JP2003198730A - Service provider apparatus, authentication method, program, and storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To authenticate a user without the need for installing a particular exchange and for billing a phone charge to a user. <P>SOLUTION: The service provider apparatus includes: a first lookup table where a plurality of telephone numbers of the apparatus are correlated with a plurality of prescribed codes, respectively; and a second lookup table where a plurality of authentication codes created by using the plurality of prescribed codes are respectively correlated with a plurality of regular service users. Every time a connection request is received (S0), the apparatus acquires the telephone number of the apparatus receiving the connection request and a telephone number of a user side terminal which has transmitted the connection request, stores them to a storage device in cross-reference with each other and create connection request history information (S1). The service provider apparatus extracts only the telephone number of the apparatus corresponding to the telephone number of the user terminal which has transmitted the connection request this time from the connection request history information, reads the prescribed code by referencing the first lookup table, and creates the authentication code (S2). The apparatus collates the authentication code with the contents of the second cross reference table to authenticate the user (S3). <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a service providing side device, an authentication method, a program, and a storage medium, and in particular, it has a plurality of telephone numbers and is connected to a service user side terminal via a network. Service providing side device, authentication method applied to the service providing side device,
The present invention relates to a program for causing a computer to execute the authentication method, and a storage medium storing the program.

[0002]

2. Description of the Related Art Conventionally, in a network service using a public telephone line network, when a caller terminal user makes a call to a receiver (reception terminal device) which is a service provider, the receiver (reception terminal) The device) authenticates to determine whether the calling terminal user has the right to receive the service. Also, authentication is performed to identify who is the calling-side terminal user.

For example, when a user makes a call to a service providing company, a device for reception announces by voice, "Please press the personal identification number and finally the pound (#)". According to this, the user inputs the personal identification number given to the user in advance, and if the personal identification number is correct, the user can receive the service by telephone.

When the user makes a call to the service providing company, the reception device announces by voice, "Please press your registration number and finally the pound (#)". According to this, when the user inputs the personal registration number given to the user in advance, the user can receive the service corresponding to the registration number.

In the above service provision, the authentication is performed after the telephone connection is established. However, as a method of performing the authentication before the telephone connection is established, in the ISDN network, the personal authentication information is transmitted when the connection request is transmitted. It is possible to transmit (for example, disclosed in Japanese Patent Laid-Open No. 5-268321). There is also a method of providing personal authentication information to the exchange before establishing a connection by providing the exchange with an authentication function (for example, Japanese Patent Laid-Open No. 7-283868).

[0006]

However, in the above-mentioned conventional network service using the public telephone line, the telephone connection is established between the service user side and the service providing side, and the actual communication is performed. Since the beginning
Since the authentication is performed, there is a problem that the telephone charge is charged even during the authentication work.

On the other hand, the above-mentioned conventional method of performing authentication before establishing a connection has a problem that it is executed only within a limited network such as ISDN, and the network operator installs an exchange equipped with an authentication function. There was a problem that it was necessary to do.

The present invention has been made in view of the above problems, and in a network service using a telephone on a public telephone line, the user does not have to install a special exchange and the telephone charge is paid by the user. Without burdening
An object is to provide a service providing side device, an authentication method, a program, and a storage medium capable of performing authentication.

[0009]

In order to achieve the above object, according to the invention of claim 1, a service having a plurality of telephone numbers and connected to a user terminal of the service via a network. In the providing side device, a first correspondence table in which each one of a plurality of predetermined codes is made to correspond to a plurality of telephone numbers of the own device, and a plurality of authentications created by using the plurality of predetermined codes Storage means for storing a second correspondence table in which codes are respectively associated with a plurality of authorized service users, and, when a connection request is received from the user-side terminal, of the own device that has received the connection request. A first creating unit that acquires a telephone number and a telephone number of a user terminal that has transmitted the connection request, executes the acquisition every time the connection request is received, and creates connection request history information; The first
Extracting means for extracting the telephone number of the own device that has received the connection request from the connection request history information created by the creating means, in the order of receiving the connection request, and the first correspondence table. Second, a predetermined code corresponding to the telephone number of the own device extracted by is read and an authentication code is created.
And the authentication code existing in the second correspondence table, if there is one that matches the authentication code created by the second creating means, a service provision request from a legitimate service user is made. There is provided a service providing side device having an authenticating means for authenticating that there is.

According to the invention described in claim 4, in the service providing side apparatus having a plurality of telephone numbers, and the service user side terminal is connected via the network, the service providing side apparatus has a plurality of telephone numbers. In addition, a first correspondence table in which each one of a plurality of predetermined codes is made to correspond and a plurality of authentication codes made by using the plurality of predetermined codes are made to correspond to a plurality of authorized service users respectively. Storage means for storing the second correspondence table in the first storage device, and whether or not connection permission is given to the user side terminal when the connection request is received from the user side terminal. And a telephone number of the own device that has received the connection request and a use that has transmitted the connection request when it is determined that the connection permission has not been given by the first determination means. Power on the terminal A number for obtaining connection information and storing it in the second storage device in association with each other, and obtaining and storing each time a connection request is received to create connection request history information in the second storage device. From the connection request history information created by the first creating unit and the first creating unit, only the telephone number of the own device corresponding to the telephone number of the user-side terminal that has sent the connection request this time is received. Extracting means for extracting in order, and second creating means for referring to the first correspondence table and reading a predetermined code corresponding to the telephone number of the own device extracted by the extracting means, and creating an authentication code,
Of the authentication codes existing in the second correspondence table, the second code
Second discriminating means for discriminating whether or not there is an authentication code created by the authoring means, and if the second discriminating means judges that there is a coincident one, normal service use It is determined that the request is for a service provision from a person, and a permission unit that grants a connection permission to the user terminal that has transmitted the connection request this time, and a determination that the connection permission has been given by the first determination unit Then, the service providing side device is provided, which has an establishing means for establishing a line connection with the user side terminal which has transmitted the connection request this time.

