JP2002222170A - User authentication system, and method therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To conduct a user authentication with high reliability even for an Internet terminal of low level specification. SOLUTION: An authentication server 10 stores a table wherein the first identification information is made preliminarily to correspond to the second identification information. A key prepared optionally by the server 10 is received in a hand-held terminal 100. Irreversible change information of information including the key and the second identification information is computed thereafter to transmit information added to the irreversible change information with the key and the first identification information, as an authentication code. The second identification information is aquired in an authentication server 10 side based on the first identification information in the received authentication code, referring to the table. Then, irreversible change information of information including the second identification information and the key in the received authentication code is computed. The user is authenticated when the resulting irreversible change information is consistent with the irreversible change information in the received authentication code.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a user authentication system and method for an Internet terminal, and more particularly to a system suitable for user authentication of a low-spec Internet terminal.

[0002]

2. Description of the Related Art At present, standards and methods for a system for authenticating a user on the Internet have been developed, and such a system is used in various environments.

[0003]

However, the system which is said to be a standard among the currently used user authentication systems is suitable for client machines (personal computers, workstations, etc.) having high-performance computing capabilities. It uses the technique that has been adopted. As such a method, for example, SSL (Secure S
In this method, two layers of protocols are used, and data transmission and the like are performed in a lower layer, and negotiations such as authentication, digital signature, and encryption are performed in an upper layer. In such a method, not only the data distribution but also the negotiation phase is entered first, so that a complicated calculation for that is necessary.

Therefore, for an Internet terminal such as a mobile phone or a network-compatible wristwatch, which generally does not have sufficient computing capability, using the conventional user authentication system requires an execution time and the like. It was difficult from a point of view.

[0005] The present invention has been made in view of the above problems,
It is an object of the present invention to provide a user authentication system and a method thereof capable of performing highly reliable user authentication even for a low-spec Internet terminal that does not have sufficient computing power.

[0006]

Means for Solving the Problems and Effects of the Invention 1) A user authentication system of the present invention includes a user terminal, and an authentication device connected to the user terminal via a network. A user authentication system for authenticating a user of the user terminal based on key information and authentication information transmitted from the user terminal, wherein the user terminal accesses the authentication device and receives the key information Key information receiving means, identification information input means for inputting first identification information and second identification information for identifying a user of the user terminal, and information including the second identification information and the key information. By performing the information change, the information generated after this information change alone cannot reproduce the information before the information change even using the information change algorithm, Irreversible change information generating means for generating reversible change information, authentication information generating means for generating information including the key information, the first identification information, and the irreversible change information as the authentication information, Authentication information transmitting means for transmitting authentication information, the authentication device includes an identification information storage means for storing the first identification information and the second identification information in association with each other, and an access from the user terminal. Key information transmitting means for transmitting any of the key information every time, authentication information receiving means for receiving the authentication information, key information obtaining means for obtaining the key information included in the authentication information, Acquiring the second identification information by searching the identification information storage means based on the first identification information included in the information;
Identification information obtaining means, irreversible change information for confirmation by performing the information change on information including the second identification information obtained by the second identification information obtaining means and the key information obtained by the key information obtaining means Irreversible change information generating means for confirmation, and user authentication means for authenticating the user of the user terminal based on the irreversible change information of the authentication information and the irreversible change information for confirmation. .

[0007] Thus, the user terminal can be connected to the second terminal.
By performing the information change on the identification information, the information generated after the information change alone cannot reproduce the information before the information change using the information change algorithm. Information. Therefore, for example, even when the irreversible change information is illegally acquired by a third party when the authentication information transmitting unit of the user terminal transmits the authentication information, the second identification information is acquired. Since it is not reproduced, the user authentication system can perform user authentication safely and appropriately.

Further, the second identification information includes the arbitrary key information transmitted by the authentication device and is the irreversible change information. That is, even if the same second identification information is used, the user terminal generates different irreversible change information each time the user terminal accesses the authentication device to receive user authentication. Therefore, even if the irreversible change information is illegally acquired by a third party, the irreversible change information becomes invalid by another authentication, so that the reliability of the user authentication is ensured.

Further, the irreversible change information generating means of the user terminal and the irreversible change information generating means for confirmation of the authentication device are for performing a simple information change by a computer. Therefore, user authentication can be performed safely and appropriately even when a low-spec device having only a low computing capability is employed as the user terminal or the authentication device.

The second identification information acquisition means of the authentication device acquires the second identification information by searching the identification information storage means based on the first identification information included in the authentication information. . Therefore, the authentication device can quickly acquire the second identification information necessary for generating the irreversible change information for confirmation, and as a result, can quickly perform user authentication.

[0011] 8) The key information included in the authentication information of the user authentication system of the present invention is key part information which is a part of the key information, and the authentication device further includes the key information transmitting means. Key information to be transmitted, and key information storage means for storing the key information of the key information in association with the key information, the key information acquisition means, the key information included in the authentication information, The key information is obtained by searching the key information storage means based on the key information.

