JP5775028B2 - Authentication device and program - Google Patents

Description

  The present invention relates to an authentication apparatus and a program for authenticating a user who uses a telephone.

  When a user receives a service using a telephone, user registration may be required. Currently, for user authentication, when a user is registered, the user notifies the servicer (service provider) of his / her name, address, date of birth, etc., and authenticates the user by conveying information registered in advance by the user when using the service. It is generally done. For example, Non-Patent Document 1 describes that a date of birth is input to a servicer system via a telephone.

"Kamata Internal Medicine Clinic: How to use the reservation system from the telephone (automatic voice response)" [online], Internet <http://www.kamata-cl.com/reserve/ivr.html>

  In the case of the general authentication method described above, users do not use the service directly, but they need to register personal information related to privacy such as address and date of birth only for user authentication. For this reason, there is a great psychological barrier to user registration in order to use the service.

  Even for servicers, managing personal information related to privacy, such as address and date of birth, only for personal authentication, even though it is not used directly for the service, bears the burden of risk countermeasures against information leakage. large.

  The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an authentication device and a program for reducing a load for managing personal information of a service provider.

  In order to achieve the above object, the present invention is an authentication device, comprising: a receiving means for receiving a user ID by telephone from a service provider's servicer telephone; first authentication information transmitted from the user telephone; The second authentication information corresponding to the user ID registered in the authentication storage means at the time of user registration is collated, and if both match, the authentication means for determining that the authentication has succeeded, and the authentication succeeded, Connecting means for transferring a telephone call to the user telephone to the servicer telephone, wherein the telephone from the servicer telephone is a telephone from the user telephone to the servicer telephone, and the user ID is The gist is that it is received as a sub-address added at the time of transfer.

The present invention is an authentication apparatus, wherein the receiving unit receives a user ID by telephone from a user telephone, the first authentication information transmitted from the user telephone, and the registration registered in the authentication storage unit at the time of user registration. The second authentication information corresponding to the user ID is collated, and if the two match, the authentication means for determining that the authentication is successful, and if the authentication is successful, call the user telephone with the service provider. And a connection means for relaying or transferring to the servicer telephone, wherein the connection means relays or forwards the service provider to the servicer telephone with a customer ID for identifying the user added as a subaddress. To do.

  The present invention is a program for causing a computer to function as the authentication device.

  ADVANTAGE OF THE INVENTION According to this invention, the authentication apparatus and program which reduce the load which manages a service provider's personal information can be provided.

It is a figure which shows the whole structure of the authentication system which concerns on embodiment of this invention. It is a sequence diagram which shows the operation | movement at the time of user registration of a 1st Example. It is a sequence diagram which shows the operation | movement at the time of service use of a 1st Example. It is a sequence diagram which shows the operation | movement at the time of user registration of a 2nd Example. It is a sequence diagram which shows the operation | movement at the time of service utilization of a 2nd Example.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a configuration diagram of an authentication proxy system 2 (authentication apparatus) according to an embodiment of the present invention. The authentication proxy system 2 is connected to the user telephone 1 and the servicer telephone 3 through a telephone line, and provides an authentication service to the servicer telephone 3. The illustrated authentication proxy system 2 includes a user side input unit 21, a user side output unit 22, a processing unit 23, a servicer side input unit 24, a servicer side output unit 25, an authentication unit 26, and an authentication DB 27. Prepare.

  The user-side input unit 21 recognizes the user's voice transmitted from the user telephone 1 as a character string and transfers it to the processing unit 23. Further, the user-side input unit 21 detects DTMF (Dual-Tone Multi-Frequency) transmitted from the user telephone 1 and transfers it to the processing unit 23. The user-side output unit 22 synthesizes the character string transferred from the processing unit 23 as a voice and sends it to the user telephone 1.

  The servicer-side input unit 24 recognizes the user's voice transmitted from the servicer telephone 3 as a character string and transfers it to the processing unit 23. In addition, the servicer side input unit 24 detects DTMF transmitted from the servicer telephone 3 and transfers it to the processing unit 23. The servicer-side output unit 25 synthesizes the character string transferred from the processing unit 23 as speech and sends it to the servicer telephone 3.