According to the sixth aspect of the invention, it has a first telephone number and a second telephone number group consisting of a plurality of telephone numbers, and a user terminal of the service is connected via a network. In the service providing side device, a first correspondence table in which each one of a plurality of predetermined codes is made to correspond to each telephone number of the second telephone number group, and is created using the plurality of predetermined symbols When a connection request is received from a storage unit that stores a second correspondence table in which a plurality of authorized authentication codes respectively correspond to a plurality of authorized service users in a first storage device, and a connection request from a user terminal A first determining means for determining whether the telephone number receiving the connection request is the first telephone number or the second telephone number group; and the second determining means for determining the second telephone number. It was determined that it was a group of telephone numbers When the connection request is received, the telephone number of the own device that has received the connection request and the telephone number of the user terminal that has transmitted the connection request are acquired and stored in the second storage device in association with each other. First acquisition means for executing the acquisition and storage for each reception to create connection request history information in the second storage device; and the first telephone number by the first determination means. When determined,
Extraction means for extracting, from the connection request history information created by the first creation means, only the telephone number of the own device corresponding to the telephone number of the user-side terminal that sent the connection request this time, in the order of reception of the connection request. , Referring to the first correspondence table,
Of the authentication code existing in the second correspondence table and the second creation means for reading the predetermined code corresponding to the telephone number of the own device extracted by the extraction means and the authentication code existing in the second correspondence table, the second A second discriminating means for discriminating whether or not there is a match with the authentication code created by the creating means, and a legitimate service user when the second discriminating means judges that there is a match. There is provided a service providing side device, comprising: an authenticating unit that authenticates the service providing request from the device.

Further, according to the invention of claim 9, there is provided a first correspondence in which a plurality of telephone numbers are provided, and a plurality of predetermined numbers are respectively associated with a plurality of telephone numbers of the own device. A table and a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are made to correspond to a plurality of authorized service users respectively, and the service user side via the network In the authentication method applied to the service providing side device to which the terminal is connected, when the connection request is received from the user side terminal, the telephone number of the own device that received the connection request and the connection request are transmitted. The telephone number of the user side terminal is acquired, the acquisition is executed every time a connection request is received, and the connection request history information is created by the first creating step and the first creating step. Connection request history information From the extraction step of extracting the telephone number of the own device that has received the connection request in the order of receiving the connection request, and referring to the first correspondence table, the telephone number of the own device extracted by the extraction step A second creating step of creating a verification code by reading a predetermined code
Of the authentication codes existing in the second correspondence table, the second code
If there is a match with the authentication code created in the creation step of, the authentication step is to authenticate the service provision request from the legitimate service user, and provide the service to the user terminal that sent the connection request this time. An authentication method is provided, which comprises:

According to the tenth aspect of the present invention, there is provided a first telephone number having a plurality of telephone numbers, and a plurality of telephone numbers of the own apparatus are respectively associated with respective ones of a plurality of predetermined codes.
And a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are made to correspond to a plurality of authorized service users respectively, and the service is used via the network. In the authentication method applied to the service providing side device to which the user side terminal is connected, whether or not connection permission is given to the user side terminal when a connection request is received from the user side terminal And a telephone number of the own device that has received the connection request and the use of transmitting the connection request when it is determined that the connection permission is not given by the first determination step. A telephone number of a person-side terminal is acquired and stored in a storage device in association with it, and the connection request history information is created in the storage device by executing the acquisition and storage each time a connection request is received. From the creation step and the connection request history information created in the first creation step, only the telephone number of the own device corresponding to the telephone number of the user terminal that sent the connection request this time is extracted in the order of reception of the connection request. And a second creation step of referring to the first correspondence table and reading a predetermined code corresponding to the telephone number of the own device extracted by the extraction step to create an authentication code, The second determination step of determining whether or not there is an authentication code existing in the correspondence table of No. 2 that matches the authentication code created in the second creation step; and the second determination step. If it is determined that there is a match, it is authenticated as a service provision request from a legitimate service user, and connection permission is granted to the user terminal that sent the connection request this time. And a providing step for establishing a line connection with the user terminal that has transmitted the connection request this time and providing a service when the connection permission is determined by the first determining step. An authentication method is provided, which comprises:

