JP2008217151A - Authentication proxy device, authentication proxy method and authentication proxy program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication proxy device reducing leakage of personal information. <P>SOLUTION: An authentication proxy service server 2 as this authentication proxy device has: a signature data generation means 24 adding a signature to use history information of network service to generate an action certificate; and a signature data information management means 22 generating a signature data information storage type database 6a for managing the action certificate in association with account information to a user. The signature data information management means 22 extracts the action certificate included in the signature data information storage type database as information of user authentication necessary when password is reissued to the network service. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a personal authentication technique when a password is reissued to a service user in a system that provides a network service.

  In the current network (NW) service site, when a user forgets an identification ID or password, the user is notified of a URL for reissuing them. Such an NW service site requires registration of a detailed address, telephone number, and e-mail address that can identify the user.

  In addition, with regard to identity authentication at the time of password reissue, the user himself / herself registers a question and answer that only the user knows as a method that does not use a detailed address, telephone number, or e-mail address that can identify the user. In addition, there is a method of answering the question during the password reissue procedure (see, for example, Non-Patent Document 1).

  A technique for encrypting information for authentication with an encryption key is generally known as a common key encryption method (see, for example, Non-Patent Document 2).

ASCII Co., Ltd., “Web Security Complete Defense Manual (Stop Information Leakage!)”, Network Magazine June Issue, Japan, April 24, 2006, pp. 66, Nakam 22-30 Nippon Telegraph and Telephone Corporation, Mitsubishi Electric Corporation, “Camellia”, [online], [Searched on December 18, 2006], Internet <http://info.isl.ntt.co.jp/crypt/camellia/intro .html>

  In the current NW service site, when re-issuing a user identification ID or password, in the authentication mode that requires registration of a detailed address, telephone number, and e-mail address that can identify the user, leakage of personal information The problem that leads to. As a result, users may be anxious about leakage of personal information, so avoid using such sites unless the site can be trusted to a certain extent or the desire to use the services provided is large. There are many.

  In addition, in the method of authenticating the user when reissuing the password, the user registers the question text and the answer that only the user knows and answers the question during the password reissue procedure. There is a problem that the content of the question itself becomes information for identifying the person. Or, since the contents of the question are displayed, there is a problem that when an easy question is registered, there is a possibility that the answer may be overlooked by others.

  An object of the present invention is to provide an authentication proxy device, an authentication proxy method, and an authentication proxy program that reduce the leakage of personal information, unlike the conventional authentication mode, paying attention to the above problems.

  In order to achieve the above purpose, without using a detailed address, telephone number, e-mail address, or a question that only the person knows to identify the person who registered in advance for authentication at the time of password reissue The “usage history” is used as “observable behavior” on the network of the user (also referred to as user) collected by the authentication proxy service server. Here, the usage history is generated on the basis of cookie information collected from the authentication proxy service server and used from the network service to be used, and is determined for each action (such as access date and time of web browsing). Information related to the use of a network service (hereinafter referred to as usage history or usage history information). In addition, an individual usage history information with a signature is referred to as an “action certificate”. In addition, after the user authenticating the user (network service site server) obtains an action certificate necessary for user authentication from the authentication proxy service server and verifies the action certificate, the user is authenticated. Execute password reissue procedure.

  As a principle of the present invention, it can be divided into an action certificate storage phase based on user usage history information and an authentication phase at the time of password reissue.

(Action certificate storage phase based on user usage history information)
First, in response to a user request, the user terminal identifies the user when using the service such as a nickname to the authenticating side (server of the network service site) through the authentication proxy device (authentication proxy service server). To register a user identifier. Here, if the user identifier (such as a nickname) presented by the user matches the user identifier of another person registered in advance, the authenticating side requests registration of the user identifier again. .

  Next, the authentication proxy service server generates a behavior certificate by signing information on the history of the user's behavior (that is, the usage history of the network service).

(Authentication phase at the time of password reissue)
First, a user who desires password reissue presents the user identifier to the authenticating side via the authentication proxy service server using the user terminal.

  Next, the authenticating side requests the user terminal to present an action certificate corresponding to the presented user identifier via the authentication proxy service server. As a result, the user can select the usage history information to be presented as information required for user authentication, and the authentication proxy service server obtains the action certificate for each selected usage history information, Sent to the authenticating side.

  Finally, the authenticating side verifies the action certificate based on the usage history information presented by the user, and determines whether authentication is possible.

  That is, the authentication proxy device according to the first aspect of the present invention is an authentication proxy device that interconnects through a network with a user terminal used for user authentication with respect to a network service that allows access by a password. Signature data generation means for generating a behavior certificate by adding a signature to usage history information, and signature data information for generating a signature data information storage type database for managing the behavior certificate in association with account information for the user And the signature data information management means extracts the action certificate contained in the signature data information storage type database as user authentication information required when reissuing the password for the network service. And

  Furthermore, in the authentication proxy device according to the first aspect of the present invention, the signature data information management means extracts only an action certificate based on the account information and the usage history information included in the signature data information storage type database. It is characterized by that.

