response to the inquiry, the telephone number received by the calling number receiving means, and the URL receiving means Login information specifying means for specifying a personal identifier and a password managed by the user information management means in association with the URL to be sent and the mail address determined by the mail address determination means, and the number receiving means The received telephone number and the login information specifying means Transmitting means for transmitting the specified personal identifier and password to the server of the URL received by the URL receiving means via the L2-MPLS network, and authentication confirmation in the server from the server via the L2-MPLS network And an authentication confirmation transmission / reception means for transmitting the received authentication confirmation to the terminal device via the telephone network.

  The invention according to claim 2 is characterized in that the transmitting means further transmits its own address.

  The invention according to claim 3 is connected to a telephone network and an L2-MPLS network, transmits / receives data to / from one or a plurality of terminal devices via the telephone network, and one or a plurality of data via the L2-MPLS network. In the authentication agent method performed in the authentication agent server that transmits and receives data to and from the server, the authentication agent server associates a telephone number with the mail address of each user who uses the telephone number, and the mail address corresponds to the mail address. User information management means for associating the URL of each server to which the user connects with the URL and managing the URL by associating the individual identifier and password of the user in the server of this URL with each other, is transmitted via the telephone network. Calling number reception procedure for receiving the telephone number of the terminal device, and U for receiving the URL of the server transmitted by the terminal device L or more e-mail addresses managed in the user information management means are specified in association with the L receiving procedure, the telephone number received in the calling number receiving procedure and the URL received in the URL receiving procedure. An e-mail address specifying procedure, an e-mail address determining procedure for inquiring of the terminal device whether it is one or a plurality of e-mail addresses specified in the e-mail address specifying procedure, and determining an e-mail address based on a response to the inquiry; Individual managed by the user information management means in association with the telephone number received in the number receiving procedure, the URL received in the URL receiving procedure, and the mail address determined in the mail address determining procedure A login information identification procedure for identifying an identifier and a password; Transmission for transmitting the telephone number received in the record number receiving procedure and the personal identifier and password specified in the login information specifying procedure to the URL server received in the URL receiving procedure via the L2-MPLS network And an authentication confirmation transmission / reception procedure for receiving authentication confirmation in the server from the server via the L2-MPLS network and transmitting the received authentication confirmation to the terminal device via the telephone network. It is characterized by having.

  According to a fourth aspect of the present invention, in the transmission procedure, the own address is further transmitted.

  The invention according to claim 5 is connected to a telephone network and an L2-MPLS network, transmits / receives data to / from one or a plurality of terminal devices via the telephone network, and one or a plurality of data via the L2-MPLS network. A computer serving as an authentication proxy server that transmits / receives data to / from the server of the server, associates a mail number with the mail address of each user who uses the telephone number, and associates the mail address with the URL of each server to which the user with this mail address connects Correspondence, user information management means for managing the personal identifier and password of the user in the URL server in association with the URL, number receiving means for receiving the telephone number of the terminal device transmitted by the telephone network, the terminal URL receiving means for receiving the URL of the server transmitted by the apparatus, telephone number received by the number receiving means and Email address specifying means for specifying one or more mail addresses managed by the user information management means in association with the URL received by the URL receiving means, and one or more specified by the mail address specifying means The mail address determining means for determining the mail address based on the response to the inquiry, the telephone number received by the calling number receiving means, and received by the URL receiving means. A login information specifying means for specifying a personal identifier and a password managed by the user information managing means in association with the mail address determined by the mail address determining means, and the number receiving means. Phone number and the login information specifying means Transmitting means for transmitting the personal identifier and password specified by the URL receiving means to the server of the URL received by the URL receiving means via the L2-MPLS network, and authentication confirmation in the server from the server to the L2-MPLS network. The authentication confirmation transmission / reception means for transmitting the received authentication confirmation to the terminal device via the telephone network is provided.

  The invention according to claim 6 is characterized in that the transmitting means further transmits its own address.

According to claims 1, 3, and 5, since the telephone number received from the telephone network is used, unauthorized access to the provider by impersonation of a third party can be prevented. Also, authentication can be performed on an individual basis by using an email address.
According to claim 2, claim 4, and claim 6, since the address of the authentication proxy server is transmitted by the L2-MPLS network, if authentication is performed using this address, the third party impersonates. Unauthorized access to the provider can be prevented more reliably.

