JP2013222440A - Portable terminal, information processing method, application and browser - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily share a login state based on the same authentication information in a portable terminal between applications by using a browser.SOLUTION: When either an application or a browser preliminarily associated in cooperative setting in a portable terminal is shifted to a login state, not only the browser but also all applications whose cooperation with the browser has been set are shifted to the login state based on the same authentication information (cookie information showing user ID or the login state or the like), and logout is interlinked in the same way. Thus, it is possible to easily share the login state based on the same authentication information in the portable terminal between applications by using the browser, and to make it unnecessary to perform the login operation of each application. Especially, the login state of the browser which is frequently used for login to various Web services is spread to an application specialized in an individual use so that it is possible to perform unitary management of the state of login and logout with the browser as a center, and to improve convenience and security.

Description

  The present invention relates to control of an application of a mobile terminal.

  There are single sign-on and OpenID as technologies that allow other websites to use the login status of users logging in to a website with a web browser (also called “browser” in this application) and the corresponding access authority. OAuth is also known as a technology that limits the scope of such permission and improves security.

  On the other hand, functions that have been achieved for each Web site are shifting to a mode realized by an application program (hereinafter also referred to as “application”) in a high-performance portable terminal such as a smartphone (hereinafter also referred to as “smartphone”).

  As cooperation between applications in a portable terminal, an example in which a URL or an e-mail address is transferred when another application is activated from the application is known. In addition, there is a proposal in which cooperation dedicated software having different authentication information for each of a plurality of software logs in each software to operate and acquire and display information (see, for example, Patent Document 1).

JP 2010-237889

  However, when using a plurality of apps having the same authentication information in the mobile terminal, there is a problem that it is complicated for the user to perform a login operation for each app. In addition, the dedicated software such as the above-mentioned patent document sets authentication information for each software, which is complicated to install and use, and there is a security risk in the collective management of authentication information of a plurality of software.

  In the case of OAuth, it can be linked between the website and the app. However, once a user has logged in to the website, an operation for designating a range of an application and permitted access is indispensable and complicated.

  An object of the present invention is to easily share a login state based on the same authentication information between applications using a browser.

  Based on the above object, one aspect (1) of the present invention is a mobile terminal including a browser that is a program for displaying a Web page and an application, and the browser and the login state are linked with respect to the application. A linkage setting unit that accepts designation of whether or not to set, and in a logout state, a login that transitions the browser to a login state by accepting a login operation based on authentication information from the app or the browser in which the linkage is set And when the browser transitions to the login state, the browser is also transitioned to the login state based on the authentication information for all the apps for which the linkage is set, and the application for which the linkage is set Or when the browser transitions from the login state to the logout state Its work together, characterized in that has and a linkage means for transitioning to a logged-out state also for all the applications in which the cooperation with the browser and the browser is set is set.

  Another aspect (7) of the present invention is an information processing method in a portable terminal provided with a computer, a browser that is a program for displaying a Web page, and an application, in which the above aspect is captured in a method category. A linkage setting process for accepting designation of whether or not to set a linkage between the browser and the login state for the application; and a login based on authentication information from the application or the browser in which the linkage is set in the logout state Login processing for transitioning the browser to a login state by accepting an operation, and login based on the authentication information for all the apps for which the browser and the cooperation are set when the browser transitions to the login state Transition to a state, and the app or When the browser transitions from the login state to the logout state, the browser for which the cooperation is set and the cooperation process for causing the browser and all the apps for which the cooperation is set to transition to the logout state, It is characterized by being executed by a computer.

  According to another aspect (2) of the present invention, in any one of the above aspects, the browser generates the login unit and the linkage unit as a processing process that continues to execute even after the browser page display is closed. The processing process and the application perform processing related to login by data communication.

