JP2011150685A - Authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve the temporary use of software, etc., even when an original external apparatus is in an unusable state concerning an authentication system for acquiring authentication information by connecting the external apparatus to a computer when using the software and content data by a computer. <P>SOLUTION: Whenever authentication is received by connection to the external apparatus in the authentication system, the expiration date and time of a usage key is set and stored. Even when the external apparatus is not connected, the use of the software, etc., is permitted only by inputting the usage key when the situation is within the expiration date and time. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an authentication system for permitting use of software or the like in a computer, and more particularly to an authentication system that performs authentication by connecting an external device to a computer.

  Conventionally, when using software, video data, music data, etc., authentication is required, authentication information transmitted from the client computer is authenticated by an authentication server connected to the client computer that uses the software. In such an authentication system, authentication information is stored in an external medium as disclosed in Patent Documents 1 and 2 below, and the authentication information is transmitted to a server by connecting the external medium to a client computer. Is reliable as long as complex authentication information can be used and it is guaranteed that the user holds the external media. As another example of acquiring authentication information from an external device, there is a case where a biometric recognition device such as a fingerprint is connected to a client computer as an external device, and then biometric information is acquired as authentication information and transmitted to a server. Has even higher reliability.

JP 2009-277082 A JP 2003-216586 A

However, when using an external device as described above, if the external device breaks down or if the user forgets to own the external device, the software cannot be used. The problem arises. Since it is inevitable that a user may forget to have an external device or the user possesses it, the authentication system that uses the external device uses the software in situations where the software must be used. There will always be the possibility of a situation that cannot be done. Such a situation can also occur in a stand-alone computer that is configured to authenticate using an external device.
Further, in a mobile phone having a function as a computer, assuming that the SIM card is used as an external device and authentication for use permission of software or the like is performed, for example, when taking a mobile phone overseas, the SIM card The card may be exchanged for overseas use, but in such a case, it may happen that software or the like cannot be used.
In view of such a problem, the present invention cannot use an original external device in an authentication system that acquires authentication information by connecting an external device with a computer when using software or content data by a computer. Even if it becomes a situation, it makes it a subject to make software etc. temporarily usable.

In order to solve the above problems, the present invention has the following configuration.
According to the first aspect of the present invention, at least one software incorporated in a user computer that is a computer operated by a user or a content computer that is a computer connected to the user computer via a network and / or the user computer or the An authentication system that performs authentication when permitting use of at least one content data stored in a content computer, and includes authentication information storage means, user key storage means, authentication information acquisition means, authentication means, and expiration information setting Means, use key receiving means, use key determining means, and use permission means.
The authentication information storage means is provided in the user computer or an authentication related computer that is a computer connected to the user computer through a network, and stores authentication information corresponding to each user of the user computer. The user key storage means is provided in the user computer or the authentication related computer, and stores a use key determined for each user and a use expiration date and time of the use key in association with each other. The authentication information acquisition means is provided in the user computer and receives the authentication information from an external device having a function of transmitting the authentication information connected to the user computer. The authentication unit is provided in the user computer or the authentication related computer, and determines whether or not the authentication information received by the authentication information acquisition unit matches with the authentication information stored in the authentication information storage unit. Judge whether to accept or reject the certification. The expiration date setting means is provided in the user computer or the authentication related computer, and when the authentication means accepts authentication, the expiration date / time based on the authentication date / time by the authentication means or the date / time linked to the authentication date / time. And the set expiration date / time is stored in the user information storage means in association with the use key corresponding to the user of the authentication information collated with the authentication means. The usage key reception means is provided in the user computer and receives an input of a usage key from the user. The date and time linked to the authentication date and time means the date and time when the predetermined operation of the user computer or the authentication-related computer is performed in a one-to-one correspondence with the authentication operation by the authentication unit. The use key determination means is provided in the user computer or the authentication-related computer, and is either when the authentication information acquisition means cannot receive authentication information or when the authentication means rejects authentication, When the usage key receiving means accepts the usage key, it is judged whether the received usage key matches the usage key stored in the user information storage means, and the usage key is accepted. It is determined whether or not the date / time is within the usage date / time associated with the usage key stored in the user information storage means. The use permission means is provided in the user computer, and when the authentication means accepts the authentication or when the use key determination means determines that the use key matches and is within the use expiration date and time, Allows the use of software and / or the data content. The user computer in the present application is not limited to a general computer as long as it can be connected to an external device that can operate the central processing unit by a program, and includes a mobile phone, an information communication terminal, and the like. The content data includes moving image data such as movies and music, music data, and audio data.

  According to a second aspect of the present invention, in the authentication system, two or more user computers are provided, and at least one of authentication information storage means, user key storage means, authentication means, time limit information setting means, and usage key determination means. Is provided in the authentication-related computer.

According to a third aspect of the present invention, at least one software incorporated in a user computer that is a computer operated by a user or a content computer that is a computer connected to the user computer via a network and / or the user computer or the An authentication system that performs authentication when permitting use of at least one content data stored in a content computer, and includes at least one user computer and an authentication-related computer that is connected to the user computer through a network. .
The authentication-related computer has authentication information storage means for storing authentication information corresponding to each user of the user computer, receives authentication information transmitted from the user computer by the authentication information receiving means, and It is determined whether or not the authentication information received by the authentication information matches with the authentication information stored in the authentication information storage means, and it is determined whether the authentication is accepted or rejected. And when the authentication result notification means notifies the user computer of the authentication result by the authentication means, and when the time limit information setting transmission means accepts the authentication, the date and time when the authentication information is received by the authentication information receiving means, Alternatively, the expiration date / time is set based on the authentication date / time by the authentication means, and the set expiration date / time is notified to the user computer.
On the other hand, the user computer receives the authentication information from the external device by connecting the user computer with an external device having a function of transmitting the authentication information by an authentication information acquisition unit, and transmits an authentication information transmission unit. The authentication information received by the authentication information acquisition means is transmitted to the authentication related computer, and the authentication result acceptance means accepts the notification of the authentication result from the authentication related computer. And a usage key storage unit that stores a usage key determined for each user in association with the usage date and time, and a time limit information receiving unit that receives a notification of the usage date and time from the authentication-related computer. The expiration date / time stored in the means is updated. Further, the use key receiving means accepts the input of the use key from the user, and the use key determining means cannot use the external device because the external device cannot be used, and the authentication information acquiring means cannot receive the authentication information. When the accepting unit accepts the usage key, the received usage key and the usage key stored in the usage key storage unit are compared to determine whether or not they match, and the date and time when the usage key was received is It is determined whether it is within the expiration date / time associated with the usage key stored in the usage key storage means. Then, when the use permission unit accepts the authentication result as the authentication result, or when the usage key determination unit determines that the usage key matches and is within the usage date and time To use the software and / or the content data.