  In addition, a user terminal interconnected via a network for user authentication with the authentication proxy device according to the first aspect of the present invention is also characterized.

  As a further aspect of the present invention, a user terminal interconnected with the authentication proxy device according to the first aspect of the present invention through a network for user authentication is provided by the authentication proxy device from the signature data information storage type. A receiving unit that receives a database; and a storage unit that stores the received signature data information storage type database; and at least one action certificate included in the signature data information storage type database stored in the storage unit, It is characterized by user authentication information required for network services.

  An authentication proxy method according to a second aspect of the present invention is an authentication proxy method for interconnecting through a network with a user terminal used for user authentication for a network service permitted to be accessed by a password, wherein the network service usage history is used. Adding a signature to the information to generate an action certificate; generating a signature data information storage type database for managing the action certificate in association with account information for a user; and storing the signature data information Extracting a behavior certificate included in the type database as user authentication information necessary when reissuing the password for the network service.

  According to a third aspect of the present invention, there is provided an authentication proxy program for signing use history information of a network service to a computer interconnected with a user terminal used for user authentication for a network service permitted to be accessed by a password. A step of generating an action certificate by adding, a step of generating a signature data information storage type database for managing the action certificate in association with account information for a user, and the signature data information storage type database Extracting the action certificate as user authentication information necessary when reissuing the password for the network service.

  According to the present invention, a nickname that can be arbitrarily set by a user is used as a user identifier, not a real name or an e-mail address. Further, as the information for authentication, an action certificate for each usage history information signed by the authentication proxy service server is used. Further, it is not necessary to register a detailed address, telephone number, and e-mail address that can identify the person when registering the user identifier in the service site.

  Therefore, it is possible to authenticate the user at the time of reissuing the password without using information that can identify the person, so the risk of leakage of personal information can be reduced, that is, the user's anxiety can be reduced and the network service can be reduced. The use of can be expected to increase. Further, according to the present invention, the “observable behavior” of the user on the Internet can be proved by another person, and the utility value of the log information of the user on the Internet increases.

  Embodiments 1 and 2 according to the present invention will be described below with reference to the drawings. In addition, the same reference number is attached | subjected to the same component in each drawing.

  First, Embodiment 1 according to the present invention will be described with reference to the drawings.

(Example 1)
The first embodiment is a case where the authentication proxy service server accumulates signature data information (that is, an action certificate).

  FIG. 1 is a configuration example of a network system that implements the authentication proxy service according to the first embodiment of the present invention. This network system example includes a user terminal 1, a dedicated storage unit 7 for the user terminal 1, an authentication proxy service server 2 as an authentication proxy device, a storage unit 6 for storing a signature data information storage type database, n (n is an integer of 1 or more) network (NW) service servers (typically referred to as n-th NW service server 3) and storage units (user management table) managed by the n-th NW service server 3 32a and log information 32b). Here, a plurality of user terminals 1 and authentication proxy service servers 2 may be provided as necessary. The user terminal 1 and the authentication proxy service server 2 are connected via a first communication network so that they can communicate with each other. The authentication proxy service server 2 and the nth NW service server 3 are connected via a second communication network so that they can communicate with each other. The nth NW service server 3 is used exclusively for a network service (for example, an NW service site).

  FIG. 2 is a block diagram of the user terminal according to the first embodiment of the present invention. FIG. 3 is a block diagram of the authentication proxy service server according to the first embodiment of the present invention. FIG. 4 is a block diagram of the NW service server according to the first embodiment of the present invention.

  First, the user terminal according to the first embodiment of the present invention will be described.

(User terminal of Example 1)
With reference to FIG. 2, the user terminal 1 includes a control unit 11, a storage unit 7, an external input device 13, and an external display device 14. The control unit 11 includes input information control means 15, display control means 16, network connection control means 18, and transmission / reception means 17.

  Here, in order to function as the user terminal 1, a computer can be preferably used. Such a computer uses the control unit 11 as a central processing unit (CPU) and the storage unit 7 as at least one memory. Can be configured as Further, by causing such a computer to execute a predetermined program by the CPU, the functions (functions described later) of the input information control means 15, the display control means 16, the network connection control means 18, and the transmission / reception means 17 are realized. be able to. Further, the storage unit 7 (the program for realizing the functions of the input information control means 15, display control means 16, network connection control means 18 and transmission / reception means 17, and each data to be described later handled by the user terminal 1 are stored in the storage unit 7 ( It can be stored in a predetermined area of the memory. The storage unit 7 can be configured by a RAM or the like inside the user terminal, or can be configured by an external storage device (for example, a hard disk). Further, such a program can be constituted by a part of software on the OS (stored in a ROM or an external storage device) used in the user terminal 1.