  According to another aspect (3) of the present invention, in any one of the above aspects, the app for which the cooperation is set is referred to the inquiry means as to whether the login state is the logout state or the logout state. A log-in request means for requesting the log-in means to accept the log-in operation when the result of log-in, and an ID-transmitting means for transmitting an app ID to the linkage means when the result of the inquiry is in the log-in state; The cooperation means responds to the inquiry from the application whether it is in a login state or a logout state, and when receiving the application ID from the application, the application ID and a browser indicating the login state Server transmission means for transmitting the cookie information to the authentication cooperation server in the first domain corresponding to the cookie information; Transfer means for receiving, from the authentication cooperation server, the authentication information for the application indicating that the application has been authenticated and the access authority granted to the application, and transmitting to the application, and the application receives the received A predetermined information service is used by transmitting application authentication information to a second domain different from the first domain.

  According to another aspect (8) of the present invention, the above aspect is a computer program category and is captured from the app side, and combined with a browser which is a program for controlling a computer of a mobile terminal to display a Web page. An application that is a program used in the mobile terminal, and the application controls the computer to accept designation of whether or not to set the linkage between the browser and the login state for the application, and When login status linkage is set, the browser is inquired whether it is logged in or logged out. When the result of the inquiry is logout, the browser is requested to accept a login operation, and the result of the inquiry When is logged in, the browser sends the app ID to the browser From app to receive application authentication information indicating access privileges to admit the authenticated that and application, characterized in that to use the predetermined information service by using the authentication information app received.

  Another aspect (9) of the present invention is a browser that is a program for displaying the web page by controlling the computer of the portable terminal, in which the above aspect is captured from the browser side in the category of the computer program. In addition, the browser is used in combination with an application that is a program in which cooperation between the browser and the login state is set, and the browser controls the computer so that the application in which the cooperation is set in the logout state. Alternatively, by accepting a login operation based on authentication information from the browser, the browser is transitioned to a login state, and responds to an inquiry from the application, whether it is a login state or a logout state, and when an application ID is received from the application, Shows the app ID and the login status Cookie information of the browser is transmitted to the authentication cooperation server in the first domain corresponding to the cookie information, and the application is transmitted from the authentication cooperation server for a second domain different from the first domain. It is characterized in that the authentication information for application indicating the authentication and the access authority granted to the application is received and transmitted to the application.

  According to another aspect (4) of the present invention, in any one of the above aspects, the processing process performs the data communication only with the application with a predetermined digital signature.

  According to another aspect (5) of the present invention, in any of the above aspects, the application performs the data communication only with the processing process accompanied by a predetermined digital signature.

  According to another aspect (6) of the present invention, in any one of the above aspects, the processing process determines whether or not the access authority for the resource of the mobile terminal or the attribute thereof has been rewritten for the processing process or the browser. The data communication with the application is performed when it is determined that the application is not performed.

  According to the present invention, a login state based on the same authentication information in a mobile terminal can be easily shared between applications using a browser.

The functional block diagram which shows a structure about embodiment of this invention. The flowchart which shows the process sequence in embodiment of this invention. The figure which shows the example of a screen display in embodiment of this invention. The figure which shows the example of a screen display in embodiment of this invention. The figure which shows the example of data in embodiment of this invention.

  Next, a mode for carrying out the present invention (referred to as “embodiment”) will be illustrated along the drawings. In addition, the assumptions common to the contents already described in the background art and problems are omitted as appropriate.

[1. Constitution〕
This embodiment relates to a mobile terminal 1 as illustrated in the configuration diagram of FIG. The mobile terminal 1 is a mobile information terminal equipped with a computer, such as a smartphone, a tablet PC, or a mobile phone terminal, and a browser B that is a program for displaying a Web page and an application A (A1, A2, A3... An), and execution means 10 such as basic software for executing programs such as browser B and application A.

  This embodiment is an example in which the login state is linked between applications via the browser B and the authentication collaboration server C (hereinafter also referred to as “cooperation server C” or “cooperation server”) in the mobile terminal 1. Show.

  Note that the number of apps A is not limited to three, and any number may be used. Here, the application A uses the application A1 which is a widget program (also simply referred to as “widget”), the application A2 for Internet auction (net auction), and regional information such as map information and store information. It is assumed that the application is a regional information application A3.