According to a fourth aspect of the present invention, at least one software incorporated in a user computer that is a computer operated by a user or a content computer that is a computer connected to the user computer via a network and / or the user computer or the An authentication system that performs authentication when permitting use of at least one content data stored in a content computer, and includes at least one user computer and an authentication-related computer that is connected to the user computer through a network. .
The authentication-related computer has user information storage means for storing authentication information corresponding to each user, a use key determined for each user, and a use expiration date and time of the use key in association with each other, Whether authentication information received from the user computer is received by the authentication information receiving means, and whether the authentication information received by the authentication means matches with the authentication information stored in the user information storage means A determination is made as to whether to accept or reject the authentication, and the authentication result notification means notifies the user computer of the authentication result by the authentication means. In addition, when the authentication unit accepts authentication by the expiration date setting unit, the expiration date / time is set based on the reception date / time of the authentication information received by the authentication information reception unit or the authentication date / time by the authentication unit, The usage expiration date and time is stored in the user information storage means in association with the authenticated authentication information. Further, the usage key receiving means accepts the usage key transmitted from the user computer, and the usage key determination means accepts the usage key without the authentication information receiving means accepting the authentication information. The received use key and the use key stored in the user information storage means are compared to determine whether or not they match, and the date and time when the use key was received is stored in the user information storage means. It is determined whether or not it is within the expiration date / time associated with the used key, and the determination result by the usage key determination unit is notified to the user computer by the usage key determination result notification unit.
On the other hand, the user computer receives the authentication information from the external device by connecting the external computer having a function of transmitting the authentication information and the user computer by the authentication information acquisition unit, and the authentication information transmission unit. The authentication information received by the authentication information acquisition means is transmitted to the authentication related computer, and the authentication result acceptance means accepts the notification of the authentication result from the authentication related computer. Further, the usage key receiving means receives the usage key input from the user, the usage key transmitting means transmits the received usage key to the authentication related computer, and the usage key determination result receiving means receives the authentication related computer. The notification of the determination result regarding the usage key is accepted. Then, when the authentication result accepting unit accepts authentication as an authentication result by the use permission unit, or the determination result that the use key determination result accepting unit matches the use key and is within the use expiration date and time. Is accepted, the use of the software and / or the data content is permitted.

According to a fifth aspect of the present invention, at least one software incorporated in a user computer that is a computer operated by a user or a content computer that is a computer connected to the user computer via a network and / or the user computer or the An authentication system that performs authentication when permitting use of at least one content data stored in a content computer, and includes at least one user computer and an authentication-related computer that is connected to the user computer through a network. .
The authentication-related computer has a use key storage unit that stores a use key determined for each user, a use expiration date and time of the use key, and user specifying information for specifying the user in association with each other. The user specifying information can be shared with a user key and authentication information as well as a user ID. Then, when the authentication acceptance information receiving means receives the authentication acceptance information transmitted from the user computer in association with the usage specifying information, and the time limit information setting means accepts the authentication acceptance information. The expiration date / time is set based on the reception date / time of the authentication acceptance information received by the authentication acceptance information receiving means, and the user information is associated with the user identification information associated with the authentication acceptance information. Store in the storage means. Further, the usage key receiving means accepts the usage key transmitted from the user computer, and the usage key determination means accepts the usage key without the authentication acceptance information receiving means accepting the authentication acceptance information. If the received usage key matches the usage key stored in the user information storage means, it is determined whether or not they match, and the date and time when the usage key was received is determined by the user information storage means. The usage key determination result notifying unit notifies the user computer of the determination result by the usage key determination unit.
On the other hand, the user computer has authentication information storage means for storing authentication information related to a user of the user computer in association with the user specifying information, and the authentication information acquisition means connects the authentication information to the user computer. Whether the authentication information is received from an external device having a function of transmitting information, and the authentication means matches the authentication information received by the authentication information acquisition means against the authentication information stored in the authentication information storage means And determining whether to accept or reject the authentication. When the authentication means accepts the authentication by the authentication acceptance information transmitting means, the authentication acceptance information is associated with the user identification information. To the authentication-related computer. Further, the usage key receiving means receives the usage key input from the user, the usage key transmitting means transmits the received usage key to the authentication related computer, and the usage key determination result receiving means receives the authentication related computer. The notification of the determination result regarding the usage key is accepted. When the authentication unit accepts authentication by the use permission unit, or when the use key determination result receiving unit receives a determination result that the use key matches and is within the use expiration date and time, the software Software and / or use of the data content.

According to a sixth aspect of the present invention, in the authentication system according to the fifth aspect, the user computer is a mobile phone having a computer function, the external device is a SIM card, and the authentication information is the SIM card. This is an identification number for specifying the telephone number stored in the.
According to a seventh aspect of the present invention, in the authentication system according to any one of the first to fifth aspects, the external device is a storage medium that can be connected to the user computer that stores authentication information.
The invention according to claim 8 is the authentication system according to any one of claims 1 to 5, wherein the external device is a biometric information acquisition device that reads biometric information of a user and is connectable to the client computer. Is the biometric information.

The invention according to claim 9 is an authentication-related computer constituting the authentication system according to any one of claims 3 to 8.
The invention according to claim 10 is a client computer constituting the authentication system according to any one of claims 3 to 8.
The invention according to an eleventh aspect is software that can be incorporated into the computer for causing the computer to realize the function as the user computer according to any one of the third to eighth aspects.

According to the first to fifth aspects of the present invention, when authentication is performed using an external device, the expiration date / time of the usage key is determined based on the authentication time using the external device, so authentication by the external device is performed. From the date and time to the regular date, without using an external device, if you enter the usage key, you can use software etc., even if the external device breaks down or you forget to own the external device, If it is within the due date, software or the like can be used, and convenience for the user can be enhanced.
In the inventions of claims 2 to 5, the authentication system can increase the safety of the authentication system by making the authentication-related computer connected to the network an essential component in addition to the user computer.

According to the sixth aspect of the present invention, the user computer is a mobile phone and the external device is a SIM card. Usually, the SIM card is still attached, so that the user can usually use software as it is. Even when it is necessary to replace the SIM card, the software or the like can be used continuously by inputting the correct usage key within the usage period.
According to the seventh aspect of the present invention, an authentication system can be configured easily and at low cost by using a storage medium in which authentication information is recorded as an external device.
Since the invention according to claim 8 enables biometric authentication, a highly reliable authentication system can be configured.

