JP2003030146A - Network system with terminal authenticating function, and terminal authenticating method and authentication control program used for the same system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a network system with a terminal authenticating function which can perform authentication with high security through easy operation. SOLUTION: A user calls a contents provider 90 through a user terminal 80. The contents provider 90 recognizes the telephone number E of the mobile terminal 80 which has made the call and confirms that the mobile terminal 80 is registered as a member by performing retrieval from a database 94, and then send mail K including a password for allowing access to the telephone number E. The mobile terminal 80 accesses a Web server 98 by using a URL with a one-time password, so a user who is not allowed to access the Web server 98 is unable to access the server and the security can be made high.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network system having a terminal authentication function, a terminal authentication method and an authentication control program used in the system, and particularly to a terminal suitable for use when high security is required. The present invention relates to a network system having an authentication function, a terminal authentication method and an authentication control program used in the system.

[0002]

2. Description of the Related Art A user terminal such as a mobile phone is connected to a LAN.
When connecting to a content provider via a (local area network) or the Internet, in the conventional terminal authentication method, when a call signal including a telephone number is output from the user terminal, this telephone number is used as the user ID.
The connection is permitted when the user ID matches the one registered in advance.

A network system used for this type of terminal authentication method is conventionally composed of a mobile terminal 10, a communication carrier 20, and a content provider 30, as shown in FIG. The mobile terminal 10
For example, it is a user terminal such as a mobile phone and generates a calling signal A including a telephone number based on a user operation. The communication carrier 20 has a conversion server 21 that converts the telephone number included in the calling signal A into the user ID information B, and transmits the content C provided by the content provider 30 to the mobile terminal 10. The content provider 30 has a content server 31 and has a user ID
The mobile terminal 10 is authenticated by inputting the information B and comparing it with the ID registered in advance, and the content C is output after this authentication.

In this network system, a calling signal A is output from the mobile terminal 10, and the telephone number included in the calling signal A is converted into user ID information B by the conversion server 21. The user ID information B is the content server 3
1 is compared with the ID registered in advance and registered, and when they match, the connection of the mobile terminal 10 is permitted. After that, the content C requested by the mobile terminal 10 is transmitted to the mobile terminal 10 via the communication carrier 20.

However, when the user ID information B is obtained by a third party by some method, there is a problem that the third person can impersonate the user and easily connect the mobile terminal 10 to the content provider 30.

In order to solve this problem, for example, the terminal authentication system described in the document; Japanese Patent Laid-Open No. 2001-45562 has been proposed. FIG. 6 is a configuration diagram of the terminal authentication system described in the above document. As shown in the figure, this terminal authentication system includes a mobile phone 41, a fixed phone 42, and a facsimile (hereinafter referred to as “FAX”) 43.
, A pager 44, a personal computer 45,
Mobile phone communication network 46, public line network 47, radio calling network 48, Internet 49, public line network connection unit 50
The database 60, the mail server 71, the password issuing unit 72, the password management unit 73, the network 74, and the authentication system unit 75.

In this terminal authentication system, the user U
The password issuing unit 72 is requested to issue and transmit a password using the mobile phone 41 or the fixed phone 42. The telephone used when the user U requests the issuance of the password is called a password issuance request terminal. The terminal that can be used as the password issuance request terminal has a telephone number, and in addition to the mobile phone 41, the fixed phone 42, a PHS (Personal Handy phone Syste
m) terminals, telephones attached to FAX, personal digital assistants with PD function (Personal Digital Assistants, PDs)
A), and a personal computer to which a modem and a terminal adapter are connected.