According to the invention described in claim 11, it has a first telephone number and a second telephone number group consisting of a plurality of telephone numbers, and each telephone number of the second telephone number group has:
A first correspondence table in which each one of a plurality of predetermined codes is made to correspond, and a plurality of authentication codes made using the plurality of predetermined codes are made to correspond to a plurality of authorized service users respectively. In the authentication method including a correspondence table of No. 2 and applied to the service providing side device to which the service user side terminal is connected via the network, the connection is received when the connection request is received from the user side terminal. A first determining step of determining whether the telephone number that received the request is the first telephone number or the second telephone number group; and the second telephone number group by the first determining step. When it is determined that the connection request is received, the telephone number of the own device that has received the connection request and the telephone number of the user terminal that has transmitted the connection request are acquired and stored in the storage device in association with each other. Essential It is determined that the telephone number is the first telephone number by the first creating step of creating and storing the connection request history information in the storage device by executing the acquisition and storage every time when At this time, from the connection request history information created in the first creating step, only the telephone number of the own device corresponding to the telephone number of the user-side terminal that has transmitted the connection request this time is extracted in the order of receiving the connection request. An extraction step, a second creation step of referring to the first correspondence table, a predetermined code corresponding to the telephone number of the own device extracted by the extraction step, and creating an authentication code; and the second creation step. A second determination step of determining whether or not there is an authentication code that matches the authentication code created in the second creation step among the authentication codes existing in the correspondence table If it is determined by the step that there is a match, it is required to authenticate as a service provision request from a legitimate service user, and to provide a service to the user terminal that sent the connection request this time. An authentication method is provided that is characterized by:

Further, there is provided a computer-readable storage medium storing a program for causing a computer to execute each of the above authentication methods and each of the above authentication methods as a program.

[0016]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

(First Embodiment) FIG. 1 is a block diagram showing a configuration of a first embodiment of a network system according to the present invention.

This network system comprises a server T2 for providing a service, a service user side terminal T1 connected to the server T2 via a public telephone line network K1.
User identification information database D connected to the server T2
1 and 1. Although only one service user side terminal is shown in FIG. 1, a plurality of service user side terminals are actually connected to the public telephone line network K1. Although only one server is shown in FIG. 1, a plurality of servers may be connected to the public telephone line network K1 so that the service user side terminal can connect to them.

The server T2 has ten telephone numbers (A ...
J), and when the user-side terminal issues a connection request to any of these via the public telephone line network K1, the user side that does not establish this connection and issues a connection request It shall have the function of acquiring the telephone number of the terminal. The telephone number of the service user side terminal T1 is "U1".

FIG. 2 shows the user identification information database D1.
It is a figure which shows an example of the user identification information stored in.

The user identification information is composed of user information and a user identification number corresponding to the user information. The user information is made up of user names (users a to f), and the user identification number is a unique identification number given to the corresponding user.

FIG. 3 is a diagram showing the relationship between the telephone number of the server T2 and the identification number corresponding to the telephone number.

That is, the identification numbers 0 to 9 are set respectively corresponding to the 10 telephone numbers (A to J), and the service providing side and the service user use this correspondence relationship for authentication as described later. To do.

Hereinafter, the user a is the service user side terminal T.
1 (telephone number U1) is used to authenticate the server T2 using the user identification number 3375 (see FIG. 2) given to the user a and the correspondence shown in FIG. Explain the process of receiving.

In order to be authenticated by the server T2, the user a associates the user identification number 3375 assigned to him with each telephone number of the server T2 based on the correspondence shown in FIG. That is, the telephone number D of the identification number 3 having the same value as the highest digit number 3 of the user identification number 3375
Correspond to. Similarly, the telephone number D is assigned to the second digit number 3 and the telephone number H is assigned to the third digit number 7.
And the telephone number F is associated with the lowest digit number 5.

Then, the user a calls the server T2 in the order of the telephone number D, the telephone number D, the telephone number H, and the telephone number F to issue a connection request. As described above, the server T2 that has received the connection request does not establish this connection and acquires the telephone number of the service user side terminal that has issued the connection request. When obtaining the telephone number, the telephone number and the reception time of the server T2 that has received the connection request are also obtained and recorded.

FIG. 4 is a diagram showing an example of connection request history information obtained by such recording of the server T2.

The connection request history information includes a plurality of records consisting of the telephone number of the service user side terminal recorded by the server T2, the telephone number of the server T2 that received the connection request, and the reception time in the order of reception time. They are arranged.

Each time the server T2 receives a connection request,
From the connection request history information, records having the telephone number of the service user side terminal that has transmitted the connection request are taken out in the order of reception time, and connection request history information relating to the telephone number U1 as shown in FIG. 5 is created. Then, the authentication is performed based on the connection request history information related to the same telephone number of the service user side terminal.

For example, when the connection request history information relating to the telephone number U1 shown in FIG. 5 is created, the server T2 receives the telephone number D, the telephone number D, and the telephone number H from the service user side terminal T1 of the telephone number U1. , It is recognized that the connection request is made in the order of the telephone number F. Thereby, the server T2
Generates a user identification number 3375 from the correspondence shown in FIG. 3 and determines whether or not the identification number 3375 is registered in the user identification information database D1. Since it is registered, it is determined that the connection request is made from the user a assigned the user identification number 3375. After that, the server T2 receives the connection request from the service user side terminal T1, establishes the connection, and provides the service for the user a to the service user side terminal T1.

FIG. 6 is a flow chart showing the procedure of the authentication and service providing process executed by the server T2.

The server T2 starts execution of this processing when it detects the connection request transmitted from the user terminal (S0).

The server T2 that has received the connection request acquires the telephone number of the user terminal that has transmitted the connection request, the telephone number of the server T2 that has received the connection request, and the reception time at which the connection request has been received. It is recorded as one record of history information (S1).

Next, the server T2 extracts only the record relating to the user terminal that has transmitted the connection request from the connection request history information, and generates the user identification information using the correspondence shown in FIG. 3 ( S2). When the number of connection requests does not reach the number of digits of the user identification number, the user identification information generated here is incomplete.

