JP2019020823A - Multi-step authentication processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable personal authentication while suppressing a burden on a customer. SOLUTION: A first step of controlling an input screen of a unique authentication information for identifying a customer to be visually displayed on a customer use terminal device and collating the input unique authentication information with pre-registered information. Authentication is a multi-step authentication processing method performed in another authentication processing device; when the first-step authentication is normal, the specified telephone number of the randomly selected authentication destination is visually displayed on the customer terminal device. Controlled, the call from this terminal device to the specific phone number of the authentication destination is determined based on the customer phone number registered in advance, and the second stage authentication is performed; when the second stage authentication is normal, The preselected question is controlled to be audibly displayed on the customer's terminal device, the answer to the question input by voice is recognized by voice in this terminal device, and the third stage authentication is performed; the third stage authentication is normal. At one point, the success of a series of multi-step authentications by first-step certification, second-step certification and third-step certification is determined. [Selection diagram] Fig. 1

Description

  The present invention relates to a multi-step authentication processing system, and more particularly to a multi-step authentication processing device, a multi-step authentication processing method, and a multi-step authentication processing program.

  For example, in order to perform electronic commerce (EC) through a communication network such as the Internet, when logging into a service providing server, a device for ensuring security is essential. As a mechanism for ensuring security, personal authentication that definitely identifies (verifies) the person is employed.

  For the personal authentication, information unique to the individual (unique authentication information) is used. This unique authentication information is mainly classified into knowledge information, possession information, and biometric information. Here, the knowledge information is information that only the person knows, the possession information is only possessed by the person, and the biological information is information / characteristics unique to the organism.

  In order to prevent unauthorized access by a third party other than the principal, it is desired to perform multi-stage personal authentication (multi-stage authentication) using a plurality of pieces of information among the unique authentication information described above. Many techniques for performing such multi-stage personal authentication have been proposed (see, for example, Patent Documents 1, 2, and 3).

Japanese Patent No. 4,583,746 Japanese Patent No. 4,311,617 Japanese Patent Laid-Open No. 2006-136299

  However, if the authentication is strengthened by multi-stage personal authentication, the cost of the system including the multi-stage authentication processing apparatus and the burden (labor) of the customer (user) are unavoidable. Furthermore, in consideration of personal information protection, use of biometric information such as fingerprints is limited.

  The problem is to provide a technology that enables more reliable multi-stage personal authentication without increasing the cost of a system including the multi-stage authentication processing apparatus and suppressing the burden on the customer.

  In order to solve the above-described problem, the multi-stage authentication processing device according to the first aspect is controlled so that an input screen of unique authentication information for specifying a customer is visually displayed on a customer use terminal device having a single configuration or a composite configuration. The first authentication is performed by collating the input unique authentication information with information registered in advance; when the first authentication is normal, the specific telephone number of the authentication destination randomly selected Is controlled so as to be displayed visually on the customer-use terminal device, and the call from the customer-use terminal device to the specific telephone number of the authentication destination is determined based on a pre-registered customer phone number; When the second stage authentication is normal, control is performed so that a preselected question is audibly displayed on the customer use terminal device, and the question input by voice in the customer use terminal device is performed. Voice recognition of the answer is performed, and third step authentication is performed; when the third step authentication is normal, a series of multi-step authentications according to the first step authentication, the second step authentication, and the third step authentication are performed. A processor for determining success is provided.

  The multi-stage authentication processing device according to the second aspect controls the input of unique authentication information for identifying a customer so as to be displayed visually on a single-use or composite-use customer terminal device, and the unique authentication input A multi-stage authentication processing apparatus in which first-stage authentication for collating information with pre-registered information is performed in another authentication processing apparatus; when the first-stage authentication is normal, authentication selected at random Control to display the specific telephone number of the destination on the customer terminal device, and determine whether to call the specific telephone number of the authentication destination from the customer terminal device based on the registered customer telephone number. Second-stage authentication is performed; when the second-stage authentication is normal, control is performed so that a pre-selected question is audibly displayed on the customer-use terminal device; Voice recognition of the answer to the inputted question is performed, and the third step authentication is performed; when the third step authentication is normal, the first step authentication, the second step authentication, and the third step authentication are performed. A processor is provided for determining success of a series of multi-step authentications.

  The multi-step authentication processing device according to the third aspect controls the unique authentication information input screen for specifying the customer to be displayed visually on a single-use or composite-use customer terminal device, and is input by the unique authentication The first step authentication is performed by comparing the information with the pre-registered information; when the first step authentication is normal, the specific telephone number of the authentication destination selected at random and the question selected in advance Control to display visually on the customer use terminal device, and determine the second call authentication from the customer use terminal device to the call to the specific telephone number of the authentication destination based on a pre-registered customer phone number When the second step authentication is normal, control is performed so that an answer request for the question is audibly displayed on the customer use terminal device, and the question input by voice in the customer use terminal device is answered. A third step authentication is performed; when the third step authentication is normal, a series of multi-step authentications by the first step authentication, the second step authentication, and the third step authentication are performed. A processor for determining success of the system.

