JP5008989B2 - Mutual authentication system and mutual authentication method - Google Patents

Description

  The present invention relates to a mutual authentication system and a mutual authentication method for Internet connection, and more particularly to a mutual authentication system and a mutual authentication method capable of preventing damage caused by key loggers and phishing scams.

  Various scams using the Internet, such as keyloggers that monitor keyboard input and steal passwords, and phishing scams that pretend to be legitimate websites and steal passwords and credit card numbers is doing. Thus, techniques for protecting users from such fraud damage have been proposed.

  The device disclosed in Patent Document 1 uses a mobile phone or a fixed phone with a telephone number registered in advance as a physical device to call back a key logger or spyware threat that exists in a terminal connected to the Internet. By confirming the user, the physical device is identified and the user is identified, and "spoofing" can be prevented. Further, since the user uses a telephone number as the user ID, there is no need to memorize the user ID and password, and the time and effort for inputting a one-time password can be saved.

  In Non-Patent Document 1, when a website is accessed from a user's personal computer, authentication is performed by transmitting an authentication request from the mobile phone to the website via the personal computer. Since authentication information is not directly input to the user's personal computer, leakage of authentication information by spyware such as a key logger can be prevented. In addition, since the mobile phone carrier confirms that the access destination is a legitimate website in the mobile phone at the time of authentication, it is possible to prevent the user from being directed to a camouflaged site aimed at phishing.

  What is shown in Non-Patent Document 2 is an authentication platform that uses an individual identification number of a mobile phone as a key, and checks an individual identification number and additional authentication conditions registered in advance on an authentication server. The user is surely authenticated by the composite element “has a registered mobile phone” and “input authentication conditions from the mobile phone”. The non-patent document 2 uses a non-replicatable mobile phone as a key for authentication, and since it cannot be authenticated without the registered mobile phone itself, impersonation other than the registered person can be prevented. it can. Further, the security can be improved by distributing the authentication data to two paths on the Internet of the personal computer and on the cellular phone network.

Non-Patent Document 3 shows a system that uses an existing mobile phone to authenticate personally when authenticating at a remote access or shopping site, and performs authentication on a web browser. When entering the user ID, the server dials the mobile phone corresponding to the user ID, and the user follows the announcement from the mobile phone and presses the numeric button on the mobile phone to enter the password and authenticate. Is.
JP 2006-33780 A Internet <URL: http: // www. nec. co. jp / press / ja / 0610/0203. html> Internet <URL: http: //www.synclock.jp> Internet <URL: http: // www. netmarks. co. jp / newsrelease / 060118. html>

  However, with this type of conventional technology, it is necessary for a user to notify personal information such as a telephone number and an e-mail address to a system other than a web server for client authentication, and privacy cannot be maintained. is there.

  In addition, in the above-described conventional technology, it is necessary to perform infrared communication between the mobile phone and the user personal computer, or to input necessary information using the buttons of the mobile phone, which is troublesome. There is a problem.

  In the above-described conventional technology, the mobile phone cannot transmit user information to the authentication system and the web server when the mobile phone is out of the radio wave range or in the radio wave off mode. There is a problem that can not be.

  Therefore, the present invention has been made in view of the above-described problems, and can prevent damage caused by key loggers and phishing scams, can maintain privacy, and can be easily operated. It aims to provide a method.

  Another object of the present invention is to provide a mutual authentication system and a mutual authentication method capable of performing authentication even when the mobile phone is outside the radio wave range.

The present invention proposes the following matters in order to solve the above problems.
(1) The present invention relates to a client terminal, a mobile phone terminal storing mobile phone specific information held by the same user as the client terminal, and a user information storage storing the mobile phone specific information and user information And a carrier server having an authentication information storage unit in which authentication information is stored, and when the client terminal requests authentication from the web server, web information is sent from the web server to the client terminal. And transmitting the web information from the client terminal to the mobile phone terminal, authenticating the web server based on the web information by the mobile phone terminal, and confirming that the web server is correct , Transmitting the mobile phone specific information and the web information from the mobile phone terminal to the carrier server, The Yariasaba, the mobile phone identifies the user from the specific information, the transmitted information for authentication corresponding to the user stored in the authentication information storage section, and said web information to the web server, the web A mutual authentication system has been proposed in which a server authenticates a user based on authentication information corresponding to the user and the web information .

