JP2002236670A - Providing method of security contents - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide securer contents and services by authenticating personal identification with high reliability, and avoiding stealing contents data by a third party. SOLUTION: This method includes at least, a phone number identifying step for identifying the phone number of an access user from an access user database when access user identification information with the phone number of the access user are matched, a cutoff request sending step for sending a cutoff request of a public circuit used to connect to the Internet 5 to the computer terminal 1 of the access user, a reconnecting step for reconnecting to the computer terminal of the access user by calling the phone number of the access user identified by the phone number identifying step through the public circuit net, and a contents delivering step for delivering the security contents after reconnecting work.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to providing relatively high security contents such as financial institution services and electronic commerce services to access users.
The present invention relates to a method for providing security content with excellent confidentiality, in which content data transmitted to and received from an access user is not stolen by a third party.

[0002]

2. Description of the Related Art In recent years, with the advancement of the functions of small personal computers, the number of computers possessing these personal computers at home or at work has rapidly increased, and these computers have been connected to the Internet, which is an open computer network. As a result, access users who have access to various sites on the Internet and are computer owners are receiving various services.

[0003] With the increase of the Internet population, financial institutions such as securities companies, banks and insurance companies accept the above-mentioned services as internet banking services which accept transfer requests on the Internet, and requests for stock transactions on the Internet. Various services such as online trading have been put to practical use.

[0004] In providing these services (contents) including electronic commerce including net banking services and online trading, cash transfer and transfer of highly confidential information are often accompanied, and access users are not authorized. It is necessary to confirm whether the user is an authorized user. In the current situation, a password such as a user identification code (ID) or a password issued to an authorized user who is an authorized user is accepted in advance and the access is used. Confirmation of the identity of the person.

[0005]

However, in personal identification based on a personal identification code such as a user identification code (ID) and a password, the user identification code (ID) and the password are plagiarized by a third party. In such a case, it becomes possible for a third party to impersonate a legitimate user, and the legitimate user or service provider suffers financial or confidential damage. In addition to the fact that these third parties cannot be identified and that there is a high risk that information transmitted to and from users will be stolen by third parties as they pass through the Internet, There was also a problem that high contents and services could not be provided.

[0006] Therefore, the present invention has been made in view of the above-mentioned problems, and it is possible to perform a more reliable identity verification, and to prevent theft of content data by a third party, thereby improving confidentiality. The present invention relates to a method for providing security contents that can provide highly secure contents and services.

[0007]

In order to solve the above-mentioned problems, a method for providing security contents according to the present invention uses an Internet network and a server computer connected to a public network to provide security to an access user. A security content providing method for providing content, wherein the server computer associates at least access user identification information capable of identifying an access user with a telephone number of the access user in a public line network. Has a registered user database,
An access user receiving step of receiving at least the access user identification information of the access user from the access user; and a matching step of checking whether the received access user identification information matches the registered content of the user database. A telephone number specifying step of specifying the telephone number of the access user from the user database when the collation matches, and using the computer terminal of the access user to connect to the Internet network. A disconnection request transmitting step of transmitting a disconnection request for the public line, and a call to the telephone number of the access user specified in the telephone number specifying step through the public line network to reconnect to the access terminal computer terminal. Reconnecting step and delivering security content after reconnecting Is characterized in that it comprises at least a content distribution step that, a. According to this feature, when the identity is confirmed by collation of the access user identification information or the like, the telephone number of the access user is called from the server side and directly connected to the access user through the public line network. Since security content is distributed after reconnection, more reliable identity verification can be performed, and theft of content data by a third party can be avoided. Service can be provided.

In the security content providing method according to the present invention, a collation key issuing step of issuing a collation key to an access user when the collation result in the collation step is coincident, and the collation key issued at the time of reconnection. It is preferable to obtain a key from a computer terminal of an access user and perform a collation key collation step of collating with the issued collation key, and to distribute the security content only when the collation with the collation key matches. . By doing so, by performing the collation using the collation key, it is possible to avoid the inconvenience of accidentally connecting to a different computer terminal during reconnection.

[0009]

Embodiments of the present invention will be described below with reference to the drawings. (Embodiment) First, FIG. 1 is a block diagram showing a connection state between a server computer 6 to which the security content providing method of the present embodiment is applied and a computer terminal 1 owned by an access user. FIG. 7 is a diagram showing a state of exchange between a server computer 6 and an access user's computer terminal 1.

As shown in FIG. 1, server computers 6 and 7 to which the security content providing method of the present embodiment is applied are installed in, for example, a system room of a bank as a security content provider. 6 and a server computer 7 are connected so as to be able to send and receive data, and the server computer 6 is a communication server for performing connection and session management with a user. The server computer 7 includes data of security contents and a service processing program. The communication server accommodates a large number of telephone lines, and is capable of transmitting and receiving data to and from various communication devices such as various modems, routers, and terminal adapters. When connected Moni, and it is connected to the Internet 5, an open computer network via a dedicated line.

A computer terminal 1 owned by an access user connects to an Internet provider (ISP) that provides a connection service to the Internet network 5 to a modem 2 that can be implemented via a public line network 3. The server computer 6 (communication server) can be accessed through the public line network 3, the ISP 4, and the Internet network. The computer terminal 1 has a browser that allows access to the server computers 6, 7. Software is incorporated.

A situation in which the access user receives the delivery of the security content using these computer terminals 1 will be described with reference to FIG. 2. First, the access user starts connection software on the computer terminal 1 and The connection to the ISP 4 is made through the modem 2.

After the connection to the ISP 4 is completed, the browser software is started and the URL address of the server computer 6 is input to access the server computer 6.

Based on the access, the server computer 6 transmits to the access user a screen for inputting a user ID, which is access user identification information, and a password, which is a password, and accepts the user ID and password. Do.