  The multi-stage authentication processing device according to the fourth aspect controls the unique authentication information input screen for specifying the customer to be displayed visually on the customer use terminal device having a single configuration or a composite configuration, and the specific authentication is input. A multi-stage authentication processing apparatus in which first-stage authentication for collating information with pre-registered information is performed in another authentication processing apparatus; when the first-stage authentication is normal, authentication selected at random A customer who controls to display the specific telephone number in advance and the question selected in advance on the customer terminal device, and is registered in advance to make a call from the customer terminal device to the specific telephone number of the authentication destination Determine based on the telephone number and perform the second step authentication; when the second step authentication is normal, control the answer request to the question to be audibly displayed on the customer terminal device; Voice response is input to the question input at the customer terminal device and voice recognition is performed, and third stage authentication is performed; when the third stage authentication is normal, the first stage authentication, the second stage authentication, and A processor for determining success of a series of multi-step authentications by the third-step authentication;

  The multi-step authentication processing method according to the fifth aspect controls the input of unique authentication information for specifying a customer so that the input screen is visually displayed on a customer-use terminal device having a single configuration or a composite configuration, and the specific authentication is input. Verifying information against pre-registered information and performing first-stage authentication; when the first-stage authentication is normal, a specific telephone number of an authentication destination selected at random is used as the customer-use terminal device A step of performing second-step authentication by determining to make a call from the customer-use terminal device to the specific telephone number of the authentication destination based on a customer telephone number registered in advance. When the second-step authentication is normal, control is performed so that a preselected question is audibly displayed on the customer-use terminal device, and a response to the question input by voice in the customer-use terminal device is performed. Recognizing the voice and performing third-stage authentication; and when the third-stage authentication is normal, a series of multi-stage authentication by the first-stage authentication, the second-stage authentication, and the third-stage authentication. The step of determining the success of the multi-stage authentication processing device is executed.

  The multi-step authentication processing method of the sixth aspect controls the input of unique authentication information for identifying a customer so that the input screen is visually displayed on a customer-use terminal device having a single configuration or a composite configuration, and the specific authentication is input. A first-stage authentication processing method in which first-stage authentication for comparing information with information registered in advance is performed in another authentication processing apparatus; when the first-stage authentication is normal, authentication selected at random Control to display the specific telephone number of the destination on the customer terminal device, and determine whether to call the specific telephone number of the authentication destination from the customer terminal device based on the registered customer telephone number. Performing the second stage authentication; and, when the second stage authentication is normal, controlling so that a preselected question is audibly displayed on the customer use terminal device, and the customer use terminal device Recognizing an answer to the question inputted by voice and performing third step authentication; when the third step authentication is normal, the first step authentication, the second step authentication and the step The processor of the multi-step authentication processing apparatus executes a step of determining success of a series of multi-step authentications by the third step authentication.

  The multi-step authentication processing method according to the seventh aspect controls the input of unique authentication information for identifying a customer so that the input screen is visually displayed on a single-use or composite-use customer terminal device, and the input unique authentication A step of collating information with pre-registered information and carrying out first-stage authentication; when the first-stage authentication is normal, a specific telephone number of an authentication destination randomly selected and a pre-selected question Is determined so as to be visually displayed on the customer use terminal device, and the call from the customer use terminal device to the specific telephone number of the authentication destination is determined based on a customer phone number registered in advance. Performing step authentication; and, when the second step authentication is normal, controlling the answer request to the question to be audibly displayed on the customer user terminal device, Recognizing an answer to the inputted question and performing third step authentication; and when the third step authentication is normal, the first step authentication, the second step authentication, and the third step The processor of the multi-step authentication processing device executes a step of determining success of a series of multi-step authentication by authentication.

  The multi-stage authentication processing method according to the eighth aspect controls the input of unique authentication information for identifying a customer so that the input screen is visually displayed on a single-use or composite-use customer terminal device, and the unique authentication is input. A first-stage authentication processing method in which first-stage authentication for comparing information with information registered in advance is performed in another authentication processing apparatus; when the first-stage authentication is normal, authentication selected at random A customer who controls to display the specific telephone number in advance and the question selected in advance on the customer terminal device, and is registered in advance to make a call from the customer terminal device to the specific telephone number of the authentication destination Determining based on a telephone number and performing second-step authentication; and when the second-step authentication is normal, an answer request for the question is audibly displayed on the customer terminal device Controlling and voice-recognizing an answer to the question inputted by voice at the customer terminal device, and performing third-stage authentication; and when the third-stage authentication is normal, the first-stage authentication; The processor of the multi-step authentication processing device executes a step of determining success of a series of multi-step authentications by the second step authentication and the third step authentication.

  In each of the above aspects, the specific telephone number of the authentication destination is randomly selected so as not to be continuously assigned to the same customer use terminal device. Further, the specific telephone number of the authentication destination may be randomly selected so as not to be continuously assigned to the same customer use terminal device within a predetermined time.

  In each of the above aspects, when the third step authentication fails, the answer to the question inputted by the character in the customer terminal device is recognized as characters, and the third step authentication is further performed. Further, when the third stage authentication fails, the customer use terminal device is connected to an operator terminal, and an answer to the question inputted by voice in the customer use terminal device is determined by an operator. Authentication may be further performed.

  In each of the above aspects, the preselected question includes a randomly selected question. The preselected question includes a question corresponding to the native language. Further, the preselected question may include either a part of a proverb or a keyword.

  In each of the above aspects, the answer to the question includes one of the other part of the proverb and the repetition of the keyword.

  You may implement as a multistep authentication processing program which makes the processor of a multistep authentication processing apparatus perform the multistep authentication processing method mentioned above.

  According to the disclosed technology, it is possible to perform more reliable multi-stage personal authentication without increasing the cost of the system including the multi-stage authentication processing apparatus and suppressing the burden on the customer.

  Other objects, features and advantages will become apparent upon reading the detailed description set forth below when taken in conjunction with the drawings and the appended claims.

