JP2002229952A - User authentication system and user authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a user authentication system that is highly safe in getting access to a Web service site. SOLUTION: This system has a Web service site that produces a user ID and a password based on the telephone number transmitted from a terminal device, relates them and register them with an authentication information database, and a WWW server that receives the telephone call using caller ID service to acquire the telephone number of a calling source, and, if the telephone number has been registered with the authentication information database, adds the valid period of the information corresponding to the telephone number to the entry of the telephone number of the authentication information database. The Web service site, when a log in request arrives from the terminal device, if the log in request arrives during the valid period and the information designated by the log in request has been registered with the authentication information database, permits the access.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a user authentication system in a Web service site.

[0002]

2. Description of the Related Art In a conventional Web service site, a user is authenticated by comparing a user ID and a password registered in advance by a user with a user ID and a password input at the time of login.

[0003]

However, this conventional authentication system has a problem in that security cannot be prevented without preventing login by a third party who has obtained a user ID and a password by some method.

[0004] It is an object of the present invention to provide a more secure user authentication system for accessing a Web service site.

[0005]

A first user authentication system according to the present invention generates a user ID and a password based on a telephone number transmitted from a terminal device, and registers them in an authentication information database in association with each other. Receives a call using a Web service site and a calling telephone number display service to obtain a telephone number of a caller, and, if the telephone number is registered in the authentication information database, corresponds to the telephone number. A WWW server for adding an expiration date of the information to the entry of the telephone number in the authentication information database, wherein when the web service site receives a login request from the terminal device, the login request is set to the expiration date. And the information specified in the login request is registered in the authentication information database. And permits the process.

A second user authentication system according to the present invention transmits a telephone number transmitted from a terminal device to an authentication server, generates a user ID and a password based on the telephone number, and associates them with authentication information. A Web service site to be registered in the database and a call using the calling telephone number display service are received, the telephone number of the caller is obtained and transmitted to the authentication server, and the telephone number is registered in the authentication information database. And a WWW server that, if registered, adds an expiration date of the information corresponding to the telephone number to an entry of the telephone number in the authentication information database. When a login request arrives from the device, the login request arrives within the expiration date, and the login request arrives. Information specified in the request and permits access if it is determined that the authentication server and is registered in the authentication information database.

A third user authentication system according to the present invention generates a user ID based on a telephone number transmitted from a terminal device, associates the user IDs with each other, and registers the user ID in an authentication information database; A WWW server that receives a call using a display service and obtains the telephone number of the caller, wherein the Web service site stores the user ID transmitted from the terminal device and the W
It is determined whether the telephone number obtained by the WW server is registered in the authentication information database in association with the telephone number, and if registered, a password is generated, and an entry of the user ID and the telephone number in the authentication information database is made. And the WWW server receives the call using the outgoing telephone number display service, acquires the telephone number of the caller, and if the telephone number is registered in the authentication information database, The expiration date of the information corresponding to the number is added to the entry of the telephone number in the authentication information database, and when the web service site receives a login request from the terminal device, the login request falls within the expiration date. When the information arrives and the information specified in the login request is registered in the authentication information database, And permits the process.

A fourth user authentication system according to the present invention transmits a telephone number transmitted from a terminal device to an authentication server, generates a user ID based on the telephone number, associates the user IDs with each other, and stores them in an authentication information database. Web to be registered
A service site, and a WWW server that receives a call using the outgoing telephone number display service and obtains the telephone number of the caller, wherein the Web service site stores the user ID transmitted from the terminal device and the WWW The telephone number obtained by the server is transmitted to the authentication server to determine whether or not they are registered and registered in the authentication information database, and if registered, a password is generated. The user I
D and a telephone number entry, the WWW server receives the call using the outgoing telephone number display service, obtains the telephone number of the caller, and transmits the telephone number to the authentication server. It is determined whether the information is registered in the information database. If the information is registered, the expiration date of the information corresponding to the telephone number is added to the entry of the telephone number in the authentication information database.
b service site, when a login request arrives from the terminal device, the login request arrives within the expiration date, and if the information specified in the login request is registered in the authentication information database, When the authentication server determines, the access is permitted.

[0009] The first user authentication method of the present invention is based on the Web
The service site generates a user ID and a password based on the telephone number transmitted from the terminal device, associates them with each other and registers them in the authentication information database, and the WWW server receives a call using the outgoing telephone number display service. To obtain the telephone number of the caller, and when the telephone number is registered in the authentication information database, the expiration date of the information corresponding to the telephone number is added to the entry of the telephone number in the authentication information database. In addition, when the Web service site receives a login request from the terminal device, the login request arrives within the validity period, and information specified in the login request is registered in the authentication information database. Access is permitted when the user is in the service.