(2) The present invention, mutual authentication system (1), wherein the web server, the web blanking information transmitted by the bar code is photographed bar code displayed on the client terminal by the mobile phone terminal by proposes a mutual authentication system characterized by inputting the web blanking information to the mobile telephone terminal.

(3) The present invention provides a client terminal;
A mobile phone terminal storing mobile phone specific information held by the same user as the client terminal, a user information storage unit storing the mobile phone specific information and user information, and authentication information stored A carrier server having an authentication information storage unit, and when the client terminal requests authentication from the web server, the web information is transmitted from the web server to the client terminal, and the web information is transmitted from the client terminal. Input to the mobile phone terminal, and the mobile phone terminal authenticates the web server based on the web information, confirms that the web server is correct, and the mobile phone terminal is out of radio wave range or radio wave off mode. The mobile phone unique information of the mobile phone terminal is encrypted, and the encrypted mobile phone unique information Input to the client terminal, transmit the encrypted mobile phone specific information and the web information from the client terminal to the carrier server, the carrier server to identify the user from the mobile phone specific information, Transmitting authentication information corresponding to a user and the web information to the web server, and authenticating the user by the web server based on the authentication information corresponding to the user and the web information. We have proposed a mutual authentication system.

(4) In the mutual authentication system according to (3), when the mobile phone terminal is out of a radio wave range or in a radio wave off mode, the client terminal transmits the input unique information to the carrier server. Upon receiving the unique information, the server generates carrier server information and information including a random number, transmits the information to the client terminal, and the mobile phone terminal reads the random number from the client terminal and uses the random number. Thus, a mutual authentication system is proposed in which the mobile phone unique information is encrypted by generating keyed hashing for a message authentication code using a hash function .

(5) The present invention relates to a mobile phone terminal storing mobile phone specific information held by the same user as the client terminal, a user information storage unit storing the mobile phone specific information and user information, and authentication. A carrier server having an authentication information storage unit in which information is stored, and when the client terminal requests authentication from the web server, the web server transmits web information to the client terminal, The web information is input from the client terminal to the mobile phone terminal, and the mobile phone terminal performs authentication of the web server based on the web information, and if the web server is confirmed to be correct, the mobile phone terminal The mobile phone specific information and the web information are transmitted from the telephone terminal to the carrier server. It identifies the user from the mobile phone-specific information, the transmitted information for authentication corresponding to the user stored in the authentication information storage section, and said web information to the web server, by the web server A mutual authentication method is proposed in which a user is authenticated based on authentication information corresponding to the user and the web information .

(6) The present invention relates to a mobile phone terminal storing mobile phone specific information held by the same user as the client terminal, a user information storage unit storing the mobile phone specific information and user information, and authentication A carrier server having an authentication information storage unit in which information is stored, and when the client terminal requests authentication from the web server, the web server transmits web information to the client terminal, The web information is input from the client terminal to the mobile phone terminal, and the mobile phone terminal authenticates the web server based on the web information, and the web server is confirmed to be correct. When the terminal is out of radio wave or in radio off mode, the mobile phone specific information of the mobile phone terminal is encrypted and the encrypted Mobile phone specific information is input to the client terminal, the encrypted mobile phone specific information and the web information are transmitted from the client terminal to the carrier server, and the carrier server uses the mobile phone specific information from the user. The authentication information corresponding to the user and the web information are transmitted to the web server, and the web server uses the authentication information corresponding to the user and the web information based on the user information . We have proposed a mutual authentication method characterized by performing authentication.

  According to the present invention, when performing client authentication, the mobile phone specific information and the web server information are once transmitted from the mobile phone terminal to the carrier server, and only the authentication information required by the web server is sent to the web server. Therefore, there is an effect that privacy is maintained without requiring the user to disclose specific information to the web server for client authentication.

  In addition, according to the present invention, the web server information is sent to the mobile phone terminal, and further sent to the carrier server to determine whether the web server is correct. There is an effect that it can be prevented.

  Further, according to the present invention, no keyboard input is performed at the time of authentication, and since unique information stored in the client terminal is not used, leakage of authentication by spyware such as a key logger can be prevented. There is an effect that can be done.

  In addition, according to the present invention, the web server information is sent to the client terminal by a barcode, and the barcode is photographed by the mobile phone terminal, whereby the web server information is sent to the mobile phone terminal. There is an effect that the web server information can be transmitted from the client terminal to the mobile phone terminal without performing an operation using the button of the mobile phone.