The block diagram which shows the structure of the multistep authentication processing system of one Embodiment and a modification. The figure which shows the structure of the customer utilization terminal device in one embodiment. The figure which shows the structure of the multistep authentication processing apparatus in one embodiment. The figure for demonstrating the multistep authentication process in one embodiment. The figure for demonstrating the multistep authentication process in one embodiment. The figure for demonstrating the multistep authentication process in one embodiment. The figure for demonstrating the various databases in one Embodiment and a modification. The figure for demonstrating the multistep authentication process in the modification of one Embodiment. The figure for demonstrating the multistep authentication process in the modification of one Embodiment. The figure for demonstrating the multistep authentication process in the modification of one Embodiment.

  Hereinafter, further detailed description will be given with reference to the accompanying drawings. The drawings show preferred embodiments. However, it can be implemented in many different forms and is not limited to the embodiments described herein.

[Multi-step authentication processing system]
Referring to FIG. 1 showing a system configuration in one embodiment, a multi-step authentication processing system 1 includes a multi-step authentication processing device 2, a customer use terminal device 3A, a customer use terminal device 3B, a customer use terminal device 3C, and a communication. Network 4 is included.

  The communication network 4 is composed of a telephone network including an exchange and an IP (Internet Protocol) network such as the Internet including a router. The multi-stage authentication processing device 2, the customer use terminal device 3A, the customer use terminal device 3B, and Each of the customer use terminal devices 3C is accommodated.

  The communication network 4 includes a VoIP (Voice over Internet Protocol) gateway that connects a telephone network and an IP network and converts voice signals and IP packets. In the following description, the intervention of the communication network 4 is omitted unless it becomes unclear.

  The customer use terminal devices 3A, 3B, and 3C having a single configuration or a composite configuration include at least one of a fixed telephone terminal TEL, a mobile telephone terminal MT, and a computer terminal CP. The customer use terminal device 3A illustrated here is a composite configuration including a mobile phone terminal MT and a computer terminal CP, and the customer use terminal device 3B is a composite configuration including a fixed phone terminal TEL and a computer terminal CP. The terminal device 3C has a single configuration including a mobile phone terminal MT (specifically, a smartphone SP) or a computer terminal CP. However, the configuration of the customer use terminal devices 3A, 3B, and 3C is not limited as long as the configuration has a voice communication function and a data communication function.

  In the customer terminal devices 3A and 3B, the mobile phone terminal MT and the fixed phone terminal TEL have a voice communication function, and the computer terminal CP has a data communication function. The smartphone SP and the computer terminal CP as the mobile phone terminal MT in the customer use terminal device 3C have both a voice communication function and a data communication function. The customer use terminal devices 3A, 3B, 3C are assigned telephone numbers and IP addresses in order to perform voice communication and data communication with the multistage authentication processing device 2.

  The computer terminal CP in the customer use terminal devices 3A, 3B, 3C is, for example, a personal computer. The computer terminal CP in the customer use terminal device 3C is equipped with VoIP software in order to support IP telephone. This VoIP software converts an IP packet transmitted and received by the computer terminal CP through a broadband line and an audio signal, and enables an IP phone using a speaker and a microphone.

  More specifically, the customer use terminal devices 3A, 3B, 3C in the multi-step authentication processing system 1 described above (which are simply referred to as the customer use terminal device 3 when no limitation is required) are as illustrated in FIG. , Including hardware components.

  That is, the customer terminal device 3 stores a CPU (Central Processing Unit) 31 as a processor, a RAM (Random Access Memory) 32 as a working memory, and a boot program for startup as hardware components. ROM (Read Only Memory) 33.

  The customer terminal device 3 includes an OS (Operating System), an application program, and various types of information (including data) in a rewritable manner, a non-volatile flash memory 34, a communication control unit 35, and a NIC (Network Interface Card). And a communication interface (IF) unit 36.

  The customer terminal device 3 further includes a display control unit 37, a display unit 38, an information input / designation unit (not shown), and the like. The “display” in the customer terminal device 3 includes visible display by a display and audible display by a speaker. When no limitation is required, the visible display may be simply described as display.

  In the customer terminal device 3, in order to logically realize each function described in detail later, a Web (World Wide Web) browser, VoIP software, and a multi-step authentication terminal control program are used as application programs in the flash memory 34. Install it. In the customer use terminal device 3, the processor (CPU) 31 expands the terminal control program and the like on the RAM 32 and executes it in response to power-on or an instruction from the customer (user).

  The multi-step authentication processing device 2 is a service providing server that is operated and managed by an ISP (Internet Service Provider) or the like. The first-step authentication, the second-step authentication, and the third-step authentication described in detail later. A desired service is provided to the customer use terminal devices 3A, 3B, and 3C of the service use contractor (customer) by performing a series of multi-step authentication processes according to.

  In addition, the multi-step authentication processing device 2 is equipped with VoIP software in order to support IP telephones, and performs a series of multi-step authentication processing in cooperation with the VoIP software. The multistage authentication processing device 2 has both a data communication function and a voice communication function. The multi-step authentication processing device 2 is assigned a plurality of IP phone numbers that can be selected and used in order to perform voice communication with the customer use terminal devices 3A, 3B, 3C by IP phone.

  More specifically, the multi-stage authentication processing device 2 in the above-described multi-stage authentication processing system 1 includes hardware and functional components as illustrated in FIG.

  That is, the multistage authentication processing device 2 includes a CPU 21 as a processor, a RAM 22 as a working memory, and a ROM 23 that stores a boot program for startup as hardware components.