On the other hand, when the user U receives the password from the password issuing unit 72, the password is received as voice information via the mobile telephone 41 or the fixed telephone 42, and the mobile telephone 41 or the fixed telephone 42 has an image display unit. If
It may be displayed as text information on the image display unit and received.
Also, the password is the facsimile device 43, pager 4
4. The personal computer 45 can also receive the data. The terminal used by the user U to receive the password is called a password receiving terminal. The password is sent from the password issuing unit 72 to the authentication system unit 75 and is stored therein. The user U inputs the password received by the password receiving terminal into the authentication system unit 75 via the mobile phone 41 or the fixed phone 42 (password issuance request terminal). And the authentication system section 75
Then, the password received by the user U from the password issuing unit 72 is compared with the password received by the authentication system unit 75 from the password issuing unit 72, and finally authentication is performed.

[0009]

However, the terminal authentication system shown in FIG. 6 has the following problems. That is, the user U uses the mobile phone 41, the fixed phone 42, the FAX 43, the pager 44, the personal computer 45, etc.
You can obtain the password in the form of voice, image, etc., but if the password issuance request terminal and the password receiving terminal are different, in the process of entering the received password into the password issuance request terminal, password leakage, etc.
A security problem occurs. Further, even if the password issuance request terminal and the password reception terminal are the same, it is necessary to re-enter the password, which is not convenient for the user.

The present invention has been made in view of the above circumstances, and is a network system having a terminal authentication function that enables a user operation to be performed easily and has high security, a terminal authentication method and authentication used in the system. It is intended to provide a control program.

[0011]

In order to solve the above-mentioned problems, the invention according to claim 1 relates to a terminal authentication method, and in a network system comprising a user terminal and a content provider, the user terminal is A call signal including the first network address of the terminal itself is generated and transmitted to the content provider, and an email is received from the content provider to access the content provider using the password included in the email. Then, the content provider receives the call signal, extracts the first network address included in the call signal, and obtains the second network address of the contracting user and the first network address. When the user terminal is authenticated by comparing the above, a password is generated and registered. URL containing the password along with the
When a mail describing (Uniform Resource Locator) is transmitted to the user terminal by using the first network address and the access request information including the URL is received from the user terminal, the password included in the URL Is compared with the registered password, and when they match, the user terminal is allowed to access and the predetermined content is supplied.

The present invention according to claim 2 relates to a terminal authentication method, wherein in a network system including a user terminal and a content provider, the user terminal transmits a call signal including a first network address of the terminal itself. Generate and send to the content provider, receive an email from the content provider and access the content provider using the password included in the email, and the content provider receives the call signal. The response processing for extracting the first network address included in the call signal and the second network address of the contracting user and the first network address are compared to authenticate the user terminal. At this time, a password generation instruction signal and a mail transmission instruction signal are generated. Indicating the URL including the password based on the mail transmission instruction signal, and using the first network address. When the mail transmission process for transmitting to the user terminal and the password generated in the password generation process are registered and the access request information including the URL is received from the user terminal, the password included in the URL Is compared with the registered password, and when they match, an access permission process of permitting access to the user terminal and supplying a predetermined content is performed.

The present invention according to claim 3 relates to a terminal authentication method, wherein in a network system comprising a user terminal and a content provider, the user terminal transmits a call signal including a first network address of the terminal itself. Generate and send to the content provider, receive an email from the content provider and access the content provider using the password included in the email, and the content provider receives the call signal. When the first network address included in the call signal is extracted and the second network address of the contracting user is compared with the first network address to authenticate the user terminal, a password is input. Generated and registered, and described URL including the password Information is transmitted to the user terminal by using the first network address and access request information including the URL is received from the user terminal, the password included in the URL is registered in the password. When compared, the terminal code unique to the user terminal is transmitted when they match, the terminal code and the terminal code transmitted from the user terminal are compared, and when they match, the user code is transmitted to the user terminal. It is characterized in that access is permitted and predetermined contents are supplied.