  Here, the widget is a program for a portable terminal equipped with a computer, and is a screen-embedded application that operates on a standby screen called a home screen of the portable terminal 1. The browser B is used to log in to a predetermined website and use an information service, and the access destination at that time is the service server S that is a web server belonging to the first domain Y.

  In addition, the application A1 uses the information service provided by the service server S belonging to the same first domain Y as the browser B as a result of accessing the API proxy ZZ that is a server belonging to the second domain Z. It shall be. Hereinafter, the application A1 is mainly taken as an example for details of the processing, but the same applies to the other applications A2 and A3.

  The mobile terminal 1 that executes these applications includes at least an arithmetic control unit 6 such as a CPU, a storage device 7 such as a main memory and an auxiliary storage device (for example, a flash memory), and a communication network N (for example, a computer). Communication means 8 (for example, a communication circuit with a wireless communication network, a wireless LAN adapter, etc.) with a mobile phone, PHS, various wireless communication networks such as a public wireless LAN, and the Internet.

  In addition to the computer configuration as described above, the mobile terminal 1 includes a rechargeable battery control unit 3 that controls charging / discharging of a built-in rechargeable battery (battery), a receiving speaker (not shown) in addition to outgoing and incoming calls, A call control unit 4 that also controls a microphone for transmission and the like, and a GPS unit 5 that performs GPS satellite radio wave reception, current position navigation calculation, and the like are provided. In addition, the mobile terminal 1 includes a display screen G that is input / output means using a liquid crystal with a touch panel function or an organic EL.

  In the portable terminal 1, elements (20, 30, etc.) such as each unit shown in FIG. 1 are realized by the calculation control unit 6 executing the browser B and the application A (A 1) that are computer programs. Of the elements to be realized, the mode of the information storage means is arbitrary, and can be realized in any data format such as a file on the storage device 7, or may be remote storage by network computing (cloud).

  The storage means may include not only a data storage area but also functions such as data input / output and management. In addition, the unit of the storage means shown in this application is for convenience of explanation, and the configuration can be divided or integrated as appropriate, and the processing data and processing results of each means are stored in addition to the explicit storage means. A storage means is used as appropriate.

  The arrows in the figure (for example, FIG. 1) supplementarily indicate the main direction of the flow of data, control, etc., and do not deny other flows or imply direction limitations. For example, before or after data acquisition in a certain direction, a data request or an acknowledgment (ACK) can occur in the reverse direction.

  In addition, each means other than the storage means is a processing means for realizing and executing the information processing functions and operations (for example, FIG. 1) described below, but these are functional units arranged for explanation. It doesn't matter if it matches the actual hardware elements or software modules.

[2. Action)
Of the mobile terminal 1 configured as described above, a processing procedure particularly related to the present embodiment is shown in a flowchart of FIG.

[2-1. Overview〕
First, taking the case where there are three applications A1, A2, and A3 as an example, only the outline of the processing for linking login states in this embodiment will be described while touching a part of FIG. In A1, A2, A3), the cooperation setting means 20 receives designation as to whether or not to set the cooperation between the browser B and the login state for the application A1, A2, or A3 (steps S11, S12).

  The designation of cooperation is accepted on the appropriate setting menu screen of the application A when the browser B is already installed (not shown). However, the default setting is off, and the user is asked to confirm when changing to on.

  The login means 30 on the browser B side performs a login operation based on the authentication information if there is a login request from the application A or the browser B for which cooperation is set in the logout state (steps S13, S17, S34: “YES”). By accepting, the browser is changed to the login state (step S35).

  In addition, the cooperation unit 40 easily shares, that is, links, the login states based on the same authentication information between the applications A using the browser B. This cooperation in the login state means that when the browser B transitions to the login state, all the apps A for which the cooperation with the browser B is set also transition to the login state based on the authentication information.

  When the application A or browser B for which the linkage is set transitions from the login state to the logout state, the login B linkage is also set for the browser B for which the linkage is set and all the linkages set for the browser B. This means that the app A is also transitioned to the logout state. Hereinafter, the technique for realizing the sharing of the login state will be described more specifically.