  The multi-step authentication processing device 2 also includes a non-volatile flash memory 24 that stores an OS, application programs, and various types of information (including data) in a rewritable manner, a communication control unit 25, and a communication interface (IF such as an NIC). ) Part 26 and the like.

  The multi-step authentication processing device 2 includes, as functional components described in detail later, a first step authentication processing unit 201, a second step authentication processing unit 202, a third step authentication processing unit 203, a determination unit 204, an overall processing unit 205, VoIP software 206 and databases DB1, DB2 and DB3 are provided.

  Here, the VoIP software 206 is stored in the flash memory 24. The databases DB1, DB2, DB3 are configured in the flash memory 24.

  In order to logically realize the other functional components described above in the multi-step authentication processing device 2, a multi-step authentication processing program is installed in the flash memory 24 as an application program. In the multistage authentication processing device 2, the processor (CPU) 21 always develops and executes this processing program in the RAM 22 when the power is turned on.

[Details of multi-step authentication processing device]
To further elaborate with reference to FIG. 1, FIG. 2, FIG. 3 and related diagrams (FIG. 4 to FIG. 6), the first step authentication processing unit 201 in the multi-step authentication processing device 2 is for specifying a customer. The input screen (see FIG. 4) of the unique authentication information (for example, identification information (user ID) and password (PW)) is controlled to be displayed visually on the customer use terminal device 3 having a single configuration or a composite configuration. The unique authentication information and the pre-registered information are collated, and the first step authentication is performed (see processes S51, S52, S53, and S54 in FIG. 5A).

  That is, the first stage authentication processing unit 201 uses the unique authentication information input on the input screen for login displayed on the customer use terminal device 3 (for example, the computer terminal CP in the case of the customer use terminal device 3A). The user ID and password PW are checked against the unique authentication information (user ID and password PW) registered in advance in the database (customer management table) DB1 to perform the first stage of personal authentication.

  When the first step authentication is abnormal, the first step authentication processing unit 201 controls the customer authentication terminal device 3 to visually display the abnormal state and end the personal authentication. This first-step authentication is performed based on knowledge information (information known only to the user) in the unique authentication information for specifying the customer.

  In addition, the customer sets the user ID (for example, ID1) and the password PW (for example, PW1) as the unique authentication information together with the customer telephone number (for example, the mobile phone number “090-XXXX-0001”) in the presetting. It is registered in advance in the database DB1 of the multistage authentication processing device 2 through the use terminal device 3 (for example, the computer terminal CP in the case of the customer use terminal device 3A) (see FIG. 6A). This pre-setting is performed under the control of the overall processing unit 205.

  When the first step authentication is normal, the second step authentication processing unit 202 performs control so that the randomly selected specific telephone number of the authentication destination is visually displayed on the customer use terminal device 3, and authentication is performed from the customer use terminal device 3. The call to the previous specific telephone number is determined based on the customer telephone number registered in advance, and the second stage authentication is performed (see processes S55, S56, S57, and S58 in FIG. 5A).

  That is, the second-stage authentication processing unit 202 uses a specific telephone number (for example, IP phone number “050-YYYY”) selected at random from a plurality of authentication destination telephone numbers in the database (authentication destination telephone number management table) DB2. -0001 ") together with a text message (for example," Please call us from a registered customer phone number because multi-step authentication will be performed. ") And customer use terminal device 3 (for example, customer use terminal In the case of the apparatus 3A, control is performed so as to display it visually on the computer terminal CP) (see FIGS. 4 and 6B).

  The second-stage authentication processing unit 202 registers the randomly selected authentication destination specific telephone number in the database DB1 in association with the registered customer telephone number (see FIG. 6A).

  Then, the second stage authentication processing unit 202, based on the customer phone number registered in the database DB1 and the specific phone number of the authentication destination, the customer use terminal device 3 (for example, the customer use terminal device 3A, By determining that the call originates from the mobile phone terminal MT) to the specific telephone number of the authentication destination, the second stage personal authentication is performed.

  When the second step authentication is abnormal, the second step authentication processing unit 202 performs an audible display (may be a visual display) of the abnormal state on the customer use terminal device 3, and controls to end the personal authentication. This second-step authentication is to be performed based on both knowledge information (information that only the person knows) and possession information (thing that only the person has) in the unique authentication information for identifying the customer. Become.

  The second stage authentication processing unit 202 randomly selects a plurality of authentication destination telephone numbers so that the specific telephone number of the authentication destination is not continuously assigned to the same customer usage terminal apparatus 3, and then uses the customer usage terminal apparatus 3 may be controlled so as to be displayed visually. In order to carry out this process, the second-stage authentication processing unit 202 refers to the customer telephone number of the assigned customer immediately before associated with the telephone number of the authentication destination in the database DB2, and specifies the specific telephone number of the authentication destination. Select at random. Then, the second stage authentication processing unit 202 rewrites the customer telephone number of the assigned customer immediately before the specific telephone number of the authentication destination selected at random in the database DB2 to the customer telephone number of the new assigned customer.

  In addition, the second-stage authentication processing unit 202 randomly selects a specific telephone number of the authentication destination from a plurality of authentication destination telephone numbers so as not to be continuously assigned to the same customer use terminal device 3 within a predetermined time. After the selection, it may be controlled so as to be displayed visually on the customer use terminal device 3. In order to carry out this process, the second stage authentication processing unit 202 refers to the customer telephone number and the time limit flag of the last assigned customer associated with the telephone number of the authentication destination in the database DB2, and Select a specific phone number at random. Then, the second stage authentication processing unit 202 rewrites the customer telephone number of the assigned customer immediately before the specific telephone number of the authentication destination selected at random in the database DB2 to the customer telephone number of the new assigned customer. Further, the second stage authentication processing unit 202 starts counting a predetermined time simultaneously with the rewriting based on, for example, the total seconds (integrated seconds), and sets the time limit flag to “permitted / not permitted”. To do.