The invention according to claim 4 relates to a terminal authentication method, wherein in a network system comprising a user terminal and a content provider, the user terminal sends a call signal including a first network address of the terminal itself. Generate and send to the content provider, receive an email from the content provider and access the content provider using the password included in the email, and the content provider receives the call signal. The response processing for extracting the first network address included in the call signal and the second network address of the contracting user and the first network address are compared to authenticate the user terminal. At this time, a password generation instruction signal and a mail transmission instruction signal are generated. Indicating the URL including the password based on the mail transmission instruction signal, and using the first network address. The mail transmission process for transmitting to the user terminal, the terminal code generation process for generating a unique terminal code for each user terminal, the password generated by the password generation process is registered, and the URL is transmitted from the user terminal. When the access request information including the password is received, the password included in the URL is compared with the registered password, and when they match, the corresponding terminal code is transmitted to the user terminal, The code is compared with the terminal code transmitted from the user terminal, and when they match, the user code is compared. Allow access to The terminal is characterized by performing the access permission process for supplying a predetermined content.

The invention as claimed in claim 5 is as follows.
Or according to the terminal authentication method described in 4, the password is
It is characterized by a one-time password.

The invention according to claim 6 is the invention according to claims 1, 2 and
According to the terminal authentication method described in 3, 4, or 5, the first network address is a telephone number of the user terminal.

The invention according to claim 7 relates to a network system comprising a user terminal and a content provider and having a terminal authentication function, wherein the user terminal transmits a call signal including a first network address of the terminal itself. It is configured to generate and send to the content provider, to receive an email from the content provider, and to access the content provider using a password included in the email. Is received, the first network address included in the call signal is extracted, and the user terminal is authenticated by comparing the second network address of the contracting user with the first network address. At this time, generate a password, register it, and enter the URL containing the password. When the above-mentioned mail is transmitted to the user terminal using the first network address and the access request information including the URL is received from the user terminal, the password included in the URL is registered. The password is compared with the password, and when the passwords match, the access is granted to the user terminal and the predetermined content is supplied.

The invention according to claim 8 relates to the network system according to claim 7, wherein the content provider receives the call signal and extracts the first network address included in the call signal. Password generation when the user terminal is authenticated by comparing the first network address and the second network address with a response device and a database holding in advance the second network address of the contracting user An access point server that generates an instruction signal and a mail transmission instruction signal, a password generation device that generates a password based on the password generation instruction signal, and a mail that describes a URL including the password based on the mail transmission instruction signal. To the user terminal using the first network address When the access request information including the URL is received from the user terminal while registering the trusted mail server and the password generated by the password generation device, the password included in the URL is registered. It is characterized by being configured with a content server which compares the password with the existing password and permits access to the user terminal and supplies predetermined content when the passwords match.

The invention according to claim 9 relates to a network system having a user terminal and a content provider and having a terminal authentication function, wherein the user terminal transmits a call signal including a first network address of the own terminal. It is configured to generate and send to the content provider, to receive an email from the content provider, and to access the content provider using a password included in the email. Is received, the first network address included in the call signal is extracted, and the user terminal is authenticated by comparing the second network address of the contracting user with the first network address. At this time, generate a password, register it, and enter the URL containing the password. When the above-mentioned mail is transmitted to the user terminal using the first network address and the access request information including the URL is received from the user terminal, the password included in the URL is registered. Compared with the password, when matching, transmits a terminal code unique to the user terminal, and compares the terminal code and the terminal code transmitted from the user terminal,
When they match, it is configured to permit access to the user terminal and supply predetermined content.

The invention according to claim 10 relates to the network system according to claim 9, wherein the content provider receives the calling signal and extracts the first network address included in the calling signal. A response device,
When the user terminal is authenticated by comparing the database holding the second network address of the contracted user in advance with the first network address and the second network address, a password generation instruction signal and mail An access point server that generates a transmission instruction signal, a password generation device that generates a password based on the password generation instruction signal, and a mail that describes a URL including the password based on the mail transmission instruction signal. A mail server that transmits to the user terminal using a network address, a terminal code generation device that generates a unique terminal code for each user terminal, the password generated by the password generation device, and the user Access request including the URL from the terminal When the information is received, the password included in the URL is compared with the registered password, and when they match, the corresponding terminal code is transmitted to the user terminal. The terminal code transmitted from the terminal is compared with each other, and when they match each other, the content server is configured to allow access to the user terminal and supply a predetermined content.