Then, the server S1 compares the generated user identification information with the user identification information in the user identification information database D1 and sends a connection request using the user side terminal. It is determined (authenticated) whether or not the user is a registered regular user (S3).

When it is confirmed that the user is a legitimate user as a result of the authentication, the server S1 establishes a connection with the user terminal which has transmitted the connection request (S4), , Provide services (S5).

On the other hand, as a result of the authentication, if it is not confirmed that the user is a legitimate user, the process for not establishing the connection is performed (S6). Although the user is a legitimate user, if the number of connection requests has not reached the number of digits of the user identification number, this step S6 will be executed. At this time, the user side terminal disconnects the communication because the connection cannot be established. In addition, in step S6, after establishing the connection, it is possible to announce that "the service is not provided because it does not match the pre-registered user identification information".

As described above, in the first embodiment, in the public line network, the user of the network service uses the user identification number given to the user and the telephone number information of the server, It is possible to authenticate before connecting to the phone.

(Second Embodiment) Next, a second embodiment will be described.

The configuration of the second embodiment is basically the first.
Since the configuration is the same as that of the first embodiment, the configuration of the first embodiment will be used in the description of the second embodiment.

In the first embodiment, when a connection request is transmitted to the server the same number of times as the number of digits of the user identification number given to the user, the authentication process for authenticating the user is performed. However, in the second embodiment, when the connection request is transmitted to the server for the same number of times as the number of digits of the user identification number and authentication is performed, the service is provided as it is. After that, the service is provided to the authorized user only after the connection request is transmitted again.

FIG. 7 is a flow chart showing the procedure of the authentication and service providing processing executed by the server T2 in the second embodiment. In the figure, the same processing parts as those in the first embodiment shown in FIG. 6 are designated by the same step numbers, and their explanations are omitted.

In the second embodiment, in step S7, the server T2 that has received the connection request acquires the telephone number of the user-side terminal that has transmitted the connection request.

Next, in step S8, the server T2
Refers to the connection permission information recorded in step S9, which will be described later, to determine whether or not connection permission has already been given to the user-side terminal that transmitted the connection request. If it is given, the process proceeds to step S4, and if it is not given, the process proceeds to step S1. Note that in the above determination, step S
The user side terminal is identified based on the telephone number acquired in 7.

If it is determined in step S3 of authenticating that the user is an authorized user, the process proceeds to step S9.
The connection permission is given to the user terminal that has transmitted the connection request, and the connection permission information is recorded together with the telephone number of the user terminal. On the other hand, when it is determined that the user is not a legitimate user, the process proceeds to step S10, the connection prohibition is given to the user terminal that has transmitted the connection request, and the connection prohibition information together with the telephone number of the user terminal is given. Record. The connection permission may be recorded as the connection permission information together with the telephone number of the user side terminal in step S9, and the process may be ended without performing anything in step S10.

In this way, in the second embodiment,
When the number of digits of the user identification number is four, for example, authentication is performed by transmitting the connection request to the server T2 four times, and when the connection request is transmitted once again, the regular use is performed. Services are provided to persons.

(Third Embodiment) Next, a third embodiment will be described.

The configuration of the third embodiment is basically the first.
Since the configuration is the same as that of the first embodiment, the configuration of the first embodiment will be used in the description of the third embodiment.

In the third embodiment, the telephone number of the server when the user side terminal sends a connection request to the server for authentication and the user side terminal asks the server for service provision after the end of authentication. Set a different server telephone number when connecting. Therefore, the user has the telephone number information of the server for authentication and the telephone number information of the server for service, and after being authenticated by using the telephone number of the server for authentication, he / she uses the telephone number for service. Make a connection request.

FIG. 8 is a flow chart showing the procedure of the authentication and service providing process executed by the server T2 in the third embodiment. In the figure, the same processing parts as those in the first embodiment shown in FIG. 6 are designated by the same step numbers, and their explanations are omitted.

In the third embodiment, in step S11, the server T2 that has received the connection request determines whether the telephone number that has received the connection request is for authentication or for service. If the telephone number of the server T2 that has received the connection request is for authentication, the process proceeds to step S1 and the telephone number of the user terminal that has transmitted the connection request as connection request history information and the server T2 that has received the connection request. The telephone number and the reception time when the connection request is received are acquired and recorded, and the processing is ended.

On the other hand, if the telephone number of the server T2 that has received the connection request is for service, the process proceeds to step S7 and the telephone number of the user terminal that has transmitted the connection request is acquired. The following steps S2 to S6 are the same as steps S2 to S6 in the first embodiment shown in FIG.

In this way, in the first embodiment,
Each time a connection request is received, the server performs processing for authentication (generation and authentication of user identification information) before all digits of the user identification number arrive, whereas the third In the embodiment, when the connection request is made by the authentication phone number, only the history of the connection request is acquired and recorded, and the process for the authentication is made only when the connection request is made by the service phone number. I'm trying to do.

In the third embodiment, the server having the authentication telephone number and the server having the service telephone number may be the same server or different servers. However, in the case of the same server, in addition to the same configuration as in the first embodiment, a process for determining whether the telephone number of the server that has received the connection request is for authentication or for service Must be performed at the server.

(Other Embodiments) In each of the above-described embodiments, all users who have the right to receive the service may use the same user identification information. Further, the user identification information may be different for each user or may be different for each group of a plurality of users.