  The invention described in claim 9 can constitute an authentication system that performs authentication and setting of the expiration date and time together with the plurality of user computers according to any one of claims 3 to 8.

According to a tenth aspect of the present invention, there is provided software managed by connecting to the authentication-related computer according to any of the third to eighth aspects, in addition to authentication by an external device, and input of a usage key within a time limit. Etc. can be used.
In the invention described in claim 11, the client computer according to any one of claims 3 to 8 can be configured by a general computer.

It is a figure which shows typically the computer network which comprises the authentication system which concerns on Embodiment 1,2. It is a block diagram which shows the hardware constitutions of the authentication server or client computer which concerns on embodiment. 2 is a functional block diagram of an authentication system according to Embodiment 1. FIG. (A) is a figure which shows typically the record content of the authentication file which concerns on Embodiment 1, (b) is a figure which shows typically the record content of the user file which concerns on Embodiment 1. FIG. 6 is a flowchart illustrating an operation of the authentication server according to the first embodiment. 3 is a flowchart illustrating an operation of the client computer according to the first embodiment. It is a figure which shows the example of an input instruction | indication screen. It is a functional block diagram of the authentication system which concerns on Embodiment 2. It is a figure which shows typically the record content of the user information file which concerns on Embodiment 2. FIG. 10 is a flowchart illustrating an operation of the authentication server according to the second embodiment. 6 is a flowchart illustrating an operation of a client computer according to the second embodiment. It is a figure which shows typically the computer network which comprises the authentication system which concerns on Embodiment 3. FIG. It is a functional block diagram of the authentication system which concerns on Embodiment 3. 10 is a flowchart illustrating an operation of the authentication server according to the third embodiment. 10 is a flowchart showing the operation of the mobile phone according to the third embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
(Embodiment 1)
FIG. 1 schematically shows a network constituting the authentication system X according to the first embodiment. In FIG. 1, in the authentication system X, an authentication server A serving as an authentication-related computer and a plurality of client computers B serving as user computers are connected by the Internet as a communication network. The client computer B is a computer operated by a user of application software. An application server C is also connected to the communication network.

  FIG. 2 is a block diagram showing an outline of the hardware configuration of the authentication server A and the client computer B. These computers are general computers. Specifically, a CPU 11 that performs arithmetic processing, a RAM 12 that is a work area of the CPU, a basic program is a ROM 13 that records data, and a clock for taking the operation timing of the CPU. 14. A hard disk 15 for storing data and programs, a keyboard 18 for inputting data, an input device such as a mouse 19, a monitor 16 for displaying information, and a network interface such as a router for connecting to the Internet 17 and a USB interface 20 for connecting to an external device. The authentication server A and the client computer B are realized by incorporating a program for causing such a general computer to perform the following operation.

FIG. 3 is a functional block diagram schematically showing functions of the authentication system X realized by the authentication server A and the client computer B. The authentication server A includes an authentication file 101, an authentication information receiving unit 102, an authentication unit 103, an authentication result notification unit 104, and a time limit information setting transmission unit 105 as functions.
The client computer B functions as an authentication information acquisition unit 201, an authentication information transmission unit 202, an authentication result reception unit 203, a user file 204, a time limit information reception unit 205, a usage key reception unit 206, a usage key determination unit 207, and a usage. The permission unit 208 is included. In addition, application software S managed by the authentication system is installed in the client computer B. The application software S is downloaded from the application server C to the client computer B and installed. At this time, the authentication system portion of the client computer B is also installed.

(Authentication server A)
The authentication file 101 constitutes authentication information storage means, and stores authentication information corresponding to each user. FIG. 4A schematically shows the record contents of the authentication file 101. The authentication file 101 stores attribute information such as the user's name, authentication information assigned to the user, a user key, an expiration date of the authentication information, and the like in association with the user ID.
The authentication information receiving unit 102 receives authentication information transmitted from the client computer B.
The authentication unit 103 determines whether the authentication information received by the authentication information receiving unit 102 matches the authentication information stored in the authentication file 101, and accepts or rejects the authentication. Make a decision. Here, since the authentication information is transmitted after being encrypted, the authentication unit 103 decrypts the authentication information, retrieves the authentication information from the authentication file 101, and if there is a match, accepts the authentication and matches it. If there is nothing to do, the certification is rejected.

The authentication result notifying unit 104 notifies the client computer B that has transmitted the authentication information of an authentication result indicating acceptance or rejection of authentication by the authentication unit 103.
The expiration date setting transmission unit 105 sets the expiration date / time based on the reception date / time of the authentication information by the authentication information reception unit 102 or the authentication date / time by the authentication unit 103 when the authentication unit 104 accepts the authentication. Then, the client computer B that has transmitted the authentication information is notified. Specifically, when the authentication time by the authentication unit 103 is used as a reference, a date and time with a fixed period added to the date and time of authentication is calculated and transmitted to the client computer B as the expiration date and time of use.

(Client computer B)
The authentication information acquisition unit 201 receives the authentication information from the external device when the external device having a function of transmitting the authentication information and the client computer B are connected. Here, an authentication USB memory M, which is a USB memory in which authentication information is encrypted and stored, is used as an external device, and the authentication USB memory M is stored in the authentication USB memory M when connected to the USB interface. Read authentication information and get it.
The authentication information transmission unit 202 transmits the authentication information received by the authentication information acquisition unit 201 to the authentication server A.
The authentication result reception unit 203 receives a notification of the authentication result indicating acceptance or rejection of authentication from the authentication server A.

  The user file 204 constitutes a usage key storage means, and stores a usage key composed of a combination of English letters, numbers, symbols, etc. determined for the user of the application software S and stores the usage key. The expiration date and time of use, which is an expiration date, is stored in association with each other. FIG. 4B schematically shows the record contents of the user file 204. The user file 204 stores the user key and the expiration date / time in association with the user ID. The usage key is encrypted and stored. As for the user ID and the user key, when the user first uses the application software S, the user ID and the user key stored in the external device such as the authentication USB memory are read out. Or a user ID and a user key input by the user are stored. As a result, if the client computer A is installed with the application software S managed by the authentication system X, the same user can appropriately set the usage key in a different client computer A. It is also possible to store information such as user keys related to two or more users in the user file 204, so that the application software S installed on one client computer B can be used by a plurality of users. It becomes possible to do. In this case, when updating the expiration date and time described later, information specifying the user such as a user ID is received from an external device, and the expiration date and time associated therewith is specified and updated. Become.