  Further, according to the present invention, when the mobile phone terminal is out of the radio wave range or in the telephone off mode, the mobile phone specific information of the mobile phone terminal is encrypted, and the encrypted mobile phone specific information is input to the client terminal for encryption. By transmitting the mobile phone specific information and web server information from the client terminal to the carrier server, even when the mobile phone terminal is out of the radio wave range, it is possible to prevent the phishing fraud from being guided to the site or by spyware This has the effect of preventing leakage of authentication.

  Further, according to the present invention, the communication between the mobile phone terminal and the client terminal is performed by displaying a barcode transmitted from the web server and displayed on the client terminal when the mobile phone terminal receives information from the client terminal. Since the image is taken and transmitted by the camera of the mobile phone terminal, there is an effect that it is not necessary to perform an operation using infrared communication or a button of the mobile phone.

  In addition, since the information that the mobile phone terminal transmits to the client terminal is encrypted information to be transmitted, it does not suffer from spyware such as keyloggers, and the number of characters to be input can be changed by replacing it with a hash value. There is an effect that it can be reduced.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that the constituent elements in the present embodiment can be appropriately replaced with existing constituent elements and the like, and various variations including combinations with other existing constituent elements are possible. Therefore, the description of the present embodiment does not limit the contents of the invention described in the claims.

<First Embodiment>
FIG. 1 shows the system configuration of the first embodiment of the present invention. In FIG. 1, a client terminal 1 is a personal computer owned by a user.

As illustrated in FIG. 2, the client terminal 1 includes a control unit 11, a storage unit 12, an input unit 13, a display unit 14, and a communication unit 15. The control unit 11 is a CPU (Central
It consists of a processing unit (ROM), a read only memory (ROM), a random access memory (RAM), and the like. The storage unit 12 includes an HDD (Hard Disk Drive) or the like. The input unit 13 includes a keyboard and a mouse. The display unit 14 includes an LCD (Liquid Crystal Display) display or a CRT (Cathode-Ray Tube) display. The communication unit 15 is connected to the network 5.

  In FIG. 1, a mobile phone terminal 2 is owned by the same user as the client terminal 1, and a mobile phone terminal with a camera that can be connected to a network is used as the mobile phone terminal 2.

  As shown in FIG. 3, the mobile phone terminal 2 includes a communication unit 21, an audio processing unit 22, a control unit 23, a camera 24, an input unit 25, and a display unit 26. Further, the mobile phone terminal 2 has a barcode decoder 27 that decodes a two-dimensional barcode (QR code) photographed by the camera 24. Furthermore, the mobile phone terminal 2 includes a mobile phone specific information storage unit 29 for storing mobile phone specific information (telephone number, address, subscriber ID, individual identification number, etc.) and a web server information storage unit 30. .

  In FIG. 1, a web server 3 is a server that provides a web page. As shown in FIG. 4, the web server 3 includes a web page information storage unit 31, a control unit 32, a communication unit 33, and a user authentication unit 34. Further, the web server 3 is provided with a barcode encoder 35 for encoding a session ID and server information into a two-dimensional barcode and transmitting it at the time of authentication.

  In FIG. 1, the carrier server 4 is a server of a company that manages and operates the mobile phone terminal 2. As illustrated in FIG. 5, the carrier server 4 includes a user information storage unit 41, a web server information storage unit 42, an authentication information storage unit 43, a control unit 44, and a communication unit 45. The user information storage unit 41 stores the user name and mobile phone specific information (telephone number, address, subscriber ID, individual identification number, etc.) as user information. Since the carrier server 4 is a server of a company that manages and operates the mobile phone terminal 2, these pieces of information are acquired when the user purchases the mobile phone terminal 2. The authentication information storage unit 43 stores a client authentication user ID corresponding to the user.

  In FIG. 1, a network 5 is an Internet network, for example. The client terminal 1, the web server 3, and the carrier server 4 are connected via a network 5. Further, the mobile phone terminal 2 can be connected to the network 5 via the mobile network 6.

  Next, processing of the system according to the first embodiment of this invention will be described with reference to the sequence diagram of FIG. In this embodiment, it is assumed that the mobile phone terminal 2 is in the radio wave range.

  In FIG. 6, when the client terminal 1 logs in to the web server 3 for authentication, the web server 3 is accessed by the client terminal 1 (step S <b> 1). , A URL of the web server) is generated (step S2), and the two-dimensional barcode is transmitted to the client terminal 1 (step S3). The two-dimensional barcode is displayed on the client terminal 1 (step S4).