[0010] A second user authentication method according to the present invention comprises a Web
The service site transmits the telephone number transmitted from the terminal device to the authentication server, and based on the telephone number,
D and a password are generated, and they are associated with each other and registered in the authentication information database. The WWW server receives the call using the outgoing telephone number display service, obtains the telephone number of the caller, and transmits the telephone number to the authentication server. Then, it is determined whether the telephone number is registered in the authentication information database, and if registered, the expiration date of the information corresponding to the telephone number is added to the entry of the telephone number in the authentication information database, When the Web service site receives a login request from the terminal device, the login request arrives within the expiration date, and the information specified in the login request is registered in the authentication information database. When the authentication server determines, the access is permitted.

[0011] A third user authentication method according to the present invention comprises a Web
The service site generates a user ID based on the telephone number transmitted from the terminal device, registers the user ID in the authentication information database in association with the user ID, and the WWW server receives the call using the outgoing telephone number display service. The telephone number of the caller is acquired, and the Web service site determines whether the user ID transmitted from the terminal device is associated with the telephone number acquired by the WWW server and registered in the authentication information database. , Generate a password if registered, add it to the user ID and phone number entry in the authentication information database,
The WWW server receives the call using the outgoing telephone number display service and acquires the telephone number of the caller. If the telephone number is registered in the authentication information database, the WWW server corresponds to the telephone number. Adding the expiration date of the information to the entry of the telephone number in the authentication information database, and when the web service site receives a login request from the terminal device, the login request arrives within the expiration date; and The access is permitted when the information specified in the login request is registered in the authentication information database.

[0012] A fourth user authentication method according to the present invention is a Web authentication method.
The service site transmits the telephone number transmitted from the terminal device to the authentication server, and based on the telephone number,
D, and associates them with each other and registers them in the authentication information database. The WWW server receives the call using the outgoing telephone number display service, acquires the telephone number of the caller, and the Web service site The user ID transmitted from the terminal device and the telephone number obtained by the WWW server are transmitted to the authentication server, and it is determined whether they are associated and registered in the authentication information database. Will generate a password,
The WWW server receives the call using the outgoing telephone number display service, acquires the telephone number of the caller, and transmits the telephone number to the authentication server. Determining whether the telephone number is registered in the authentication information database, and if the telephone number is registered, the expiration date of the information corresponding to the telephone number is added to the entry of the telephone number in the authentication information database; When a Web service site receives a login request from the terminal device, the login request arrives within the expiration date, and information specified in the login request is registered in the authentication information database. When the authentication server determines, the access is permitted.

[0013]

Embodiments of the present invention will be described below in detail with reference to the drawings.

First, a first embodiment of the present invention will be described.

Referring to FIG. 1, a first embodiment of the present invention relates to a personal computer, a PDA, a mobile phone, a PHS, a fixed telephone, etc., capable of accessing various Web service sites and transmitting and receiving e-mail. A terminal device 10, a web server 20, a web service site 21 opened on the web server, a mobile phone,
A telephone 30 that can use a calling telephone number display service such as an HS or a fixed telephone is connected to a network 100 including the Internet, a mobile communication network, and a telephone network.

Further, an authentication server 40 may be added to the configuration as described later.

Also, the terminal device 10 can access various Web service sites, send and receive e-mails, and can also be used as a telephone 30 such as a portable telephone, a PHS, or a fixed telephone that can use a calling telephone number display service. Good.

Further, the Web server 20 may be provided with a voice response function so that a response can be made at the time of access from the terminal device 10 or the telephone 30 to improve convenience.

Hereinafter, the first embodiment of the present invention will be described with reference to FIGS.
The operation of the embodiment will be described in detail.

First, the user registration process will be described.

The terminal device 10 connects to the Web service site 21 on the Web server 20 via the network 100 according to the URL input by the user (step A1).

The Web service site 21 is a terminal device 1
When connection is made from 0, the service menu screen shown in FIG. 2 is transmitted to the terminal device 10 via the network 100 and displayed (step A2).

The terminal device 10 is a Web service site 2
1 is displayed (step A3), and in response to the user pressing a user registration button set in the service menu screen,
A user registration request message is transmitted to the Web service site 21 via the network 100 (Step A)
4).