Embodiments of the present invention will be described below with reference to the drawings. In the present embodiment, a part related to user authentication will be described.
First, an overall configuration of an authentication agent system according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is a system diagram showing a configuration of an authentication proxy system in the present embodiment.

  As shown in FIG. 1, the authentication agent system 1 is installed by, for example, an ISP (Internet Service Provider) or the like, and performs a user authentication on behalf of a provider that provides a service (hereinafter referred to as an integrator server). Server) 2, terminal devices used by users (hereinafter referred to as user terminals) 3: 3 a, 3 b, and servers installed by providers that have the integrator server 2 perform user authentication (hereinafter referred to as provider servers). .) 4: 4a, 4b. The integrator server 2 is connected to a telephone network 5 and an L2-MPLS (Layer 2-Multiprotocol Label Switching) network 6. Each user terminal 3: 3a, 3b is connected to the telephone network 5. Each provider server 4: 4a, 4b is connected to the L2-MPLS network 6.

In this authentication proxy system 1, the provider server 4 provides a service only when connected from the integrator server 2. In other words, the service is not provided when the user terminal 3 is directly connected to the provider server 4 (without going through the integrator server 2).
Further, the integrator server 2 is performing a mail service (having a function of paying out a mail address to the user).

Next, functions of the integrator server 2 in FIG. 1 will be described with reference to FIG. FIG. 2 is a block diagram showing the configuration of the integrator server.
As shown in FIG. 2, the integrator server 2 includes a user information management unit 21, a numbering reception unit 22, a URL reception unit 23, and a user / login information extraction unit (email address identification unit, email address determination unit, A login information specifying unit) 24, a user information transmitting unit (transmitting unit) 25, and an authentication confirmation transmitting / receiving unit 26.

  The user information management unit 21 stores and manages user information (phone number, email address, URL, personal ID, password). Specifically, a telephone number assigned to each user terminal 3 connected to the integrator server 2 via the telephone network 5 is stored and managed. In each telephone number, the mail address assigned to each user who uses the user terminal 3 is stored and managed in association with the telephone number of the user terminal 3. Further, in each mail address, the URL (Uniform Resource Locator) of each provider from which the user is provided with the service is stored and managed in association with the mail address paid to the user. Further, in each URL, a personal identifier (hereinafter referred to as a personal ID) registered by a user (a user of a mail address associated with the URL) and a password are stored in association with the URL. It is managed. An example of this is shown in FIG.

FIG. 3 is a diagram illustrating an example of user information managed by the user information management unit 21.
In the example of FIG. 3, the telephone number “03 ****** 0123” (the telephone numbers of the user terminals used by the user A, the user B, and the user C) and the telephone number “0422 *** 7890” are managed.
Email address “F**1@x**.jp” (User A ’s email address), email address “F**2@x**.jp” (User B ’s email address), and email address “F *” *3@x**.jp ”(the mail address of user C) is managed in association with the telephone number“ 03 ****** 0123 ”.

URL “www.p * 1.co.jp” (URL of provider a where user A is provided with service), URL “www.p * 2.co.jp” (provider b where user A is provided with service) URL) and URL “www.p * 3.co.jp” (URL of provider c where user A is provided with service) is email address “F**1@x**.jp” (user A Are managed in association with each other.
Personal ID “ah ** 125” (ID number registered by user A with provider a) and password “XY ** 20” (password registered by user A with provider a) are URLs “www.p * 1.co .jp "(provider a URL). Also, the personal ID “bg ** 587” (ID number registered by the user A with the provider b) and the password “PO ** 98” (password registered by the user A with the provider b) have the URL “www.p * 2 .co.jp "(URL of provider b). Furthermore, the personal ID “sw ** 745” (ID number registered by the user A with the provider c) and the password “FG ** 56” (password registered by the user A with the provider c) have the URL “www.p * 3 .co.jp "(URL of provider c) and managed.