The time limit information receiving unit 205 receives the notification of the use time limit date / time from the authentication server A and updates the use time limit date / time stored in the user file 204.
The usage key reception unit 206 receives an input of a usage key from the user.
When the authentication USB memory M is not usable and the usage key reception unit 206 receives the usage key, the usage key determination unit 207 receives the usage key received and the usage stored in the user file 204. It is determined whether or not the two keys match with each other, and whether or not the date and time when the usage key is received is within the usage date and time associated with the usage key stored in the user file 204 is determined. That is, when a usage key is input in a state where it is not possible to connect to the authentication USB memory M, the usage key is encrypted, and whether or not it is stored in the user file 204 is searched and stored. If yes, it is determined whether or not the reception date / time is before the expiration date / time associated with the picked-up user key.
The use permission unit 208 indicates that the authentication result reception unit 203 receives an authentication reception from the authentication server A as an authentication result, or the use key determination unit 207 matches the use key and is within the use period. When the determination is made, use of the application software S to be authenticated is permitted.

Next, operations of the authentication server A and the client computer B configuring the authentication system X having the above configuration will be described. First, the operation of the authentication server A will be described. FIG. 5 is a flowchart showing the operation of the authentication server A.
First, since the encrypted authentication information is sent from the client computer B, the authentication information receiving unit 102 accepts this (s101), and the authentication unit 103 decrypts the accepted authentication information and is the same as the authentication file 101. It is searched whether or not the authentication information is stored (s102). When the same authentication information is stored, the authentication unit 103 receives the authentication, the authentication result notification unit 104 transmits the result to the client computer B, and the time limit information setting transmission unit 105 receives the authentication information. The expiration date / time is calculated and transmitted to the client computer B (s103). On the other hand, if no matching authentication information is found in s102, the authentication unit 103 rejects the authentication, and the authentication result notifying unit 104 transmits this result to the client computer B (s104).

Next, the operation of the client computer B will be described. FIG. 6 is a flowchart showing the operation of the client computer B. When the user starts the application software S installed on the client computer B, first, an input instruction screen 1000 as shown in FIG. 7 is displayed. The input instruction screen includes a message 1010 for prompting connection of the authentication USB memory M, a use key input field 1021, and an input key determination button 1022. Based on this input instruction screen, the user selects the input confirmation button 1022 by connecting the authentication USB memory M or inputting a use key in the input field 1021. In the client computer B, first, the authentication information acquisition unit 201 tries to acquire authentication information from the authentication USB memory M (s201). If the authentication information can be acquired, the authentication information transmission unit 202 accepts the authentication information. It transmits to the authentication server A (s202). Thereafter, since the authentication result is transmitted from the authentication server A, the authentication result receiving unit 203 receives this and determines whether the authentication is accepted or rejected (s203). If the accepted authentication result is rejection of authentication, a notification screen (not shown) notifies that authentication has been rejected (s204), and the display returns to the input instruction screen 1000 again.
On the other hand, in the case of acceptance of authentication, the expiration date reception unit 205 receives the expiration date / time sent at the same time, and updates the expiration date / time of the user file 204 (s205). Thereafter, the use permission unit 208 permits the application software S to be activated, and the application software S is activated (s206).

  On the other hand, if the authentication USB memory M is out of order in s201, or if the user forgets to have the authentication USB memory M, the authentication information cannot be read from the authentication USB memory M. The key receiving unit 206 waits for an input key input by the user (s207), and receives the input if there is an input. Then, the usage key determination unit 207 first encrypts the received usage key and determines whether it is stored in the user file 204 (s208). Here, when the usage key is not stored Is notified that the use key does not match on a notification screen (not shown) (s209), and the display returns to the input instruction screen 1000 again. If the usage key determination unit 207 determines that the usage key is stored, the usage key determination unit 207 further determines whether the usage date / time of the usage key is within the usage date / time associated with the received usage key (s210). If the usage period has expired, a notification screen (not shown) notifies that the usage period of the usage key has passed (s211), and the display returns to the input instruction screen 1000 again. If it is determined that the usage period has expired, the use permission unit 208 permits the application software S to be activated, and the application software S is activated (s205).

  By performing the operation as described above, in the authentication system X according to the first embodiment, if the user authenticates with the authentication USB memory M, then the usage period of the usage key in the user file 204 is determined by the USB memory. It is set and stored within a certain period from the authentication date and time, and during this time, the application software can be used only by inputting the usage key. In other words, once a user who has been successfully authenticated is within a certain period, the application software can be used even if the authentication USB memory M breaks down or forgets to have the authentication USB memory M. It is possible to avoid the situation where the application software sometimes becomes unusable with a high probability.

(Embodiment 2)
Next, the authentication system Y according to the second embodiment will be described. The network constituting the authentication system Y has the same configuration as the authentication system X shown in FIG. In the authentication system Y, an authentication server is indicated as an authentication server A2, and a client computer is indicated as a client computer B2. These hardware configurations are the same as those shown in FIG. 2, and the authentication server A2 and the client computer B2 are realized by incorporating a program for causing such a general computer to perform the following operations. The difference between the authentication system Y and the authentication system X according to the first embodiment is that the validity of the usage key is determined on the authentication server A2 side.

FIG. 8 is a functional block diagram schematically showing functions of the authentication system Y realized by the authentication server A2 and the client computer B2 according to the second embodiment. The authentication server A2 functions as a user information file 101a, an authentication information reception unit 102, an authentication unit 103, an authentication result notification unit 104, a time limit information setting unit 105a, a usage key reception unit 106, a usage key determination unit 107, a usage key. The determination result notification unit 108 is included.
The client computer B includes, as functions, an authentication information acquisition unit 201, an authentication information transmission unit 202, an authentication result reception unit 203, a usage key reception unit 206, a usage key transmission unit 209, a usage key determination reception unit 210, and a usage permission unit 208a. Have.

