JP2019087172A - Terminal authentication system - Google Patents

Abstract

To provide an authentication system that removes the necessity of re-entry of authentication information in an authentication system using a plurality of authentication systems between terminals.SOLUTION: The authentication system includes a first terminal, a second terminal, and a third terminal. The third terminal has authentication means to be provided to the first terminal and the second terminal. The second terminal has storage means for storing an access identifier obtained by the authentication means of the third terminal and has authentication means to be provided to the first terminal. The first terminal determines whether the access identifier received from the third terminal is stored in an external storage device (S101). If the access identifier is stored, the second terminal is requested to authenticate, using the access identifier (S102). If the access identifier is not stored, whether the external storage device stores a previously input passcode is determined (S103). If the passcode is stored, the second terminal is requested to authenticate, using the passcode. If the passcode is not stored, the second terminal is requested to authenticate, using the input passcode S104 (S105).SELECTED DRAWING: Figure 1

Description

  The present invention relates to a terminal authentication system.

  As a technique for terminal authentication, for example, the technique of Patent Document 1 is disclosed.

JP 2001-189722 A

  In an authentication system that performs terminal authentication by switching the authentication method based on the communication environment of the terminal, different authentication information may be required for each authentication method. In such a system, even if terminal authentication is completed by a certain authentication method, it is necessary to input authentication information when performing authentication by another authentication method, which may cause the user to feel bothersome. The technology of Patent Document 1 does not mention such switching of the authentication scheme.

  The present invention has been made in view of such a situation, and in an authentication system using a plurality of authentication methods between terminals, it is not necessary to re-input authentication information.

  The terminal authentication system according to the present invention is a terminal authentication system comprising first, second and third terminals, wherein the third terminal comprises authentication means provided to the first and second terminals. The second terminal comprises storage means for storing the access identifier obtained by the authentication means of the third terminal, and authentication means for providing to the first terminal, the first terminal comprising The storage means for storing the access identifier obtained by the authentication means of the three terminals, and the input means for inputting authentication information for the authentication means of the second terminal, the authentication means for the second terminal comprising Authentication is performed based on either the access identifier or the authentication information input by the first terminal.

  In an authentication system using a plurality of authentication methods between terminals, the burden on the input of authentication information is reduced.

It is a flowchart which shows an example of operation | movement of the terminal authentication system which concerns on the Example of this invention. It is a block diagram which shows an example of a structure of the terminal authentication which concerns on the Example of this invention.

  Hereinafter, preferred embodiments of the present invention will be illustratively described in detail with reference to the drawings. However, the components described in this embodiment are merely examples, and the scope of the present invention is not limited to them.

Example 1
Hereinafter, one of the embodiments of the present invention will be described in detail according to the attached screen. The authentication system in this embodiment comprises first, second and third terminals. The first and second terminals are terminals directly operated by the user, for example, a smartphone and a PC. The third terminal is, for example, a server.

  In the authentication system in the present embodiment, the third terminal provides an authentication function to the first and second terminals. Also, the second terminal provides an authentication function to the first terminal. Furthermore, if each of the first and second devices has been authenticated with the third device, the authentication function provided by the second terminal uses the information issued from the third device to obtain authentication information. Input can be omitted.

  The configuration of the first, second and third terminals in this embodiment is as shown in FIG. In FIG. 2, reference numeral 201 denotes a control unit that controls the entire terminal 200, and is, for example, a central processing unit (CPU). Reference numeral 202 denotes a read only memory (ROM) that stores programs and parameters that do not need to be changed.

  A Random Access Memory (RAM) 203 temporarily stores programs and data supplied from an external device or the like. A hard disk or memory card 204 fixedly installed in the terminal 200, or an optical disk such as a floppy disk (FD) or Compact Disk (CD) removable from the terminal 200, an external storage including a magnetic or optical card, an IC card, etc. It is an apparatus. Reference numeral 205 denotes an interface with an input device such as a pointing device or a keyboard 209 for inputting data in response to the operation of the operator.

  Reference numeral 206 denotes an interface with a display 210 for displaying data held by the terminal 200 and supplied data. Reference numeral 207 denotes a network interface for connecting to a network line 211 such as the Internet. Reference numeral 208 denotes an interface for communicating with another device 212 such as an imaging device. A system bus 213 communicably connects the units 201 to 208. In the case of a smartphone terminal such as the first terminal, the input device 209 and the display 210 are configured as an integrated touch screen.