  The processing unit 23 (reception unit, connection unit) performs processing to be described later using the input / output units 21, 22, 24, 25, the authentication unit 26, and the authentication DB 27. The processing unit 23 transmits / receives information to / from the user telephone 1 and the servicer telephone 3 via the input / output units 21, 22, 24, 25.

  The authentication unit 26 compares the password (first authentication information) transmitted from the user telephone 1 with the password (second authentication information) registered in the authentication DB 27 at the time of user registration, and whether or not they match. Is determined. If they match, it is determined that the authentication has succeeded. If they do not match, it is determined that the authentication has failed, and the determination result is sent to the processing unit 23. The authentication unit 26 pays out an ID when registering a user. The authentication DB 27 (authentication storage means) stores authentication information of each user registered as a user.

  The line user DB 4 (line user information storage means) is an existing telephone line user DB that communicates with the authentication proxy system 2 and is registered and stored at the time of the line contract with the telephone number as a key. To return.

  For the authentication proxy system 2 described above, for example, a general-purpose computer system including a CPU, a memory, an external storage device such as an HDD, an input device, and an output device can be used. In this computer system, each function of the authentication proxy system 2 is realized by the CPU executing a program for the authentication proxy system 2 loaded on the memory. The program for the authentication proxy system 2 can be stored in a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, an MO, or a DVD-ROM, or can be distributed via a network.

  Next, the operation of the authentication proxy system 2 of this embodiment will be described. In this embodiment, two authentication methods of the first example and the second example are conceivable.

<First embodiment>
FIG. 2 is a sequence showing an operation at the time of user registration in the first embodiment.

  First, the user uses the user telephone 1 to make a service registration request to the servicer telephone 3. The user telephone 1 accepts the user's operation and makes a normal telephone connection (call) to the servicer telephone 3 (S11). This telephone connection includes the source number of the user telephone 1 that is the source (“046-1” in the illustrated example: here, the telephone number is simplified).

  When the servicer telephone 3 is off-hooked, a call is connected between the user telephone 1 and the servicer telephone 3, and a call is started. A servicer (operator) using the servicer telephone 3 makes a call with the user, inquires of the user whether or not he / she is a new user, and operates the servicer telephone 3 to transfer the telephone to the authentication proxy system 2 in the case of a new user. (S12). At that time, the servicer adds a number representing the new user (“0000” in the illustrated example) as a sub-address of the transmission source number of the user telephone 1 and transfers it (S12). In the present embodiment, it is assumed that a call or transfer between the authentication proxy system 2 and the servicer is performed using a telephone network having a sub address (for example, ISDN, SIP telephone, etc.).

  The processing unit 23 of the authentication proxy system 2 receives the transferred call from the user telephone 1 and acquires the caller telephone number and the subaddress. Then, the processing unit 23 determines whether or not the acquired sub address is a number representing a new user. Here, since a number representing a new user is set, the processing unit 23 sends a guidance voice such as “Please enter your date of birth for new registration” to the user telephone 1. (S13). Here, the user's date of birth registered in the line user DB 4 is entered as the password, but other information registered in the line user DB 4 other than the date of birth may be used.

  By the guidance voice, the user inputs a password (date of birth) by voice or button operation (DTMF) of the user telephone 1. The user telephone 1 transmits the voice or DTMF input by the user to the authentication proxy system 2 (S14).

  The authentication unit 26 of the authentication proxy system 2 acquires the password (birth date) transmitted from the user telephone 1 via the processing unit 23. Then, the processing unit 23 uses the transmission source telephone number of the user telephone 1 notified from the servicer telephone 3 in S12, and the user password (birth date) registered from the line user DB 4 at the time of line registration corresponding to the telephone number. Date: “19790617” in the example shown in FIG. 2) is acquired and sent to the authentication unit 26. The authentication unit 26 compares the password (birth date) registered in the line user DB 4 with the password (birth date) transmitted in S14, and determines whether or not they match (S15). .

  If they match, the authentication unit 26 issues a new ID for the user of the user telephone 1, and registers the ID, the caller telephone number of the user telephone 1, and the password (date of birth) in the authentication DB 27 (S16). ). Specifically, ID = 0001, tel = 046-1, and Pass = 19790617 are newly registered in association with each other in the authentication DB 27 shown in FIG.