With this, for example, even if the key information transmitting means of the authentication device transmits the key information to the user terminal, even if the key information is illegally acquired by a third party, any rules may be applied. Since it is not specified whether a part of the key information is the key part information, it is difficult for a third party to specify the key part information. Then, the key information acquisition unit of the authentication device cannot acquire the key information if the key information is inappropriate, so that the user authentication is not performed. Therefore, the user authentication system can perform user authentication more safely and appropriately.

9) The authentication information generating means of the user terminal of the user authentication system of the present invention further encrypts the key information, the first identification information, and the irreversible change information. The authentication apparatus further comprises: generating information including the authentication information as the authentication information, wherein the authentication device further encrypts the first identification information included in the authentication information and the irreversible information. And a decryption means for decrypting the encrypted change information to obtain the first identification information and the irreversible change information.

Thus, the authentication information includes the key information, the information obtained by encrypting the first identification information, and the information obtained by encrypting the irreversible change information. Is transmitted by the use information transmitting means.
Therefore, for example, even when the authentication information is illegally acquired by a third party when transmitting the authentication information, the third party may specify the first identification information and the irreversible change information. Because of the difficulty, the user authentication system can perform user authentication more safely and appropriately.

[0015] 10) The irreversible change information generating means of the user authentication system of the present invention generates the irreversible change information by calculating a hash value for information including the second identification information and the key information. It is characterized by.

Thus, even if the hash value alone is used, the original information including the second identification information and the key information cannot be reproduced even if the user knows the algorithm for calculating the hash value. If the original information including the second identification information and the key information is different, there is little possibility that the same hash value is obtained. Therefore, even when the hash value is illegally acquired by a third party, the second identification information is not acquired or reproduced, so that the user authentication system performs user authentication safely and appropriately. Can be.

The definition of terms will be described.

In the present invention, the "information change" in the "irreversible change information generating means" means, in the embodiment, FIG.
A The calculation of the hash value performed by the CPU 102 in step S604 corresponds to this. This “information change” is a concept including a process in which the original information cannot be reproduced only with the information after the information change. The “information change” includes not only a hash function (one-way summarization function, message digest, etc.) but also data Is a concept that also includes a method of erasing a part of the data according to a predetermined rule.

In the embodiment, the “information including the key information, the encrypted first identification information, and the encrypted irreversible change information” is the authentication information in step S516 in FIG. Code corresponds to this. Note that the concept of “including the encrypted first identification information and the encrypted irreversible change information” refers to information combining the first identification information and the irreversible change information. And information obtained by encrypting the first identification information and information obtained by encrypting the irreversible change information.

[0020]

BEST MODE FOR CARRYING OUT THE INVENTION System Overview An embodiment of the present invention will be described with reference to the drawings. As shown in FIG. 1, a user authentication system for a portable information terminal as a user authentication system according to the present invention
00 and the authentication server 1
0, and a Web server 200. The authentication server 10 includes a session management database 12 and a user management database 14.

The portable information terminal 100 is for a user to connect to the Internet and receive a service. The Web server 200 provides services to users on the Internet. The authentication server 10 is configured such that the user of the portable information terminal 100
When user authentication is required when using the service 00 (for example, when billing occurs), user authentication processing is performed.

2. FIG. 2 is an example of a hardware configuration of the authentication server 10. The authentication server 10 includes a CPU 16, a hard disk 2
0, a memory 18, and a communication circuit 22 for connecting to the Internet 300. On the hard disk 20, a session management database 12, a user management database 14, and a user authentication program are recorded.

The hardware configuration of the Web server 200 is the same as that of FIG. 2, but a service providing web server program for providing a service is recorded on the hard disk.

FIG. 3 is an example of a hardware configuration of the portable information terminal 100. The portable information terminal 100 has a CPU 1
02, display 104, speaker 106, input unit 1
08, RAM110, ROM112, Internet 3
00 is provided with a communication circuit 114 for connection to the 00. C
The PU 102 controls the entire portable information terminal 100. R
The OM 112 stores a browser program for browsing the web in addition to a program for operating the CPU 102, audio data, image data, and the like that can be executed by the portable information terminal 100. RAM1
Reference numeral 10 provides an area for the CPU 102 to perform data processing. Operation information generated by operating the input unit 108 is input to the CPU 102, and image information and audio information generated by the CPU 102 are output to the display 104 and the speaker 106, respectively.

The correspondence between the terms described in the claims and the embodiments is as follows. The user terminal corresponds to the portable information terminal 100 in FIG. 1, and the authentication device corresponds to the authentication server 10 in FIG. The key information is stored in step S50 in FIG.
Corresponding to the key indicated by 6. The authentication information corresponds to the authentication code shown in step S608 of FIG. 6A.