  In the present embodiment, the third terminal provides an authentication means to the first terminal and the second terminal. The authentication unit of the third terminal performs authentication using the user ID and the password. The user registers the user ID and password in advance in the third terminal. The third terminal requests the user to input the same user ID and password when the user operates the first terminal or the second terminal to communicate with the third terminal. The third terminal authenticates by user ID and password match verification. The third terminal transmits the access identifier to the authenticated terminal.

  The access identifier is sufficiently long string information that can uniquely identify the user. Also, the access identifier is issued at the time of the first authentication with the user ID and password, and is transmitted to the authenticated terminal. If the user is authenticated with the same user ID and password, the same access identifier is transmitted regardless of the authenticated terminal. The first and second terminals store the issued access identifier. When the password of the authentication means of the third terminal is changed, the third terminal invalidates the issued access identifier for the user ID, and issues a new access identifier.

  The second terminal provides an authentication means to the first terminal. The authentication means of the second terminal performs authentication using either the passcode or the access identifier issued from the third terminal. If the information transmitted from the first device is a passcode, authentication is performed if the user matches the passcode set in advance in the second device. If the information transmitted from the first device is an access identifier, the second device authenticates if it matches the access identifier received from the third device and stored.

  Next, the flow of processing in which the user operates the first terminal to request the second terminal to perform authentication will be described using FIG. In step S101, the control unit 201 of the first terminal determines whether the access identifier received from the third terminal is stored in the external storage device 204. If it is stored, in step S102, the control unit 201 requests the second terminal for authentication using the access identifier.

  On the other hand, when the access identifier is not stored, the control unit 201 determines whether the pass code input in the past is stored in the external storage device 204 in step S103. If it is stored, the control unit 201 advances the process to step S105. If not, the control unit 201 requests input of a pass code in step S104.

  Next, in step S105, the control unit 201 requests the second terminal for authentication using the pass code input in step S104 or the pass code read from the external storage device 204 in step S103. In step S106, the control unit 201 determines whether the authentication performed in step S102 or the authentication performed in step S105 is successful. If the authentication is successful, the control unit 201 advances the process to step S107, and otherwise returns the process to just before step S104.

  Next, in step S 107, the control unit 201 determines whether authentication has been performed using a newly input pass code, and stores the pass code in the external storage device 204 if so. Here, if the authentication is not performed using the new pass code, that is, if the authentication is performed without passing through step S104, the control unit 201 does nothing.

  The control unit 201 of the second terminal performs authentication on the first terminal according to the flow of the above process. Furthermore, in this process, when authentication is performed using a pass code newly input by the user, the pass code is stored in the external storage device 204. The stored pass code is read out from the external storage device 204 in steps S103 and S106 at the next authentication and used.

  According to the configuration of the present embodiment as described above, if the user respectively authenticates the first terminal and the second terminal as the third terminal, the user operates the first terminal to perform the second operation. When receiving terminal authentication, the input of authentication information can be omitted. Therefore, in an authentication system that uses a plurality of authentication methods between terminals, it is possible to reduce the burden of inputting authentication information.

Example 2
Hereinafter, another embodiment of the present invention will be described in detail with reference to the attached screen.

  The authentication system in this embodiment comprises first, second, third and fourth terminals. The configurations of the first, second and third terminals are the same as those described in the first embodiment. The fourth terminal has the same configuration as the second terminal. Also, the third terminal transmits the access identifier to the authenticated second and fourth terminals.

  The second and fourth terminals provide authentication means towards the first terminal. The authentication means provided by the second and fourth terminals are the same as those described with reference to FIG. 1 in the first embodiment. If the second and fourth terminals store the access identifier received from the third terminal after authentication, the first terminal receives and stores the access identifier.

  The third terminal provides authentication means to the first, second and fourth terminals. The authentication unit of the third terminal performs authentication using the user ID and the password. The user registers the user ID and password in advance in the third terminal. The third terminal requests the user to input the same user ID and password when the user operates the first, second and fourth terminals to communicate with the third terminal. The third terminal authenticates by user ID and password match verification.