  Then, the processing unit 23 of the authentication proxy system 2 sends the ID issued in S16 to the user telephone 1 by voice and notifies the user (S17). Thereby, the user of the user telephone 1 acquires the ID.

  Thereafter, the processing unit 23 of the authentication proxy system 2 transfers the telephone with the user telephone 1 to the servicer telephone 3 (S18). At that time, the processing unit 23 assigns the ID issued as the subaddress to the caller telephone number of the user telephone 1 and transfers it. The servicer telephone 3 displays the caller telephone number and the subaddress on a display or the like, thereby notifying the servicer of the subaddress (user ID of the user telephone 1).

  When the telephone is transferred from the authentication proxy system 2 in S18, a call can be made between the user telephone 1 and the servicer telephone 3. Then, the servicer inquires of the user about the ID, and when the ID returned by the user matches the subaddress notified from the authentication proxy system 2 in S18, the user succeeds in the authentication proxy system 2 and the new It is determined that the user is a registered user, and the telephone number and ID (subaddress) of the user telephone 1 are input and stored in a predetermined storage means (for example, customer DB 31). In addition to the telephone number and ID, the servicer may acquire information necessary for the service from the user through a call and store it together.

  FIG. 3 is a sequence showing the operation when using the service of the first embodiment.

  First, the user uses the user telephone 1 to make a call for service use to the servicer telephone 3. The user telephone 1 receives the user's operation and makes a normal telephone connection (call) to the servicer telephone 3 (S31). This telephone connection includes the caller number (“046-1” in the illustrated example) of the user telephone 1 that is the caller. At this time, the user may notify the servicer telephone 3 by inputting the ID (FIG. 2: S17) notified at the time of user registration into the user telephone 1 as a subaddress. In this case, the caller telephone number and the subaddress (ID) are displayed on the display of the servicer telephone 3, and the servicer can obtain the user ID. Alternatively, when the servicer telephone 3 is off-hooked, a call is connected between the user telephone 1 and the servicer telephone 3, and after the call is started, the servicer obtains the ID by inquiring the user for the ID. Good.

  Since the servicer is notified of the ID, the servicer determines that the user is a registered user, operates the servicer telephone 3, and transfers the telephone to the authentication proxy system 2. At that time, the servicer assigns the ID notified as the subaddress of the caller telephone number of the user telephone 1, and transfers the telephone to the authentication proxy system 2 (S32). Note that the servicer may check whether the notified ID and caller telephone number are registered in a predetermined storage unit (customer DB 31), and transfer them to the authentication proxy system 2 if they are registered. .

  The processing unit 23 of the authentication proxy system 2 accepts the transferred telephone from the user telephone 1 and acquires the caller telephone number and subaddress of the user telephone 1. Then, the processing unit 23 uses the acquired caller telephone number to acquire predetermined notification destination information (here, a mobile number) registered at the time of line registration corresponding to the telephone number from the line user DB 4. (S33). The notification information may be other notification destination information (for example, an e-mail address) registered in the line user DB 4 other than the mobile number.

  Then, the processing unit 23 sends a guidance voice such as “Please enter your date of birth to authenticate yourself” to the user telephone 1 (S34). Here, the user is required to input the date of birth registered in the line user DB 4 as the password, but other information may be used.

  By the guidance voice, the user inputs a password (date of birth) by voice or button operation (DTMF) of the user telephone 1. The user telephone 1 transmits the voice or DTMF input by the user to the authentication proxy system 2 (S35).

  The authentication unit 26 of the authentication proxy system 2 acquires the password (birth date) transmitted from the user telephone 1 via the processing unit 23. And the authentication part 26 acquires the password (birth date) corresponding to the said ID from authentication DB27 using ID (subaddress) notified from the servicer telephone set 3 by S32. Then, the authentication unit 26 compares the password (birth date) registered in the authentication DB 27 with the password (birth date) transmitted in S14, and determines whether or not they match (S36). .

  If they match, the processing unit 23 further sends a call to the notification destination information (mobile phone number) acquired in S33, sends the same guidance voice as in S34 to the user who has received the call, and again receives the password (birth year) (Month / day) input is requested (S37). With the guidance voice, the user inputs a password (date of birth) as in S35, and the mobile phone transmits the password (date of birth) entered by the user to the authentication proxy system 2 (S38). If the notification destination information is an e-mail address, the processing unit 23 requests transmission of a password by e-mail, and the user returns the password by e-mail.

  The authentication unit 26 of the authentication proxy system 2 acquires the password (birth date) transmitted from the mobile phone via the processing unit 23, and authenticates using the authentication DB 27 as in S36 (S39). If the two match, the processing unit 23 of the authentication proxy system 2 transfers the telephone with the user telephone 1 to the servicer telephone 3 (S40). In S36 or S39, if the password does not match and the authentication fails, the processing unit 23 of the authentication proxy system 2 sends a guidance voice indicating that the authentication has failed to the user telephone 1, and makes a call with the user telephone 1. Disconnect. The processing unit 23 also notifies the servicer telephone 3 that the authentication has failed.

  When the telephone is transferred from the authentication proxy system 2, a call can be made between the user telephone 1 and the servicer telephone 3. Then, as a result of the transfer, the servicer determines that the user of the user telephone 1 has succeeded in the identity verification by the authentication proxy system 2, and provides a desired service to the user.

  Note that the processes of S33 and S37 to S39 are additional authentication processes for further increasing the authentication strength, and may be omitted.

<Second embodiment>
FIG. 4 is a sequence showing an operation at the time of user registration in the second embodiment. In the present embodiment, three types of IDs are used.

  First, the user uses the user telephone 1 to make a phone call for service registration to the authentication proxy system 2. The user telephone 1 accepts the user operation and makes a normal telephone connection (call) to the authentication proxy system 2 (S51). When the processing unit 23 of the authentication proxy system 2 receives a call from the user telephone 1, for example, a guidance voice such as “Enter 0 for a new user or a user ID for an existing user” is displayed on the user telephone. 1 (S52). With this guidance voice, the user inputs 0 or a user ID by voice or button operation (DTMF) of the user telephone 1. Here, since the user is a new user, the user inputs 0. The user telephone 1 transmits the voice or DTMF input by the user to the authentication proxy system 2 (S53).

  When the processing unit 23 of the authentication proxy system 2 receives 0 indicating a new user, for example, a guidance voice such as “Please enter the desired user ID and date of birth for new registration” is given to the user telephone 1. It is sent out (S54). Here, the user is required to input the date of birth registered in the line user DB 4 as a password, but other information registered in the line user DB 4 other than the date of birth (for example, an address, etc.) But you can.

  With this guidance voice, the user inputs an arbitrary user ID and password (date of birth) by voice or button operation (DTMF) of the user telephone 1. The user telephone 1 transmits the voice or DTMF input by the user to the authentication proxy system 2 (S55).

  The authentication unit 26 of the authentication proxy system 2 acquires the user ID and password (birth date) transmitted from the user telephone 1 via the processing unit 23. Then, the processing unit 23 obtains the password (birth date) of the user registered at the time of line registration corresponding to the telephone number from the line user DB 4 using the caller telephone number of the user telephone 1 that has arrived in S51. And sent to the authentication unit 26. The authentication unit 26 compares the password (birth date) registered in the line user DB 4 with the password (birth date) transmitted in S55, and determines whether or not they match (S56). .

  If they match, the authentication unit 26 issues a new internal ID for the user of the user telephone 1, and the user ID transmitted from the user telephone 1 in S55, the issued internal ID, and the calling telephone of the user telephone 1 The number and the password (date of birth) are associated with each other and newly registered in the authentication DB 27 (S57).

  Then, the processing unit 23 of the authentication proxy system 2 sends a guidance voice of registration completion notification and a request for inputting the telephone number of the servicer telephone 3 to be used to the user telephone 1 (S58). With this guidance voice, the user inputs the desired telephone number of the servicer telephone 3 by voice or button operation (DTMF) of the user telephone 1. The user telephone 1 transmits the voice of the telephone number input by the user or DTMF to the authentication proxy system 2 (S59).