URL “www.p * 1.co.jp” (URL of provider a where user B receives service), URL “www.p * 8.co.jp” (provider d where user B receives service) URL) and the URL “www.p * 9.co.jp” (the URL of the provider e where the user B receives the service) are the email addresses “F**2@x**.jp” (the user B Are managed in association with each other.
Personal ID “r ** 487” (ID number registered by user B with provider a) and password “74 ** 69” (password registered by user B with provider a) are URLs “www.p * 1.co .jp "(provider a URL). Also, the personal ID “w ** 893” (ID number registered by user B with provider d) and password “09 ** 12” (password registered by user B with provider d) have URL “www.p * 8”. .co.jp ”(URL of provider d). Further, the personal ID “mn ** 196” (ID number registered by the user B with the provider e) and the password “DD ** 56” (password registered by the user B with the provider e) have the URL “www.p * 9 .co.jp "(provider e URL).

As can be seen from the example of FIG. 3, the e-mail address given to the user is used, and the URL of the provider used by the user is managed in association with the e-mail address. As a result, it is possible to register a provider who receives a service on an individual basis, which is impossible with a telephone number.
In addition, as can be seen from the example of FIG. 3, the user A to whom the mail address “F**1@x**.jp” is issued and the mail address “F**2@x**.jp” The paid-out user B may receive a service from the provider “a” at the URL “www.p * 1.co.jp”. For this reason, it is not possible to uniquely identify a user who wants to receive service provision from a provider from a telephone number and a URL.

The calling number receiving unit 22 receives a telephone number (a telephone number of a user terminal of a user who wants to receive a service from a provider) issued by the telephone network 5 (a switch provided in the telephone network 5).
The URL receiving unit 23 receives a URL (URL of the provider server 4 at which the user wants to receive service provision) input from the user terminal 3 via the telephone network 5 by the user.

The user / login information extracting unit 24 refers to the user information managed by the user information managing unit 21 and relates to the telephone number based on the telephone number received by the calling number receiving unit 22. User information (telephone number, mail address, URL, personal ID, password) managed by the user information management 21 is extracted.
Further, the user / login information extracting unit 24 refers to the user information extracted based on the telephone number, and based on the URL received by the URL receiving unit 23, sets the user information related to this URL to the telephone number. Extracted from user information extracted based on. Thereby, one or a plurality of mail addresses managed by the user information management unit 21 in relation to the telephone number received by the calling number receiving unit 22 and the URL received by the URL receiving unit 23 are specified. become.
Further, the user / login information extraction unit 24 makes an inquiry to the user terminal 3 based on the specified one or more mail addresses, and tries to receive the service from the provider 4 by the response of the user terminal 3 to the inquiry. The user's email address. Then, with reference to the user information extracted based on the URL, user information related to the determined mail address is extracted from the user information extracted based on the URL. As a result, the personal ID and password of the user in the provider where the user is to receive the service is specified.
The description of an example of the processing of the user / login information extraction unit 24 will be performed together with the description of the sequence example of FIG.

The user information transmitting unit 25 receives the address of the integrator server 2 (hereinafter referred to as an integrator address) and the telephone number of the user information extracted by the user / login information extracting unit 24 (received by the calling number receiving unit 22). (Same as the telephone number), personal ID, and password are transmitted to the provider server 4 of the URL of the extracted user information (same as the URL received by the URL receiving unit 23) via the L2-MPLS network 6. . The transmitted data is transferred between nodes in the L2-MPLS network 6 (at this time, the transmission source address (integrator address) and the transmission destination address are paired), and is sent to the provider server 4. To reach. The provider server 4 determines whether the data is transmitted from the integrator server 2 based on the integrator address.
The authentication confirmation transmission / reception unit 26 receives the authentication confirmation from the provider server 4 and transfers the authentication confirmation received from the provider server 4 to the user terminal 3.

  Hereinafter, the authentication agent process executed in the authentication agent system 1 will be described with reference to FIGS. 4, 5, 6, and 7. FIG. 4 is a diagram showing a sequence example of authentication proxy processing executed in the authentication proxy system 1. 5, 6, and 7 are diagrams for explaining processing of the user / login information extraction unit 24. However, it is assumed that the user information managed by the user information management unit 21 is as shown in FIG. Further, the telephone number of the user terminal 3 of the user who wants to receive the service from the provider is “03 ****** 0123”, and the mail address issued to the user is “F ** 2 @ x **”. .jp ”. Further, it is assumed that the URL of the provider server that the user wants to receive services is “www.p * 1.co.jp”.

  First, when the user dials up to the integrator server 2 using the user terminal 3, the telephone number of the user terminal 3 is transmitted to the integrator server 2 by the telephone network 5 (the exchange of the telephone network 5) (step S101).