The key information receiving means performs the processing in step S51 of FIG.
4 corresponds to the processing performed by the CPU 102. The first identification information corresponds to the first identification information input in step S603 in FIG. 6A, and the second identification information corresponds to the second identification information input in step S603. The identification information input means corresponds to the processing performed by the CPU 102 in step S603. The information change corresponds to a hash value calculation algorithm performed by the CPU 102 shown in step S604 in FIG. 6A, and the irreversible change information and the change information
04 corresponds to the hash value obtained, and the irreversible change information generating means corresponds to the processing performed by the CPU 102 in step S604. The authentication information generating means corresponds to the processing performed by the CPU 102 shown in step S608 of FIG. 6A, and the authentication information transmitting means corresponds to the CP shown in step S516 of FIG.
This corresponds to the processing performed by U102.

The identification information storage means corresponds to the user management database 14 illustrated in FIG. 4B recorded on the hard disk 20 of the authentication server 10. The key information transmitting means corresponds to the processing performed by the CPU 16 shown in step S512 in FIG. The authentication information receiving means performs step S5 in FIG.
18 corresponds to the processing performed by the CPU 16. The key information obtaining means is provided by the CPU 16 shown in step S654 of FIG. 6B.
Corresponds to the processing performed by The second identification information acquiring unit is configured as shown in FIG.
B corresponds to the processing performed by the CPU 16 in step S658. The irreversible change information for confirmation is obtained in step S66 in FIG. 6B.
The hash value obtained with 0 corresponds to the irreversible change information for confirmation generation means, which corresponds to the processing performed by the CPU 16 in step S660. The user authentication means corresponds to the processing performed by the CPU 16 shown in step S662 in FIG. 6B.

The key portion information corresponds to the first key portion obtained in step S508 in FIG. The key information storage means is a session management database 12 illustrated in FIG. 4A.
Corresponds. The decryption means performs step S656 in FIG. 6B.
Corresponds to the processing performed by the CPU 16.

3. Description of User Authentication Processing An outline of user authentication of the present system will be described with reference to FIG. In the present system, at the time of user authentication, a “key” arbitrarily created by the authentication server 10 and “first identification information” input by the portable information terminal 100 include:
"Second identification information" is used. The authentication server 10 previously records the first identification information and the second identification information in a database in association with each user registered in the system.

The authentication server 10 generates a key (symbol 1) and transmits it to the portable information terminal 100 (symbol 2). The portable information terminal 100 receives the key, calculates irreversible change information (the irreversible change information is a hash value) of information including the key and the second identification information (symbol 3), and performs the irreversible change. The information obtained by adding the key and the first identification information to the information is used as an authentication code as an authentication code.
(Symbol 4).

The authentication server 10 refers to the database based on the first identification information in the received authentication code,
The corresponding second identification information is obtained (symbol 5). Next, irreversible change information of information including the second identification information and the key in the received authentication code is calculated (symbol 6). Then, the obtained irreversible change information is compared with the irreversible change information in the received authentication code (symbol 7), and if they match, it means that the user of the portable information terminal 100 that first transmitted the authentication code Is a legitimate user having the second identification information corresponding to the registered first identification information, and thus the user authentication is completed.

As described above, in the present system, since the second identification information is irreversible change information in combination with an arbitrary key, the second identification information does not leak to a third party and can be sufficiently obtained by a simple user authentication process. Security can be ensured. Further, in the present system, as described below, in order to make it more difficult for a third party to obtain information illegally, an authentication code in which a part of a key is added instead of the whole key is created. The first identification information and the part of the irreversible change information are encrypted. The details of these processes will be described later.

Hereinafter, as an embodiment of the present invention, a user authentication process by the mobile information terminal user authentication system shown in FIG. 1 will be described. Here, the portable information terminal 100
An example in which a user receives user authentication by the authentication server 10 as a premise of receiving a charging process for the service of the Web server 200 will be described with reference to the flowcharts of FIGS.

The CPU 102 of the portable information terminal 100 performs an authentication code creation process, a transmission process, and the like according to the flowcharts of FIGS. 5 and 6A.
Performs key transmission, user authentication processing, and the like according to the flowcharts of FIGS. 5 and 6B.

The user management database 14 is recorded on the hard disk 20 of the authentication server 10 in advance. An example of the configuration of the user management database 14 is as follows:
As shown in FIG. 4B. The user management database 14 contains We
The information of the user of the portable information terminal 100 that has been registered to use the service of the server 200 is recorded, and the information includes first identification information, second identification information, name, address, and profile. And so on.

The CPU 102 of the portable information terminal 100
Assuming that the web server 200 is to be charged, the authentication server 10 is accessed (step S502 in FIG. 5).
The CPU 16 of the authentication server 10 determines whether or not there is access (step S504), and if there is access, creates a key (step S506). The key is a fixed-length random number symbol. The CPU 16 assigns the created key to
It is divided into a first key part and a second key part (step S5
08), record in the session management database 12
(Step S510). Session management database 1
An example of the structure 2 is shown in FIG. 4A. The key is divided into columns of the first key part and columns of the second key part and recorded, and the expiration date of each key is also recorded in the column. Note that C
The PU 16 refers to the session management database 12 in step S506 to create a key different from the already recorded key.