  The input information control means 15 transmits and receives predetermined information 7a (for example, information necessary for authentication shown in Table 4 described later) input from the external input device 13 (for example, a keyboard) in response to a user request. A function of sending to the unit 17; The input information control means 15 can store such information 7a in a predetermined area of the storage unit 7 in response to a user request.

  The display control unit 16 has a function of displaying information (for example, a service application) from the authentication proxy service server 2 obtained through the transmission / reception unit 17 on the external display device 14 (for example, a CRT display).

  The transmission / reception means 17 has a function of transmitting / receiving desired information via a network (for example, the first and second communication networks shown in FIG. 1). In particular, the transmission / reception means 17 has a function of transmitting the information 7a from the input information control means 15 to the authentication proxy service server 2 via the first communication network. Further, it has a function of receiving information from the authentication proxy service server 2 via the first communication network (for example, application software accompanying the password reissue process) and sending it to the display control means 16.

  The network connection control means 18 has a function of setting information necessary for establishing a connection with the nth NW service server 3, such as a proxy setting for the authentication proxy service server 2, and the proxy setting is set as necessary. It has a function of sending necessary information to the transmission / reception means 17.

  Next, the authentication proxy service server according to the first embodiment of the present invention will be described.

(Authentication proxy service server of Example 1)
With reference to FIG. 3, the authentication proxy service server 2 includes a control unit 21 and a storage unit 6. The control unit 21 includes a signature data information management unit 22, a key generation unit 23, a signature data generation unit 24, an action certificate selection request unit 25, a transmission / reception unit 27, and a network connection control unit 28.

  Here, in order to function as the authentication proxy service server 2, a computer can be preferably used. Such a computer uses the control unit 21 as a central processing unit (CPU) and the storage unit 6 as at least one. It can be configured as a memory. Further, by causing such a computer to execute a predetermined program by the CPU, signature data information management means 22, key generation means 23, signature data generation means 24, action certificate selection request means 25, transmission / reception means 27, and network The function (function to be described later) of the connection control means 28 can be realized. Furthermore, a program for realizing the functions of the signature data information management unit 22, the key generation unit 23, the signature data generation unit 24, the behavior certificate selection request unit 25, the transmission / reception unit 27, and the network connection control unit 28, and authentication Each data to be described later handled by the proxy service server 2 can be stored in a predetermined area of the storage unit 6 (memory). The storage unit 6 can be configured by a RAM or the like inside the authentication proxy service server, or can be configured by an external storage device (for example, a hard disk). Further, such a program can be constituted by a part of software (stored in a ROM or an external storage device) on the OS used in the authentication proxy service server 2.

  The signature data information management unit 22 manages a behavior certificate formed by adding a signature to network service usage history information in association with account information for a user (Table 4 described later). Is generated. Further, the signature data information management means 22 extracts only the action certificate based on the user account information and the network service usage history information included in the signature data information storage database 6a stored in the storage unit 6, It can also be sent to the action certificate selection request means 25. In the first embodiment, the signature data information management unit 22 acquires predetermined information from the user terminal 1 and usage history information from the nth NW service server 3 via the transmission / reception unit 27, and signs the information as a signature. The action certificate to which the signature is added is acquired from the signature data generation unit 24 and is recorded in the signature data information storage database 6a stored in a predetermined area of the storage unit 6 (new) (Or update). In addition, network connection information related to the user terminal 1 and the nth NW service server 3 can be received from the network connection control means. Further, the key generation unit 23 has a function of generating or receiving a signature generation key and a verification key for an action certificate.

  The key generation unit 23 has a function of generating a signature generation key and a verification key for an action certificate.

  The signature data generation unit 24 adds a signature to the network service usage history information received from the signature data management unit 22 to generate an action certificate and sends it to the signature data management unit 22.

  The behavior certificate selection request unit 25 is configured as an arbitrary unit, but in order to obtain user authentication information necessary for the network service in response to a request for user authentication for the network service, A function of requesting the user terminal to select at least one action certificate included in the signature data information storage type database; That is, in response to a request for network service, information for selecting at least one action certificate on the user terminal is transmitted to the user terminal 1.

  The transmission / reception means 27 has a function of transmitting and receiving predetermined information by connecting to a network (for example, the first and second communication networks shown in FIG. 1). In particular, the transmission / reception means 27 transmits information from the signature data information management means 22 to the user terminal 1 via the first communication network and to the nth NW service server 3 via the second communication network. It has a function. Also, the function of receiving the information of the user terminal 1 via the first communication network and the information of the nth NW service server 3 via the second communication network and sending them to the signature data information management means 22 is provided. Have. The transmission / reception means 27 sends or receives information necessary for network connection with the user terminal 1 or the nth NW service server 3 to the network connection control means 28.