The program code itself of the software that realizes the functions of the above-described embodiments may constitute the present invention, or the storage medium storing the program code may constitute the present invention. .

In this case, the program code itself read from the storage medium realizes the function of each of the above-described embodiments, and the storage medium storing the program code constitutes the present invention. .

As a storage medium for supplying the program code, for example, a floppy (registered trademark) disk,
Hard disk, optical disk, magneto-optical disk, CD-
ROM, CD-R, magnetic tape, non-volatile memory card, ROM, etc. can be used.

Further, by executing the program code read by the computer, not only the functions of the above-described respective embodiments are realized, but also the OS and the like running on the computer based on the instructions of the program code. Does some or all of the actual processing, and the functions of the above-described embodiments are realized by the processing,
Needless to say, it is included in the present invention.

Further, after the program code read from the storage medium is written in the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, based on the instruction of the program code, It is needless to say that the present invention also includes a case where the CPU or the like included in the function expansion board or the function expansion unit performs a part or all of the actual processing and the processing realizes the functions of the above-described embodiments. Yes.

[0061]

As described above in detail, according to the invention of claim 1, claim 9, claim 12 or claim 15,
1 for each of a plurality of predetermined codes for a plurality of telephone numbers owned by the own device
And a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are respectively associated with a plurality of authorized service users. No. 1 storage device, and when a connection request is received from the user terminal, obtains the telephone number of the own device that received the connection request and the telephone number of the user terminal that has transmitted the connection request. Then, the connection request history information is created and stored in the second storage device in association with each other and stored and stored in the second storage device each time the connection request is received. From the created connection request history information, only the telephone number of the own device corresponding to the telephone number of the user terminal that has transmitted the connection request this time is extracted in the order of reception of the connection request, and the first correspondence table is referred to. Then, a predetermined code corresponding to the extracted telephone number of the own device is read out to create an authentication code. Of the authentication codes existing in the second correspondence table, it is determined whether or not there is one that matches the created authentication code, and if it is determined that there is a match, then from an authorized service user Authenticate as a service provision request of.

Further, claim 4, claim 10, claim 13
According to the invention as set forth in claim 16, it is created by using a first correspondence table in which each one of a plurality of predetermined codes is made to correspond to a plurality of telephone numbers of the own device and the plurality of predetermined codes. A second correspondence table in which a plurality of authorized authentication codes respectively corresponding to a plurality of authorized service users are stored in the first storage device, and when a connection request is received from the user side terminal, It is determined whether or not the connection permission is given to the user side terminal. With this, when it is determined that the connection permission is not given, the telephone number of the own device that has received the connection request and the telephone number of the user terminal that has transmitted the connection request are acquired and associated with each other. The connection request history information is stored in the second storage device and is acquired and stored each time a connection request is received to create connection request history information in the second storage device. From the created connection request history information, only the telephone number of the own device corresponding to the telephone number of the user terminal that has transmitted the connection request this time is extracted in the order of reception of the connection request, and the first correspondence table is referred to. Then, a predetermined code corresponding to the extracted telephone number of the own device is read out to create an authentication code. Of the authentication codes existing in the second correspondence table, it is determined whether or not there is one that matches the created authentication code, and if it is determined that there is a match, then from an authorized service user It is determined that the request is for the service provision, and the connection permission is given to the user terminal that has transmitted the connection request this time. When the connection request is received from the user side terminal, when it is determined that the connection permission is given to the user side terminal, the line connection with the user side terminal that transmitted the connection request this time is established. To do.

Further, claim 6, claim 11 and claim 14
Further, according to the invention of claim 17, the service providing side device has a first telephone number and a second telephone number group consisting of a plurality of telephone numbers, and each telephone of the second telephone number group. A first correspondence table in which each number is associated with one of a plurality of predetermined codes, and a plurality of authentication codes created using the plurality of predetermined codes are respectively associated with a plurality of authorized service users. And a second correspondence table, and when the connection request is received from the user side terminal, the telephone number receiving the connection request is either the first telephone number or the second telephone number group. It was determined. When it is determined by this determination that it is the second telephone number group, the telephone number of the own device that has received the connection request and the telephone number of the user side terminal that has transmitted the connection request are acquired and handled. The connection request history information is created and stored in the storage device by executing the acquisition and storage each time a connection request is received. When a connection request is received from the user terminal, the telephone number that received the connection request is the first
When it is determined that it is the telephone number of the device, from the created connection request history information, only the telephone number of the own device corresponding to the telephone number of the user side terminal that transmitted the connection request this time,
Extract in the order in which connection requests were received. With reference to the first correspondence table, a predetermined code corresponding to the extracted telephone number of the own device is read and an authentication code is created. Of the authentication codes existing in the second correspondence table, it is determined whether or not there is one that matches the created authentication code, and if it is determined that there is a match, then from an authorized service user Authenticate as a service provision request of.

As a result, in the network service using the telephone on the public telephone line, the authentication can be performed without installing a special exchange and without the user paying the telephone charge.

Further, instead of the conventional authentication method of transmitting an authentication number, a plurality of telephone numbers of the service providing side when the user issues a connection request to the service providing side, and a connection request to each telephone number are issued. By using a combination of the order of sending, the timing of issuing a connection request to each telephone number, etc. for authentication, an authentication method with more authentication patterns is realized, and a more personal authentication method is provided to service users. It will be possible.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a first embodiment of a network system according to the present invention.