[0037] CPU 16 of authentication server 10 transmits the key to portable information terminal 100 (step S512). CPU 102 of portable information terminal 100 determines whether or not a key has been received (step S514). If the key has been received, authentication code creation processing (FIG. 6A) is performed. CPU
102 divides the received key into a first key part and a second key part (step 602 in FIG. 6A). The rules for dividing the key are the same as those in step S508 in FIG. CPU10
2 judges whether the first identification information and the second identification information have been input by the user's operation (step S6 in FIG. 6A).
03). When determining that the first identification information and the second identification information have been input, the CPU 102 calculates “irreversible change information on a symbol string combining the second identification information and the key” (step S604). The CPU 102 encrypts a symbol string obtained by combining the obtained irreversible change information and the first identification information (step S606). In the encryption, the original symbol string is randomized by a predetermined algorithm. The CPU 102 creates an authentication code by adding a first key portion to the encrypted irreversible change information and the first identification information (step S6).
08). As described in steps S604, 606, and 608 in FIG. 6A, the authentication code is configured by the first key portion and the portion obtained by encrypting the symbol string combining the first identification information and the irreversible change information. I have.

After performing the above-described authentication code creation processing, CPU 102 of portable information terminal 100 transmits the authentication code to authentication server 10 (step S516 in FIG. 5).
The CPU 16 of the authentication server 10 determines whether or not the authentication code has been received (step S518). If it is determined that the authentication code has been received, an authentication process (FIG. 6B) is performed.

The CPU 16 of the authentication server 10 recognizes the first key portion in the authentication code, and determines whether or not this first key portion is recorded in the session management database 12 illustrated in FIG. 4A (see FIG. 4A). 6B Step S65
2). When determining that the first key portion is not recorded in the session management database 12, the CPU 16 determines that the user authentication is "error" (Step S).
664). Here, the reason for judging the “error” is, for example, that the user may have forged a key illegally without accessing the authentication server 10 or that the key transmitted / received on the Internet 300 is illegal. The first key portion is recorded in the session management database 12 because the authentication code may have been obtained and forged without complying with the key division rule (see step S602 in FIG. 5) defined in the present system. Because that would not be the case.

When the CPU 16 determines that the first key portion is recorded in the session management database 12,
The entire key is acquired by acquiring the second key part corresponding to the first key part recorded in the session management database 12 (step S654). C
The PU 16 deletes the obtained key from the session management database 12 (Step S655). CPU16
Recognizes the encrypted part of the symbol string in which the first identification information and the irreversible change information are combined in the authentication code, and decrypts these parts (step S656). Thereby, the CP
U16 acquires the first identification information and “irreversible change information on the symbol string combining the second identification information and the key”.

The CPU 16 of the authentication server 10 acquires the second identification information corresponding to the first identification information recorded in the user management database 14 illustrated in FIG. 4B based on the acquired first identification information (step S1). S658).
The CPU 16 calculates irreversible change information for a symbol string obtained by combining the obtained second identification information with the key obtained in step S654 (step S660). The calculation of the irreversible change information here is performed in step S604 in FIG. 6A.
, The same ones as those performed by the CPU 102 of the portable information terminal 100 are used. CPU of authentication server 10
16 is the calculated “irreversible change information on the symbol string combining the second identification information and the key” and the step S in FIG.
“Irreversible change information about the symbol string combining the second identification information and the key” in the authentication code received at 518;
To determine whether they match (FIG. 6B).
Step S662). If the CPU 16 determines that they do not match, it determines that the user authentication is "error".
(Step S664). Here, the reason for judging “error” is that, for example, the user determines in step S603 in FIG. 6A.
4B, the user has entered something different from the regular second identification information recorded in the user management database 14 of FIG. 4B, or the user is a person who has illegally acquired the first identification information of another person. This is because the input of the second identification information different from the regular second identification information means that the irreversible change information does not match.

If the CPU 16 of the authentication server 10 determines that both the irreversible change information match, it determines that the user authentication is "authentication completed".

After performing the above-described user authentication processing, the CPU 16 determines whether "authentication completed" or "error" (step S520 in FIG. 5). The CPU 16 transmits error information to the portable information terminal 100 if the error is "error" (step S522), and transmits the authentication permission information if "authentication is completed" (step S524). With the above processing, the user authentication processing ends.

Thereafter, the user of the portable information terminal 100 whose user has been authenticated receives a billing process for the service of the Web server 200.

4. Effects of the present system In the user authentication system for portable information terminals, the CPU 102 of the portable information terminal 100 calculates irreversible change information for the second identification information (see step S604 in FIG. 6A). Accordingly, the second identification information is not obtained or reproduced by the irreversible change information alone even if the calculation algorithm of the irreversible change information is known. That is, for example, when the CPU 102 transmits the authentication code (see step S516 in FIG. 5), even if the third party illegally acquires the irreversible change information, the second identification information is not acquired or reproduced. . Therefore, according to the present system, the authentication system can perform user authentication safely and appropriately.

The second identification information is transmitted to the authentication server 1
An arbitrary key transmitted by the CPU 16 of 0 (see step S506 in FIG. 5) is included in the irreversible change information. That is, even when the same second identification information is used, the CPU 102 of the portable information terminal 100 generates different irreversible change information every time the user accesses the terminal to receive user authentication. Therefore, even if the irreversible change information is illegally acquired by a third party, the irreversible change information becomes invalid by another user authentication, so that the reliability of the user authentication is ensured.