The Web service site 21 is a terminal device 1
When the user registration request message transmitted from the network 100 is received, the user registration screen shown in FIG.
Is transmitted to and displayed on the terminal device 10 (step A5).

The terminal device 10 is a Web service site 2
The user registration screen transmitted from 1 is displayed (step A6), and the user is provided with the user information including the name, address, telephone 30 number information (the telephone 30 number information is required) on the user registration screen. The user information is transmitted to the Web service site 21 via the network 100 in response to the user pressing the transmission button in the user registration screen (step A7).

The Web service site 21 is a terminal device 1
A user ID and a password unique to the own site are generated for the user information transmitted from 0 by an arbitrary method such as random number generation, and the telephone 30 included in the user information is stored in the authentication information database 22 shown in FIG. (Step A8), and transmits the registered user ID and password to the terminal device 10 via the network 100 (Step A9).

In the processing of steps A8 to A9, the Web service site 21 transmits the user information transmitted from the terminal device 10 to the authentication server 40, and transmits the user ID and the password unique to the authentication server 40. It is generated by an arbitrary method such as random number generation and stored in the authentication information database 22 shown in FIG.
The information may be registered in association with the number information of 0, and the registered user ID and password may be transmitted to the terminal device 10 via the network 100.

Next, the user authentication process will be described.

The terminal device 10 connects to the Web service site 21 on the Web server 20 via the network 100 according to the URL entered by the user (step A10).

The Web service site 21 is a terminal device 1
When the connection is made from 0, the service menu screen shown in FIG. 2 is transmitted to the terminal device 10 via the network 100 and displayed (step A11).

The terminal device 10 is a Web service site 2
1 is displayed (step A12), and in response to the user pressing a login button set in the service menu screen,
A login request message is transmitted to the Web service site 21 via the network 100 (Step A1)
3).

The Web service site 21 is a terminal device 1
When the login request message transmitted from 0 is received, the login screen shown in FIG. 2 is transmitted to terminal device 10 via network 100 and displayed (step A).
14).

The terminal device 10 is a Web service site 2
The login screen transmitted from 1 is displayed (step A15). The log-in screen shows, for example, "Confirm the telephone number registered by the customer.
Please call ******** with * and enter the specified data on this login screen within n minutes after you hang up the phone and log in. ", A message is displayed to allow the user to make a call to the WWW server 20 using the calling telephone number display service. As described above, in the case where the telephone 30 also serves as the terminal device 10, ************** with 186 prefixed to the telephone number in the login screen (WWW server 20) A call button for sending a telephone number of (a telephone number) can be set and the user can press it.

When the user makes a call 30 using the calling telephone number display service, the WWW server 20
It is determined whether the number information of the telephone 30 is registered in the authentication information database 22 (step A16). If it is determined that the telephone 30 is registered, the entry of the number information of the telephone 30 is stored in the entry of the number information of the telephone 30 for a predetermined time from that point ( The expiration date is set up to the elapse of time, which may be fixed in the system or may be changed for each number information, and a response is made that the number information of the telephone 30 has been normally confirmed (step A17). If the WWW server 20 determines that the telephone 30 has not been registered in step A16, it responds that the telephone number information of the telephone 30 could not be confirmed.

For the processing of steps A16 to A17, the WWW server 20 transmits the telephone number information of the telephone 30 to the authentication server 40 to make the authentication information database 22 determine whether the telephone number information is registered. When it is determined that the telephone number is registered, the entry of the number information of the telephone 30 is set to set an expiration date from the time to a predetermined time (may be fixed in the system or changed for each number information). It may be. If the authentication server 40 determines that the number information of the telephone 30 is registered in the authentication information database 22, the WWW server 20
Responds to the telephone 30 that the number information has been normally confirmed, and when it is determined that the number information has not been registered, responds that the number information of the telephone 30 could not be confirmed.

Further, the processing of steps A16 to A17 may be configured so that the WWW server 20 does not receive the telephone 30 but receives another server (not shown).

When the user presses the login button in the login screen, the terminal device 10 transmits the telephone number information, user ID, and password input by the user to the login screen via the network 100. Send to Web service site 21 (step A
18).

The Web service site 21 is a terminal device 1
When the number information, the user ID, and the password of the telephone 30 transmitted from 0 are received, it is determined whether the number information (and / or the user ID and the password) of the telephone 30 is registered in the authentication information database 22 (step A1).
9) If it is determined that the transmission has been registered, it is determined whether the transmission has arrived before the expiration date (step A20). The user is permitted to access the service menu (step A21). If it is determined in step A19 that the user has not been registered, and if it is determined in step A20 that the user has not arrived within the expiration date, the user is not permitted to access various service menus in the service menu screen. Either of the determination processes in step A19 and step A20 may be performed first.

For the processing in steps A19 to A21, the Web service site 21 transmits the telephone number information, the user ID, and the password to the authentication server 40 and stores the telephone number information (and the telephone number 30) in the authentication information database 22. And / or user ID and password) may be registered. If it is determined that the transmission has been registered, it may be determined whether the transmission has arrived within the expiration date. In this case, the Web service site 21
If the authentication server 40 determines that the transmission has arrived before the expiration date, the authentication server 40 permits the user to access various service menus in the service menu screen, and the authentication server 40 When it is determined that the transmission is not registered in the authentication information database 22, and when it is determined that the transmission has not arrived within the expiration date, the user is not permitted to access various service menus in the service menu screen.

Thus, the operation of the first embodiment of the present invention is completed.

According to the first embodiment of the present invention, We
b. In the user authentication for access to the service site, in addition to the user ID and password registered in advance, the user's telephone number is confirmed using the outgoing telephone number display service. Since it is possible to reliably authenticate that the user who is trying to access is a pre-registered user, it is possible to provide a user authentication system with higher security than a conventional user authentication system. In addition, since the user can log in to the Web service site only for a predetermined time after making a call, a more secure user authentication system can be provided.

Next, a second embodiment of the present invention will be described. The configuration of the present embodiment is the same as the configuration of the first embodiment.

Hereinafter, the second embodiment of the present invention will be described with reference to FIGS.
The operation of the embodiment will be described in detail.

First, the user registration process will be described.

The terminal device 10 connects to the Web service site 21 on the Web server 20 via the network 100 according to the URL entered by the user (step B1).

The Web service site 21 is a terminal device 1
When connection is made from 0, the service menu screen shown in FIG. 5 is transmitted to the terminal device 10 via the network 100 and displayed (step B2).

The terminal device 10 is connected to the Web service site 2
The service menu screen transmitted from 1 is displayed (step B3), and when the user presses a user registration button set in the service menu screen,
A user registration request message is transmitted to the Web service site 21 via the network 100 (Step B)
4).

[0048] The Web service site 21
When the user registration request message transmitted from the network 100 is received, the user registration screen shown in FIG.
Is transmitted to and displayed on the terminal device 10 (step B5).

The terminal device 10 is connected to the Web service site 2
The user registration screen transmitted from 1 is displayed (step B6), and the user is provided with the user information including the name, address, and telephone 30 number information (the telephone 30 number information is required) on the user registration screen. The user information is transmitted to the Web service site 21 via the network 100 in response to the user pressing the transmission button in the user registration screen (step B7).

The Web service site 21 is a terminal device 1
A user ID unique to the own site is generated for the user information transmitted from 0 by an arbitrary method such as random number generation, and the number information of the telephone 30 included in the user information is stored in the authentication information database 22 shown in FIG. (Step B8), and transmits the registered user ID to the terminal device 10 via the network 100 (step B9).

For the processing in steps B8 and B9, the Web service site 21 transmits the user information transmitted from the terminal device 10 to the authentication server 40 and generates a user ID unique in the authentication server 40 into a random number. 3 is registered in the authentication information database 22 shown in FIG. 3 in association with the telephone number information included in the user information, and the registered user ID is transmitted to the terminal device 10 via the network 100. You may make it transmit.

Next, the password acquisition processing will be described.

The terminal device 10 connects to the Web service site 21 on the Web server 20 via the network 100 according to the URL entered by the user (step B10).

The Web service site 21 is a terminal device 1
When connection is made from 0, the service menu screen shown in FIG. 5 is transmitted to the terminal device 10 via the network 100 and displayed (step B11).

The terminal device 10 is connected to the Web service site 2
1 is displayed (step B12), and in response to the user pressing a password acquisition button set in the service menu screen, a password acquisition request message is sent to the network 1.
Then, the data is transmitted to the Web service site 21 via the “00” (step B13).

The Web service site 21 is a terminal device 1
When the password acquisition request message transmitted from 0 is received, the password acquisition screen shown in FIG. 5 is transmitted to the terminal device 10 via the network 100 and displayed (step B14).

The terminal device 10 is a Web service site 2
The password acquisition screen transmitted from 1 is displayed to allow the user to input the user ID obtained in step B9 (step B15), and to make the telephone 30 call the WWW server 20 using the calling telephone number display service ( Step B16).

At step B16, the user enters the telephone 3
When 0 is applied, the transmission button in the password acquisition screen is pressed on the terminal device 10, and the user ID is transmitted to the Web service site 21 via the network 100 (step B17). As described above, the telephone 3
In the case where 0 is also used as the terminal device 10, * 186 with 186 added to the head of the telephone number in the password acquisition screen
A transmission button for transmitting a telephone number **** (the telephone number of the WWW server 20) may be set so that the user can press it.

[0059] The Web service site 21 is a terminal device 1
It is determined whether the user ID transmitted from 0 and the telephone number information acquired by the WWW server 20 are registered in the authentication information database 22 shown in FIG. 3 (step B1).
8) If it is determined that the password has been registered, a password unique to the site is generated by an arbitrary method such as generation of a random number or the like, and the authentication information database 22 is associated with the user ID and the telephone number information. (Step B19), and register the registered password in the network 1.
00 to the terminal device 10 (step B2).
0). If the Web service site 21 determines that the password has not been registered in step B18, it responds to the terminal device 10 that the password acquisition has failed.

Note that the Web service site 21 transmits the user ID transmitted from the terminal device 10 and the number information of the telephone 30 acquired by the WWW server 20 to the authentication server 40 for the processing of steps B18 to B20. The authentication server 40 generates a unique password by an arbitrary method such as generation of a random number, and registers the password in the authentication information database 22 shown in FIG. 3 in association with the user ID and the number information of the telephone 30. You may make it transmit to the terminal device 10 via 100.

Further, the processing of steps B18 to B20 may be configured such that the WWW server 20 does not receive the telephone 30 but receives it by another server.

Hereinafter, the user authentication processing is the same as the operation in steps A10 to A21 in the first embodiment, and therefore the description is omitted.

As described above, the processing according to the second embodiment of the present invention is completed.

According to the second embodiment of the present invention, the telephone number of the user is confirmed using the outgoing telephone number display service, and the user trying to access the Web service site is a registered user himself / herself. By generating and providing a password only when it is confirmed that there is a password, it is possible to provide a more secure user authentication system as compared with the first embodiment.

[0065]

As described above, according to the present invention, the Web
With respect to access to the service site, there is an effect that a highly secure user authentication system can be provided.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of first and second embodiments of the present invention.

FIG. 2 is a diagram illustrating an example of a service menu screen, a user registration screen, and a login screen according to the first embodiment of the present invention.

FIG. 3 is a diagram showing contents of an authentication information database according to the first and second embodiments of the present invention.

FIG. 4 is a flowchart showing an operation of the first exemplary embodiment of the present invention.

FIG. 5 is a diagram showing an example of a service menu screen, a user registration screen, and a password acquisition screen according to the second embodiment of the present invention.

FIG. 6 is a flowchart showing an operation of the second exemplary embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Terminal device 20 WWW server 21 Web service site 22 Authentication information database 30 Telephone 40 Authentication server 100 Network

Claims (8)

