JP2014186697A - Mail address authentication method and mail address authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a mail address authentication system capable of automatically perform mail address authentication when utilizing a Web service.SOLUTION: In a mail address authentication system, a browser 102 in which mail server access information for accessing a mail box of a user is registered transmits a request of a user registration including a mail address of the user to a Web server 110, the Web server 110 transmits a mail including user authentication information to the mail address of the user and transmits a transmission completion notification to the browser 102, the browser 102 accesses the mail box 202 of the user, acquires the mail to acquire the user authentication information and transmits a request including the user authentication information to the Web server 110, and the Web server 110 compares the user authentication information received from the browser 102 with the stored user authentication information and performs mail address authentication.

Description

  The present invention relates to an e-mail address authentication method and e-mail address authentication system for authenticating an e-mail address when using a web service, and more particularly to automation of e-mail address authentication.

  When a new web service account is created at the start of use of the web service, email address verification is often performed as email address authentication in order to prevent multiple registration of accounts by the same person.

  Specifically, e-mail address authentication is performed by transmitting a confirmation e-mail addressed to the e-mail address input by the new user and causing the new user to click a URL described in the confirmation e-mail.

  For authentication using an e-mail address, the terminal ID and e-mail address of the portable terminal are registered in advance in a service that allows browsing of a specific web page, as described in Japanese Patent Application Laid-Open No. 2009-80726 (Patent Document 1). Even if a user changes the mobile terminal, there is a technology that can authenticate only by asking the user for a simple operation.

JP 2009-80726 A

  Conventionally, in order to perform e-mail address authentication, a user first inputs predetermined information including his / her e-mail address into a web service, and then clicks on the URL of a confirmation e-mail to be sent, thereby performing the web service. Email address authentication was required by proving ownership of the email address.

  However, none of Patent Document 1 or the conventional email address authentication technology automates the email address authentication process.

  Accordingly, an object of the present invention is to provide a mail address authentication method and a mail address authentication system capable of automatically performing mail address authentication when using a Web service.

  The above and other objects and novel features of the present invention will be apparent from the description of this specification and the accompanying drawings.

  Of the inventions disclosed in the present application, the outline of typical ones will be briefly described as follows.

  That is, a typical outline is a mail address authentication method for authenticating a user's mail address at the start of using a Web service provided by a Web server, and a browser used by the user when using the Web service on a client terminal In addition, the step of registering mail server access information for accessing the user's mailbox and the user's mail address from the browser to the Web server based on the user registration information input from the user by the browser are included. The step of transmitting the user registration request and the web server that has received the user registration request store the user authentication information of the user based on the user registration request in the user authentication information table. Contains user authentication information Based on the mail server access information, the user's mailbox is accessed based on the mail server access information by sending a mail and sending a transmission completion notice including information for identifying the mail to the browser and the browser receiving the transmission completion notice. , Acquiring the mail specified by the transmission completion notification, acquiring user authentication information, transmitting a request including the user authentication information to the Web server, and receiving the request including the user authentication information By comparing the request including the user authentication information with the user authentication information stored in the user authentication information table, if they match, the user's mail address is authenticated, and the user registration information is registered as the user of the Web service. Storing in the information table.

  In addition, a mail address authentication system for authenticating a user's mail address at the start of use of the Web service, the Web server providing the Web service, the mail server having the user's mailbox, and the user at the client terminal And a browser in which mail server access information for accessing the user's mailbox is registered. The browser uses the user registration information input by the user to When the user registration request including the user's email address is transmitted, the Web server stores the user authentication information of the user based on the user registration request in the user authentication information table when the user registration request is received. Against the email address of The e-mail including the authentication information is transmitted, and a transmission completion notification including information for identifying the e-mail is transmitted to the browser. When the browser receives the transmission completion notification, the browser receives the user's information based on the mail server access information. Access the mailbox, acquire the email specified by the transmission completion notification, acquire the user authentication information, send a request including the user authentication information to the Web server, and the Web server When the request including the request is received, the request including the user authentication information is compared with the user authentication information stored in the user authentication information table, and if they match, the user's mail address is authenticated, Registration information is stored in a user registration information table.

  The effects obtained by typical ones of the inventions disclosed in the present application will be briefly described as follows.

  That is, mail address authentication performed at the time of signing up for a Web service can be automated, and the user's effort can be reduced.

1 is an overall configuration diagram showing a configuration of a mail address authentication system according to an embodiment of the present invention. It is a figure which shows an example of the user authentication information table used with the mail address authentication system which concerns on one embodiment of this invention. It is a figure which shows an example of the user registration information table used with the mail address authentication system which concerns on one embodiment of this invention. It is a figure which shows an example of the mail server access information used with the mail address authentication system which concerns on one embodiment of this invention. It is a figure which shows the whole operation | movement of the mail address authentication system which concerns on one embodiment of this invention. It is a flowchart which shows operation | movement of the mail address automatic authentication process part of the mail address authentication system which concerns on one embodiment of this invention. It is a flowchart which shows operation | movement of the user registration request reception process part of the mail address authentication system which concerns on one embodiment of this invention. It is a flowchart which shows operation | movement of the user registration process part of the mail address authentication system which concerns on one embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that components having the same function are denoted by the same reference symbols throughout the drawings for describing the embodiment, and the repetitive description thereof will be omitted.