The invention described in claim 11 is,
The network system according to 9 or 10 is characterized in that the password is a one-time password.

The invention described in claim 12 is,
In connection with the network system according to 9, 10 or 11,
The first network address is a telephone number of the user terminal.

The invention according to claim 13 relates to an authentication control program, wherein the computer is set forth in claim 7, 8, 9, 10,
It is characterized by realizing the function of the network system described in 11 or 12.

[0024]

DETAILED DESCRIPTION OF THE INVENTION The present invention will now be described with reference to the drawings.
The embodiment will be described.First embodiment FIG. 1 is a terminal authentication method according to a first embodiment of the present invention.
To show the configuration of the network system for implementing
It is a lock figure. This form of network system
As shown in the figure, a mobile terminal (that is, a user terminal)
80 and a content provider 90
It The mobile terminal 80 is composed of, for example, a mobile phone.
The telephone number of the terminal (that is, the first network
A calling signal D including a
Send to Ida 90, and if the same content provider
Received e-mail K and the password included in the e-mail K
To access the same content provider 90 using
U

The content provider 90 is, for example, an information processing apparatus installed in a content supply company or the like, and a central processing unit (hereinafter referred to as “CPU”) 91 and a CPU for controlling the entire content provider 90.
A recording medium on which an authentication control program for operating 91 is recorded (for example, a read only memory, hereinafter,
It has a (ROM) 92. Further, the content provider 90 includes a telephone response device (that is, a response device) 93, a database 94, an access point server (hereinafter referred to as “AP server”) 95, a password generation device 96, a mail server 97, and a Web. A server (that is, a content server) 98. The telephone response device 93 receives the calling signal D via the mobile telephone network NW and extracts the telephone number E included in the calling signal D,
The connection state with the mobile phone network NW is cut off.

The database 94 holds in advance the telephone number (that is, the second network address) F of the contracting user. When the AP server 95 authenticates the mobile terminal 80 by comparing the telephone number E and the telephone number F, it generates a password generation instruction signal G and a mail transmission instruction signal J. The password generation device 96 generates the password H based on the password generation instruction signal G. The password H is a one-time password that can access the Web server 98 only once. Mail server 9
7 is the password H based on the mail transmission instruction signal J.
A mail K describing a URL including is sent to the mobile terminal 80 using the telephone number E. The URL described in this email K is, for example, http: // Web server address / index.htm? Passwd = xxxxxx
It is represented by xx. The part of the password “xxxxxxxx” is the password H generated by the password generation device 96.

The Web server 98 registers the password H, and when the access request information N including the URL is received from the mobile terminal 80, the password H included in the URL is registered in the Web server 98. Compare with the password, and if they match, the mobile terminal 8
0 is granted access and the content M requested by the mobile terminal 80 is supplied. If the URL does not include the password, the Web server 98
If the included password is used once, or if the included password is incorrect, the mobile terminal 80 is not permitted to access. further,
The web server 98 receives the URL from the mobile terminal 80 and transmits the web screen data designated by the URL to the mobile terminal 80. Also, the Web server 98
The web screen data is generated in a form in which the password H generated by the password generation device 96 is added to all the URLs of the link destinations in the web screen data.

When the mobile terminal 80 accesses the Web server 98 with limited users, it makes a call by notifying the telephone number and receives a URL with a password for permitting access to the Web server 98, Email address using phone number (for example,
Receive the email addressed to “090xxxxxxxx@xxxxxx.ne.jp”),
Web server 9 with the specified URL with the same password
8 access.