[2-2. Login linkage by processing process)
First, when the browser B is started for the first time after installation or after the mobile terminal 1 is started, the processing process P in which the login means 30 and the cooperation means 40 are continuously executed even after the page display of the browser B is closed. (Typically, it is generated as a service process in the basic software of the smartphone) (step S31).

  The processing process P includes, in addition to the login means 30 and the linkage means 40, a check means PS and a cookie storage means 45 for storing browser cookie information and the like. It has a function to interpret markup description data such as and render it on the screen display.

  Of the functions of the browser B, the part excluding the processing process P is shown as various functional units B2 in FIG. 1, and has functions such as various settings in addition to bookmarks (favorites) and browsing history related to Web pages.

  Thereafter, the processing process P and the application A perform processing related to login by data communication represented by inter-process communication. Of the data communication related to login, communication between the application A and the processing process P uses inter-process communication, and communication between the processing process P and the cooperation server C uses HTTPS or other encryption communication technology as appropriate. The following security checks are performed for each inter-process communication.

[2-3. Security check)
That is, the application A and the browser B perform the following security check in the inter-process communication related to the process related to the login state cooperation. First, the check means PS of the processing process P determines whether or not the app A that has communicated has a predetermined digital signature, and performs inter-process communication that is data communication only with the app A having a predetermined digital signature.

  Also on the side of the application A, the check means AS determines whether the processing process P which is the partner of the interprocess communication is accompanied by a predetermined digital signature, and performs data communication only with the processing process accompanied by the predetermined digital signature.

  Further, the access means or the attribute (for example, the protection level of permission in the basic software of the smartphone) of the mobile terminal 1 is rewritten in the check means PS of the processing process P for the processing process P or the entire browser B. If it is determined that it has not been rewritten, data communication with the application A is performed.

[2-4. (Specific processing)
The process related to login executed while applying the security check as described above is as follows. First, the cooperation setting unit 20 of the application A sets the inquiry unit 50, the login request unit 60, and the ID transmission unit 70 to realize the cooperation in the application A when the login state cooperation is set. . These means 50 to 70 are inactive in an application in which the cooperation is off, that is, the cooperation is not set.

  Here, it is assumed that the application A operates on the assumption of the login state, and requests login in the logout state. When this application A is activated, and the cooperation is not set (step S13: “NO”), the user A and the user A are requested to input the user ID and password on the login screen unique to the application A regardless of the browser B. Is performed (step S14). If linkage is not set, logout is performed on the logout screen unique to application A.

  The login processing content unique to the application A can be changed according to the use of the application A and other technical conditions. For example, the processing is performed by an API proxy ZZ or other authentication server. In this case, for the login, any authentication information can be used regardless of whether the other application A or the browser B is in the login state with the same or other authentication information (user ID or the like) or in the logout state.

  The login status of application A's own login is based on the specifications and settings of application A and the server, until cookie information or technology according to cookie information is used, or until application A is stopped or for another appropriate validity period. Maintained. When logging in using a unique login screen, installation of browser B and linkage settings are recommended to the user according to the presence or absence of browser B.

  When cooperation is set (step S13: “YES”), the inquiry means 50 of the application A inquires of the cooperation means 40 whether it is in the login state or the logout state (step S15), and the response means of the cooperation means 40 42 responds to this inquiry from the application as to whether it is in a login state or a logout state (step S33). By switching the operation on the application A side in accordance with the response to this inquiry as follows, the login state and the logout state can be linked between the applications A via the processing process P on the browser side.

  First, the login request means 60 of the application A requests the login means 30 of the processing process P to log in (that is, accepting a login operation) when the result of the inquiry is a logout state (Step S16: “NO”) (Step S16). S17). Upon receiving this request, the log-in means 30 of the processing process P displays a log-in screen G (for example, FIG. 3), accepts a log-in operation, enters a log-in state, and displays that effect (step S35).

  The login screen G used in this case may be the same as when the user operates the browser B to generate a login request (step S34: “YES”). Indications related to changes in login status or logout status, such as login and logout, including cases in which linkage is set (steps S35 and S40), notification (Notification) or toast (by application A or browser B) It can be output by a screen notification such as (Toast).