The calculation of the irreversible change information performed by the CPU 102 of the portable information terminal 100 and the CPU 16 of the authentication server 10 is performed by a simple calculation by a computer (see AS604 and S660 in FIG. 6). Therefore, user authentication can be performed safely and appropriately even when a low-spec device having only a low computing capability is employed as the portable information terminal 100 or the authentication server 10.

In particular, the present system is suitable for a black box-like device having a lower specification than a personal computer or the like, since it is not necessary to perform heavy processing on the user terminal side. In such a device, since the possibility that the encryption module leaks out is not high, the logic of the authentication code creation processing is rarely known.
In any case, since the second identification information is the irreversible change information in the user authentication processing by the present system, even if the logic of the authentication code creation processing shown in FIG. Unless even the eavesdropping is performed, unauthorized user authentication due to spoofing or the like will not be performed. Therefore, sufficient security can be ensured only by mounting a simple encryption module on the user terminal.

The CPU 16 of the authentication server 10 acquires the second identification information by searching the user management database 14 based on the first identification information included in the authentication code (FIG. 6B, step S658). Therefore, CPU1
6 can quickly acquire the second identification information required for the calculation of the irreversible change information in step S660 of FIG. 6B, and thus can quickly perform user authentication.

CPU 102 of portable information terminal 100 transmits the first key portion instead of the entire key as part of the authentication code (see AS608 in FIG. 6). Thereby, for example, when the CPU 16 of the authentication server 10 transmits the key to the portable information terminal 100 (see step S512 in FIG. 5), even if the key is illegally acquired by a third party, the key is Since it is not specified whether a part is used as the first key part, it is difficult for a third party to specify the first key part. If the received first key part is not in the session management database 12, the CPU 16 of the authentication server 10 determines that the user authentication is “error”.
(See steps S652 and S664 in FIG. 6B). Therefore, in this system, user authentication can be performed more safely and appropriately.

The authentication code includes a first key portion and a portion obtained by encrypting a symbol string in which the first identification information and the irreversible change information are combined.
2 (see step S608 in FIG. 6A). Therefore, for example, even when the authentication code is illegally acquired by a third party when the CPU 102 transmits the authentication code, it is difficult for the third party to specify the first identification information and the calculated irreversible change information. It is. Therefore, in this system, user authentication can be performed more safely and appropriately.

5. Other Embodiments In step S502 of FIG.
Although the U102 accesses the authentication server 10 directly, the invention is not limited to this. As another embodiment, the link information of the authentication server 10 is posted on the homepage of the web server 200, or
The web server 200 may forcibly access the authentication server 10 by redirection.

In step S506 of FIG. 5, in the present embodiment, the CPU 16
, A key different from the already recorded key is created, but the key is not limited to this. As another embodiment, a key obtained by automatically numbering and adding an identification ID to a generated random number may be used as a key.

In step S508 in FIG. 5, in the present embodiment, the rule for dividing the key is fixed, but the invention is not limited to this. As another embodiment, the rule of key division may be changed. In this case, the authentication server 10 and the portable information terminal 10
It is necessary to match the rule of such a rule variation between 0 and 0.

Further, instead of the process of dividing the key, a process of creating two or more keys may be used. In this case, the relationship between the roles of two or more keys (a key used as irreversible change information, a key added to an authentication code, and the like) is recorded in the session management database 12, and in step S604 in FIG. CPU 102
Is different from the key used as the irreversible change information and the key added to the authentication code. Then, the CPU 16 of the authentication server 10 may acquire the key used as the irreversible change information by referring to the session management database 12 based on the key added to the authentication code.

As described above, the division of the key makes it difficult for a third party to identify the key and the first key portion, and also reduces the data amount of the authentication code to reduce the amount of the authentication code. There is an advantage that the processing of the CPU 102 is lightened, but such a key division processing may be omitted. In this case, in step S608 of FIG.
The entire key is added to the authentication code, and the CPU 16 of the authentication server 10 acquires the key without searching the session management database 12 in step S654 of FIG. 6B.

In step S603 of FIG. 6A, in the present embodiment, the CPU 102 sets the first
Although it is determined whether or not the identification information and the second identification information are input, the present invention is not limited to this. In another embodiment, the CPU 102 is a portable information terminal 1
00, the machine ID of the portable information terminal 100 itself is automatically transmitted, or the machine ID recorded in the memory of the portable information terminal 100 or an external memory card can be used without requiring the user to perform an input operation. The first identification information or the second identification information, or both, may be automatically transmitted.

In step S604 of FIG. 6A, in the present embodiment, irreversible change information is calculated for a symbol string obtained by combining a key with the second identification information. The algorithm for calculating this irreversible change information is MD2, MD4,
The calculation may be performed using a hash function such as MD5, an irreversible one-way function other than the hash function, or a method of changing the original information into information that cannot reproduce the original information.