2 and 3 are flow charts for explaining the operation of the network system of FIG. The processing contents of the terminal authentication method of this embodiment will be described with reference to FIGS. 2 and 3. A call is made from the mobile terminal 80 to the telephone response device 93 based on a user operation (step A1). The telephone answering device 93 automatically answers the incoming call (step A2, response processing), and receives the telephone number E notified at the time of the incoming call (step A2).
3) The mobile telephone network NW is cut off (step A4). The telephone response device 93 notifies the telephone number E to the AP server 95 (step A5). The AP server 95 accesses the database 94 and searches for the user of the mobile terminal 80 (step A6). Next, the AP server 95 compares the telephone number E obtained from the telephone response device 93 with the information in the database 94 (that is, the telephone number F) (step A).
7). As a result of the comparison, if the telephone number E of the mobile terminal 80 does not match the telephone number F of the user registered in the database 94 in advance (NG), the process ends.

On the other hand, the mobile terminal 80 that has called
If it is confirmed that the telephone number E is registered (OK), the AP server 95 determines that the password generation device 96
The password generation instruction signal G is sent to (instruction signal generation processing). The password generation device 96 generates a password H (one-time password) that is valid for use only once (step A8, password generation processing), and sends the data of the password H to the AP server 95 and the Web server 98. To do. The AP server 95 receives the data of the password H and sends a mail transmission instruction signal J to the mail server 97 (step A9). At this time, from the AP server 95 to the mail server 97, a telephone number to be the destination of the mail, a password described in the text of the mail, We
The URL for accessing the b server 98 is notified.

The mail server 97 receives the mail transmission instruction signal J, assembles a mail based on the information of the telephone number, password, and URL received from the AP server 95, and sets the URL and password to the destination whose telephone number is the mail address. The access destination to the Web server 98 that is a combination of
Is transmitted (step A10, mail transmission processing). The mobile terminal 80 receives the mail K (step A1).
1). Since the URL for accessing the Web server 98 is described in the received mail K, the mobile terminal 80 uses this URL to send the access request information N to the Web server 98 to make an access request. (Step A12). Generally, in a mobile phone or the like that can access the Web server 98, the URL portion described in the body of the mail is selected and executed to easily access the Web server 98.

The Web server 98 uses the access request information N
Is received, the password H added to the URL is extracted (step A13), and it is determined whether or not access is permitted (step A14). As a result of the determination, if the password is not added to the URL, if the added password is used once, and if the added password is incorrect, the Web server 98
Access to the mobile terminal 80, and the process ends.
D).

On the other hand, when the Web server 98 confirms that the password sent from the mobile terminal 80 matches the password H notified from the password generation device 96, the Web server 98 permits access to the Web server 98. Yes (OK, access permission processing). Web server 98
When the access is permitted, the password H generated by the password generation device 96 is added to all URLs of the link destinations of the web screen data transmitted to the mobile terminal 80 to generate the web screen data (step A1).
5). The web server 98 transmits the generated web screen data to the mobile terminal 80 (step A16).

Upon receiving the Web screen data transmitted from the Web server 98, the mobile terminal 80 receives the Web screen data.
Display the screen based on the screen data (step A1)
7). When the mobile terminal 80 accesses the Web server 98 again using the URL of the link destination displayed on the screen, the password H is added to the URL of the link destination.
8 (step A18). After that, the Web server 98 determines the password added to the URL received from the mobile terminal 80, and if the password is correct, repeats the process of transmitting the Web screen data. Also, W
The eb server 98 supplies the content M based on the request from the mobile terminal 80.

As described above, in the first embodiment,
The user does not need to input the user ID or the password from the mobile terminal 80, and only needs to perform the operation of making a call, and thus the operation of the user is simplified. Further, the content provider 90 recognizes the telephone number E of the mobile terminal 80 making a call, confirms that the user number is registered, and then sends a mail K including a password for permitting access to the telephone number E. Is transmitted, the user terminal can be specified smoothly. Moreover, the mobile terminal 80
Accesses the Web server 98 using a URL with a one-time password, it is impossible for a user who is not allowed to access the Web server 98, and security can be improved. it can.

[0036]Second embodiment FIG. 4 is a terminal authentication method according to the second embodiment of the present invention.
To show the configuration of the network system for implementing
FIG. 2 is a lock diagram showing elements in FIG. 1 showing the first embodiment;
Common elements are given common reference numerals. Of this form
In the network system, as shown in FIG.
New functions are added in place of the content provider 90 of
Added content provider 90A
It The content provider 90A
In addition to the configuration of the binder 90, the terminal code generation device 99 has a new
And is replaced by the Web server 98 in FIG.
A web server 98A with new functions added.
Has been. The terminal code generation device 99 is
Via the network such as the mobile phone network NW to the divider 90A
For each user terminal such as the mobile terminal 80 connected by
Generate a unique terminal code N.

The Web server 98A registers the password H generated by the password generation device 96 and, when receiving the access request information including the URL from the user terminal such as the mobile terminal 80, the password H included in the URL. Is compared with the password registered in the Web server 98A, and when they match, a page is generated and transmitted to the user terminal in a format in which the corresponding terminal code N is added to the end of the URL. Is compared with the terminal code transmitted from the same user terminal, and when the two match, the access is permitted to the same user terminal and the mobile terminal 80
The content M requested by the user is supplied. Others are the same as that of FIG.

The terminal authentication method of this embodiment differs from the processing contents of the first embodiment in the following points. That is, after the mobile terminal 80 is authenticated by the password H (step A14 in FIG. 3), the Web server 98A
URL of the terminal code N generated by the terminal code generation device 99
A page is generated for each user in the format added to the end of the, and the web page data is transmitted to the mobile terminal 80. The mobile terminal 80 records the Web page data in a format that cannot be read by a third party (for example, a screen memo of i-mode (registered trademark)). In this case, for example, a format such as a bookmark in which the address is directly displayed or can be read by a third party cannot be used because the address of the recorded page is read.

After the Web page data is recorded in the mobile terminal 80, the mobile terminal 80 accesses the recorded page. At this time, the terminal code N is added to the address transmitted to the Web server 98A. W
The eb server 98A authenticates the mobile terminal 80 using this terminal code N, and determines whether access is possible. The access from the mobile terminal 80 to the Web server 98A to obtain the password H can be made only for the first time, and the second and subsequent accesses are made by reading the page recorded in the screen memo or the like.

As described above, in the second embodiment,
The web server 98A authenticates the mobile terminal 80 by using the terminal code N, and the mobile terminal 80 only accesses the page recorded in the mobile terminal 80 to access the web server 98.
Since A can be used, in addition to the advantages of the first embodiment, access can be performed by a simpler operation and security can be enhanced.

The embodiment of the present invention has been described in detail above with reference to the drawings. However, the specific configuration is not limited to this embodiment, and there are design changes and the like within the scope not departing from the gist of the present invention. Also included in the present invention. For example, in FIGS. 1 and 4, the AP server 95, the mail server 97,
The database 94, the password generation device 96, the Web servers 98 and 98A, and the terminal code generation device 99 are composed of divided blocks, but can be composed of one to a plurality of pieces of hardware. Also, FIG.
4 and FIG. 4, the mobile terminal 80 and the content providers 90 and 90A are connected via the mobile phone network NW, but not limited to the mobile phone network NW, for example, LAN
Any communication line such as (local area network) or the Internet may be used.

[0042]

As described above, according to the configuration of the present invention, the user does not need to input the user ID or the password from the user terminal, and only needs to make a telephone call operation. Easy to operate. Further, the content provider recognizes the telephone number of the user terminal making the call, confirms that the user terminal is registered, and then sends an email containing a password for permitting access to the user terminal of the same telephone number. I will send it
The user terminal can be specified smoothly. In addition, since the user terminal accesses the content server by using the URL with the one-time password, it is impossible for a user who is not permitted to access the content server to access the content server, which increases security. can do. In addition, the content server authenticates the user terminal using the terminal code, and the user terminal can use the content server only by accessing the page recorded in its own terminal, so that the access can be performed by a simpler operation. , Can increase security.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a network system for implementing a terminal authentication method according to a first embodiment of the present invention.