In the integrator server 2, when the calling number receiving unit 22 receives the telephone number of the user terminal 3 from the telephone network 5 (the exchange of the telephone network 5), the user / login information extracting unit 24 uses the user associated with the received telephone number. Information is extracted from the user information management unit 21 (step S102). The operation of the user / login information extracting unit 24 in step S102 is shown in FIG.
FIG. 5A shows the user information managed by the user information management unit 21 in this sequence example. FIG. 5A shows the user information related to the telephone number “03 ****** 0123”. User information and user information related to the telephone number “0422 ** 7890” are included. In this sequence example, since the telephone number of the user terminal 3 (the telephone number transmitted by the telephone network 5) is “03 *** 0123”, the user information shown in FIG. As shown in (b), user information related to the telephone number “03 *** 0123” is extracted.
Since the user information is extracted using the telephone number notified from the exchange of the telephone network 5, the third party can use a telephone number other than the telephone number of the user terminal used by the third party. I can't impersonate someone who uses my user terminal.

  The user inputs the URL of the provider server 4 that he / she wants to receive services at his / her user terminal 3. After this input operation, the input URL is transmitted from the user terminal 3 to the integrator server 2 (step S103).

In the integrator server 2, when the URL receiving unit 23 receives the URL from the user terminal 3, the user / login information extracting unit 24 extracts the user information related to the received URL from the user information extracted in step S102. (Step S104). The user information extracted in step S104 becomes user information managed by the user information management unit 21 in relation to the telephone number received from the telephone network 5 and the URL received from the user terminal 3. Thereby, one or a plurality of mail addresses managed by the user information management unit 21 are specified in association with the telephone number received from the telephone network 5 and the URL received from the user terminal 3. The operation of the user / login information extraction unit 24 in step S104 is shown in FIG.
FIG. 6A shows user information related to the telephone number “03 *** 0123” extracted in step S102 in this sequence example. In this sequence example, since the URL input by the user is “www.p * 1.jp”, as shown in FIG. 6B, the URL “www.p * 1.jp” is obtained from the user information in FIG. User information related to “p * 1.jp” is extracted. In the extracted user information, the email address is related to “F**1@x**.co.jp” and “F**2@x**.co.jp”. There is something related.

In the integrator server 2, the user / login information extraction unit 24 inquires of the user (user terminal 3) whether the mail address is “F**1@x**.co.jp” (step S105). However, the mail address “F**1@x**.co.jp” is the mail address of one user information extracted in step S104.
In the user terminal 3, <Is the mail address “F ** 1 @ x **. Co.jp”> is displayed on the display unit of the user terminal 3. In this sequence example, since the user's mail address is “F**2@x**.co.jp”, the user inputs “No” using the input unit of the user terminal 3. After this input operation, a “NO” response is made from the user terminal 3 to the integrator server 2 (step S106).

In the integrator server 2, the user / login information extraction unit 24 receives a “No” response from the user terminal 3, so the mail address is “F ** 2 @ x **. It is inquired whether it is “co.jp” (step S107). However, this mail address “F**2@x**.co.jp” is the mail address of another user information extracted in step S104.
In the user terminal 3, <Is the mail address “F ** 2 @ x **. Co.jp”> is displayed on the display unit of the user terminal 3. In this sequence example, since the user's mail address is “F**2@x**.co.jp”, the user inputs “Yes” using the input unit provided in the user terminal 3. After this input operation, a response of “Yes” is sent from the user terminal 3 to the integrator server 2 (step S108).

In the integrator server 2, when the user / login information extracting unit 24 receives a “Yes” response from the user terminal 3, the email address “F ** 2 @ x *” that is the target of the “Yes” response is set as the email address. * .co.jp ”. As a result, the user who wants to receive the service from the provider is specified. Then, user information related to the determined mail address is extracted from the user information extracted in step S104, and the user information is determined (step S109). As a result, the personal ID and password registered with the provider from which the user intends to receive the service is specified. The operation of the user / login information extraction unit 24 in step S109 is shown in FIG.
FIG. 7A shows user information related to the telephone number “03 ****** 0123” and the URL “www.p * 1.jp” extracted in step S104 in this sequence example. In this sequence example, since the user's email address is “F**2@x**.jp”, as shown in FIG. 7B, the email address “F**2@x**.jp” is obtained from the user information shown in FIG. User information related to “F**2@x**.jp” is extracted. As a result, the personal ID “r ** 487” and the password “74 ** 69” of the user at the provider to whom the user intends to receive the service are specified.
In this way, the user does not need to input his / her personal ID and password.