Also, in step S604, CP
U102 is “a symbol string obtained by adding a key to the second identification information”
Irreversible change information is calculated, but the present invention is not limited to this. As another embodiment, the “irreversible change information” may be calculated after “the symbol string of the second identification information and the symbol string of the key” are combined according to a predetermined rule. In this case, the authentication server 10
The CPU 16 of FIG. 6B also calculates the irreversible change information of the "symbol string combining the second identification information and the key" according to the same rule in step S660 of FIG. 6B.

In the encryption in step S606 in FIG. 6A, in the present embodiment, the original symbol string is made to be a random number by a predetermined algorithm. However, the present invention is not limited to this, and another encryption algorithm is adopted. May be.
In any case, in the present embodiment, since the second identification information is irreversible change information, there is almost no possibility that the second identification information is eavesdropped by a third party. Therefore,
As the encryption algorithm here, an algorithm having a very high security function such as an RSA encryption system or an elliptic curve encryption used in a public key encryption system can be adopted, but such an encryption algorithm as in a general portable information terminal can be used. Considering that a low-spec CPU does not cause heavy processing, a simple encryption algorithm that can be solved without a key is preferable.

Also, in step S606, the CP
Although U102 does not encrypt the first key portion, the present invention is not limited to this, and the first key portion may also be encrypted.

In step S662 of FIG. 6B, in this embodiment, the CPU 16 compares “irreversible change information on the symbol string combining the second identification information and the key” with
It is determined whether or not both match, but the present invention is not limited to this. In other embodiments,
The CPU 16 transmits the “second
When comparing the “irreversible change information about the symbol string combining the identification information and the key” with the “irreversible change information about the symbol string combining the second identification information and the key” calculated by the authentication server 10, The coincidence between the two may be determined based on a predetermined rule.

In the present embodiment, information used for user authentication is input from the portable information terminal 100 side.
Although the first identification information and the second identification information are used, the present invention is not limited to this. In another embodiment, three or more pieces of information may be input. In this case, such information is recorded in the user management database 14 of the authentication server 10 in advance. In addition, only one of the first identification information and the second identification information may be used. In this case, only the second identification information is recorded in the user management database 14 of the authentication server 10 as information for specifying the user. Then, the CPU 16 of the authentication server 10
In the authentication processing of B, the obtained key is added to all the second identification information recorded in advance in the user management database 14 to calculate irreversible change information on a brute force basis without performing the processing of step S658. Then, if any of the irreversible change information matches the irreversible change information in the received authentication code, the user authentication may be determined to be “authentication completed”.

Further, the key information may not be added to the authentication information transmitted from the user terminal. In this case, when the key information is transmitted from the authentication device, the key information may be stored in association with the first identification information of the user terminal that is the transmission destination. Thus, the authentication device side
Key information can be obtained based on the first identification information in the received authentication information.

In the portable information terminal user authentication system of the present embodiment, an example is shown in which the portable information terminal 100 is used as the user terminal, but the present invention is not limited to this.
In another embodiment, the user terminal is, for example, EZ
Web (registered trademark), J-SKY Web (registered trademark),
It is a low-spec Internet terminal such as a mobile phone equipped with a browser such as i-mode (registered trademark), a portable game machine, a PDA, an Internet home appliance, an Internet-compatible watch, a fixed telephone, etc. equipped with a browser and a modem. You may. Further, when user authentication is required for TV shopping or the like, the present system can be used between the digital TV and the authentication server. In this case, the key may be transmitted by broadcast radio waves or the like, and the authentication code on the digital TV side may be transmitted on the Internet.

In this embodiment, the portable information terminal 10
The information input by the operation of the user 0 is “first identification information” and “second identification information”, respectively.
As the first identification information, for example, a user ID that is unique information (unique information), and as the second identification information, a user I
What is necessary is just to employ | adopt a password etc. for confirming D as legitimate. The information created on the authentication server 10 side is referred to as a “key”, and those obtained by dividing the information are referred to as a “first key portion” and a “second key portion”. For this information, for the sake of convenience in the actual operation of the system, the "one-time key" and each of the divided
Symbol names such as “key ID” and “body part” may be adopted.

In this embodiment, a program for operating the CPU 16 and a user authentication program for the CPU 16 are stored in the hard disk 20 and the ROM 112, respectively. -Read from ROM and install on hard disk or the like. Also, CD-ROM
In addition, floppy disk (FD), I
A program such as a C card may be installed from a computer-readable recording medium. Further, the program can be downloaded using a communication line. Also, by installing a program from a CD-ROM, the program stored in the CD-ROM is not indirectly executed by a computer, but the program stored in the CD-ROM is directly executed. You may do so.

The programs that can be executed by the computer include those that can be directly executed by simply installing the program as well as those that need to be converted into another form (for example, those that have been compressed). , Decompress, etc.), and also include those executable in combination with other module parts.

[Brief description of the drawings]

FIG. 1 is a diagram showing a device configuration of a user authentication system for a portable information terminal.

FIG. 2 is a diagram illustrating an example of a hardware configuration of an authentication server.