(Authentication server A2)
In addition to the function of the authentication server according to the first embodiment, the authentication server A2 has a configuration for determining a use key. Note that the authentication information receiving unit 102, the authentication unit 103, and the authentication result notification unit 104 have the same functions as those of the authentication server A, and a description thereof will be omitted.
In addition to the stored contents of the authentication file 101 shown in the first embodiment, information for determining the validity of the usage key is added to the user information file 101a. FIG. 9 schematically shows the record contents of the user information file 101a. Since the authentication file 101 described above already stores the user key in association with the authentication information, the user information file 101a is further added with the expiration date / time as a record item.
When the authentication unit 104 accepts authentication, the time limit information setting unit 105a sets a use time limit date and time based on the authentication information reception date and time by the authentication information receiving unit 102 or the authentication date and time by the authentication unit 103. The expiration date / time associated with the authentication information in the user information file is updated. Specifically, when the authentication time by the authentication unit 103 is used as a reference, the date and time when a certain period is added to the date and time of authentication is calculated, and this date and time is associated with the authentication information of the user information file 101a. The expiration date / time is newly rewritten as the expiration date / time of the usage key.
As will be described later, the usage key receiving unit 106 receives the user key transmitted from the client computer B2 in the authentication system Y.
The usage key determination unit 107 stores the received usage key and the user information file 101a when the usage key reception unit 106 receives the usage key without the authentication information reception unit 102 receiving anything. It is determined whether the usage key matches with the usage key, and whether the date and time when the usage key was received is within the usage date and time associated with the usage key stored in the user information file 101a. To do. Specifically, since the usage key is transmitted after being encrypted, the usage key determination unit 107 decrypts the usage key and searches whether it is stored in the user information file 101a. In this case, it is determined whether or not the reception date / time is earlier than the usage date / time associated with the picked-up usage key.
The usage key determination notification unit 107 transmits the determination result by the usage key determination unit 107 to the client computer B2. The determination result includes three patterns in which the usage key does not match, the usage time limit has passed, the usage key matches, and within the usage time limit.

(Client computer B2)
Unlike the client computer B according to the first embodiment, the client computer B2 does not need to determine the user key, and thus does not have the user file 204 and the usage key determination unit 207 as functions. Instead, a usage key transmission unit 209 and a usage key determination reception unit 210 are provided. Note that the authentication information acquisition unit 201, the authentication information transmission unit 202, the authentication result reception unit 203, and the use key reception unit 206 have the same functions as those of the client computer B, and thus description thereof is omitted.
The usage key transmission unit 209 encrypts the usage key received by the input key reception unit 206 and transmits it to the authentication server A2.
The usage key determination reception unit 210 receives the usage key determination result transmitted from the authentication server A2.
When the authentication result receiving unit 203 receives an authentication acceptance from the authentication server A2 as an authentication result, or when the usage key determination receiving unit 210 matches the usage key and is within the usage period, the usage permission unit 208a Is accepted from the server A2, the use of the application software S to be authenticated is permitted.

Next, operations of the authentication server A2 and the client computer B2 constituting the authentication system Y having the above configuration will be described. First, the operation of the authentication server A2 will be described. FIG. 5 is a flowchart showing the operation of the authentication server A. Initially, it is determined whether or not the authentication information receiving unit 102 has received transmission of encrypted authentication information from the client computer B2 (s301). If the authentication information receiving unit 102 has received the authentication information, the authentication unit 103 is checked. Is decrypted, and it is searched whether or not the same authentication information is stored in the user information file 101a (s302). If the same authentication information is stored, the authentication unit 103 accepts the authentication, the authentication result notification unit 104 transmits this result to the client computer B2 (s303), and the time limit information setting unit 105a receives the authentication information. The expiration date / time is calculated from the reception date / time, and the expiration date / time associated with the authenticated authentication information of the user information file 101a is updated (s304). On the other hand, if no matching authentication information is found in s302, the authentication unit 103 rejects the authentication, and the authentication result notifying unit 104 transmits this result to the client computer B2 (s305).
If it is determined that the authentication information is not accepted in s301, it is further determined whether or not the usage key receiving unit 106 has received the usage key (s306). Returns to the original state and returns to accepting authentication information. When the usage key receiving unit 106 receives the usage key, the usage key determination unit 107 first decrypts the received usage key and determines whether this is stored in the user information file 101a (s307). If the usage key is not stored, the usage key determination result notifying unit 108 transmits a result indicating that the usage key does not match to the client computer B2 (s308), and the usage key determining unit 207 uses the usage key. Is determined to be stored in the user information file 101a, it is further determined whether or not the reception date / time of the usage key is within the usage expiration date / time associated with the received usage key (s309). If the time limit has been exceeded, the usage key determination result notifying unit 108 determines that the usage key usage time limit has passed. The data is transmitted to the client computer B2 (s310). If it is within the expiration date / time, the usage key determination result notifying unit 108 notifies the client computer B2 of the result that the usage key matches and is within the expiration date / time (s311).

Next, the operation of the client computer B2 will be described. FIG. 11 is a flowchart showing the operation of the client computer B2. When the user activates the application software S installed in the client computer B2, an input instruction screen 1000 as shown in FIG. 7 is displayed as in the client computer B according to the first embodiment.
In the client computer B2, first, the authentication information acquisition unit 201 tries to acquire authentication information from the authentication USB memory M (s401). If the authentication information can be acquired, the authentication information transmission unit 202 accepts the authentication information. The data is transmitted to the authentication server A2 (s402). After that, since the authentication result is transmitted from the authentication server A2, the authentication result receiving unit 203 receives this and determines whether the authentication is accepted or rejected (s403). When the received authentication result is rejection of authentication, it is notified on the notification screen (not shown) that authentication has been rejected (s404), and the display returns to the input instruction screen 1000 again. On the other hand, when the authentication is accepted, the use permission unit 208 permits the application software S to be activated, and the application software S is activated (s405).
On the other hand, if the authentication USB memory M is out of order in s401, or if the user forgets to have the authentication USB memory M, the authentication information cannot be read from the authentication USB memory M. The key receiving unit 206 waits for an input key input by the user (s406), and receives the input if there is an input. Then, the usage key transmission unit 209 encrypts the received usage key and transmits it to the authentication server A2. Thereafter, the authentication server A2 transmits a determination result of any one of the three patterns “the usage key does not match”, “the expiration date / time has passed”, “the usage key matches and is within the expiration date / time”. Therefore, if the usage key does not match or the usage expiration date has passed, a notification screen (not shown) notifies that the usage key does not match or that the usage expiration date has passed (s409). ) The display returns to the input instruction screen 1000 again. If the usage keys match and are within the usage expiration date and time, the usage permission unit 208 permits the activation of the application software S, and the application software S is activated (s405).
By performing the operation as described above, the authentication system Y according to the second embodiment also uses the usage key when the user authenticates with the authentication USB memory M in the same manner as the authentication system X according to the first embodiment. The expiration date and time is set, and during that time, the application software can be used only by entering the usage key. Therefore, once a user who has been successfully authenticated is within a certain period of time, there is a problem such as a failure of the USB memory M for authentication. Even if this occurs, the application software can be used, and the situation where the application software cannot be used in an emergency can be avoided with a high probability.
In the authentication system Y according to the second embodiment, since the authentication server A2 stores the usage key and the expiration date / time, the user uses any client computer B2 that does not store the usage key and the expiration date / time. Even in such a case, the application software can be used as long as it is within the expiration date.