[Claims] 1. A Web service site for generating a user ID and a password based on a telephone number transmitted from a terminal device, associating them with each other and registering them in an authentication information database, and a call using an outgoing telephone number display service. Receives and obtains the telephone number of the caller, and if the telephone number is registered in the authentication information database, sets the expiration date of the information corresponding to the telephone number to the entry of the telephone number in the authentication information database. A WWW server to be added to
When the Web service site receives a login request from the terminal device, the login request arrives within the validity period, and information specified in the login request is registered in the authentication information database. A user authentication system characterized in that access is permitted when the user is in the office. 2. A Web service site for transmitting a telephone number transmitted from a terminal device to an authentication server to generate a user ID and a password based on the telephone number, and registering them in an authentication information database in association with each other; When a call using the outgoing telephone number display service is received, the telephone number of the caller is obtained and transmitted to the authentication server, and it is determined whether the telephone number is registered in the authentication information database. A WWW server for adding an expiration date of information corresponding to the telephone number to an entry of the telephone number in the authentication information database;
When the Web service site receives a login request from the terminal device, the login request arrives within the validity period, and information specified in the login request is registered in the authentication information database. A user authentication system, wherein the access is permitted when the authentication server determines that the authentication is performed. 3. A Web service site for generating a user ID based on a telephone number transmitted from a terminal device, associating the user ID with the user ID and registering the user ID in an authentication information database, and receiving a call using an outgoing telephone number display service. A WWW server that obtains the telephone number of the caller by using the authentication information database, wherein the Web service site associates the user ID transmitted from the terminal device with the telephone number obtained by the WWW server. It is determined whether the user ID is registered, and if registered, a password is generated, and the user ID of the authentication information database is determined.
And when the WWW server receives the call using the outgoing telephone number display service and obtains the telephone number of the caller, and the telephone number is registered in the authentication information database. The expiration date of the information corresponding to the telephone number is added to the entry of the telephone number in the authentication information database. When the Web service site receives a login request from the terminal device, the login request is A user authentication system, wherein access is permitted when the information arrives within the validity period and information specified in the login request is registered in the authentication information database. 4. A Web service site for transmitting a telephone number transmitted from a terminal device to an authentication server, generating a user ID based on the telephone number, and registering the user ID in an authentication information database, A WWW server that receives a call using a number display service and obtains a telephone number of a caller, wherein the Web service site has a user ID transmitted from the terminal device and a telephone number obtained by the WWW server. To the authentication server to determine whether they are associated and registered in the authentication information database. If registered, a password is generated, and the user ID and the telephone number of the authentication information database. The WWW server receives a call using the outgoing telephone number display service. To obtain the telephone number of the caller, transmit the telephone number to the authentication server, and determine whether or not the telephone number is registered in the authentication information database. An expiration date is added to the entry of the telephone number in the authentication information database. When the Web service site receives a login request from the terminal device, the login request arrives within the expiration date, and the login A user authentication system, wherein an access is permitted when the authentication server determines that the information specified in the request is registered in the authentication information database. 5. A web service site generates a user ID and a password based on a telephone number transmitted from a terminal device, associates them with each other, and registers them in an authentication information database. Receiving the call using the phone number and obtaining the telephone number of the caller, and when the telephone number is registered in the authentication information database, the expiration date of the information corresponding to the telephone number is set in the authentication information database. In addition to the telephone number entry, when the Web service site receives a login request from the terminal device, the login request arrives within the expiration date, and information specified in the login request is A user authentication method characterized by permitting access when registered in an authentication information database. 6. A Web service site transmits a telephone number transmitted from a terminal device to an authentication server, generates a user ID and a password based on the telephone number, and registers them in an authentication information database in association with each other. The WWW server receives a call using the outgoing telephone number display service, obtains the telephone number of the caller, transmits the telephone number to the authentication server, and determines whether the telephone number is registered in the authentication information database; If it is registered, the expiration date of the information corresponding to the telephone number is added to the entry of the telephone number in the authentication information database. When the Web service site receives a login request from the terminal device, The login request arrives within the validity period, and the information specified in the login request is the authentication information data. User authentication method and permits access if the authentication server is determined to be registered in over scan. 7. A Web service site generates a user ID based on a telephone number transmitted from a terminal device, registers the user ID in an authentication information database in association with the user ID, and a WWW server uses a calling telephone number display service. Receiving the telephone call obtained from the terminal device, and acquiring the telephone number of the caller. The Web service site associates the user ID transmitted from the terminal device with the telephone number acquired by the WWW server and stores the telephone number in the authentication information database. It is determined whether or not the user ID is registered. If the password is registered, a password is generated.
And when the WWW server receives the call using the outgoing telephone number display service and obtains the telephone number of the caller, and the telephone number is registered in the authentication information database. In the authentication information database, the expiration date of the information corresponding to the telephone number is added to the entry of the telephone number. When the Web service site receives a login request from the terminal device, the login request is A user authentication method, wherein access is permitted when the information arrives within the validity period and information specified in the login request is registered in the authentication information database. 8. A Web service site transmits a telephone number transmitted from a terminal device to an authentication server, generates a user ID based on the telephone number, associates the user ID with the user ID, and registers the user ID in an authentication information database. A server receives a call using the outgoing telephone number display service and obtains a telephone number of a caller, and the Web service site stores a user ID transmitted from the terminal device and a telephone number obtained by the WWW server. To the authentication server to determine whether they are associated with each other and registered in the authentication information database. If registered, a password is generated, and the user ID and the telephone number of the authentication information database. The WWW server receives a call using the outgoing telephone number display service and The telephone number of the caller is acquired and transmitted to the authentication server, and it is determined whether the telephone number is registered in the authentication information database. If the telephone number is registered, the expiration date of the information corresponding to the telephone number is set. When the Web service site receives a login request from the terminal device, the login request arrives within the expiration date and is specified in the login request. A user authentication method, wherein the access is permitted when the authentication server determines that the obtained information is registered in the authentication information database.