  The third-stage authentication processing unit 203 controls to display a preselected question audibly on the customer-use terminal device 3 when the second-step authentication is normal. The answer is voice-recognized and third-step authentication is performed (see processes S59, S60, S61, and S62 in FIG. 5B).

  Here, the question selected in advance is a question corresponding to the native language selected at random, and includes either a part of the proverb or a keyword. When the preselected question is part of the proverb, the answer to the question is another part of the proverb. When the preselected question is a keyword (for example, “Fuwaeou”), the answer to the question is a repetition of this keyword.

  In other words, the third-step authentication processing unit 203 cooperates with the VoIP software 206, and a part of a proverb corresponding to the native language selected at random from the database (question / answer comparison table) DB3 as a pre-selected question (for example, “hundred” ) (For example, "Thank you for contacting us. We will perform third-step verification, so please answer the following questions. That's the question. What is the saying? ”) Is controlled to be audibly displayed on the customer use terminal device 3 (for example, the mobile phone terminal MT in the case of the customer use terminal device 3A) by voice guidance (see FIG. 6C).

  Note that the third-stage authentication processing unit 203 obtains the questions QS1 and AS1 corresponding to the questions randomly selected from the database DB3 and the answers to the questions before controlling the voice message to be audibly displayed on the customer use terminal device 3. The data is stored in the database DB1 in association with the customer telephone number of the customer use terminal device 3.

  The third-stage authentication processing unit 203 cooperates with the VoIP software 206 as an answer to a question inputted by voice in the customer use terminal device 3 (for example, the mobile phone terminal MT in the case of the customer use terminal device 3A). Voice recognition of other parts of the proverb (for example, “not at first glance”) is performed with reference to the databases DB1 and DB3 to perform the third-stage personal authentication (see FIG. 6C). .

  When the third-stage authentication is abnormal, the third-stage authentication processing unit 203 controls the customer-use terminal device 3 to audibly display the abnormal situation (may be visible display) and end the personal authentication. This third-step authentication is performed based on knowledge information (information known only to the user) in the unique authentication information for specifying the customer.

  When the third stage authentication processing unit 203 fails to recognize the answer to the question inputted by voice in the customer terminal device 3, the third stage authentication processing unit 203 audibly displays a voice message to that effect on the customer terminal device 3. The customer terminal device 3 (for example, the computer terminal CP in the case of the customer terminal device 3A) recognizes the answer to the question inputted by the character and continuously controls to further implement the third step authentication. Also good.

  In addition, when the third stage authentication processing unit 203 fails to recognize the answer to the question inputted by voice in the customer use terminal device 3, the third stage authentication processing unit 203 audibly displays a voice message to that effect on the customer use terminal device 3. The customer use terminal device 3 (for example, the mobile phone terminal MT in the case of the customer use terminal device 3A) is connected to an operator terminal (not shown) accommodated in the multi-step authentication processing device 2, and an answer to the question is sent to the operator. May be listened to (determined) and may be further controlled to further implement the third stage authentication.

  Whether the third-step authentication processing unit 203 ends the personal authentication when the third-step authentication is abnormal or further performs the third-step authentication by any of the above-described continuous control, for example, by setting a definition flag May be determined in advance.

  When the third-step authentication is normal, the determination unit 204 determines the success (login success) of a series of multi-step authentications by the above-described first-step authentication, second-step authentication, and third-step authentication, and the customer use terminal Control is performed so that the login success is visually displayed on the device 3 (for example, the computer terminal CP in the case of the customer use terminal device 3A) (see step S63 in FIG. 5B).

[First Modification of Multistage Authentication Processing Device]
The multi-step authentication processing device 2 according to the embodiment described above can be implemented in a first modification described below. In the description of the first modification, the same description as that of the above-described embodiment will not be repeated unless it becomes unclear.

  Referring to FIGS. 1, 2, 3 and related diagrams (FIGS. 6 to 8B), the first-step authentication processing unit 201 in the multi-step authentication processing device 2 includes unique authentication information (for example, for specifying a customer) The identification information (user ID) and password (PW)) input screen (see FIG. 7) is controlled so as to be displayed visually on the customer-use terminal device 3 having a single configuration or a composite configuration. The registered information (user ID and password PW) is collated, and the first-step authentication is performed (see processes S81, S82, S83, and S84 in FIG. 8A).

  In addition, the customer uses the user ID 3 and the password PW as the unique authentication information together with the customer phone number (for example, mobile phone number “090-XXXX-0001”) and the customer use terminal device 3 (for example, the customer use terminal) in advance setting. In the case of the device 3A, it is registered in advance in the database DB1 of the multistage authentication processing device 2 through the computer terminal CP) (see FIG. 6A). This pre-setting is performed under the control of the overall processing unit 205.

  The second-stage authentication processing unit 202 controls to visually display the specific telephone number of the authentication destination selected at random and the preselected question on the customer use terminal device 3 when the first-stage authentication is normal, A call from the customer use terminal device 3 to the specific telephone number of the authentication destination is determined based on the customer telephone number registered in advance, and the second stage authentication is performed (processes S85, S86, S87, FIG. 8A). (See S88). Here, the question selected in advance is a question corresponding to the native language selected at random, and includes either a part of the proverb or a keyword.