<Configuration of email address authentication system>
The configuration of a mail address authentication system according to an embodiment of the present invention will be described with reference to FIGS. FIG. 1 is an overall configuration diagram showing a configuration of a mail address authentication system according to an embodiment of the present invention, and FIG. 2 is an example of a user authentication information table used in the mail address authentication system according to an embodiment of the present invention. FIG. 3 is a diagram showing an example of a user registration information table used in the mail address authentication system according to the embodiment of the present invention, and FIG. 4 is a mail address authentication system according to the embodiment of the present invention. It is a figure which shows an example of the mail server access information used by.

  In FIG. 1, the mail address authentication system includes a Web server 110 that provides a Web service, a client PC 101 that is a client terminal of a user who uses the Web service, and a mail server 201 that transmits and receives user mail. .

  The Web server 110, client PC 101, and mail server 201 are connected via the Internet 100.

  With the configuration of FIG. 1, when the user starts using the Web service to the Web server 110 that provides the Web service, the mail address authentication when signing up for the Web service using the browser 102 of the client PC 101 is performed. The process of automation is performed.

  The Web server 110 includes a user registration request reception processing unit 111 that receives a user registration request from a user, a user registration processing unit 112 that performs user registration processing of the user, a user registration information table 113 that stores user registration information of the user, It has a user authentication information table 114 that stores user authentication information of users.

  The client PC 101 also has a browser 102 that is used when a user accesses the Web server 110.

  The mail server 201 has a mail box 202 in which user mail is stored.

  In addition, the browser 102 accesses the mail server 201, the mail address automatic authentication processing unit 103 that performs processing for automatic authentication of the mail address in the Web server 110, and the mail address automatic authentication processing unit 103 include the mail server 201. Mail server access information 104 for accessing the mail box 202 is included.

  Note that the automatic email address authentication processing unit 103 of the browser 102 is realized by a program installed in the browser 102 and may be pre-installed in the browser 102 or may be added as an extended function of the browser 102. May be.

  The user authentication information table 114 stores user authentication information used at the time of user authentication. As shown in FIG. 2, the user authentication information table 114 includes an item “user ID”, which is an ID for uniquely identifying the user, The “mail address” that is the mail address of “1” and the “temporary password” that is the temporary password used for checking the mail address are stored.

  Data stored in the user authentication information table 114 is user information when a user registration request is received from the user, and a temporary password generated at that time.

  Further, the user registration information table 113 stores user registration information of the user. As shown in FIG. 3, the user registration information table 113 includes, as items, an “user ID” that is an ID for uniquely identifying the user, and the user's mail address. “Mail address” and “password” which is a password used to log in to the Web service are stored.

  The data stored in the user registration information table 113 is user information when the user's mail address is authenticated, and an official password generated at that time.

  If the password is set at the time of user registration by the user, the password is stored, and after authenticating the mail address, it is stored in the user registration information table 113 as the official password. It may be.

  Further, as shown in FIG. 4, the mail server access information 104 accesses a mail server “Mail Server FGDN (Fully Qualified Domain Name)”, a user mail address “Mail Address”, and a mailbox. "Password", which is a password for the purpose, is stored.

  The data stored in the mail server access information 104 is account information for accessing the user's mail box 202.

<Operation of email address authentication system>
Next, the operation of the mail address authentication system according to one embodiment of the present invention will be described with reference to FIGS.

  FIG. 5 shows the overall operation of the mail address authentication system according to the embodiment of the present invention, and FIG. 6 shows the operation of the mail address automatic authentication processing unit of the mail address authentication system according to the embodiment of the present invention. It is a flowchart.

  7 is a flowchart showing the operation of the user registration request reception processing unit of the mail address authentication system according to the embodiment of the present invention, and FIG. 8 is the user registration of the mail address authentication system according to the embodiment of the present invention. It is a flowchart which shows operation | movement of a process part.

  First, as shown in FIG. 5, the user transmits a mail address and a user ID as a user registration request transmission to the user registration request reception processing unit 111 of the Web server 110 using the browser 102 of the client PC 101. .

  The user registration request reception processing unit 111 of the Web server 110 that has received the request executes each step of the flowchart shown in FIG.

  In step S301, an HTTP request from the browser 102 is received, and a mail address and a user ID are acquired as parameters.

  In step S302, a temporary password used in post-processing is generated as a random character string.

  In step S303, the user ID and mail address received in step S301 and the temporary password generated in step S302 are stored in the user authentication information table 114.

  In step S304, a mail address confirmation mail is generated and transmitted to the mail address received in step S301. The mail content includes a user ID and a temporary password, and the subject is determined based on the transmission time.

  In step S305, as a response to the browser 102, the subject and the transmission source address of the email address confirmation email that has been sent are notified as a transmission completion notification.

  The transmission completion notification may be information other than the subject and the transmission source address as long as it is information specifying the transmitted mail address confirmation mail.

  When the browser 102 receives the transmission completion notification from the Web server 110, the mail address automatic authentication processing unit 103 executes each step of the flowchart shown in FIG.

  In step S <b> 401, the email address automatic authentication processing unit 103 of the browser 102 acquires the subject and the source address of the email address confirmation email as a transmission completion notification from the Web server 110.

  In step S402, the mail address automatic authentication processing unit 103 of the browser 102 accesses the mail server 201 by IMAP based on the mail server access information 104 set in advance.

  In step S <b> 403, the mail having the same subject as the mail received in step S <b> 401 is acquired from the mail box 202. If mail cannot be acquired in step S403, the process waits for 2 seconds and repeats step S403.

  In step S404, the user ID and temporary password described in the acquired mail are acquired.

  In step S405, the request is transmitted to the user registration processing unit 112 of the Web server 110 by including the user ID and temporary password acquired in step S404 in the parameters of HTTP POST.

  The user registration processing unit 112 of the Web server 110 that has received the request executes each step of the flowchart shown in FIG.

  In step S501, a request including the user ID and temporary password from the mail address automatic authentication processing unit 103 of the browser 102 is received, and the user ID and temporary password are acquired.

  In step S502, the user ID and temporary password stored in the user authentication information table 114 in step S303 shown in FIG. 6 are acquired.

  In step S503, it is determined whether the user ID and the temporary password acquired in steps S501 and S502 match.

  If they do not match in step S503, the process ends. If they match in step S503, the process proceeds to step S504.

  In step S504, the user ID, password, and mail address are stored in the user registration information table 113 as a new user registration whose mail address has been authenticated.

  In step S505, a registration completion notification is transmitted to the browser 102.

  Through the series of processes described above, in this embodiment, it is possible to automatically complete mail address authentication in signing up for a Web service simply by sending a request from the browser 102.

  As mentioned above, the invention made by the present inventor has been specifically described based on the embodiment. However, the present invention is not limited to the embodiment, and various modifications can be made without departing from the scope of the invention. Needless to say.

  DESCRIPTION OF SYMBOLS 100 ... Internet, 101 ... Client PC, 102 ... Browser, 103 ... Mail address automatic authentication processing part, 104 ... Mail server access information, 110 ... Web server, 111 ... User registration request reception processing part, 112 ... User registration processing part, 113 ... User registration information table, 114 ... User authentication information table, 201 ... Mail server, 202 ... Mail box.

Claims (6)

A mail address authentication method for authenticating a user's mail address at the start of using a Web service provided by a Web server,
Registering mail server access information for accessing the user's mailbox in a browser used when the user uses the Web service on the client terminal;
Transmitting a user registration request including the user's email address from the browser to the Web server based on user registration information input from the user by the browser;
The user authentication information of the user based on the user registration request is stored in a user authentication information table by the Web server that has received the user registration request, and the user authentication information is stored for the user's mail address. Sending an email containing, and sending a transmission completion notification containing information identifying the email to the browser;
Based on the mail server access information, the browser that received the transmission completion notification accesses the user's mailbox, acquires the mail specified by the transmission completion notification, and acquires the user authentication information. And transmitting a request including the user authentication information to the web server;
The web server that has received the request including the user authentication information compares the request including the user authentication information with the user authentication information stored in the user authentication information table. And, as a user of the Web service, storing the registration information of the user in a user registration information table;
E-mail address authentication method with In the e-mail address authentication method according to claim 1,
The mail address authentication method, wherein the user registration request includes a user ID of the user. In the e-mail address authentication method according to claim 2,
The mail authentication method, wherein the user authentication information includes a user ID of the user, a mail address of the user, and a temporary password used when authenticating the mail address. An email address authentication system for authenticating a user's email address at the start of use of a web service,
A web server that provides the web service;
A mail server having the user's mailbox;
A browser in which mail server access information for use by the user at the time of use of the Web service at a client terminal to access the user's mailbox is registered;
The browser transmits a user registration request including the user's email address to the Web server based on the user registration information input from the user,
When the web server receives the user registration request, the web server stores the user authentication information of the user based on the user registration request in a user authentication information table, and the user authentication information is stored in the user authentication information table. Sending an email containing authentication information, sending a transmission completion notification containing information identifying the email to the browser,
When the browser receives the transmission completion notification, the browser accesses the mailbox of the user based on the mail server access information, acquires the mail specified by the transmission completion notification, and acquires the user authentication information. And transmits a request including the user authentication information to the Web server,
When the Web server receives the request including the user authentication information, the Web server compares the request including the user authentication information with the user authentication information stored in the user authentication information table. A mail address authentication system that authenticates a mail address and stores the registration information of the user as a user of the Web service in a user registration information table. In the e-mail address authentication system according to claim 4,
The e-mail address authentication system, wherein the user registration request includes a user ID of the user. In the e-mail address authentication system according to claim 5,
The mail authentication system, wherein the user authentication information includes a user ID of the user, a mail address of the user, and a temporary password used when authenticating the mail address.

Images