FIG. 3 is a diagram illustrating an example of a hardware configuration of the portable information terminal 100.

FIG. 4A is a diagram illustrating an example of a configuration of a session management database 12; FIG. 4B is a diagram illustrating an example of the configuration of the user management database 14.

FIG. 5 is a flowchart of a user authentication process.

FIG. 6A is a diagram illustrating a CPU 102 of the portable information terminal 100;
6 is a flowchart of an authentication code creation process according to the first embodiment.
FIG. 6B is a flowchart of the authentication process by the CPU 16 of the authentication server 10.

FIG. 7 is a diagram illustrating an outline of a user authentication process.

[Explanation of symbols]

 100 Mobile information terminal 200 Web server 10 Authentication server 12 Session management database 14 User management database 300 Internet

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Yuichiro Ito 11-1 Kamibahakodatemachi, Minami-ku, Kyoto-shi, Kyoto Nintendo Co., Ltd. (72) Inventor Terui Akio 11 Kamikabakomachi-cho, Minami-ku, Kyoto-shi, Kyoto Address 1 Inside Nintendo Co., Ltd. (72) Inventor Hiroshi Oki 1166-6, Haseno, Jabizo-cho, Yokaichi, Shiga Prefecture Inside Shiga Plant, Kyocera Communication Systems Co., Ltd. 6 Kyocera Communication System Co., Ltd. Shiga Plant F-term (reference) 5B085 AE02 AE23 AE29 BG07 5J104 AA07 KA01 KA06 MA01 NA12 PA07 PA11

Claims (13)