  For example, FIG. 4 is an example of the notification T that appears on the home screen when the app A1 as a widget is logged out due to the expiration of the login state, and when the cooperation with the browser B is set, If the area is tapped, it becomes a login request operation (step S34: “YES”), and the login screen G illustrated in FIG.

  On the other hand, when the inquiry means 50 of the application A inquires to the cooperation means 40 whether it is in the login state or the logout state (step S15) and the result is the login state (step S16: “YES”), the ID transmission means 70 of the application A Then, the application ID is transmitted to the cooperation means 40 of the browser B (step S18).

  On the side of the linking means 40 of the browser B, when the server transmission means 44 receives the application ID transmitted in this way from the application A (step S36: “YES”), the browser indicating the application ID and the login state Is transmitted to the cooperation server C in the first domain Y corresponding to the cookie information (step S37).

  Cooperation server C authenticates application A with the cookie information received from processing process P. Moreover, the cooperation server C is provided with the corresponding | compatible memory | storage means which memorize | stored the application ID and the range information showing the range of the access authority recognized for every application ID as the data matched beforehand (for example, FIG. 5).

  The linkage server C uses this data to embed authority data in which access authority granted to the application A is encoded into a character string such as alphanumeric characters or binary data into data indicating that the application A has been authenticated. The application authentication information in the form is generated and transmitted to the processing process P of the mobile terminal 1.

  Correspondingly, the cooperation means 40 of the processing process P receives, from the cooperation server C, the application authentication information indicating that the application A is authenticated and the access authority granted to the application A from the cooperation server C. A is transmitted to A (step S38). The application A uses the access means 80 to transmit the received application authentication information to the information service server belonging to the second domain Z that is different from the first domain Y. The service is used (step S20).

  The specific configuration of the application authentication information and the information service server is not limited. As an example, the application A1 is connected to the API proxy ZZ that is an API (Application Program Interface) server belonging to the second domain Z. Consider a case where an information service provided by a service server S belonging to the same first domain Y as the browser B is used as a result.

  In this case, the cookie information of the browser B transmitted from the processing process P is encrypted and transmitted together with the authority data as the application authentication information from the cooperation server C, and the application A receives the encrypted authentication information for the application. Pass to the API proxy ZZ. Then, the API proxy ZZ acquires the cookie information for domain Y and the authority data by decrypting the authentication information for application with the decryption key that is shared or associated with the cooperation server C in advance. The information obtained from the service is passed to the app A.

  In the same manner as described above, for application A and browser B for which cooperation is set, for logout (step S21: “YES”), logout is requested from application A to processing process P (step S22). In combination with the case where the logout operation is performed, the logout is unified with the processing on the processing process P (steps S39 and S40).

[3. effect〕
As described above, in this embodiment, when one of the application A (for example, the application A1) or the browser B that has been linked in advance with the cooperation setting in the mobile terminal 1 (step S11 in FIG. 2) or the browser B transitions to the login state, The browser B as well as all the apps A (for example, apps A2 and A3) that are set to cooperate with the browser B are transitioned to the login state based on the same authentication information (such as cookie information indicating the user ID and login state) Similarly, logout is also linked (steps S21, S22, S39, S40).

  Thereby, the login state based on the same authentication information in the portable terminal 1 can be easily shared between the applications A using the browser B, and the login operation for each application A is not necessary.

  In particular, by spreading the login state of browser B, which is often used for logging in to various web services, to application A specialized for individual applications, the login and logout states can be centrally managed around browser B, making it easy to use. Will improve and security will also improve.

  Furthermore, unlike the conventional OAuth, in this embodiment, it is easy to cancel the linkage because it is not necessary to log in to the website and the setting operation is simple, and it is easy to release the linkage frequently to ensure security. Become. In addition, by using a part of the plurality of applications A as a target of cooperation, it is possible to realize a flexible usage mode such as using different mail accounts for each application A.

  In particular, in the present embodiment, a login-related function that is also used by the app A is generated as an independent processing process P that remains even when the browser is stopped (step S31), and exchanges with the app A related to login are performed between processes. By performing this data communication, even after the browser B is closed, it is possible to log in from the application A for which cooperation is set and to use the information service.