  The third terminal transmits a different access identifier to each of the authenticated second and fourth terminals. The second and fourth terminals store the issued access identifier. The third terminal transmits the second or fourth terminal management information to the first terminal, to the authenticated first terminal. At this time, the third terminal determines which terminal management information is to be transmitted based on the access identifier received from the first terminal.

  Furthermore, each of the second and fourth terminals stores management information. The management information is, for example, information to be transmitted and received between terminals for realizing the continuation of the work by another terminal after the user operates a terminal and performs the work. When the second and fourth terminals authenticate the first terminal, they transmit terminal management information so that the first terminal can refer to the terminal management information. The second and fourth terminals transmit terminal management information to the third terminal when they are authenticated. The third terminal stores this terminal management information.

  According to the configuration of the present embodiment as described above, in an authentication system using a plurality of authentication methods between terminals, it is possible to reduce the burden on the input of authentication information. Moreover, according to the configuration of the present embodiment, reference of management information becomes possible between terminals. Furthermore, when referring to management information between terminals, it is possible to automatically determine which terminal's management information is to be referred to.

  In this embodiment, the third terminal is configured to determine which terminal management information is to be transmitted based on the access identifier received from the first terminal, but the access identifier is stored in the first terminal. If not, it may be possible for the user to select which of the plurality of pieces of management information stored in the third terminal to be transmitted to the first terminal.

  Although the present invention has been described in detail based on its preferred embodiments, the present invention is not limited to these specific embodiments, and various embodiments within the scope of the present invention are also included in the present invention. included. Some of the embodiments described above may be combined as appropriate.

  Also, when a software program for realizing the functions of the above-described embodiment is supplied from a recording medium to a system or apparatus having a computer capable of executing the program directly or using wired / wireless communication, and the program is executed Is also included in the present invention.

Therefore, the program code itself supplied and installed in the computer to realize the functional processing of the present invention by the computer also implements the present invention. That is, the computer program itself for realizing the functional processing of the present invention is also included in the present invention.
In that case, as long as it has the function of the program, the form of the program, such as object code, a program executed by an interpreter, script data supplied to the OS, etc., does not matter.

  The recording medium for supplying the program may be, for example, a hard disk, a magnetic recording medium such as a magnetic tape, an optical / optical magnetic storage medium, or a non-volatile semiconductor memory. Further, as a program supply method, a computer program that forms the present invention may be stored in a server on a computer network, and a connected client computer may download and program the computer program.

201 control unit 202 read only memory (ROM)
203 Random Access Memory (RAM)
204 external storage device 205 interface

Claims (6)

A terminal authentication system comprising first, second and third terminals, wherein
The third terminal comprises authentication means provided to the first and second terminals,
The second terminal comprises storage means for storing the access identifier obtained by the authentication means of the third terminal, and authentication means for providing the first terminal.
The first terminal comprises storage means for storing the access identifier obtained by the authentication means of the third terminal, and input means for inputting authentication information for the authentication means of the second terminal,
The terminal authentication system according to claim 1, wherein the authentication unit of the second terminal performs authentication based on either the access identifier or the authentication information input by the first terminal. The terminal authentication according to claim 1, wherein, when the authentication based on the access identifier fails, the authentication unit of the second terminal performs authentication again with the authentication information input by the third terminal. system. The first terminal stores the authentication information that has been successfully authenticated.
Further comprising means for using the stored authentication information for authentication of the second terminal;
The terminal authentication system according to claim 1 or 2, wherein if the authentication fails with the stored authentication information, the authentication information is deleted from the storage area. The second terminal stores the management information;
It further comprises transmitting means for transmitting the management information to the third terminal after receiving the authentication of the third terminal,
The terminal authentication system according to any one of claims 1 to 3, wherein the third terminal further comprises means for storing the management information transmitted from the second terminal. The third terminal according to any one of claims 1 to 4, further comprising means for transmitting the stored management information to the first terminal after authenticating the first terminal. Terminal authentication system. 6. The apparatus according to claim 5, wherein the means for transmitting the stored management information to the first terminal determines the management information to be transmitted based on the access identifier received from the first terminal. Terminal authentication system.