(Embodiment 3)
Next, an authentication system Z according to the third embodiment will be described. A network that constitutes the authentication system Z is shown in FIG. In the authentication system Z, a mobile phone B3 having a computer function is used as a user computer. In the authentication system Z, the authentication server is indicated as an authentication server A3. The hardware configuration of the computer portion of the cellular phone B3 and the authentication server A3 is the same as that shown in FIG. 2, and the server computer A3 and the cellular phone B3 cause such a computer to perform the following operations. Realized by incorporating a program. In the authentication system Z, authentication is performed on the mobile phone B3 side, and the validity of the usage key is determined on the authentication server A3 side.

FIG. 13 is a functional block diagram schematically showing functions of the authentication system Z realized by the authentication server A3 and the mobile phone B3 according to the third embodiment. The authentication server A3 includes a user information file 101a, a time limit information setting unit 105b, a usage key reception unit 106, a usage key determination unit 107, a usage key determination result notification unit 108, and an authentication acceptance information reception unit 109 as functions.
The client computer B functions as an authentication file 212, an authentication unit 213, an authentication information acquisition unit 201, an authentication acceptance information transmission unit 211, a usage key reception unit 206, a usage key transmission unit 209, a usage key determination reception unit 210, and a usage permission. Part 208b.

(Authentication server A3)
The authentication server A3 is obtained by deleting the authentication function from the authentication server according to the second embodiment. For this reason, the functions of the user information file 101a, the usage key reception unit 106, the usage key determination unit 107, and the usage key determination result notification unit 108 are the same as those in the second embodiment, and a description thereof will be omitted. Note that the authentication information stored in the user information file 101a is a unique number stored in the SIM card M2 of the mobile phone B3 here. The authentication acceptance information receiving unit 109 is transmitted from the mobile phone B3. Accept information indicating acceptance of authentication. Here, since the unique number of the SIM card for which the authentication is permitted is transmitted as the authentication acceptance information, this is accepted. This unique number serves as user-specific information.
When the authentication acceptance information receiving unit 109 receives the authentication acceptance information, the term information setting unit 105a sets the expiration date / time based on the authentication information reception date / time by the authentication acceptance information receiving unit 109, and the user information file The expiration date / time associated with the authentication information is updated. Specifically, a date and time with a certain period added is calculated with respect to the reception date and time of authentication information received by the authentication acceptance information receiving unit 109, and this date and time is calculated as the authentication acceptance information receiving unit 109 that is authentication information of the user information file 101a. As the expiration date / time of the usage key associated with the unique number received, the usage expiration date / time is newly rewritten.

(Mobile phone B3)
The cellular phone B3 does not need to determine the user key unlike the client computer B according to the first embodiment, and thus does not have the user file 204 and the usage key determination unit 207 as functions. On the other hand, since authentication is performed by the mobile phone B3, an authentication file 212, an authentication unit 213, and an authentication acceptance information transmission unit 211 are provided. Note that the usage key reception unit 206, the usage key transmission unit 209, and the usage key determination reception unit 210 have the same functions as those of the client computer B2, and thus description thereof is omitted.
The authentication information acquisition unit 201 receives authentication information from an external device having a function of transmitting authentication information to which the mobile phone B3 is connected. Here, the SIM card M2 is used as an external device, and a unique number stored in the SIM card M2 is used as authentication information. Accordingly, the authentication information acquisition unit 201 reads the unique number from the SIM card M2 connected to the mobile phone B3 and acquires it.
The authentication file 212 has the same configuration as the authentication file 101 in the authentication server A according to the first embodiment. However, the unique number of the SIM card is stored as authentication information. This unique number is read from the SIM card M2 attached to the mobile phone B3 when the authentication system is first installed in the mobile phone B2, and stored in the authentication file 212 as authentication information.
The authentication unit 213 has substantially the same function as the authentication unit 103 in the authentication server A according to the first embodiment. However, the authentication information directly uses the information read by the authentication information acquisition unit 201. Therefore, the authentication information is also decrypted. Don't do it. That is, the authentication unit 213 accepts the authentication when the unique number of the SIM card M2 as the authentication information read by the authentication information acquisition unit 201 matches the unique number stored in the authentication file 101, and does not match Rejects certification.
When the authentication unit 213 receives authentication, the authentication acceptance information transmission unit 211 transmits a unique number to the authentication server A3 as information indicating that authentication has been accepted.
The use permission unit 208b receives a determination from the authentication server A3 that the authentication unit 213 accepts the authentication, or that the usage key determination reception unit 210 matches the usage key and is within the usage period. In this case, use of the application software S to be authenticated is permitted.

Next, operations of the authentication server A3 and the mobile phone B3 that constitute the authentication system Z having the above-described configuration will be described. First, the operation of the authentication server A3 will be described. FIG. 14 is a flowchart showing the operation of the authentication server A3. First, since the authentication acceptance information or the usage key is sent from the mobile phone B3, the authentication server A3 confirms whether the authentication acceptance information receiving unit 109 has accepted the authentication acceptance information (s501) and the usage key receiving unit. It is confirmed whether or not 106 accepts the usage key (s503). Here, when authentication acceptance information is sent from the mobile phone B3, the authentication acceptance information accepting unit 109 accepts this, and the term information setting unit 105b calculates the expiration date from the acceptance date of the authentication acceptance information, The expiration date / time associated with the authenticated authentication information in the user information file 101a is updated (s502).
When the usage key is transmitted, the usage key receiving unit 106 receives the usage key, and the usage key determination unit 107 first decrypts the received usage key and stores it in the user information file 101a. If the usage key is not stored, the usage key determination result notifying unit 108 transmits a result that the usage key does not match to the mobile phone B3 (s505). When the usage key determination unit 107 determines that the usage key is stored in the user information file 101a, whether the usage date of the usage key is within the usage date and time associated with the received usage key. If the usage time limit has been exceeded, the usage key determination result notifying unit 108 has passed the usage time limit of the usage key. The result is transmitted to the mobile phone B3 (s507). If it is within the expiration date / time, the usage key determination result notifying unit 108 notifies the cellular phone B3 of the result that the usage key matches and is within the expiration date / time (s508).