  Further, in the present embodiment, the application ID is transmitted to the authentication cooperation server C in the first domain Y corresponding to the cookie information together with the cookie information of the browser B (step S37) to obtain application authentication information (step S37). S38). This authentication information for application indicates that the application A has been authenticated for the second domain Z used in the API and the like, and represents the access authority granted to the application A. Make it available.

  Thereby, since the cookie information of browser B is not directly passed to application A, security can be maintained. Further, the cookie information of the browser B for the first domain Y is replaced with the authentication information for application for the second domain Z by the authentication cooperation server C in combination with the application ID. For this reason, it is possible to maintain security by making the domain that accepts access from the application A by API or the like different from the login target in the browser B.

  Further, by defining the range of access authority from the application ID at the time of the above replacement (for example, FIG. 5), it is possible to eliminate the trouble of the user determining the range of access authority to be given to the application A or setting it on the setting Web page. .

  In the present embodiment, the processing process P performs data communication only with the application A with a predetermined digital signature and performs processing related to login cooperation, so that there is a risk of impersonation or unauthorized modification on the side of the application A. It can be eliminated and security can be secured.

  Further, in the present embodiment, the application A performs data communication with only the processing process P with a predetermined digital signature and performs processing related to login cooperation, so that impersonation or unauthorized modification on the processing process P or the browser B side is performed. Risk can be eliminated and security can be secured.

  In the present embodiment, the browser B side performs data communication with the application A when it is determined that the processing authority P for the resource of the mobile terminal 1 or the access authority and the attribute of the browser B are not rewritten. As a result, it is possible to counter security against unauthorized threats such as unauthorized application A rewriting the access authority of browser B and then illegally logging in between applications to ensure security.

[4. Other embodiments]
In addition, the said embodiment is only an illustration and this invention includes what is illustrated below and other embodiment other than that. For example, a configuration diagram, a data diagram, a flowchart, and the like in the present application are merely examples, and the presence / absence of each element, the order of arrangement and execution of processing, specific contents, and the like can be appropriately changed. Since the present invention can be grasped as an application alone or a browser alone, provision of either one that can be used in combination is also an embodiment of the present invention.

  Moreover, each aspect shown in this application can be grasped | ascertained also as other categories (a method, a program, a system containing a terminal, etc.) which are not specified. Regarding the category of method and program, “means” shown in the category of apparatus is appropriately read as “process” or “step”. Further, the order of processes and steps is not limited to the one directly specified in the present application, and can be changed such as changing the order or executing some processes collectively or partly at any time.

  In addition, computers such as terminals that implement and execute individual means, processes, and steps may be common, or may differ for each means, process, step, or timing. For example, the portable terminal in the present invention may be an information device that combines and uses a plurality of units each including a computer. Further, all or any part of the “means” can be read as “part” (unit, section, module, etc.).

  In addition, the mode for realizing the individual means constituting the portable terminal 1 is free, and the function provided by the external server is called by API (application program interface) or network computing (so-called cloud). For example, the configuration of the present invention can be flexibly changed. Furthermore, each element such as means relating to the present invention may be realized by other information processing mechanisms such as a physical electronic circuit as well as a computer control unit.

DESCRIPTION OF SYMBOLS 1 Mobile terminal 3 Rechargeable battery control part 4 Call control part 5 GPS part 6 Operation control part 7 Storage device 8 Communication means 10 Execution means 20 Cooperation setting means 30 Login means 40 Cooperation means 42 Response means 44 Server transmission means 45 Cookie etc. storage means 46 Transfer means 50 Means 50 Inquiry means 60 Login request means 70 Transmission means A (A1, A2, A3) Application AS, PS Check means B Browser B2 Various functional units C Authentication cooperation server EL Organic G Display screen N Communication network P Processing Process S Service server Y, Z Domain ZZ API proxy

Claims (9)