FIG. 2 is a diagram showing an example of user identification information stored in a user identification information database.

FIG. 3 is a diagram showing a relationship between a telephone number of a server and an identification number corresponding to the telephone number.

FIG. 4 is a diagram showing an example of connection request history information obtained from information acquired and recorded by a server.

FIG. 5 is a diagram showing connection request history information relating to a telephone number U1.

FIG. 6 is a flowchart showing a procedure of authentication and service providing processing executed by the server.

FIG. 7 is a flowchart showing a procedure of authentication and service providing processing executed by the server according to the second embodiment.

FIG. 8 is a flowchart showing a procedure of authentication and service providing processing executed by a server according to the third embodiment.

[Explanation of symbols]

D1 user identification information database (first correspondence table, second correspondence table, first storage device) K1 public telephone network (network) T1 service user side terminal T2 server (service providing side device, storage means, Second storage device, first creating means, extracting means, second creating means, authenticating means) A to J telephone numbers (a plurality of telephone numbers)

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04M 11/00 303 H04L 9/00 673B F term (reference) 5B085 AA08 AE02 AE23 BC01 5J104 AA07 DA05 KA02 MA01 NA01 5K024 AA62 BB04 DD01 EE01 GG01 GG03 GG06 5K036 AA00 BB11 EE13 5K101 KK16 MM07 PP03 RR22 TT02 UU17

Claims (17)