[Claims] 1. An authentication device, comprising: a user terminal; and an authentication device connected to the user terminal via a network, wherein the authentication device performs the authentication based on key information and authentication information transmitted from the user terminal. A user authentication system that authenticates a user of a user terminal, wherein the user terminal accesses the authentication device and receives the key information, and a first key information receiving unit that identifies the user of the user terminal. Identification information input means for inputting identification information and second identification information, by performing information change on information including the second identification information and the key information, the information generated alone after the information change Irreversible change information generating means for generating irreversible change information, wherein the information before the information change cannot be reproduced even if the information change algorithm is used, An authentication information generating unit that generates information including the first identification information and the irreversible change information as the authentication information; and an authentication information transmitting unit that transmits the authentication information. The authentication device, an identification information storage unit that stores the first identification information and the second identification information in association with each other, a key information transmission unit that transmits any key information each time there is access from the user terminal, Authentication information receiving means for receiving the authentication information; key information obtaining means for obtaining the key information included in the authentication information; storing the identification information based on the first identification information included in the authentication information A second identification information acquisition unit that acquires the second identification information by searching for a unit, a second identification information acquired by the second identification information acquisition unit, and a second identification information acquired by the key information acquisition unit. Confirmation irreversible change information generating means for generating confirmation irreversible change information by performing the information change on the information including the key information and the irreversible change information of the authentication information and the irreversible change information for confirmation. User authentication means for authenticating a user of the user terminal based on the following. 2. A user terminal for performing user authentication based on key information and authentication information, wherein the key information receiving means receives the key information, and identifies a user of the user terminal. Information input means for inputting the first identification information and the second identification information for changing the information including the second identification information and the key information. Irreversible change information generating means for generating irreversible change information that cannot reproduce the information before the information change even if the information change algorithm is used by using the information change algorithm, the key information, the first identification information, Authentication information generating means for generating information including irreversible change information as the authentication information; and authentication information transmitting means for transmitting the authentication information. The terminal. 3. An authentication device for performing authentication of a user of a user terminal based on key information and authentication information, wherein the authentication information is used to identify the key information and a user of the user terminal. By performing information change on the first identification information, information including the second identification information for identifying the user of the user terminal and the key information,
The information generated alone after the information change cannot reproduce the information before the information change even if the information change algorithm is used, and the information includes irreversible change information. Identification information storage means for storing the first identification information and the second identification information in association with each other; key information transmission means for transmitting any key information each time there is access from the user terminal; Authentication information receiving means for receiving, key information obtaining means for obtaining the key information included in the authentication information, searching the identification information storage means based on the first identification information included in the authentication information A second identification information acquisition unit that acquires the second identification information by: a second identification information acquired by the second identification information acquisition unit;
The irreversible change information generation unit for confirmation, which performs the information change on the information including the key information acquired by the key information acquisition unit and generates irreversible change information for confirmation, An authentication device for authenticating the user of the user terminal based on the irreversible change information for confirmation. 4. A recording medium recording a program for causing a user terminal to be authenticated based on key information and authentication information to function a user terminal, wherein the recording medium is the user terminal. The following, key information receiving means for receiving the key information, identification information input means for inputting first identification information and second identification information for identifying the user of the user terminal, the second identification information and the By performing the information change on the information including the key information, the information generated before the information change alone cannot reproduce the information before the information change by using the information change algorithm. Irreversible change information generating means for generating information, authentication for generating information including the key information, the first identification information, and the irreversible change information as the authentication information. Information generating means, said recording medium recording a program for functioning as a user terminal provided with an authentication information transmission means for transmitting the authentication information. 5. A recording medium recording a program for causing an authentication device that authenticates a user of a user terminal to function based on key information and authentication information, wherein the authentication information includes the key information and the authentication information. By performing information change on information including the first identification information for identifying the user of the user terminal and the second identification information for identifying the user of the user terminal and the key information,
The information generated alone after the information change cannot reproduce the information before the information change even if the information change algorithm is used, and irreversible change information. Key information transmitting means for transmitting any key information each time the authentication device is accessed from the user terminal; authentication information receiving means for receiving the authentication information; Key information acquiring means for acquiring the key information; and second acquiring the second identification information stored in advance in association with the first identification information based on the first identification information included in the authentication information. Identification information obtaining means for performing the information change on information including the second identification information obtained by the second identification information obtaining means and the key information obtained by the key information obtaining means; Confirmation irreversible change information generating means for generating confirmation irreversible change information, user authentication means for authenticating a user of the user terminal based on the irreversible change information of the authentication information and the irreversible change information for confirmation. A recording medium on which a program for functioning as an authentication device provided is recorded. 6. A program for causing a user terminal to be authenticated based on key information and authentication information to function, wherein the program includes the following key: Key information receiving means for receiving information; identification information input means for inputting first identification information and second identification information for identifying a user of the user terminal; including the second identification information and the key information By performing an information change on the information, the information generated before the information change alone cannot reproduce the information before the information change using the information change algorithm, and the irreversible change generates the irreversible change information. Information generation means, authentication information generation means for generating information including the key information, the first identification information, and the irreversible change information as the authentication information, Program for functioning as a user terminal provided with an authentication information transmission means for transmitting the serial information for authentication. 7. A program for causing an authentication device to authenticate a user of a user terminal based on key information and authentication information, the authentication information comprising: the key information; By performing information change on first identification information for identifying a user, second identification information for identifying a user of the user terminal, and information including the key information,
The information generated alone after the information change is irreversible change information that cannot reproduce the information before the information change even if the information change algorithm is used by using the information change algorithm. Key information transmitting means for transmitting any key information each time the authentication device is accessed from the user terminal, authentication information receiving means for receiving the authentication information, Key information acquiring means for acquiring key information; second identification for acquiring the second identification information stored in advance in association with the first identification information based on the first identification information included in the authentication information Information acquisition means, the information change is performed on information including the second identification information acquired by the second identification information acquisition means and the key information acquired by the key information acquisition means. Irreversible change information generating means for confirmation to generate irreversible change information for confirmation by the user authentication means for authenticating the user of the user terminal based on the irreversible change information of the authentication information and the irreversible change information for confirmation, A program for functioning as an authentication device provided with. 8. The key device according to claim 1, wherein the key information included in the authentication information is key portion information that is a part of the key information. Key information storage means for storing the key information transmitted by the information transmission means and the key part information of the key information in association with each other, wherein the key information acquisition means comprises the key included in the authentication information. The key information is obtained by searching the key information storage means based on partial information. 9. The authentication information generating means of the user terminal according to claim 1, further comprising: the key information, the encrypted first identification information, and the irreversible change information. And generating information including the encrypted information as the authentication information, wherein the authentication device further encrypts the first identification information included in the authentication information. And decryption means for decrypting the encrypted irreversible change information to obtain the first identification information and the irreversible change information. 10. The irreversible change information generating unit according to claim 1, wherein the irreversible change information generating means calculates a hash value for information including the second identification information and the key information, thereby obtaining the irreversible change information. Characterized by generating. 11. A user authentication method for authenticating a user of a user terminal using an authentication device connected via a network, wherein the first identification information and the second identification for identifying the user of the user terminal are provided. The authentication device distributes key information to the user terminal, and the user terminal responds to the information including the second identification information and the key information. By performing information change, change information is generated, and the authentication device obtains, from the user terminal, authentication information including the key information, the first identification information, and the change information, (2) Confirmation change information is generated by performing the information change on the information including the identification information and the key information, and based on the change information of the authentication information and the confirmation change information, You A user authentication method, which authenticates a user. 12. A user authentication method for authenticating a user using an authentication device and a user terminal communicably connected to each other, wherein user identification information for identifying a user of the user terminal is previously stored in the authentication device. The user terminal performs irreversible information change on the user identification information obtained on the user terminal side by using the key information obtained from the authentication device through communication, and obtains the irreversible change information. Is transmitted to the authentication device by communication, and the authentication device makes the same irreversible information change as performed by the user terminal using the key information with respect to the user identification information stored in advance, and changes the confirmation change information. And authenticating the user of the user terminal based on the transmitted irreversible change information and the irreversible information for confirmation. 13. An information exchange method for exchanging information for user authentication between a user terminal and an authentication device, wherein each time the user terminal makes an access, different key information is substantially changed every time. Transmits the key information and the irreversible change information obtained by irreversibly changing the information including the identification information for identifying the user to the authentication device. An information exchange method for user authentication, characterized in that: