JP2001119391A - Method and device for verifying identity - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an identity verifying method improved in a security level by using communication equipment. SOLUTION: When a connection request is matched to an information provider, the information provider generates a password and transmits the password to the communication equipment owned by the operator of an information processor which requests the connection. Afterwards, when that password is transmitted from the information processor, which requests the connection, the connection with the information provider is permitted and when a different password is transmitted, the connection is not permitted.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal authentication method and apparatus, and more particularly, to a personal authentication method and apparatus between information processing apparatuses using a communication device.

[0002]

2. Description of the Related Art With the development of communication technology and information processing technology,
Electronic commerce, which conducts transactions via communication circuits (networks) such as the Internet, is becoming popular. In electronic commerce using an information processing device, it is necessary to authenticate that the operator of the information processing device is the owner of the information processing device or has been authorized by the owner. This authentication is called personal authentication. In personal authentication in electronic commerce, it is common practice to use a user identification number and a password that only the principal can know.

[0003]

In many cases, the user identification number is not protected at the time of input. In many cases, the user identification number can be easily known to others through eavesdropping, eavesdropping, and analogy. Also, the security level is low because the password is likely to be known by eavesdropping and analogy.

An object of the present invention is to provide a personal authentication method having a high security level by using a communication device.

[0005]

The second information processing apparatus includes:
The number for communicating with the communication device associated with the first information processing device is stored. Then, in response to the connection request to the first and second information processing devices, a password is generated in the second information processing device, and the password is transmitted from the second information processing device to the communication device. . Thereafter, when the password is transmitted to the first and second information processing devices, a connection request to the first and second information processing devices is permitted.

As described above, a personal authentication method with a high security level can be provided by using a communication device.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A personal authentication method in electronic commerce via a communication circuit (network) such as the Internet according to the present invention will be described below in detail with reference to the drawings.

FIG. 1 is an overall configuration diagram of a network system embodying the present invention.

In FIG. 1, A and B are both information providers C
Is an information user who wants to receive this service. The information user A and the information user B own the information processing device 100-1 and the information processing device 100-2, respectively, for receiving the service of the information provider C. And a communication device 110-2. C is an information provider for A and B, and a communication means capable of transmitting to the information processing device 100-3 for providing information, the communication devices 110-1 and 110-2 of the information users A and B. It owns 110-3. D is information user A
And an Internet connection provider (provider) that connects the information processing device of the information user B to the Internet,
Internet network 200 via information processing apparatus 100-4
Connected to In this example, a provider D and an information user A receive services via a public line network 300, and an information user B receives a service via a LAN / dedicated line.

Reference numeral 120-1 in the figure denotes a gateway device for the information user B to connect to a dedicated line. E is an Internet connection provider (provider) for connecting the information provider 100-3 of the information provider C to the Internet, and is connected to the Internet 200 via the information processor 100-5. In this example, the provider E and the information provider C are connected by a dedicated line via a gateway 120-2 owned by C.

Reference numeral 400 denotes a communication device 1 owned by the information provider C.
10-3 and the communication device 110-1 owned by the information user A,
The communication circuit connects the communication device 110-2 owned by the information user B. The information users A and B respectively store the information processing apparatus 100-1 and the information processing apparatus 100-2, which are owned by the commercial provider D, which is an Internet user of the information user, via the public network 300 or a dedicated line. The information processing apparatus 100 is connected to the Internet network 200 via the apparatus 100-4, and is further provided by a commercial provider E, which is an Internet connection provider contracted by the information provider C.
Information processing device 100-3 of information provider C via -5
To the WWW (Word Wide) on the information processing device 100-3.
Web) Receive services using server functions.

When the information user A and the information user B intend to receive the service, the information processing device 100-1 or the information processing device 100-2 sends the information provider A to the commercial provider D to which the user has contracted. By entering the user identification number and password negotiated with commercial provider D,
First, connect to the Internet. In order to connect to the information provider C with the WWW server and receive the service, the information processing apparatus 100-1 or the information processing apparatus 100-
2. Enter the URL (Uniform Resource Locator) with the browser.

[0013] For ordinary information provision, commercial providers
User identification number for D, password, information provider C
There is no problem with just the URL to connect to the WWW server,
If the information provider is a communication service company of communication equipment and provides services such as changing customer information (for example, changing address or discount plan), selling products, notifying call charges, etc.
It is necessary to authenticate that the information user is definitely the owner of the communication device. Although the user identification number and password for the commercial provider D can indicate that they are a user of the commercial provider, they do not prove the owner of the communication device. In addition, the user identification number and the password are easy to eavesdrop on, eavesdrop, and analogy, and have a low security level. Also, even if the user identification number and password are set separately between the information user and the information provider, there is essentially no difference between security and security.
The level is low. The present invention utilizes the fact that an information user physically occupies a communication device and, when receiving a connection request for providing a service from the information user, uses the communication device 110-3.
Sends a password to each of the information user A and the information user B via the communication circuit 400, and the information user sends the password to each of the information processing apparatuses 100-1 and 100-1.
00-2 and the information provider 100 of the information provider C
3 to the information processing apparatus 100-
1. Authentication is performed such that the operator of the information processing apparatus 100-2 is definitely the physical occupant of the communication device 110-1 and the communication device 110-2.

FIG. 2 is an explanatory diagram of a processing procedure for personal authentication between information processing apparatuses using a communication device. A is an information user who wants to receive the service. Information User A
Is an information processing apparatus 10 which is a means for receiving provision of a service.
0-1 and owns the communication device 110-1 that is physically occupied. C is an information provider that provides services. The information provider C has an information processing device 100-3 that provides a service and a communication device 11 that can transmit to the communication device 110-1.
It has 0-3.

Numerals 1 to 16 in the figure represent the flow of processing. First, the information user A who wants to receive the service
Takes a connection procedure with the user ID and password determined with the information provider C (step 1). The information processing apparatus 100-3 of the information provider C accepts the connection procedure (step 2), and the user ID and password held in the information processing apparatus 100-3 and the user A are physically occupied. Is compared with a telephone number comparison table (3 in the figure) of the communication device 110-1 in which the user ID and password are matched (step 4), and if not matched (step 5). Then, a procedure for rejecting the connection is performed (step 6).

If they match, a password is generated using the random number generation logic (step 7), the telephone number corresponding to the comparison table 3 is called, and the generated password is transmitted by the communication device 110-3. (Step 8). The information user A is the communication device 110-1 that he / she is physically occupying.
Receives the password (step 9), and inputs the password to the information processing apparatus 100-1 (step 1).
0). The password input to the information processing apparatus 100-1 is transmitted to the information processing apparatus 100-3 of the information provider C (step 11), and the information processing apparatus 100 of the information provider C is transmitted.
-3 is compared with the password transmitted to the communication device 110-1 (step 12).
3) Perform a procedure for rejecting the connection (step 6). If they match, the owner of the communication device 110-1 determines that the information processing device 1
It is authenticated that the user is operating 00-1 (step 1).
5) Allow the service (step 16)
Things to do.

According to this method, neither the information user A nor the information provider C prepares a special device. In addition, the operation is simple and easy only by inputting the password sent to the communication device 110-1. In addition, since the password is sent to the communication device 110-1 which is physically occupied by the user A, only the communication device owner can know the password, and authentication of the communication device owner with a high security level is possible. It is. If you use a password that is only temporarily valid (for example, a password that is valid only for 15 minutes),
It is possible to further increase the security level.

[0018]

As described above, according to the present invention, a personal authentication method with a high security level can be provided by using a communication device.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram of a communication network system to which the present invention is applied.

FIG. 2 is an explanatory diagram of a flow of personal authentication processing of the present invention.

[Description of Signs] 100: Information processing device, 110: Communication device, 200: Internet network, 300: Public line network, 400: Communication circuit.

Claims (4)

[Claims] An authentication method between a first information processing device and a second information processing device, wherein the second information processing device communicates with a communication device associated with the first information processing device. In response to a connection request from the first or second information processing device, a password is generated in the second information processing device, and the password is transmitted from the second information processing device to the second information processing device. Transmitting a communication request to the communication device, and permitting a connection request to the first and second information processing devices in response to the transmission of the password to the first and second information processing devices. Method. 2. The information processing apparatus according to claim 1, wherein
The personal authentication method according to claim 1, wherein a request for connection to the first and second information processing devices is not permitted in response to a password other than the password generated by the information processing device. 3. A personal authentication device for controlling a connection request from an information processing device, comprising: means for holding a number for communicating with a communication device associated with the information processing device; In response to a connection request,
It has a means for generating a password and transmitting the password to the communication device, and a means for permitting a connection request from the information processing device in response to the transmission of the password from the information processing device. Authentication device. 4. The information processing apparatus according to claim 3, further comprising means for not permitting a connection request from the information processing apparatus in response to the transmission of the password other than the generated password from the information processing apparatus. Personal authentication device.