  The processing unit 23 of the authentication proxy system 2 makes a telephone call to the servicer telephone 3 having the telephone number transmitted from the user telephone 1 (S60), and receives a guidance voice of a notification of new user registration and an input request for a desired customer ID. It is sent to the servicer telephone 3 (S61). Based on the guidance voice, the servicer pays out a unique customer ID on the servicer side (S62), and inputs / stores the payout customer ID in a predetermined storage means (customer DB 31). Then, the servicer inputs the paid customer ID into the servicer telephone 3 by voice or button operation (DTMF) of the servicer telephone 3. The servicer telephone 3 transmits the voice or DTMF input by the servicer to the authentication proxy system 2 (S63). The customer ID is an ID for the servicer to identify the user, and the uniqueness (consistency) of the customer ID is managed by the servicer.

  The authentication unit 26 of the authentication proxy system 2 receives the customer ID via the processing unit 23, and registers the customer ID in the authentication DB 27 in association with the data newly registered in S57 (S64). Thereby, as shown in the authentication DB 27 in FIG. 4, the user ID, the internal ID, the customer ID, the telephone number of the user telephone 1 and the password are registered in association with each other. Here, it is assumed that the authentication unit 26 registers the customer ID transmitted from the servicer telephone 3 with the telephone number of the servicer telephone 3 as a customer ID in the authentication DB 27. Then, the processing unit 23 of the authentication proxy system 2 notifies the user telephone 1 that the registration is completed with a guidance voice (S65).

  FIG. 5 is a sequence diagram illustrating an operation when using a service according to the second embodiment.

  First, the user uses the user telephone 1 to make a phone call for service use to the authentication proxy system 2. The user telephone 1 accepts the user operation and makes a normal telephone connection (call) to the authentication proxy system 2 (S71).

  When the processing unit 23 of the authentication proxy system 2 receives a call from the user telephone 1, for example, a guidance voice such as “Enter 0 for a new user or a user ID for an existing user” is displayed on the user telephone. 1 (S72). By this guidance voice, here, the user inputs the user ID by voice or button operation (DTMF) of the user telephone 1. The user telephone 1 transmits the voice input by the user or the user ID of DTMF to the authentication proxy system 2 (S73).

  When receiving the user ID, the processing unit 23 of the authentication proxy system 2 sends a guidance voice such as “Please enter your date of birth to perform personal authentication” to the user telephone 1 (S74). Here, the user is required to input the date of birth registered in the line user DB 4 as the password, but other information may be used.

  By the guidance voice, the user inputs a password (date of birth) by voice or button operation (DTMF) of the user telephone 1. The user telephone 1 transmits the voice or DTMF input by the user to the authentication proxy system 2 (S75).

  The authentication unit 26 of the authentication proxy system 2 acquires the password (birth date) transmitted from the user telephone 1 via the processing unit 23. And the authentication part 26 acquires the password (birth date) corresponding to the said user ID from authentication DB27 using the user ID transmitted by S73. Then, the authentication unit 26 compares the date of birth registered in the authentication DB 27 with the date of birth transmitted in S75, and determines whether or not they match (S76). When the passwords do not match and the authentication fails, the processing unit 23 of the authentication proxy system 2 sends a guidance voice indicating that the authentication has failed to the user telephone 1 and disconnects the call with the user telephone 1.

  If the two match, the processing unit 23 of the authentication proxy system 2 sends a guidance voice requesting input of the telephone number of the servicer telephone 3 to be used to the user telephone 1 (S77). With this guidance voice, the user inputs the desired telephone number of the servicer telephone 3 by voice or button operation (DTMF) of the user telephone 1. The user telephone 1 transmits the voice or DTMF input by the user to the authentication proxy system 2 (S78).

  The processing unit 23 of the authentication proxy system 2 makes a call to the servicer telephone 3 having the telephone number transmitted from the user telephone 1, and relays the telephone with the user telephone 1 (S79). At that time, the processing unit 23 acquires a customer ID corresponding to the user ID acquired in S73 from the authentication DB 27, adds the acquired customer ID as a sub-address to the telephone number of the servicer telephone 3, and transmits it. Even when there are a plurality of customer IDs corresponding to the user ID, the customer ID can be uniquely specified by using the telephone number of the servicer telephone 3 transmitted from the user telephone 1 in S78. If the telephone from the user telephone 1 can be transferred to the servicer telephone 3 without notifying the servicer telephone 3 of the caller number of the user telephone 1, the processing unit 23 adds the customer ID as a subaddress and transfers it. Also good.