  In other words, the second stage authentication processing unit 202 uses a specific telephone number (for example, IP phone number “050-YYYY-0001”) randomly selected from a plurality of authentication destination telephone numbers in the database DB2 as a text message ( For example, the customer terminal device 3 (for example, a customer terminal device 3A, for example, a computer terminal) CP) is controlled so as to be displayed visually (see FIGS. 7 and 6B).

  At the same time, the second stage authentication processing unit 202 uses a text message (for example, “question. Is a visual display on the customer terminal device 3 (for example, the computer terminal CP in the case of the customer terminal device 3A) (see FIGS. 7 and 6C). .

  Alternatively, the second-stage authentication processing unit 202 uses a text message (for example, “This is a question. The keyword is“ a keyword ”) including a keyword (for example,“ Fuwaeou ”) that is randomly selected from the database DB3 as a preselected question. Control is performed so that the customer-use terminal device 3 is visually displayed.

  The second-stage authentication processing unit 202 registers the randomly selected authentication destination specific telephone number in the database DB1 in association with the registered customer telephone number (see FIG. 6A).

  Then, the second stage authentication processing unit 202, based on the customer phone number registered in the database DB1 and the specific phone number of the authentication destination, the customer use terminal device 3 (for example, the customer use terminal device 3A, By determining that the call originates from the mobile phone terminal MT) to the specific telephone number of the authentication destination, the second stage personal authentication is performed.

  The second stage authentication processing unit 202 randomly selects a plurality of authentication destination telephone numbers so that the specific telephone number of the authentication destination is not continuously assigned to the same customer usage terminal apparatus 3, and then uses the customer usage terminal apparatus 3 may be controlled so as to be displayed visually. In addition, the second-stage authentication processing unit 202 randomly selects a specific telephone number of the authentication destination from a plurality of authentication destination telephone numbers so as not to be continuously assigned to the same customer use terminal device 3 within a predetermined time. After the selection, it may be controlled so as to be displayed visually on the customer use terminal device 3.

  The third-stage authentication processing unit 203 controls the response request for the question to be audibly displayed on the customer-use terminal device 3 when the second-step authentication is normal, and for the question inputted by voice in the customer-use terminal device 3 The answer is voice-recognized and third-step authentication is performed (see processes S89, S90, S91, and S92 in FIG. 8B).

  Here, the answer to the question is the other part of the proverb when the preselected question is a part of the proverb, and this is the answer when the preselected question is a keyword (for example, “Fuwaeou”). It is a repeated keyword.

  In other words, the third-step authentication processing unit 203 cooperates with the VoIP software 206 and receives a voice message (for example, “Thank you for contacting us. The third-step authentication is performed. To the customer's terminal 3 (for example, the mobile terminal MT in the case of the customer terminal 3A) is audibly displayed by voice guidance. To control.

  Note that the third-stage authentication processing unit 203 obtains the questions QS1 and AS1 corresponding to the questions randomly selected from the database DB3 and the answers to the questions before controlling the voice message to be audibly displayed on the customer use terminal device 3. The data is stored in the database DB1 in association with the customer telephone number of the customer use terminal device 3 (see FIG. 6A).

  The third-stage authentication processing unit 203 cooperates with the VoIP software 206 as an answer to a question inputted by voice in the customer use terminal device 3 (for example, the mobile phone terminal MT in the case of the customer use terminal device 3A). The third step of personal authentication by recognizing other parts of the proverb (for example, “not at first glance”) or keywords (for example, “Fuwaeou”) and referring to databases DB1 and DB3 (See FIG. 6C).

  When the third stage authentication processing unit 203 fails to recognize the answer to the question inputted by voice in the customer terminal device 3, the third stage authentication processing unit 203 audibly displays a voice message to that effect on the customer terminal device 3. The customer terminal device 3 (for example, the computer terminal CP in the case of the customer terminal device 3A) recognizes the answer to the question inputted by the character and continuously controls to further implement the third step authentication. Also good.

  In addition, when the third stage authentication processing unit 203 fails to recognize the answer to the question inputted by voice in the customer use terminal device 3, the third stage authentication processing unit 203 audibly displays a voice message to that effect on the customer use terminal device 3. The customer use terminal device 3 (for example, the mobile phone terminal MT in the case of the customer use terminal device 3A) is connected to an operator terminal (not shown) accommodated in the multi-step authentication processing device 2, and an answer to the question is sent to the operator. May be listened to (determined) and may be further controlled to further implement the third stage authentication.

  Whether the third-step authentication processing unit 203 ends the personal authentication when the third-step authentication is abnormal or further performs the third-step authentication by any of the above-described continuous control, for example, by setting a definition flag May be determined in advance.

  When the third-step authentication is normal, the determination unit 204 determines the success (login success) of a series of multi-step authentications by the above-described first-step authentication, second-step authentication, and third-step authentication, and the customer use terminal Control is performed so that the login success is visually displayed on the device 3 (for example, the computer terminal CP in the case of the customer use terminal device 3A) (see step S93 in FIG. 8B).

[Second Modification of Multistage Authentication Processing Device]
The multi-stage authentication processing device 2 according to the embodiment and the first modification described above can be implemented in a second modification described below. In the description of the second modification, the same contents as those of the above-described embodiment and the first modification will not be described unless it becomes unclear.

  In the multi-stage authentication processing device 2 of the second modified example, control is performed so that an input screen of unique authentication information for specifying a customer is displayed visually on the customer use terminal device 3 having a single configuration or a composite configuration. The first authentication for verifying the unique authentication information and the pre-registered information is performed in the dedicated authentication processing device 2A (see FIG. 1).

  That is, the dedicated authentication processing device 2A has the function of the first step authentication processing unit 201 in the multistep authentication processing device 2 described above. When the dedicated authentication processing device 2A performs the first step authentication in place of the multistep authentication processing device 2, the user ID and password are not registered in the database (customer management table) DB1 of the multistep authentication processing device 2, The dedicated authentication processing device 2A is held in its own database.

  After receiving notification from the dedicated authentication processing device 2A that the first step authentication is normal, the multi-step authentication processing device 2 similarly performs the second-step authentication and the third-step authentication, and a series of multi-step authentications. Judge success. Thereby, it is possible to achieve load distribution and function distribution of a series of multi-step authentication processes by the first step authentication, the second step authentication, and the third step authentication.

[Effects of one embodiment and modifications]
The multi-stage authentication processing apparatus 2 in the multi-stage authentication processing system 1 according to the embodiment and each modification described above uses knowledge information and possessed information in the unique authentication information and does not use biometric information. Perform authentication (multi-step authentication). In particular, when the first step authentication is normal, the multi-step authentication processing device 2 performs control so that the specific telephone number of the randomly selected authentication destination is visually displayed on the customer use terminal device 3. The second step authentication is performed by determining the call to the specific telephone number of the authentication destination based on the customer telephone number registered in advance. The multi-step authentication processing device 2 determines success of a series of multi-step authentications when the first step authentication, the second step authentication, and the third step authentication are normal. Therefore, in this multi-stage authentication processing apparatus 2, it is possible to carry out more reliable multi-stage personal authentication without increasing the cost of the system including the multi-stage authentication processing apparatus and suppressing the burden on the customer. it can.

[Other variations]
The processing in the above-described embodiment and each modification is provided as a computer-executable program, and can be provided via a non-transitory computer-readable recording medium such as a CD-ROM or a flexible disk, and further via a communication line.

  In addition, each process in the above-described embodiment and each modification can be performed by selecting and combining any or all of the processes.

DESCRIPTION OF SYMBOLS 1 Multi-step authentication processing system 2 Multi-step authentication processing device 2A Dedicated authentication processing device 3 Customer use terminal device 3A Customer use terminal device 3B Customer use terminal device 3C Customer use terminal device 4 Communication network DB1 Database (customer management table)
DB2 database (authentication phone number management table)
DB3 database (question / answer comparison table)
TEL Fixed telephone terminal MT Mobile phone terminal SP Smartphone CP Computer terminal 201 First stage authentication processing section 202 Second stage authentication processing section 203 Third stage authentication processing section 204 Determination section 205 Overall processing section 206 VoIP software

In each of the above aspects, when the third-stage authentication fails, the answer to the question input by the customer-use terminal device is recognized as characters, and the third-stage authentication is continued . The third step verification upon failure, connect the customer use terminal apparatus to the operator terminal, said at customer user terminal device answers to the questions that speech input is determined by the operator, the third step verification May be continued .

In each of the above aspects, the preselected question includes a randomly selected question. The preselected question includes a question corresponding to the native language (Japanese) . Further, the preselected question may include either a part of a proverb or a keyword.

Claims (17)