Next, the operation of the mobile phone B3 will be described. FIG. 15 is a flowchart showing the operation of the mobile phone B3. When the user activates the application software S installed in the mobile phone B3, first, in the mobile phone B3, the authentication information acquisition unit 201 tries to acquire a unique number from the SIM card M2 (s601). If it cannot be obtained, the process ends. On the other hand, if the authentication information can be acquired, it is accepted and the authentication unit 213 confirms whether or not the same authentication information as the authentication information received in the authentication file 212 is stored (s602). If the same authentication information is stored, the authentication unit 213 accepts the authentication, the use permission unit 208b permits the application software S to be activated, and the application software S is activated (s603). On the other hand, if no matching authentication information is found in s602, the authentication unit 213 rejects the authentication, notifies that the authentication is rejected on a notification screen (not shown), and displays a message prompting the user to enter a use key. (S604). Thereafter, the use key receiving unit 206 waits for an input key input by the user (s605), and receives the input if there is an input. Then, the usage key transmission unit 209 encrypts the received usage key and transmits it to the authentication server A3 (s606). Thereafter, the authentication server A3 transmits a determination result of any one of the three patterns, “the usage key does not match”, “the expiration date / time has passed”, “the usage key matches and is within the expiration date / time”. Therefore, the usage key determination reception unit 210 receives this and performs determination (s607). If the usage keys do not match and the usage expiration date has passed, a notification screen (not shown) notifies that the usage keys do not match or that the usage expiration date has passed (s608). If the usage keys match and are within the usage expiration date and time, the usage permission unit 208b permits the activation of the application software S, and the application software S is activated (s603).
By performing the operation as described above, the authentication system Z according to the second embodiment allows the user to authenticate using the SIM card M2, and the usage date and time of the usage key is set. During this period, the SIM card is different. However, application software can be used only by entering the usage key, so once a user successfully authenticates within a certain period of time, even if the original SIM card M2 fails, etc. The application software can be used by using the SIM card, and the situation where the application software cannot be used completely can be avoided.
Further, in the authentication system Z according to the third embodiment, the application software can be used without entering the usage key unless the SIM card is replaced, and the application software is temporarily used even if the SIM card is replaced. For example, when the mobile phone is temporarily taken overseas, the application software can be used even if the mobile phone is changed to an overseas SIM card.

In the above embodiment, a USB memory or SIM card storing authentication information is used as an external device for sending authentication information. However, an IC card, CD-ROM, or other storage medium storing authentication information is also used. In addition, a device that acquires biometric information of a user such as a fingerprint scanner that can be externally connected may be employed. In addition, when using the apparatus which acquires biometric information, what is necessary is just to memorize | store authentication information as biometric information in an authentication file.
In the above embodiment, the application software S is installed in the client computer B. However, for example, the application software S is installed in the application server C, and the client computer S is like browser software. It is also possible to send / receive data and give operational instructions using general-purpose software. Even in this case, the use permission unit can control permission / non-permission of application software by restricting access to the application server C.
In the above embodiment, the identity of the user is determined based on the authentication information and the use key alone, but it is needless to say that the user ID may be input together. The user ID can also be used as a usage key.
In the above embodiment, the authentication system performs management related to the use of software. However, the authentication system according to the present embodiment performs management regarding the use of content data such as moving image data, audio data, and image data. It is also possible.

X, Y, Z Authentication system A, A2, A3 Authentication server B, B2 Client computer B3 Mobile phone M Authentication USB memory M2 SIM card
S application software 101, 212 authentication file 101a user information file 102 authentication information receiving unit 103, 213 authentication unit 104 authentication result notifying unit 105 time limit information setting transmitting unit 105a, 105b time limit information setting unit 106 use key receiving unit 107 use key Determination unit 108 Usage key determination result notification unit 109 Authentication acceptance information reception unit 201 Authentication information acquisition unit 202 Authentication information transmission unit 203 Authentication result reception unit 204 User file 205 Time limit information reception unit 206 Usage key reception unit 207 Usage key determination unit 208 , 208a, 208b Usage permission unit 209 Usage key transmission unit 210 Usage key determination reception unit 211 Authentication acceptance information transmission unit

Claims (11)