In the server computer 6 of the present embodiment, the user ID and password of the authorized user registered in advance and the telephone number of the telephone line to which the modem 2 of the user is connected correspond. A registered user database is stored and a comparison is made as to whether the user ID and password received from the access user match the registered contents of the user database. Sends a warning screen requesting that you not receive the content providing service and registering it as legitimate, and if the comparisons match,
The telephone number corresponding to the user ID that matches the comparison is specified.

Next, collation data, which is a collation key to be used for collation at the time of reconnection, is generated and transmitted to the computer terminal 1, and the telephone line connecting the computer terminal 1 and the ISP 4 is disconnected. Send instructions.

The collation keys used in this embodiment include:
Code data of a predetermined length is generated each time by a predetermined generation algorithm and becomes a different code for each generation. However, the present invention is not limited to this. For example, these code keys include bar codes and the like. May be a recording symbol or the like from which the above-mentioned code data can be read.

The computer terminal 1 that has received the collation data and the instruction to disconnect the telephone line temporarily stores the collation data, instructs the modem 2 to disconnect the line, and receives a call from the server computer 6. Move to the call waiting state.

After transmitting the instruction to disconnect the telephone line, the server computer 6 outputs a call instruction to the telephone number of the access user specified above to the multi-router 8 to transmit the call to the modem 2. A call is made.

Based on the reception of the call signal, the computer terminal 1 performs an incoming call to establish a connection with the server computer 6, and after the connection, transmits the verification key issued by the server computer 6 to the server computer 6. 6
Send to

The server computer 6 checks the matching key and confirms that the connected computer terminal 1 is indeed the same as the computer terminal 1 that has received the user ID and password. By transmitting and receiving the security content stored in the server computer 7 serving as the content server to the computer terminal 1, the security content is transmitted and received without passing through the Internet network 5. In addition, not only can the data of highly confidential security contents be stolen by third parties, but also the communication costs borne by the access users in providing these security contents can be reduced by the contents providers borne by them. .

Although the embodiments of the present invention have been described with reference to the drawings, the present invention is not limited to these embodiments, and even if there are changes and additions without departing from the gist of the present invention. include.

For example, in the above embodiment, the collation key is generated and the collation key is collated to confirm that the reconnection computer is the same, but the present invention is not limited to this. It is not necessary to use these matching keys as appropriate.

Further, in the above embodiment, two server computers 6, 7 are used, but the present invention is not limited to this, and these server computers may be one.

In the above embodiment, the modem 2 is used as a communication device for connecting the computer terminal 1 to the ISP 4. However, the present invention is not limited to this, and the communication device may be a terminal. An adapter, a router, a mobile phone or a PHS having a data communication function may be used, as long as it can be connected to the ISP 4 through a public line.

In the above embodiment, the user ID and the password are used as the access user identification information.
The present invention is not limited to this, and the access user identification information may be a user ID only, or a personal identification number may be an e-mail address of the user. Any form can be used as long as the identity can be confirmed.

In the above embodiment, the modem 2 automatically receives a call from the multi-router 8, but the present invention is not limited to this. If a call is made from a device other than the multi-router 8 in the call-waiting state from the multi-router 8, communication with the multi-router 8 becomes impossible. If it has a function such as a receivable call ID, the telephone number of the line connected to the multi-router 8 is registered in the modem 2 and only calls from the registered telephone number are received. You may do it. Further, the modem 2 may call back the registered multi-router 8 based on the reception of the call from the multi-router 8.

[0028]

The present invention has the following effects. (A) According to the first aspect of the invention, when the identity is confirmed by collation of the access user identification information and the like, the telephone number of the access user is called from the server side to communicate with the access user and the public. Since security content will be delivered after reconnecting directly through the network, more reliable identity verification can be performed,
In addition, it is possible to prevent a third party from stealing the content data, and it is possible to provide more confidential contents and services.

(B) According to the second aspect of the invention, by performing the collation using the collation key, it is possible to avoid the inconvenience of accidentally connecting to a different computer terminal in reconnection.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a connection state between a server computer 6 to which a security content providing method according to an embodiment of the present invention is applied and a computer terminal 1 owned by an access user.

FIG. 2 is a diagram showing a situation of an exchange between a server computer and a computer terminal of an access user in the embodiment of the present invention.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 Computer terminal 2 Modem 3 Public line network 4 Internet provider (ISP) 5 Internet network 6 Server computer (communication server) 7 Server computer (content server) 8 Multi-router

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06F 17/60 222 G06F 17/60 222 502 502 512 512 512

Claims (2)

[Claims] 1. A security content providing method for providing security content to an access user by using a server computer connected to an Internet network or a public line network, wherein the server computer has at least access usage. A user database in which access user identification information capable of identifying a user and a telephone number of the access user in the public network are registered and associated, and at least the access of the access user from the access user is provided. An access user accepting step for accepting user identification information; a collation step for collating whether the accepted access user identification information coincides with the registered content of the user database; Phone number specified from the user database A telephone number identifying step, a disconnection request transmitting step of transmitting a disconnection request of a public line used for connecting to the Internet network to a computer terminal of an access user, and the telephone number through the public line network. At least including a reconnection step of calling the telephone number of the access user specified in the specification step and reconnecting to the computer terminal of the access user, and a content distribution step of distributing security content after the reconnection A method for providing security content, comprising: 2. A collation key issuing step for issuing a collation key to an access user when the collation results in the collation step match each other, and using the issued collation key at the time of reconnecting to a computer terminal of the access user. 2. The security content providing method according to claim 1, wherein a collation key collating step of collating the collation key with the issued collation key, and distributing the security content only when the collation with the collation key matches. .