[Claims] 1. In a service providing side apparatus having a plurality of telephone numbers and connected to a user side terminal of a service via a network, each of a plurality of telephone numbers of the own apparatus has a plurality of predetermined codes. 1
And a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are associated with a plurality of authorized service users, respectively. When the connection request is received from the storage device and the user terminal, the telephone number of the own device that received the connection request and the telephone number of the user terminal that transmitted the connection request are acquired, and the connection is established. A first creating unit that executes the acquisition each time a request is received to create connection request history information, and the own device that has received the connection request from the connection request history information created by the first creating unit. Extracting means for extracting the telephone numbers of the devices in the order of receiving the connection request, and referring to the first correspondence table, the predetermined code corresponding to the telephone number of the own device extracted by the extracting means is read out, and the authentication code is obtained. Second creating means to create, Of the authentication codes existing in the second correspondence table, the second code
The service providing side device, which has an authenticating means for authenticating a service providing request from a legitimate service user when there is a match with the authentication code created by the creating means. 2. When it is authenticated by the authentication means,
3. The apparatus according to claim 1, further comprising establishing means for establishing a line connection with a user terminal which has transmitted the connection request this time.
The service providing side device described. 3. The service providing side apparatus according to claim 2, further comprising: providing means for providing a service via the connection line established by the establishing means. 4. A service providing side device having a plurality of telephone numbers and connected to a user side terminal of a service via a network, wherein a plurality of predetermined numbers are respectively added to a plurality of telephone numbers of its own device. 1
And a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are respectively associated with a plurality of authorized service users. Storage means for storing in the first storage device, and first determination means for determining whether or not the connection permission is given to the user side terminal when the connection request is received from the user side terminal. , When the first determining means determines that the connection permission is not given, acquires the telephone number of the own device that has received the connection request and the telephone number of the user-side terminal that has transmitted the connection request. And correspondingly storing them in the second storage device, and executing the acquisition and storage each time a connection request is received, and creating connection request history information in the second storage device. And created by the first creating means Extracting means for extracting only the telephone number of the own device corresponding to the telephone number of the user-side terminal which has transmitted the connection request this time from the connection request history information, in the order of receiving the connection request, and the first correspondence table. With reference to a second creation unit that reads a predetermined code corresponding to the telephone number of the own device extracted by the extraction unit and creates an authentication code, and an authentication code existing in the second correspondence table, The second
Second discriminating means for discriminating whether or not there is a match with the authentication code created by the creating means, and when the second discriminating means judges that there is a match, the normal service use Determining that the request is for a service provided by a person, and determining that connection permission has been given by the first determining means, and permission means that gives connection permission to the user terminal that has transmitted the connection request this time. The service providing side device, which has a establishing means for establishing a line connection with the user side terminal that has transmitted the connection request this time. 5. The service providing side apparatus according to claim 4, further comprising: providing means for providing a service via the connection line established by the establishing means. 6. A service providing side apparatus having a first telephone number and a second telephone number group consisting of a plurality of telephone numbers, and a service user side terminal being connected via a network, A first correspondence table in which each one of a plurality of predetermined codes is associated with each telephone number of the second telephone number group, and a plurality of authentication codes created using the plurality of predetermined codes, When a connection request is received from a storage unit that stores a second correspondence table that corresponds to each of a plurality of authorized service users in the first storage device, and the connection request is received from the user-side terminal, the connection request is received. The telephone numbers are the first telephone number and the second telephone number.
No. 1 of the telephone number groups, and when the first determination unit determines that the telephone number group is the second telephone number group, of the own device that has received the connection request. The telephone number and the telephone number of the user terminal that has transmitted the connection request are acquired and stored in the second storage device in association with each other, and the acquisition and storage are executed each time the connection request is received. A first creating unit that creates connection request history information in the second storage device; and when the first determining unit determines that the telephone number is the first telephone number, the first creating unit From the created connection request history information, an extraction unit that extracts only the telephone number of the own device corresponding to the telephone number of the user terminal that has transmitted the connection request this time in the order of receiving the connection request, and the first correspondence table. Refer to the above extraction Reading a predetermined code corresponding to the telephone number of its own device which has been extracted by the step, and a second generating means for generating an authentication code, of the authentication code present in the second correspondence table, the second
Second discriminating means for discriminating whether or not there is a match with the authentication code created by the creating means, and when the second discriminating means judges that there is a match, the normal service use A service providing side device, comprising: an authenticating unit that authenticates a service providing request from a person. 7. When authenticated by the authentication means,
7. The apparatus according to claim 6, further comprising establishing means for establishing a line connection with a user terminal which has transmitted the connection request this time.
The service providing side device described. 8. The service providing side apparatus according to claim 7, further comprising providing means for providing a service via the connection line established by said establishing means. 9. A first correspondence table having a plurality of telephone numbers, and a plurality of telephone numbers of its own device, each corresponding to one of a plurality of prescribed codes, and the plurality of prescribed codes are used. And a second correspondence table in which the plurality of authentication codes created by the above are respectively associated with a plurality of authorized service users, and the service providing side device to which the service user side terminal is connected via the network In the authentication method applied to, when the connection request is received from the user terminal, the telephone number of the own device that received the connection request and the telephone number of the user terminal that transmitted the connection request are acquired. Then, each time a connection request is received, the acquisition is executed to create connection request history information, and a connection request is received from the connection request history information created by the first creation step. Own device An extraction step of extracting telephone numbers in the order of reception of connection requests, and referring to the first correspondence table, a predetermined code corresponding to the telephone number of the own device extracted by the extraction step is read out to create an authentication code. And a second creating step among the authentication codes existing in the second correspondence table.
If there is a match with the authentication code created in the creation step of, the authentication step is to authenticate the service provision request from the legitimate service user, and provide the service to the user terminal that sent the connection request this time. An authentication method comprising: 10. A first correspondence table having a plurality of telephone numbers, and a plurality of telephone numbers of its own device, each corresponding to one of a plurality of predetermined symbols, and the plurality of predetermined symbols are used. And a second correspondence table in which the plurality of authentication codes created by the above are respectively associated with a plurality of authorized service users, and the service providing side device to which the service user side terminal is connected via the network In the authentication method applied to, when a connection request is received from a user terminal, a first determining step of determining whether or not connection permission is given to the user terminal; When it is determined in the determination step 1 that connection permission is not given, the telephone number of the own device that has received the connection request and the telephone number of the user terminal that has transmitted the connection request are acquired and handled. Attach A first creation step of storing the connection request history information in the storage device while storing the connection request history information in the storage device and executing the acquisition and storage each time the connection request is received; From the connection request history information, an extracting step of extracting only the telephone number of the own device corresponding to the telephone number of the user terminal that has transmitted the connection request this time in the order of receiving the connection request, and refer to the first correspondence table. Then, a second creation step of creating a verification code by reading out a predetermined code corresponding to the telephone number of the own device extracted by the extraction step, and the verification code existing in the second correspondence table, Second
Second determining step of determining whether or not there is a match with the authentication code created by the creating step, and if it is determined by the second determining step that there is a match, the normal service usage Authenticating that the request is a service provision request from a person and granting connection permission to the user side terminal that has transmitted the connection request this time, and determining that connection permission has been given by the first determination step. And a providing step of providing a service by establishing a line connection with the user-side terminal that has transmitted the connection request this time. 11. A telephone number having a first telephone number and a second telephone number group consisting of a plurality of telephone numbers, and each telephone number of the second telephone number group has a plurality of predetermined codes. And a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are respectively associated with a plurality of authorized service users, In the authentication method applied to the service providing side device to which the user side terminal of the service is connected via the network, when the connection request is received from the user side terminal, the telephone number receiving the connection request is The first telephone number and the second