  The network connection control means 28 has a function of setting information necessary for establishing a connection with the nth NW service server 3, such as proxy setting for the user terminal 1, and is necessary for proxy setting as necessary. A function of sending various information to the transmission / reception means 27.

  Next, the nth NW service server according to the first embodiment of the present invention will be described.

(Nth NW service server of the first embodiment)
Referring to FIG. 4, the nth NW service server 3 includes a control unit 31 and a storage unit 32. The control unit 31 includes user information management means 33, NW service providing means 34, verification means 35, and transmission / reception means 37.

  Here, in order to function as the nth NW service server 3, a computer can be preferably used. Such a computer uses the control unit 31 as a central processing unit (CPU) and at least the storage unit 32. It can be configured as one memory. In addition, by causing such a computer to execute a predetermined program by the CPU, the functions (functions described later) of the user information management unit 33, the NW service providing unit 34, the verification unit 35, and the transmission / reception unit 37 are realized. Can do. Furthermore, a program for realizing the functions of the user information management means 33, the NW service providing means 34, the verification means 35, and the transmission / reception means 37, and each data to be described later handled by the nth NW service server 3 are stored in the storage unit. It can be stored in a predetermined area of 32 (memory). The storage unit 32 can be configured by a RAM or the like inside the user terminal, or can be configured by an external storage device (for example, a hard disk). Further, such a program can be constituted by a part of software on the OS (stored in a ROM or an external storage device) used in the user terminal 1.

  The user information management means 33 acquires information related to the user management table (table 2 described later) and log information (table 3 described later) from the transmission / reception means 37 via the NW service providing means 34 and stores it in the storage unit 32. It has a function. For convenience of explanation, such information is acquired via the NW service providing unit 34, but such information can also be acquired from the transmitting / receiving unit 37.

  The NW service providing unit 34 has a function of performing information control necessary for providing a network service to the user terminal 1, and includes a known function necessary for network connection.

  The verification unit 35 has a function of verifying an action certificate obtained from the user terminal 1 via the authentication proxy service server 2. The key required for verification is distributed from the authentication proxy service server 2.

  The transmission / reception means 37 transmits or receives information necessary for providing the network service to the user terminal 1. Further, it has a function of acquiring a key required for verification from the authentication proxy service server 2 and sending it to the NW service providing means 34.

  Next, in the network system example of the first embodiment, the operation of the present network system related to new user registration and password reissue will be described.

  First, usage settings by a new user of the authentication proxy service will be described.

(Use settings by new users of authentication proxy service)
FIG. 5 is a flowchart for performing NW service user registration by a new user via the authentication proxy service server according to the first embodiment of the present invention.

  First, in step S101, the authentication proxy service server 2 prepares a signature generation key and a verification key in advance. This is performed as a function of the key generation unit 23 of the authentication proxy service server 2.

  In step S102, proxy setting for Internet connection is performed in the operation system (OS) of the user terminal 1 of the new user. Here, the user terminal 1 is an information home appliance, a personal computer (PC), a personal digital assistant (PDA), a mobile phone, a car navigation system, or the like.

  Subsequently, in response to a user request, the user terminal 1 accesses the authentication proxy service server 2 via the first communication network. This is done by performing a predetermined operation using the external input device 13 as functions of the network connection control means 18 and the transmission / reception means 17 of the user terminal 1.

  In step S103, the authentication proxy service server 2 displays information that requests the user terminal 1 that has accessed to input account registration (that is, the account information input screen that appears on the display screen of the external display device 14). Send. This is performed as a function of the network connection control means 28 and the transmission / reception means 27 of the authentication proxy service server 2. Accordingly, the new user uses the user terminal 1 to register an account for using the authentication proxy service server 2 in accordance with an instruction on the account information input screen, that is, registration of a user ID (UID) and a password (PW). Can be performed (step S104).

  In step S105, the authentication proxy service server 2 requests the user terminal 1 registered for access to input a connection URL to the NW service site on the Internet to be newly connected (that is, the external display device 14). (NW service information input screen appearing on the display screen). This is performed as a function of the network connection control means 28 and the transmission / reception means 27 of the authentication proxy service server 2. As a result, the user can enter the connection destination URL and service name in the input field of the NW service information input screen.

  In step S106, the user terminal 1 requests the authentication proxy service server 2 to register NW service information that the user desires to use the service.

  In step S107, the authentication proxy service server 2 that has received the registration request in step S105 uses the signature data information management unit 22 to associate the URL and NW service name with the authentication information of the authentication proxy service. (Refer to Table 1) is generated and stored in the storage unit 6.

  Subsequently, the authentication proxy service server 2 connects to the nth NW service server 3 via the second communication network. Here, the nth NW service server 3 is an NW service server corresponding to the URL (service site) of the registration request in step S106.

  If the authentication proxy service server 2 determines in step S108 that there is no NW service input in the authentication proxy service account table (Table 1), it distributes a verification key to each NW service server. This is performed as functions of the key generation unit 23, signature data information management unit 22, and transmission / reception unit 27 of the authentication proxy service server 2.

  Next, the nth NW service server 3 registers an account for a new user. The step of registering an account for a new user (step S108) follows the following.

  First, the nth NW service server provides information (that is, a nickname information input screen that appears on the display screen of the external display device 14) to request the user terminal 1 that has accessed to input a nickname and a password. Send. This is performed as a function of the signature data information management unit 22 and the transmission / reception unit 27 of the authentication proxy service server 2.

  On this screen, an instruction for guiding a new user to the new user registration screen is also displayed. As a result, the display screen of the external display device 14 moves to the new user registration screen.

  On the new user registration screen, input of a nickname to be registered for user identification when using the service is requested, and the user inputs characters in a field for inputting a nickname plan. The nickname plan is preferably one that cannot be identified by the user and is likely to remain in the user's memory.

  Next, the n-th NW service server 3 acquires the input nickname information from the user terminal 1 via the authentication proxy service server 2. Thus, the user terminal 1 can transmit the nickname information to the nth NW service server 3 via the authentication proxy service server 2 by the input information control means 15 and the transmission / reception means 17, and the nth NW service server. 3, the inputted nickname information can be acquired by the NW service providing unit 34 and the transmission / reception unit 37.

  Next, the nth NW service server 3 refers to a user management table (see Table 2 described later) stored in advance in the storage unit 32 to determine whether or not it overlaps with another user nickname that has already been registered. If there is a duplication, the user terminal 1 is requested to input another nickname.

  When the n-th NW service server 3 obtains a result that there is no duplication of nicknames, the n-th NW service server 3 transmits information indicating that a password (PW) input is requested to the user terminal 1 (that is, an external display device). 14) Password registration screen information that appears on the 14 display screens).

  As a result, the user can input password information including an arbitrary character string from the external input device 13 into the password input field of the password registration screen.

  In step S109, the n-th NW service server generates a user management table 32a in which a nickname and a password are associated when registering an account for the registered new user, and stores it in the storage unit 32 (see Table 2). ). This is performed as functions of the user information management means 33 and the transmission / reception means 37 of the nth NW service server 3.

  Through the above steps, the authentication proxy service server 2 holds an authentication proxy service account table as shown in Table 1 as information relating to the user who uses the user terminal 1, and the nth NW service server 3 The user management table associating nicknames and passwords as shown in Table 2 is held.

  Next, an action certificate creation / storage phase based on user usage history information will be described.

(Behavior certificate creation / storage phase)
FIG. 6 is a flowchart for storing an action certificate based on the use history of the NW service by a new user by the authentication proxy service server according to the first embodiment of the present invention. In this phase, electronic signature data is generated and stored for history information when visiting the NW service.

  In step S111, the authentication proxy service server 2 transmits information requesting input of account information for using the authentication proxy service to the accessing user terminal 1 (that is, the external display device 14). Information on the account information input screen that appears on the display screen). This is performed as a function of the network connection control means 28 and the transmission / reception means 27 of the authentication proxy service server 2.

  As a result, the user can input an account using the user terminal 1 according to the instruction on the account information input screen (step S112).

  In step S113, if the account authentication is OK, the authentication proxy service server 2 uses the NW service information (a combination of the service name and the description) based on the corresponding user information from the authentication proxy service account table (Table 1). ) Is transmitted (that is, an NW service selection screen that appears on the display screen of the external display device 14, hereinafter referred to as a service selection screen). If the account authentication fails, the authentication proxy service server 2 requests the user terminal 1 to input the account again.

  As a result, the user can use the user terminal 1 to select NW service information to be used on the screen from the service selection screen.

  Next, based on the information of the NW service selected by the user, the authentication proxy service server 2 connects to the nth NW service server 3 of the corresponding URL (service site) via the second communication network. To do.

  In step S116, the nth NW service server 3 transmits information requesting the user terminal 1 to input a nickname and password via the authentication proxy service server 2 (that is, input of the nickname and password). The screen appears on the display screen of the external display device 14 of the user terminal 1).

  As a result, the user can input a nickname and password using the user terminal 1 (step S117), and the nth NW service server 3 has a user management table (Table 2) that is held in advance. The entered nickname and password are authenticated based on (step S118). If the authentication of the nickname and password fails, the nth NW service server 3 requests the user terminal 1 to input the nickname and password again. If the authentication of the nickname and password is OK, the user can receive the NW service of the nth NW service server 3 using the user terminal 1.

  In step S119, the nth NW service server 3 generates log information 32b (see Table 3) associated with the user's nickname as connection information (access date / time) when the NW service is connected by the user terminal 1. Save in the storage unit 32.

  Subsequently, the nth NW service server 3 transmits cookie information including connection information (its own URL, access time) to the user terminal 1 via the authentication proxy service server 2.

  Here, the authentication proxy service server 2 extracts connection information (URL, access time) as a usage history from the cookie information (step S120), generates signature data using the signature generation private key, and authenticates the user authentication proxy service. An action certificate (see Table 4) is created in association with the information in the account table (step S121) and stored in the signature data information storage type database (step S122). This is performed as a function of the signature data information management means 22 of the authentication proxy service server 2.

  Through the above steps, the authentication proxy service server 2 holds the action certificate as shown in Table 4 as the information relating to the user, and the nth NW service server 3 stores the log information as shown in Table 3. Will be held.

  Next, authentication at the time of reissuing a password for a user who has been registered with the nth NW service server 3 will be described.

(Authentication when a registered user's password is reissued)
FIG. 7 is a flowchart for authenticating the user himself / herself, which is required when the password is reissued in the network system example of the first embodiment.

  First, in response to a request from a registered user who has forgotten his password, the user terminal 1 establishes a connection with the nth NW service server according to the procedure of steps S111 to S115 described above.

  Next, in step S131, the n-th NW service server 3 passes through the authentication proxy service server 2 to request that the user terminal 1 input a nickname for authentication at the time of password reissue (that is, , The information on the information input screen for password reissue authentication that appears on the display screen of the external display device 14 is transmitted. As a result, the user can use the user terminal 1 to enter a nickname in the nickname input field of the password reissue authentication information input screen that appears on the display screen of the external display device 14 ( Step S132).

  In step S133, the nth NW service server 3 acquires information on the input nickname from the user terminal 1, and the input nickname is a user in the user management table 32a (Table 2) in the storage unit 32. Check whether it exists in the management table, and if it does not exist, request re-input of the nickname.

  If the input nickname exists in the user management table in step S133, the nth NW service server 3 searches for access date / time information included in the log information 32b of the user in step S134.

  In step S135, information indicating that the nth NW service server 3 requests the user terminal 1 to select the use history related to the action certificate based on the log information 32b via the authentication proxy service server 2. (That is, information on the selection screen for the network service use history that appears on the display screen of the external display device 14, and information such as URL and time is displayed on the display screen). At this time, the signature data information management unit 22 of the authentication proxy service server 2 extracts only the behavior certificate based on the account information and the usage history information included in the signature data information storage type database, and the behavior certificate selection request unit 25. It can be configured to transmit information indicating that the selection of the action certificate is requested under the control of the transmission / reception means 27.

  Thereby, the user can select a plurality of usage histories to be presented by using the checkboxes on the behavior certificate selection screen (that is, selection of the usage history for the behavior certificate) using the user terminal 1. Will be able to. The usage history information (URL and access date / time information) selected by the user is sent to the authentication proxy service server 2 as cookie information (step S136).

  In step S137, the authentication proxy service server 2 retrieves the usage history information selected by the user from the received cookie information, searches the signature data information storage database 6a, retrieves the corresponding action certificate, The behavior certificate is added to the cookie information and transmitted to the nth NW service server 3.

  In step S138, the nth NW service server 3 extracts the signature data from the received cookie information, and in step S139, the behavior certificate based on the usage history selected by the user and the verification public key (authentication proxy service) The verification data is generated from the server 2), and the signature data is verified in step S140.

  In step S141, if the verification of all the signature data is OK, the nth NW service server 3 accepts the authentication of the user in step S142, and performs an arbitrary password reissue process. If verification of any signature data is not OK in step S141, the authentication of the user himself / herself is treated as a failure, and the process ends.

  As a result, a nickname that can be arbitrarily set by the user is used as a user identifier, not a real name or an e-mail address, and behavior that can be observed by the authentication proxy service server as information for authentication (that is, usage history) ) Based on the action certificate, it is possible to authenticate the user while reducing leakage of personal information.

  Next, a second embodiment of the present invention will be described with reference to the drawings.

(Example 2)
The second embodiment is a case where the user terminal accumulates signature data information (that is, an action certificate).

  FIG. 8 is a configuration example of a network system that implements the authentication proxy service according to the second embodiment of the present invention. The second embodiment is the same as the first embodiment except that the user terminal 1 stores the accumulation of the signature data information (that is, the action certificate) in the storage unit 7, and detailed description of the network system is omitted. . The configuration of the nth NW service server in the second embodiment is the same as that in the first embodiment, and a description thereof is omitted (see FIG. 4).

  FIG. 9 is a block diagram of a user terminal according to the second embodiment of the present invention. FIG. 10 is a block diagram of the authentication proxy service server according to the second embodiment of the present invention.

  As is apparent from FIGS. 9 and 10, the basic configuration is the same as that of the first embodiment (see FIGS. 2 and 3), and detailed description thereof is omitted. However, the signature database storage type database is different from the first embodiment. This is different in that it is stored in the storage unit 7 on the user terminal side. This is performed as a function of the control unit 11 and the transmission / reception means 17 of the user terminal 1.

  Next, in the network system example of the second embodiment, the operation of the present network system related to new user registration and password reissue will be described.

  First, usage settings by a new user of the authentication proxy service will be described.

(Use settings by new users of authentication proxy service)
First, the usage setting by a new user of the authentication proxy service is the same as that in the first embodiment, and the description thereof is omitted (see FIG. 5). That is, as information relating to a user who uses the user terminal 1, the authentication proxy service server 2 has an authentication proxy service account table as shown in Table 1, and the nth NW service server 3 stores information in Table 2. It has a user management table that associates nicknames and passwords as shown.

  Next, an action certificate creation / storage phase based on user usage history information will be described.

(Behavior certificate creation / storage phase)
FIG. 11 is a flowchart for storing the action certificate based on the use history of the NW service by a new user by the authentication proxy service server according to the second embodiment of the present invention. This phase is an example of generating and storing electronic signature data for history information when visiting an NW service.

  The processing from step S211 to S219 is the same as the processing from step S111 to S119 of the first embodiment, and detailed description thereof is omitted.

  That is, in the processing from step S211 to S219, the nth NW service server 3 holds log information as shown in Table 3 as information relating to the user.

  In step S220, the authentication proxy service server 2 extracts the user's usage history information, that is, connection information (URL, access time) from the Cookie information from the nth NW service server 3, and in step S221, for generating a signature. Generate signature data with the private key.

  Next, the authentication proxy service server 2 sends the cookie information added with the generated signature data to the user terminal 1.

  In step S222, the user terminal 1 extracts connection information (URL, access time) and signature data as a usage history from Cookie information, creates an action certificate (see Table 4) in which both are associated, and the storage unit 7 Are stored in the signature data information storage type database 7b.

  Accordingly, the nth NW service server 3 has a user management table associating nicknames and passwords as shown in Table 2 and log information as shown in Table 3, and the user terminal 1 is as shown in Table 4. Possess a valid certificate of conduct.

  Next, authentication at the time of reissuing a password for a user who has been registered with the nth NW service server 3 will be described.

(Authentication when a registered user's password is reissued)
FIG. 12 is a flowchart for authenticating the user himself / herself, which is required when the password is reissued in the network system example of the second embodiment according to the present invention.

  First, in response to a request from a registered user who has forgotten his password, the user terminal 1 establishes a connection with the nth NW service server according to the procedure of steps S111 to S115 described above.

  The processing from step S231 to S236 is the same as the processing from step S131 to S136 of the first embodiment, and a description thereof will be omitted.

  That is, in step S236, the user of this network system uses the user terminal 1 to select the action certificate selection screen of the nth NW service server 3 (that is, the use history for making the action certificate). The display screen displays information such as URL, time, etc., so that a plurality of usage histories to be presented can be selected with check boxes. The usage history information (URL and access date information) selected by the user can be sent to the authentication proxy service server 2 as cookie information.

  In step S237, in response to the user's request, the user terminal 1 searches the signature data information storage type database 7b in the storage unit 7 from the selected usage history information, and performs the corresponding action proof under the control of the control unit 11. Take out the book. In this case, the same process as step S137 of the first embodiment is performed on the user terminal side, and the same means as the signature data information management means 22 is provided in the control unit 11 (not shown). That is, the action certificate is added to the cookie information by the user terminal 1 and transmitted to the nth NW service server 3 via the authentication proxy service server 2.

  In step S238, the nth NW service server 3 extracts the signature data from the received cookie information, and in step S239, the behavior certificate based on the usage history selected by the user and the verification public key (authentication proxy service) The verification data is generated from the server 2), and the signature data is verified in step S240.

  In step S241, if the verification of all signature data is OK, the nth NW service server 3 accepts the authentication of the user in step S242 and performs reissue processing of an arbitrary password. If verification of any signature data is not OK in step S241, the authentication of the user himself / herself is treated as a failure, and the process is terminated.

  As a result, a nickname that can be arbitrarily set by the user is used as a user identifier, not a real name or an e-mail address, and behavior that can be observed by the authentication proxy service server 2 as information for authentication (that is, usage) Since the action certificate based on the history is used, it is possible to authenticate the user while reducing leakage of personal information.