Controls the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collates the input unique authentication information with pre-registered information. Performing the first stage authentication;
When the first stage authentication is normal, control is performed so that a specific telephone number of a randomly selected authentication destination is visually displayed on the customer use terminal device, and from the customer use terminal device to the specific phone number of the authentication destination Determining a call based on a pre-registered customer phone number and performing a second stage authentication;
When the second-step authentication is normal, the control is performed so that a preselected question is audibly displayed on the customer use terminal device, and the answer to the question inputted by voice in the customer use terminal device is recognized by voice, Performing third stage authentication;
Determining success of a series of multi-step authentications by the first-step authentication, the second-step authentication and the third-step authentication when the third-step authentication is normal;
Is a multi-step authentication processing method executed by the processor of the multi-step authentication processing device. Control the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collate the input unique authentication information with pre-registered information A multi-step authentication processing method in which the first step authentication is performed in another authentication processing device;
When the first stage authentication is normal, control is performed so that a specific telephone number of a randomly selected authentication destination is visually displayed on the customer use terminal device, and from the customer use terminal device to the specific phone number of the authentication destination Determining a call based on a pre-registered customer phone number and performing a second stage authentication;
When the second-step authentication is normal, the control is performed so that a preselected question is audibly displayed on the customer use terminal device, and the answer to the question inputted by voice in the customer use terminal device is recognized by voice, Performing third stage authentication;
Determining success of a series of multi-step authentications by the first-step authentication, the second-step authentication and the third-step authentication when the third-step authentication is normal;
Is a multi-step authentication processing method executed by the processor of the multi-step authentication processing device. Controls the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collates the input unique authentication information with pre-registered information. Performing the first stage authentication;
When the first-step authentication is normal, control is performed so that a randomly selected specific telephone number of the authentication destination and a preselected question are visually displayed on the customer use terminal device, and the authentication is performed from the customer use terminal device. Determining a call to a specific telephone number in advance based on a pre-registered customer telephone number and performing second-stage authentication;
When the second-step authentication is normal, control is performed to audibly display an answer request for the question on the customer use terminal device, and an answer to the question inputted by voice in the customer use terminal device is recognized by voice. Performing third stage authentication;
Determining success of a series of multi-step authentications by the first-step authentication, the second-step authentication and the third-step authentication when the third-step authentication is normal;
Is a multi-step authentication processing method executed by the processor of the multi-step authentication processing device. Control the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collate the input unique authentication information with pre-registered information A multi-step authentication processing method in which the first step authentication is performed in another authentication processing device;
When the first-step authentication is normal, control is performed so that a randomly selected specific telephone number of the authentication destination and a preselected question are visually displayed on the customer use terminal device, and the authentication is performed from the customer use terminal device. Determining a call to a specific telephone number in advance based on a pre-registered customer telephone number and performing second-stage authentication;
When the second-step authentication is normal, control is performed to audibly display an answer request for the question on the customer use terminal device, and an answer to the question inputted by voice in the customer use terminal device is recognized by voice. Performing third stage authentication;
Determining success of a series of multi-step authentications by the first-step authentication, the second-step authentication and the third-step authentication when the third-step authentication is normal;
Is a multi-step authentication processing method executed by the processor of the multi-step authentication processing device. The specific telephone number of the authentication destination is randomly selected so as not to be continuously assigned to the same customer use terminal device.
5. The multi-step authentication processing method according to claim 1, 2, 3 or 4. The specific telephone number of the authentication destination is randomly selected so as not to be continuously allocated to the same customer use terminal device within a predetermined time.
5. The multi-step authentication processing method according to claim 1, 2, 3 or 4. When the third-step authentication fails, character-recognizing an answer to the question inputted in the customer-use terminal device, and further performing the third-step authentication;
The multi-step authentication processing method according to claim 1, wherein the processor further executes: When the third-step authentication fails, the customer-use terminal device is connected to an operator terminal, and an answer to the question inputted by voice in the customer-use terminal device is determined by an operator, and the third-step authentication is performed. Further performing steps,
The multi-step authentication processing method according to claim 1, wherein the processor further executes: The preselected questions include randomly selected questions,
5. The multi-step authentication processing method according to claim 1, 2, 3 or 4. The preselected question includes a native language question,
The multistage authentication processing method according to claim 1, 2, 3, 4, or 9. The preselected question includes either a part of a proverb and a keyword,
The multistage authentication processing method according to claim 1, 2, 3, 4, 9 or 10. The answer to the question includes either the other part of the proverb and the repetition of the keyword,
The multi-step authentication processing method according to claim 11.   A multi-step authentication processing program for causing a processor of a multi-step authentication processing apparatus to execute the multi-step authentication processing method according to claim 1. Controls the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collates the input unique authentication information with pre-registered information. And implement the first stage authentication;
When the first stage authentication is normal, control is performed so that a specific telephone number of a randomly selected authentication destination is visually displayed on the customer use terminal device, and from the customer use terminal device to the specific phone number of the authentication destination Determine the outgoing call based on a pre-registered customer phone number and perform second stage authentication;
When the second-step authentication is normal, the control is performed so that a preselected question is audibly displayed on the customer use terminal device, and the answer to the question inputted by voice in the customer use terminal device is recognized by voice, Conduct third-stage certification;
When the third step authentication is normal, the success of a series of multi-step authentications by the first step authentication, the second step authentication, and the third step authentication is determined;
A multi-step authentication processing apparatus comprising a processor. Control the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collate the input unique authentication information with pre-registered information A multi-step authentication processing device in which the first step authentication is performed in another authentication processing device;
When the first stage authentication is normal, control is performed so that a specific telephone number of a randomly selected authentication destination is visually displayed on the customer use terminal device, and from the customer use terminal device to the specific phone number of the authentication destination Determine the outgoing call based on a pre-registered customer phone number and perform second stage authentication;
When the second-step authentication is normal, the control is performed so that a preselected question is audibly displayed on the customer use terminal device, and the answer to the question inputted by voice in the customer use terminal device is recognized by voice, Conduct third-stage certification;
When the third step authentication is normal, the success of a series of multi-step authentications by the first step authentication, the second step authentication, and the third step authentication is determined;
A multi-step authentication processing apparatus comprising a processor. Controls the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collates the input unique authentication information with pre-registered information. And implement the first stage authentication;
When the first-step authentication is normal, control is performed so that a randomly selected specific telephone number of the authentication destination and a preselected question are visually displayed on the customer use terminal device, and the authentication is performed from the customer use terminal device. Determining whether to call a specific telephone number in advance based on a customer telephone number registered in advance, and performing second-stage authentication;
When the second-step authentication is normal, control is performed to audibly display an answer request for the question on the customer use terminal device, and an answer to the question inputted by voice in the customer use terminal device is recognized by voice. Implement third-stage authentication;
When the third step authentication is normal, the success of a series of multi-step authentications by the first step authentication, the second step authentication, and the third step authentication is determined;
A multi-step authentication processing apparatus comprising a processor. Control the input screen of unique authentication information for identifying a customer to be displayed visually on a single-use or composite-use customer terminal device, and collate the input unique authentication information with pre-registered information A multi-step authentication processing device in which the first step authentication is performed in another authentication processing device;
When the first-step authentication is normal, control is performed so that a randomly selected specific telephone number of the authentication destination and a preselected question are visually displayed on the customer use terminal device, and the authentication is performed from the customer use terminal device. Determining whether to call a specific telephone number in advance based on a customer telephone number registered in advance, and performing second-stage authentication;
When the second-step authentication is normal, control is performed to audibly display an answer request for the question on the customer use terminal device, and an answer to the question inputted by voice in the customer use terminal device is recognized by voice. Implement third-stage authentication;
When the third step authentication is normal, the success of a series of multi-step authentications by the first step authentication, the second step authentication, and the third step authentication is determined;
A multi-step authentication processing apparatus comprising a processor.