FIG. 2 is a flowchart for explaining the operation of the network system of FIG.

FIG. 3 is a flowchart for explaining the operation of the network system of FIG.

FIG. 4 is a block diagram showing a configuration of a network system for carrying out a terminal authentication method according to a second embodiment of the present invention.

FIG. 5 is a block diagram showing a configuration of a network system used in a conventional terminal authentication method.

FIG. 6 is a configuration diagram of a conventional terminal authentication system.

[Explanation of symbols]

80 Mobile terminal (user terminal) 90,90A Content Provider 92 ROM 93 Telephone answering machine (answering machine) 94 Database 95 AP server (access point server) 96 password generator 97 Mail server 98 Web server (content server) 99 terminal code generation device

Continued front page    F-term (reference) 5B085 AE02 AE03 BC02                 5J104 AA07 AA16 EA01 EA03 EA16                       KA02 KA21 NA05 PA07                 5K067 AA30 AA34 BB04 DD16 DD17                       EE02 EE10 EE16 HH22 HH23                       KK13 KK15

Claims (13)

[Claims] 1. A network system comprising a user terminal and a content provider, wherein the user terminal generates a call signal including a first network address of the own terminal and transmits the call signal to the content provider. The first network included in the call signal received by the content provider by receiving the call signal from the content provider by using the password included in the mail to access the content provider; When the user terminal is authenticated by extracting the address and comparing the second network address of the contracted user with the first network address, a password is generated and registered, and a URL (including the password) is registered. Uniform Reso
urce Locator) is transmitted to the user terminal using the first network address, and when access request information including the URL is received from the user terminal, the password included in the URL is A terminal authentication method characterized by comparing with a registered password and permitting access to the user terminal and supplying predetermined content when the passwords match. 2. A network system comprising a user terminal and a content provider, wherein the user terminal generates a call signal including a first network address of the terminal itself and transmits the call signal to the content provider. The mail is received from the content provider, the content provider is accessed using the password included in the mail, and the content provider receives the call signal and includes the first signal included in the call signal.
When the user terminal is authenticated by comparing the second network address of the contracted user with the first network address, the password generation instruction signal and the mail transmission instruction signal An instruction signal generation process for generating a password, a password generation process for generating a password based on the password generation instruction signal, and a mail describing a URL including the password based on the mail transmission instruction signal to the first network address. When the access request information including the URL is received from the user terminal while registering the password generated in the password generation processing and the mail transmission process for transmitting to the user terminal by using the The password is the registered password. And an access permission process of permitting access to the user terminal and supplying a predetermined content when they match each other. 3. A network system comprising a user terminal and a content provider, wherein the user terminal generates a call signal including a first network address of the own terminal and transmits the call signal to the content provider. The first network included in the call signal received by the content provider by receiving the call signal from the content provider by using the password included in the mail to access the content provider; When the user terminal is authenticated by extracting the address and comparing the second network address of the contracted user with the first network address, a password is generated and registered, and a URL including the password is registered. Write the described email with the first network address When the access request information including the URL is received from the user terminal, the password included in the URL is compared with the registered password. A terminal code unique to the user terminal is transmitted, the terminal code is compared with the terminal code transmitted from the user terminal, and when they match, the user terminal is permitted to access and a predetermined content is displayed. A terminal authentication method characterized by supplying. 4. A network system comprising a user terminal and a content provider, wherein the user terminal generates a call signal including a first network address of its own terminal and transmits the call signal to the content provider. The mail is received from the content provider, the content provider is accessed using the password included in the mail, and the content provider receives the call signal and includes the first signal included in the call signal.