  The servicer telephone 3 displays the caller telephone number and the subaddress (customer ID) of the authentication proxy system 2 on a display or the like by receiving a call from the authentication proxy system 2, and thereby the subaddress (customer ID) is displayed on the servicer. Notify When the notified customer ID is stored in a predetermined storage means (customer DB 31 or the like), the servicer determines that there is a registered user and off-hooks the servicer telephone 3 (S80). As a result, the processing unit 23 of the authentication proxy system 2 connects the user telephone 1 and the servicer telephone 3 via the authentication proxy system 2, whereby a call can be made between the user telephone 1 and the servicer telephone 3. It becomes possible (S81). When the transfer is made in S79, the user telephone 1 and the servicer telephone 3 are directly connected.

  Then, the servicer determines that the user of the user telephone 1 has succeeded in identity verification by the authentication proxy system 2, and provides a desired service to the user.

  Also in the second embodiment of FIG. 5, the additional authentication process (FIG. 4: S33, S37 to S39) when using the service of the first embodiment may be performed.

  In the present embodiment described above, the user authentication is performed by the third-party authentication proxy system 2 instead of the servicer. Thereby, compared with the case where a user notifies personal information to each of a plurality of servicers and registers as a user, the risk of leakage of personal information can be reduced. Moreover, since the user can register as a user without notifying the servicer of personal information, resistance to user registration can be reduced. Moreover, when the social credibility of the operator of the authentication proxy system 2 that performs the authentication is high, the user's psychological service use barrier can be lowered. Also, the servicer can reduce the load of managing personal information.

  In the present embodiment, stronger user authentication can be realized by using the existing line user DB 4. For example, when the line proxy operates the authentication proxy system 2, stronger authentication can be performed by comparing with the information of the existing line user DB 4.

  Further, in the case of the second embodiment, since the user's telephone number is not directly notified to the servicer, the user's sense of security can be further increased (the service usage psychological barrier can be further reduced). Further, in the case of the second embodiment, the authentication proxy system 2 has an internal ID, and since the user ID and the customer ID are linked (only the authentication proxy system 2 holds the three IDs), the user stores it. User IDs to be managed and customer IDs managed by the servicer can be separated. This makes it possible to easily rewrite only one ID when information leaks.

  In addition, this invention is not limited to the said embodiment, Many deformation | transformation are possible within the range of the summary. Further, the present invention may be a combination of the above embodiments.

1: User phone 2: Authentication proxy system 21: User side input unit 22: User side output unit 23: Processing unit 24: Servicer side input unit 25: Servicer side output unit 26: Authentication unit 27: Authentication DB
3: Servicer phone 4: Line user DB

Claims (5)

An authentication device,
Receiving means for receiving a user ID by telephone from the service provider's servicer telephone;
The first authentication information transmitted from the user telephone is compared with the second authentication information corresponding to the user ID registered in the authentication storage means at the time of user registration, and if they match, the authentication is successful. Authentication means for determining
A connection means for transferring a call with the user telephone to the servicer telephone when the authentication is successful;
2. The authentication apparatus according to claim 1, wherein the telephone from the servicer telephone is a telephone transferred from the user telephone to the servicer telephone, and the user ID is received as a subaddress added at the time of the transfer. An authentication device,
Receiving means for receiving a user ID by telephone from a user telephone;
The first authentication information transmitted from the user telephone is compared with the second authentication information corresponding to the user ID registered in the authentication storage means at the time of user registration, and if they match, the authentication is successful. Authentication means for determining
A connection means for relaying or transferring the telephone with the user telephone to the service provider telephone of the service provider when the authentication is successful;
The connection unit adds a customer ID for identifying a user by a service provider as a sub-address and relays or forwards it to the servicer telephone. The authentication device according to claim 2,
The authentication apparatus, wherein the authentication storage means stores the user ID, an internal ID for identifying the user in the authentication apparatus, and the customer ID in association with each other. The authentication device according to any one of claims 1 to 3,
The authentication apparatus, wherein the authentication unit accesses a notification destination corresponding to the line of the user telephone acquired from the line user information storage unit, and acquires authentication information from the notification destination.   The program for functioning a computer as an authentication apparatus as described in any one of Claim 1 to 4.

Images