  In the integrator server 2, the user information transmission unit 25 extracts the integrator address of the server itself and the telephone number, personal ID, and password of the user information determined in step S 109 via the L2-MPLS network 6. The URL of the user information to be transmitted is transmitted to the provider server 4 (step S110).

When the provider server 4 receives a telephone number or the like from the integrator server 2, the provider server 4 checks whether it is transmitted from the integrator server 2 based on the integrator address. Further, the user is confirmed based on the telephone number, personal ID, and password received from the integrator server 2. Then, an authentication confirmation is transmitted from the provider server 4 to the integrator server 2 (step S111). Thus, since it is confirmed whether it was transmitted from the integrator server 2 using the integrator address, it is possible to prevent a third party from impersonating the integrator server 2. When it is confirmed that the service is not from the integrator server 2, the provider server 4 does not provide the service.
In the integrator server 2, when the authentication confirmation transmission / reception unit 26 receives the authentication confirmation from the provider server 4, the authentication confirmation transmission / reception unit 26 transfers the received authentication confirmation to the user terminal 3 (step S112). Thereafter, the user uses the user terminal 3 to receive service from the provider of the provider server 4.

  According to the authentication agent system 1 of the present embodiment described above, the user information is extracted using the telephone number notified from the exchange of the telephone network 5, so that the third party himself It becomes impossible to impersonate others who use a user terminal having a telephone number other than the telephone number of the user terminal used by the user. Further, since the integrator server 2 transmits the integrator address via the L2-MPLS network 6, and the provider server 4 confirms whether the provider server 4 has transmitted from the integrator server 2 based on this integrator address, It is possible to prevent impersonation. Therefore, it is possible to prevent a third party from receiving service provision from the provider server 4 illegally.

In addition, the e-mail address paid out on an individual basis is used, and the URL of the provider used by the user is managed in association with the e-mail address. For this reason, authentication can be performed on an individual basis, which is impossible with a telephone number.
Further, since an existing telephone network is used between the user terminal 3 and the integrator server 2 and an L2-MPLS network is applied between the integrator server 2 and the provider server 4, the authentication proxy system 1 is reduced in cost. Can be realized.

The preferred embodiments of the present invention have been described above, but the present invention is not limited to the above-described embodiments, and various design changes can be made as long as they are described in the claims. Yes.
By recording a program for realizing the functions of each processing unit of the above-mentioned authentication surrogate system on a computer-readable recording medium, causing the computer system to read and execute the program recorded on the recording medium. Authentication proxy processing may be performed. The “computer system” here includes an OS and hardware such as peripheral devices. The “computer system” includes a WWW system having a homepage providing environment (or display environment). The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) in a computer system that becomes a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those holding programs for a certain period of time are also included.

  The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

The system diagram which shows the structure of the authentication agency system in embodiment of this invention. The block diagram which shows the structure of the apparatus of FIG. The figure which shows an example of the user information managed by the user information management part of FIG. The figure which shows the example of a sequence of the authentication proxy process performed in the authentication proxy system of FIG. The figure for demonstrating the process in the user login information extraction part of FIG. The figure for demonstrating the process in the user login information extraction part of FIG. The figure for demonstrating the process in the user login information extraction part of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Authentication agency system 2 Integrator server 3, 3a, 3b User terminal 4, 4a, 4b Provider server 5 Telephone network 6 L2-MPLS network 21 User information management part 22 Calling number receiving part 23 URL receiving part 24 User / login information extraction Unit 25 user information transmission unit 26 authentication confirmation transmission / reception unit

Claims (6)