  In the above embodiment, a program for causing a computer functioning as a user terminal or an authentication proxy service server to execute each step according to the embodiment of the present invention can be recorded on a computer-readable recording medium.

As described above, the network system including the authentication proxy service server is provided as a service on the communication network and can include the following mechanism.
(1) A mechanism for widely collecting “observable behavior” information on the user's network and issuing an action certificate is provided. Here, the observable behavior information is, for example, information such as a browsing history of a Web site by a user. Each of these observed information is signed by the authentication proxy service server, and the authentication proxy service server is associated with the actual person as an action certificate on the network of the user who becomes the TTP (Trusted Third Party). Is stored information.
(2) In addition, a mechanism is provided for proving the behavior of the service provider while anonymizing the actual person. Leaving information that determines the identity of the actual person by presenting multiple stored behavior certificates in accordance with requests from the service provider's server and verifying them on the server of the service provider It is used for identification and authentication of Internet service users.

  Although the above embodiments have been described as representative examples, it will be apparent to those skilled in the art that many changes and substitutions can be made within the spirit and scope of the invention. For example, according to a user's request, a password reissue procedure can be performed for an NW service from an arbitrary user terminal at an arbitrary location via an authentication proxy service server according to the present invention. Accordingly, the invention should not be construed as limited by the embodiments described above, but only by the claims.

  Since personal authentication can be performed while using information with low personality, it is useful for network services that require user authentication.

It is an example of a structure of the network system which implement | achieves the authentication proxy service of Example 1 by this invention. It is a block diagram of the user terminal of Example 1 by this invention. It is a block diagram of the authentication proxy service server of Example 1 by this invention. It is a block diagram of the NW service server of Example 1 by this invention. It is a flowchart which performs the user registration of the NW service by the new user through the authentication proxy service server of Example 1 by this invention. It is a flowchart which preserve | saves the action certificate by the use log | history of NW service by a new user by the authentication proxy service server of Example 1 by this invention. 5 is a flowchart for authenticating a user himself / herself, which is required when a password is reissued in the network system example according to the first embodiment of the present invention. It is a structural example of the network system which implement | achieves the authentication proxy service of Example 2 by this invention. It is a block diagram of the user terminal of Example 2 by the present invention. It is a block diagram of the authentication proxy service server of Example 2 by this invention. It is a flowchart which preserve | saves the action certificate by the use log | history of the NW service by the new user by the authentication proxy service server of Example 2 by this invention. In the network system example of Example 2 by this invention, it is a flowchart which authenticates a user identity required at the time of password reissue.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 User terminal 2 Authentication proxy service server 3 nth NW service server 6 Storage part 7 Storage part 11 Control part 13 External input device 14 External display device 15 Input information control means 16 Display control means 17 Transmission / reception means 18 Network connection control means 21 control unit 22 signature data information management unit 23 key generation unit 24 signature data generation unit 27 transmission / reception unit 28 network connection control unit 32 storage unit 33 user information management unit 34 NW service provision unit 35 verification unit 37 transmission / reception unit

Claims (6)

An authentication proxy device that interconnects through a network with a user terminal used for user authentication for a network service that allows access by a password,
Signature data generation means for generating an action certificate by adding a signature to the network service usage history information;
Signature data information management means for generating a signature data information storage type database for managing the behavior certificate in association with account information for the user,
The signature data information management means extracts an action certificate contained in the signature data information storage type database as user authentication information required when reissuing a password for the network service.   2. The authentication proxy device according to claim 1, wherein the signature data information management unit extracts only an action certificate based on the account information and the usage history information included in the signature data information storage type database.   A user terminal, wherein the user terminal is connected to the authentication proxy device according to claim 1 through a network for user authentication. A user terminal interconnecting with the authentication proxy device according to claim 1 through a network for user authentication,
A receiving unit that receives the signature data information storage type database from the authentication proxy device;
A storage unit for storing the received signature data information storage type database;
A user terminal characterized in that at least one action certificate included in a signature data information storage database stored in the storage unit is used as user authentication information necessary for the network service. An authentication proxy method for mutual connection through a network with a user terminal used for user authentication for a network service that allows access by a password,
Adding a signature to the network service usage history information to generate an action certificate;
Generating a signature data information storage database for managing the behavior certificate in association with account information for a user;
Extracting an action certificate contained in the signature data information storage type database as user authentication information required when reissuing a password for the network service;
An authentication proxy method comprising: To a computer that is interconnected via a network with a user terminal used for user authentication for a network service that allows access by a password,
Adding a signature to the network service usage history information to generate an action certificate;
Generating a signature data information storage database for managing the behavior certificate in association with account information for a user;
Extracting an action certificate contained in the signature data information storage type database as user authentication information required when reissuing a password for the network service;
Authentication proxy program to execute.

Images