  When the two-dimensional barcode displayed on the client terminal 1 is photographed by the camera of the cellular phone terminal 2 (step S5), the cellular phone terminal 2 uses the session ID and the web obtained by decoding the two-dimensional barcode. From the information, it is confirmed whether the web server is correct (step S6). When the web server is confirmed to be correct, the carrier server 4 is accessed, and the carrier server information request and the mobile phone specific information (phone number, address) , Subscriber ID, individual identification number, etc.) are transmitted (step S7).

  When the carrier server 4 receives the session ID and the server information, the carrier server 4 confirms the mobile phone terminal based on the mobile phone terminal information sent from the mobile phone terminal 2 (step S8), and if the mobile phone terminal is correct, the mobile phone terminal 2 The carrier server information is sent to (step S9).

  The mobile phone terminal 2 confirms the carrier server based on the carrier server information (step S10), and if the carrier server is correct, sends the session ID and web server information to the carrier server 4 (step S11).

  The carrier server 4 requests server information from the web server 3 (step S12). When the server information is returned from the web server 3 (step S13), the carrier server 4 checks whether the web server is correct (step S14).

  If the web server 3 is confirmed to be correct, the user is identified by referring to the mobile phone specific information of the user information storage unit 41, and the client authentication user ID corresponding to the user is read from the authentication information storage unit 43. (Step S15), the client authentication user ID and the session ID are transmitted to the web server 3 (Step S16).

  The web server 3 performs authentication (step S17). When authentication is established, a session ID is transmitted to the client terminal 1 to notify that login authentication has been performed (step S18).

  As described above, in the first embodiment of the present invention, when the authentication of the client terminal 1 is performed by the web server 3, the session ID and the web server information are transmitted from the web server 3 to the client terminal 1 using a two-dimensional barcode. The two-dimensional barcode is photographed by the mobile phone terminal 2. Then, the mobile phone specific information and the web server information are transmitted from the mobile phone terminal 2 to the carrier server 4, and the carrier server 4 refers to the mobile phone specific information to identify the user, and for client authentication corresponding to this user Are read from the authentication information storage unit 43 and sent to the web server 3 for authentication.

  As described above, in the first embodiment of the present invention, since the carrier server 4 is interposed and the web server 3 is authenticated, the user provides unique information to the web server for client authentication. There is no need to make it public, and it can be expected that privacy will be maintained.

  In the first embodiment of the present invention, the web server information is sent to the mobile phone terminal 2 and further sent to the carrier server 4 to judge whether the web server is correct. Can be avoided.

  Also, in the first embodiment of the present invention, no keyboard input is performed at the time of authentication, and since unique information stored in the client terminal 1 is not used, authentication by a spyware such as a keylogger is not performed. Leakage can be prevented.

  In the first embodiment of the present invention, the information of the web server 3 is sent to the client terminal 1 by a two-dimensional barcode and the two-dimensional barcode is photographed by the mobile phone terminal 2, thereby Is sent to the mobile phone terminal 2. For this reason, the web server information can be sent from the client terminal 1 to the mobile phone terminal 2 without performing infrared communication or an operation using the button of the mobile phone.

<Second Embodiment>
FIG. 7 shows a sequence diagram of the second embodiment of the present invention. This embodiment is applied when the mobile phone terminal is out of the radio wave range or in the radio wave off mode. The basic configuration of the system is the same as that in the first embodiment described above.

  In FIG. 7, when the client terminal 1 logs in to the web server 3 for authentication, the client server 1 accesses the web server 3 (step S101). The web server 3 receives the session ID and web information (for example, , The URL of the web server) is generated (step S102), and the two-dimensional barcode is transmitted to the client terminal 1 (step S103). The two-dimensional barcode is displayed on the client terminal 1 (step S104).

  When the two-dimensional barcode displayed on the client terminal 1 is photographed by the camera of the cellular phone terminal 2 (step S105), the cellular phone terminal 2 decodes the two-dimensional barcode and checks whether the web server is correct. It confirms (step S106), and also confirms whether it is out of the radio wave range (or radio wave off mode) (step S107). If it is out of the radio wave range (or radio wave off mode), the cellular phone terminal 2 displays access information to the carrier server (step S108). Note that the processing in the radio wave range is the same as that in the first embodiment described above, and a description thereof will be omitted.