When the user terminal is authenticated by comparing the second network address of the contracted user with the first network address, the password generation instruction signal and the mail transmission instruction signal An instruction signal generation process for generating a password, a password generation process for generating a password based on the password generation instruction signal, and a mail describing a URL including the password based on the mail transmission instruction signal to the first network address. A mail transmission process for transmitting to the user terminal using, a terminal code generation process for generating a unique terminal code for each user terminal, and registering the password generated by the password generation process, and the user terminal When the access request information including the URL is received from , The password included in the URL is compared with the registered password, and when the passwords match, the corresponding terminal code is transmitted to the user terminal, and the terminal code and the user terminal are transmitted. A terminal authentication method comprising: comparing with a terminal code, and performing access permission processing for permitting access to the user terminal and supplying a predetermined content when they match. 5. The terminal authentication method according to claim 1, wherein the password is a one-time password. 6. The terminal authentication method according to claim 1, wherein the first network address is a telephone number of the user terminal. 7. A network system comprising a user terminal and a content provider and having a terminal authentication function, wherein the user terminal generates a calling signal including a first network address of the own terminal to generate the content. While sending to the provider,
It is configured to receive an email from the content provider and access the content provider using a password included in the email, wherein the content provider receives the call signal and is included in the call signal. The first
When the user terminal is authenticated by comparing the second network address of the contracted user with the first network address, a password is generated and registered, and the password is included. When an e-mail describing a URL is transmitted to the user terminal using the first network address, and access request information including the URL is received from the user terminal, the password included in the URL is registered. The network system is configured to allow access to the user terminal and supply predetermined content when the passwords are compared with each other and match the password. 8. The content provider receives the call signal and includes the first signal included in the call signal.
Responding device that extracts the network address of the user, a database that holds in advance the second network address of the contracted user, and the user terminal by comparing the first network address and the second network address. An access point server that generates a password generation instruction signal and a mail transmission instruction signal when authenticated, a password generation device that generates a password based on the password generation instruction signal, and the password based on the mail transmission instruction signal A mail server that sends a mail describing a URL to the user terminal by using the first network address, an access request including the URL from the user terminal while registering the password generated by the password generation device Received information When the password contained in the URL is compared with the registered password and the passwords match, the content server is configured to allow access to the user terminal and supply predetermined content. The network system according to claim 7, wherein the network system comprises: 9. A network system comprising a user terminal and a content provider and having a terminal authentication function, wherein the user terminal generates a calling signal including a first network address of the own terminal to generate the content. While sending to the provider,
It is configured to receive an email from the content provider and access the content provider using a password included in the email, wherein the content provider receives the call signal and is included in the call signal. The first
When the user terminal is authenticated by comparing the second network address of the contracted user with the first network address, a password is generated and registered, and the password is included. When an e-mail describing a URL is transmitted to the user terminal using the first network address, and access request information including the URL is received from the user terminal, the password included in the URL is registered. When the passwords are compared, the terminal code unique to the user terminal is transmitted when they match, the terminal code and the terminal code transmitted from the user terminal are compared, and when they match, the A network characterized by being configured to permit access to a user terminal and supply predetermined content. Work system. 10. The content provider receives the call signal and includes the first signal included in the call signal.
Responding device that extracts the network address of the user, a database that holds in advance the second network address of the contracted user, and the user terminal by comparing the first network address and the second network address. An access point server that generates a password generation instruction signal and a mail transmission instruction signal when authenticated, a password generation device that generates a password based on the password generation instruction signal, and the password based on the mail transmission instruction signal A mail server that sends a mail describing a URL to the user terminal using the first network address, a terminal code generation device that generates a unique terminal code for each user terminal, and a password generation device that generates the terminal code. And register the password When the access request information including the URL is received from the user terminal, the password included in the URL is compared with the registered password, and when they match, the terminal code corresponding to the user terminal And the terminal code transmitted from the user terminal are compared with each other, and when they match, the content server is configured to allow access to the user terminal and supply predetermined content. The network system according to claim 9, which is provided. 11. The password is a one-time password, and the password is a one-time password.
The described network system. 12. The network system according to claim 7, 8, 9, 10 or 11, wherein the first network address is a telephone number of the user terminal. 13. The computer according to claim 7, 8, 9, 1
An authentication control program for realizing the function of the network system described in 0, 11 or 12.