A mobile terminal provided with a browser that is a program for displaying a web page and an application,
Linkage setting means for accepting designation of whether or not to set linkage between the browser and the login state for the application;
In a logout state, a login unit that transitions the browser to a login state by accepting a login operation based on authentication information from the application or the browser in which the cooperation is set;
When the browser transitions to the login state, the browser or all browsers that are set to cooperate with the browser are also transitioned to the login state based on the authentication information, and the application or browser that is set to cooperate. When the transition from the log-in state to the log-out state, cooperation means for transitioning to the log-out state for the browser for which the cooperation is set and all the applications for which the browser and the cooperation are set,
A portable terminal characterized by comprising: The browser generates the log-in means and the cooperation means as a processing process that continues execution even after the browser page display is closed,
The mobile terminal according to claim 1, wherein the processing process and the application perform processing related to login through data communication. The application for which the cooperation is set is
Inquiry means for inquiring whether the login means or the logout state to the cooperation means;
When the result of the inquiry is a logout state, a login request means for requesting the login means to accept the login operation;
When the result of the inquiry is a login state, an ID transmission unit that transmits an application ID to the cooperation unit;
With
The cooperation means is
A response means for responding to the inquiry from the app whether it is in a login state or a logout state;
Server transmission that, when receiving the application ID from the application, transmits the application ID and the cookie information of the browser indicating the login state to the authentication cooperation server in the first domain corresponding to the cookie information Means,
Transfer means for receiving and transmitting to the application authentication information for application indicating that the application has been authenticated and the access authority granted to the application from the authentication cooperation server;
With
The mobile terminal according to claim 1, wherein the application uses a predetermined information service by transmitting the received authentication information for the application to a second domain different from the first domain. .   The mobile terminal according to claim 2 or 3, wherein the processing process performs the data communication only with the application with a predetermined digital signature.   5. The mobile terminal according to claim 2, wherein the application performs the data communication only with the processing process with a predetermined digital signature.   The processing process determines whether the access authority or the attribute to the resource of the mobile terminal has been rewritten for the processing process or the browser, and performs the data communication with the application when it is determined that the processing has not been rewritten. The portable terminal according to any one of claims 2 to 5, wherein An information processing method in a mobile terminal comprising a computer, a browser that is a program for displaying a web page, and an application,
A linkage setting process for accepting designation of whether to set linkage between the browser and the login state for the application;
In a logout state, a login process for transitioning the browser to a login state by accepting a login operation based on authentication information from the app or the browser in which the cooperation is set;
When the browser transitions to the login state, the browser or all browsers that are set to cooperate with the browser are also transitioned to the login state based on the authentication information, and the application or browser that is set to cooperate. When the transition from the log-in state to the log-out state, the cooperation process for transitioning to the log-out state also for the browser for which the cooperation is set and the browser and all the apps for which the cooperation is set,
An information processing method, wherein the computer executes An application that is a program used in the mobile terminal in combination with a browser that is a program for controlling a computer of the mobile terminal to display a Web page,
The app controls the computer,
For that app, let us accept the designation of whether to set the linkage between the browser and the login state,
When the login status linkage is set for the browser, the browser is inquired about the login status or the logout status,
When the result of the inquiry is a logout state, the browser is requested to accept a login operation,
When the result of the inquiry is a login state, the application ID is transmitted to the browser,
From the browser, the application authentication information indicating that the application is authenticated and the access authority granted to the application is received,
An application characterized in that a predetermined information service is used using the received application authentication information. A browser that is a program that controls a computer of a mobile terminal to display a Web page, and a browser that is used in combination with an application that is a program in which the cooperation between the browser and the login state is set,
The browser controls the computer,
In the logout state, the browser is transitioned to the login state by accepting a login operation based on authentication information from the application or the browser in which the cooperation is set,
In response to the inquiry from the app, whether it is logged in or logged out,
When the application ID is received from the application, the application ID and the cookie information of the browser indicating the login state are transmitted to the authentication cooperation server in the first domain corresponding to the cookie information,
Receiving, from the authentication cooperation server, application authentication information indicating that the application has been authenticated for a second domain different from the first domain and an access right permitted to the application, and transmitting the application authentication information to the application. A browser characterized by

Images