  According to the access information displayed on the mobile phone terminal 2, the client terminal 1 is accessed to the carrier server 4. At this time, unique information (a mobile phone number or the like that is less likely to be abused even if wiretapped) is input from the keyboard of the client terminal 1 (step S109) and sent to the carrier server 4 (step S110). .

  Upon receiving the unique information from the client terminal 1, the carrier server 4 generates a two-dimensional barcode including the carrier server information and the random number r (step S111) and transmits it to the client terminal 1 (step S112). The two-dimensional barcode is displayed on the client terminal 1 (step S113).

  When the two-dimensional barcode displayed on the client terminal 1 is photographed by the camera of the cellular phone terminal 2 (step S114), the cellular phone terminal 2 decodes the two-dimensional barcode and confirms whether the carrier server is correct. (Step S115). If the carrier server is correct, the mobile phone terminal 2 uses the random number r to encrypt the mobile phone unique information (terminal unique number, subscriber ID, etc.) of the mobile phone terminal 2 with a hash function and use HMAC (for message authentication code). (Keyed-Hashing for Message Authentication code) is generated (step S116) and displayed on the screen of the mobile phone terminal 2 (step S117).

  When characters of HMAC are displayed on the screen of the mobile phone terminal 2, the displayed characters are input from the keyboard of the client terminal 1 (step S118). The HMAC (r, mobile phone specific information) input to the client terminal 1 is transmitted to the carrier server 4 together with the web server information and the session ID (step S119).

  The carrier server 4 verifies HMAC and web server information (step S120). Then, the carrier server 4 requests server information from the web server 3 (step S121). When the server information is returned from the web server 3 (step S122), the carrier server 4 checks whether the web server is correct (step S123).

  If the web server 3 is confirmed to be correct, the user is identified by referring to the mobile phone specific information of the user information storage unit 41, and the client authentication user ID corresponding to the user is read from the authentication information storage unit 43. (Step S124), the user ID for client authentication and the session ID are transmitted to the web server 3 (Step S125).

  The web server 3 performs authentication (step S126). When authentication is established, a session ID is transmitted to the client terminal 1 to notify that login authentication has been performed (step S127).

  Thus, in the second embodiment of the present invention, when the mobile phone terminal is out of the radio wave range or in the radio wave off mode, the client terminal 1 receives the two-dimensional barcode including the random number r from the carrier server 4, and this two-dimensional bar code The code is photographed by the mobile phone terminal 2, and the mobile phone terminal 2 generates the HMAC of the mobile phone specific information using the random number r. By sending this HMAC from the client terminal 1 to the carrier server 4, the mobile phone specific information is transmitted to the carrier server 4. The carrier server 4 refers to the mobile phone specific information, identifies the user, reads the user ID for client authentication corresponding to this user, and accesses the web server 3 based on this, and the web server 3 Is confirmed to be correct, the user ID and the session ID are sent from the carrier server 4 to the web server 3 for authentication. As a result, even when the mobile phone terminal is out of the radio wave range, it is possible to prevent the phishing fraud from being guided to a site and to prevent authentication leakage due to spyware.

  In the second embodiment of the present invention, communication between the mobile phone terminal 2 and the client terminal 1 is transmitted from the web server 3 when the mobile phone terminal 2 receives information from the client terminal 1, and the client terminal 1 Since the two-dimensional barcode displayed in 1 is photographed and sent by the camera of the mobile phone terminal 2, there is no need to perform infrared communication or operation using the buttons of the mobile phone. Further, since the information to be transmitted from the mobile phone terminal 2 to the client terminal 1 is encrypted, the information to be transmitted is not damaged by spyware such as a key logger, and is input by replacing it with a hash value or the like. The number of characters can be reduced.

  The embodiments of the present invention have been described in detail with reference to the drawings. However, the specific configuration is not limited to the embodiments, and includes designs and the like that do not depart from the gist of the present invention.

It is a block diagram which shows the structure of the mutual authentication system of the 1st Embodiment of this invention. It is a functional block diagram used for description of the client terminal in the 1st Embodiment of this invention. It is a functional block diagram used for description of the mobile telephone terminal in the 1st Embodiment of this invention. It is a functional block diagram used for description of the web server in the 1st Embodiment of this invention. It is a functional block diagram used for description of the carrier server in the 1st Embodiment of this invention. It is a sequence diagram for demonstrating operation | movement of the mutual authentication system of the 1st Embodiment of this invention. It is a sequence diagram for demonstrating operation | movement of the mutual authentication system of the 2nd Embodiment of this invention.