At least one software incorporated in a user computer which is a computer operated by a user or a content computer which is a computer connected to the user computer via a network and / or at least one software stored in the user computer or the content computer An authentication system that performs authentication when permitting use of content data,
Authentication information storage means for storing authentication information corresponding to each user of the user computer, which is provided in the user computer or an authentication related computer which is a computer connected to the user computer through a network;
A user key storage unit that is provided in the user computer or the authentication-related computer and stores a use key determined for each user in association with a use expiration date and time of the use key;
Authentication information acquisition means for receiving the authentication information from an external device provided in the user computer and having a function of transmitting the authentication information connected to the user computer;
It is determined whether the authentication information received by the authentication information acquisition means provided in the user computer or the authentication related computer matches with the authentication information stored in the authentication information storage means, and the authentication is accepted. Authentication means for determining whether to reject or reject,
When the authentication means provided in the user computer or the authentication-related computer accepts authentication, the expiration date / time is set and set based on the authentication date / time by the authentication means or the date / time linked to the authentication date / time. Expiration date setting means for storing the expiration date and time in the user information storage means in association with the use key corresponding to the user of the authentication information checked against the authentication means;
A use key receiving means provided in the user computer for receiving an input of a use key from a user;
Either the case where the authentication information acquisition means provided in the user computer or the authentication related computer cannot receive authentication information or the case where the authentication means rejects authentication, the use key receiving means uses When the key is received, it is determined whether the received usage key matches the usage key stored in the user information storage means, and the date and time when the usage key is received is determined by the user. Usage key determination means for determining whether or not the usage expiration date associated with the usage key stored in the information storage means is within;
When the authentication unit accepts authentication provided in the user computer, or when the use key determination unit determines that the use key matches and is within the use expiration date and time, and / or An authentication system including use permission means for permitting use of the data content;   The user computer is provided in two or more, and at least one of authentication information storage means, user key storage means, authentication means, time limit information setting means, and usage key determination means is provided in the authentication related computer. Authentication system. At least one software incorporated in a user computer which is a computer operated by a user or a content computer which is a computer connected to the user computer via a network and / or at least one software stored in the user computer or the content computer An authentication system that performs authentication when permitting the use of content data, comprising one or more user computers and an authentication-related computer that is a computer connected to the user computers through a network,
The authentication related computer is:
Authentication information storage means for storing authentication information corresponding to each user of the user computer;
Authentication information receiving means for receiving authentication information transmitted from the user computer;
An authentication unit that determines whether the received authentication information matches with the authentication information stored in the authentication information storage unit, and determines whether to accept or reject the authentication;
Authentication result notification means for notifying the user computer of an authentication result by the authentication means;
When the authentication unit accepts authentication, the expiration date / time is set based on the reception date / time of the authentication information by the authentication information receiving unit or the authentication date / time by the authentication unit, and the set expiration date / time is set to the user computer. A deadline information setting transmission means to notify
The user computer is
Authentication information acquisition means for receiving the authentication information from the external device by connecting the external computer having the function of transmitting the authentication information and the user computer;
Authentication information transmitting means for transmitting the authentication information received by the authentication information acquiring means to the authentication related computer;
Authentication result receiving means for receiving notification of the authentication result from the authentication-related computer;
Usage key storage means for associating and storing the usage key determined for each user and the usage expiration date and time;
Time limit information receiving means for receiving notification of the time limit for use from the authentication-related computer and updating the time limit for use stored in the use key storage means;
A usage key receiving means for receiving a usage key input from a user;
When the external device is unavailable and the authentication information acquisition unit cannot receive authentication information, and the usage key reception unit receives the usage key, the received usage key and the usage key storage unit It is determined whether or not it matches with the stored usage key, and whether or not the date and time when the usage key is received is within the usage date and time associated with the usage key stored in the usage key storage means. Use key determination means for determining;
When the authentication result accepting unit accepts authentication as an authentication result, or when the usage key determination unit determines that the usage key matches and is within the usage date and time, the software and / or An authentication system including use permission means for permitting use of the content data; At least one software incorporated in a user computer which is a computer operated by a user or a content computer which is a computer connected to the user computer via a network and / or at least one software stored in the user computer or the content computer An authentication system that performs authentication when permitting the use of content data, comprising one or more user computers and an authentication-related computer that is a computer connected to the user computers through a network,
The authentication related computer is:
User information storage means for storing authentication information corresponding to each user, a use key determined for each user, and a use expiration date and time of the use key in association with each other;
Authentication information receiving means for receiving authentication information transmitted from the user computer;
An authentication unit that determines whether the received authentication information matches the authentication information stored in the user information storage unit, and determines whether to accept or reject the authentication;
Authentication result notification means for notifying the user computer of an authentication result by the authentication means;
When the authentication unit accepts the authentication, the expiration date / time is set based on the reception date / time of the authentication information by the authentication information receiving unit or the authentication date / time by the authentication unit, and the set expiration date / time is authenticated. Time limit information setting means stored in the user information storage means in association with authentication information;
Usage key receiving means for receiving a usage key transmitted from the user computer;
When the use key receiving unit accepts a use key without the authentication information receiving unit accepting authentication information, the received use key is compared with the use key stored in the user information storage unit. A usage key determination unit that determines whether the date and time when the usage key is received is within a usage time limit date and time associated with the usage key stored in the user information storage unit;
Use key determination result notifying means for notifying the user computer of the determination result by the use key determining means;
Have
The user computer is
Authentication information acquisition means for receiving the authentication information from the external device by connecting the external device having a function of transmitting authentication information and the user computer;
Authentication information transmitting means for transmitting the authentication information received by the authentication information acquiring means to the authentication related computer;
Authentication result receiving means for receiving notification of the authentication result from the authentication-related computer;
A usage key receiving means for receiving a usage key input from a user;
Usage key transmission means for transmitting the accepted usage key to the authentication-related computer;
Use key determination result receiving means for receiving a notification of a determination result related to the use key from the authentication-related computer;
When the authentication result accepting unit accepts authentication as an authentication result, or when the use key determination result accepting unit accepts a determination result that the use key matches and is within the use expiration date and time, the software And / or use permission means for permitting use of the data content. At least one software incorporated in a user computer which is a computer operated by a user or a content computer which is a computer connected to the user computer via a network and / or at least one software stored in the user computer or the content computer An authentication system that performs authentication when permitting the use of content data, comprising one or more user computers and an authentication-related computer that is a computer connected to the user computers through a network,
The authentication related computer is:
Use key storage means for storing a use key determined for each user, a use expiration date and time of the use key, and user specifying information for specifying the user in association with each other;
Authentication acceptance information receiving means for receiving authentication acceptance information transmitted in association with the user identification information from the user computer;
When the authentication acceptance information receiving means receives the authentication acceptance information, the expiration date / time is set based on the acceptance date / time of the authentication acceptance information by the authentication acceptance information receiving means, and the set expiration date / time is set as the authentication acceptance information. Time limit information setting means for storing in the user information storage means in association with the associated user specifying information;
Usage key receiving means for receiving a usage key transmitted from the user computer;
When the use key receiving means accepts the use key without the authentication acceptance information receiving means accepting the authentication acceptance information, the received use key and the use key stored in the user information storage means are illuminated. Use key determination means for determining whether the date and time when the use key is received are within the expiration date and time associated with the use key stored in the user information storage means, ,
Use key determination result notifying means for notifying the user computer of the determination result by the use key determining means;
Have
The user computer is
Authentication information storage means for storing authentication information relating to a user of the user computer in association with the user specifying information;
Authentication information acquisition means for receiving the authentication information from an external device having a function of transmitting the authentication information connected to the user computer;
Authentication means for determining whether the authentication information received by the authentication information acquisition means matches with the authentication information stored in the authentication information storage means, and determining whether to accept or reject the authentication; ,
Authentication acceptance information transmitting means for transmitting the authentication acceptance information to the authentication related computer in association with the user specifying information when the authentication means accepts the authentication;
A usage key receiving means for receiving a usage key input from a user;
Usage key transmission means for transmitting the accepted usage key to the authentication-related computer;
Use key determination result receiving means for receiving a notification of a determination result related to the use key from the authentication-related computer;
The software and / or the data content when the authentication unit accepts authentication or when the usage key determination result reception unit receives a determination result that the usage key matches and is within the usage expiration date and time And a use permission means for permitting use of the authentication system.   6. The authentication according to claim 5, wherein the user computer is a mobile phone having a computer function, the external device is a SIM card, and the authentication information is an identification number for specifying a telephone number stored in the SIM card. system.   The authentication system according to claim 1, wherein the external device is a storage medium connectable to the user computer that stores authentication information.   The said external apparatus is a biometric information acquisition apparatus which can be connected to the said client computer which reads a user's biometric information, Comprising: The said authentication information consists of the said biometric information. The described authentication system.   The authentication related computer which comprises the authentication system of any one of Claim 3 to 8.   The user computer which comprises the authentication system of any one of Claim 3 to 8.   Software that can be incorporated into the computer for causing the computer to realize the function as the user computer according to any one of claims 3 to 8.

Images