Authentication that is connected to the telephone network and the L2-MPLS network, transmits / receives data to / from one or more terminal devices via the telephone network, and transmits / receives data to / from one or more servers via the L2-MPLS network In the proxy server,
The telephone number is associated with the mail address of each user who uses the telephone number, the mail address is associated with the URL of each server to which the user with this mail address is connected, and the user's personal identifier and password in the server of this URL are associated with the URL. User information management means for managing
Calling / receiving means for receiving a telephone number of a terminal device transmitted by the telephone network;
URL receiving means for receiving the URL of the server transmitted by the terminal device;
A mail address specifying means for specifying one or a plurality of mail addresses managed by the user information management means in association with the telephone number received by the number receiving means and the URL received by the URL receiving means; ,
An email address determination unit that inquires of the terminal device whether the email address is specified by the email address specification unit, and determines the email address based on a response to the inquiry;
An individual managed by the user information management means in association with the telephone number received by the calling number receiving means, the URL received by the URL receiving means, and the mail address determined by the mail address determining means Login information specifying means for specifying an identifier and a password;
The telephone number received by the number receiving unit and the personal identifier and password specified by the login information specifying unit are transmitted to the URL server received by the URL receiving unit via the L2-MPLS network. A transmission means;
Authentication confirmation transmission / reception means for receiving authentication confirmation in the server from the server via the L2-MPLS network and transmitting the received authentication confirmation to the terminal device via the telephone network;
An authentication proxy server characterized by comprising:   The authentication proxy server according to claim 1, wherein the transmission unit further transmits its own address. Authentication that is connected to the telephone network and the L2-MPLS network, transmits / receives data to / from one or more terminal devices via the telephone network, and transmits / receives data to / from one or more servers via the L2-MPLS network In the authentication proxy method performed in the proxy server,
The authentication proxy server is associated with the telephone number of the mail address of each user who uses the telephone number, the mail address is associated with the URL of each server to which the user with this mail address is connected, and the URL server User information management means for managing the personal identifier and password of the user in association with each other,
Calling / receiving procedure for receiving the telephone number of the terminal device transmitted by the telephone network;
A URL reception procedure for receiving the URL of the server transmitted by the terminal device;
A mail address specifying procedure for specifying one or a plurality of mail addresses managed in the user information management means in association with the telephone number received in the number receiving procedure and the URL received in the URL receiving procedure; ,
An email address determination procedure for inquiring of the terminal device whether it is one or a plurality of email addresses specified in the email address specification procedure, and determining an email address based on a response to the inquiry;
Individual managed by the user information management means in association with the telephone number received in the number receiving procedure, the URL received in the URL receiving procedure, and the mail address determined in the mail address determining procedure A login information identification procedure for identifying an identifier and a password;
Transmission for transmitting the telephone number received in the number receiving procedure and the personal identifier and password specified in the login information specifying procedure to the server of the URL received in the URL receiving procedure via the L2-MPLS network Procedure and
An authentication confirmation transmission / reception procedure for receiving authentication confirmation in the server from the server via the L2-MPLS network and transmitting the received authentication confirmation to the terminal device via the telephone network;
An authentication agent method comprising:   4. The authentication proxy method according to claim 3, further comprising transmitting its own address in the transmission procedure. Authentication that is connected to the telephone network and the L2-MPLS network, transmits / receives data to / from one or more terminal devices via the telephone network, and transmits / receives data to / from one or more servers via the L2-MPLS network A computer as a proxy server
The telephone number is associated with the mail address of each user who uses the telephone number, the mail address is associated with the URL of each server to which the user with this mail address is connected, and the user's personal identifier and password in the server of this URL are associated with the URL. User information management means for managing
Number receiving means for receiving a telephone number of a terminal device transmitted by the telephone network;
URL receiving means for receiving the URL of the server transmitted by the terminal device;
A mail address specifying means for specifying one or a plurality of mail addresses managed by the user information managing means in association with the telephone number received by the calling number receiving means and the URL received by the URL receiving means;
A mail address determining means for inquiring of the terminal device whether the mail address is specified by the mail address specifying means, and for determining a mail address based on a response to the inquiry;
An individual managed by the user information management means in association with the telephone number received by the calling number receiving means, the URL received by the URL receiving means, and the mail address determined by the mail address determining means Login information specifying means for specifying an identifier and a password;
The telephone number received by the number receiving unit and the personal identifier and password specified by the login information specifying unit are transmitted to the URL server received by the URL receiving unit via the L2-MPLS network. A transmitting means, and an authentication confirmation transmitting / receiving means for receiving authentication confirmation in the server from the server via the L2-MPLS network and transmitting the received authentication confirmation to the terminal device via the telephone network A program characterized by letting 6. The program according to claim 5, wherein the transmission unit further transmits its own address.

Images