Explanation of symbols

1: Client terminal 2: Mobile phone terminal 3: Web server 4: Carrier server 5: Network 6: Mobile network

Claims (6)

A client terminal,
A mobile phone terminal storing mobile phone specific information held by the same user as the client terminal;
A carrier server having a user information storage unit storing the mobile phone specific information and user information, and an authentication information storage unit storing authentication information;
When the client terminal requests authentication from the web server, the web information is transmitted from the web server to the client terminal,
The web information is input from the client terminal to the mobile phone terminal,
The mobile phone terminal performs authentication of the web server based on the web information,
When it is confirmed that the web server is correct, the mobile phone specific information and the web information are transmitted from the mobile phone terminal to the carrier server,
By the carrier server, the mobile phone identifies the user from the specific information, the transmitted information for authentication corresponding to the user stored in the authentication information storage section, and said web information to the web server,
A mutual authentication system , wherein the web server authenticates a user based on authentication information corresponding to the user and the web information .   The web server transmits the web information as a barcode, and captures the barcode displayed on the client terminal with the cellular phone terminal, thereby inputting the web information into the cellular phone terminal. The mutual authentication system according to claim 1. A client terminal,
A mobile phone terminal storing mobile phone specific information held by the same user as the client terminal;
A carrier server having a user information storage unit storing the mobile phone specific information and user information, and an authentication information storage unit storing authentication information;
When the client terminal requests authentication from the web server, the web information is transmitted from the web server to the client terminal,
The web information is input from the client terminal to the mobile phone terminal,
The mobile phone terminal performs authentication of the web server based on the web information,
When the web server is confirmed to be correct and the mobile phone terminal is out of radio range or in radio off mode,
Encrypt the mobile phone specific information of the mobile phone terminal,
Input the encrypted mobile phone specific information to the client terminal,
Transmitting the encrypted mobile phone specific information and the web information from the client terminal to the carrier server;
The carrier server identifies a user from the mobile phone specific information, sends authentication information corresponding to the user, and the web information to the web server,
A mutual authentication system, wherein the web server authenticates a user based on authentication information corresponding to the user and the web information . When the mobile phone terminal is out of radio range or in radio off mode,
The client terminal transmits the input unique information to the carrier server,
When the carrier server receives the specific information, the carrier server generates information including carrier server information and a random number, and transmits the information to the client terminal.
The mobile phone terminal performs the encryption by reading the random number from the client terminal and generating the keyed hashing for the message authentication code by using the random number and the mobile phone specific information by a hash function. The mutual authentication system according to claim 3. A mobile phone terminal storing mobile phone specific information held by the same user as the client terminal, a user information storage unit storing the mobile phone specific information and user information, and an authentication storing authentication information And a carrier server having an information storage unit for
When the client terminal requests authentication from the web server,
Web information is transmitted from the web server to the client terminal,
The web information is input from the client terminal to the mobile phone terminal,
The mobile phone terminal performs authentication of the web server based on the web information,
When it is confirmed that the web server is correct, the mobile phone specific information and the web information are transmitted from the mobile phone terminal to the carrier server,
By the carrier server, the mobile phone identifies the user from the specific information, the transmitted information for authentication corresponding to the user stored in the authentication information storage section, and said web information to the web server,
A mutual authentication method , wherein the web server authenticates a user based on authentication information corresponding to the user and the web information . A mobile phone terminal storing mobile phone specific information held by the same user as the client terminal, a user information storage unit storing the mobile phone specific information and user information, and an authentication storing authentication information And a carrier server having an information storage unit for
When the client terminal requests authentication from the web server, the web information is transmitted from the web server to the client terminal,
The web information is input from the client terminal to the mobile phone terminal,
The mobile phone terminal performs authentication of the web server based on the web information,
When the web server is confirmed to be correct and the mobile phone terminal is out of radio range or in radio off mode,
Encrypt the mobile phone specific information of the mobile phone terminal,
Input the encrypted mobile phone specific information to the client terminal,
Transmitting the encrypted mobile phone specific information and the web information from the client terminal to the carrier server;
The carrier server identifies a user from the mobile phone specific information, sends authentication information corresponding to the user, and the web information to the web server,
A mutual authentication method, wherein the web server authenticates a user based on authentication information corresponding to the user and the web information .

Images