A first telephone number group, and when the first telephone number group is determined to be the second telephone number group by the first step, The telephone number and the telephone number of the user-side terminal that has transmitted the connection request are acquired and stored in the storage device in association with each other. A first creating step of creating history information in the storage device; and a connection request history created by the first creating step when the first phone number is determined by the first determining step. An extraction step of extracting from the information only the telephone number of the own device corresponding to the telephone number of the user-side terminal that has transmitted the connection request this time, and the first correspondence table, with reference to the extraction step. Reads a predetermined code corresponding to the telephone number of its own device which has been extracted by the extraction step, a second generation step of generating an authentication code, of the authentication code present in the second correspondence table, the second
Second determining step of determining whether or not there is a match with the authentication code created by the creating step, and if it is determined by the second determining step that there is a match, the normal service usage An authentication step of authenticating as a service provision request from a person and providing a service to the user-side terminal that has transmitted the connection request this time. 12. A first correspondence table in which a plurality of telephone numbers are held, and a plurality of telephone numbers of the own device are made to correspond to respective ones of a plurality of prescribed codes, and the plurality of prescribed codes are used. And a second correspondence table in which the plurality of authentication codes created by the above are respectively associated with a plurality of authorized service users, and the service providing side device to which the service user side terminal is connected via the network In a program for causing a computer to execute the authentication method applied to, when the authentication method receives a connection request from a user-side terminal, the telephone number of the own device that received the connection request, and the connection A first creating step of creating a connection request history information by acquiring the telephone number of the user terminal that has transmitted the request and executing the acquisition each time the connection request is received; From the connection request history information created by the extraction step of extracting the telephone number of the own device that has received the connection request in the order in which the connection request is received; and by the extraction step by referring to the first correspondence table. A second creating step of creating a verification code by reading a predetermined code corresponding to the telephone number of the own device, and the second verification step among the verification codes existing in the second correspondence table.
If there is a match with the authentication code created in the creation step of, the authentication step is to authenticate the service provision request from the legitimate service user, and provide the service to the user terminal that sent the connection request this time. A program having: 13. A first correspondence table in which a plurality of telephone numbers are possessed, and a plurality of telephone numbers possessed by the apparatus are respectively associated with respective ones of a plurality of prescribed codes, and the plurality of prescribed codes are used. And a second correspondence table in which the plurality of authentication codes created by the above are respectively associated with a plurality of authorized service users, and the service providing side device to which the service user side terminal is connected via the network In a program for causing a computer to execute the authentication method applied to, whether the authentication method is permitted to connect to the user terminal when the connection request is received from the user terminal. A first determination step of determining whether or not the connection request is received, and a telephone number of the own device that has received the connection request when the connection determination is determined not to be given by the first determination step; The telephone number of the user-side terminal that transmitted the connection request is acquired and stored in the storage device in association with each other, and the connection request history information is stored in the storage device by executing the acquisition and storage each time the connection request is received. From the first creating step created in the device and the connection request history information created in the first creating step, only the telephone number of the own device corresponding to the telephone number of the user terminal that has transmitted the connection request this time is obtained. A second step of referring to the first correspondence table and reading out a predetermined code corresponding to the telephone number of the own device extracted by the extraction step to create an authentication code. Of the authentication codes existing in the second correspondence table,
Second determining step of determining whether or not there is a match with the authentication code created by the creating step, and if it is determined by the second determining step that there is a match, the normal service usage Authenticating that the request is a service provision request from a person and granting connection permission to the user side terminal that has transmitted the connection request this time, and determining that connection permission has been given by the first determination step. And a providing step of providing a service by establishing a line connection with the user-side terminal that has transmitted the connection request this time. 14. A telephone number having a first telephone number and a second telephone number group consisting of a plurality of telephone numbers, and each telephone number of the second telephone number group has a plurality of predetermined codes. And a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are respectively associated with a plurality of authorized service users, In a program for causing a computer to execute an authentication method applied to a service providing side device to which a service user side terminal is connected via a network, the authentication method receives a connection request from the user side terminal. When the connection request is made, the telephone number that has received the connection request is the first telephone number and the second telephone number.
A first telephone number group, and when the first telephone number group is determined to be the second telephone number group by the first step, The telephone number and the telephone number of the user-side terminal that has transmitted the connection request are acquired and stored in the storage device in association with each other. A first creating step of creating history information in the storage device; and a connection request history created by the first creating step when the first phone number is determined by the first determining step. An extraction step of extracting from the information only the telephone number of the own device corresponding to the telephone number of the user-side terminal that has transmitted the connection request this time, and the first correspondence table, with reference to the extraction step. Reads a predetermined code corresponding to the telephone number of its own device which has been extracted by the extraction step, a second generation step of generating an authentication code, of the authentication code present in the second correspondence table, the second
Second determining step of determining whether or not there is a match with the authentication code created by the creating step, and if it is determined by the second determining step that there is a match, the normal service usage An authentication step of authenticating a service providing request from a person and providing a service to the user-side terminal that has transmitted the connection request this time. 15. A first correspondence table in which a plurality of telephone numbers are held and one of a plurality of predetermined codes is made to correspond to a plurality of telephone numbers of the own device, and the plurality of predetermined codes are used. And a second correspondence table in which the plurality of authentication codes created by the above are respectively associated with a plurality of authorized service users, and the service providing side device to which the service user side terminal is connected via the network In a computer-readable storage medium in which the authentication method applied to the above is stored as a program, when the authentication method receives a connection request from a user terminal, the telephone number of the own device that has received the connection request. And a telephone number of the user terminal that has transmitted the connection request, and executes the acquisition every time the connection request is received to create connection request history information. From the connection request history information created in the first creating step, the extraction step of extracting the telephone number of the own device that received the connection request in the order in which the connection request is received, and referring to the first correspondence table, A second creating step of creating a verification code by reading a predetermined code corresponding to the telephone number of the own device extracted in the extracting step, and the second code among the verification codes existing in the second correspondence table.
If there is a match with the authentication code created in the creation step of, the authentication step is to authenticate the service provision request from the legitimate service user, and provide the service to the user terminal that sent the connection request this time. A storage medium having: 16. A first correspondence table having a plurality of telephone numbers, and a plurality of telephone numbers of its own device, each corresponding to one of a plurality of predetermined symbols, and the plurality of predetermined symbols are used. And a second correspondence table in which the plurality of authentication codes created by the above are respectively associated with a plurality of authorized service users, and the service providing side device to which the service user side terminal is connected via the network In a computer-readable storage medium in which the authentication method applied to the above is stored as a program, when the authentication method receives a connection request from the user side terminal, the connection permission is given to the user side terminal. The first determination step of determining whether or not the connection request is given, and the connection request is received when it is determined by the first determination step that the connection permission is not given. The telephone number of the own device and the telephone number of the user terminal that has transmitted the connection request are acquired and stored in the storage device in association with each other, and the acquisition and storage are executed each time the connection request is received. A first creating step of creating connection request history information in the storage device, and a connection request history information created in the first creating step, corresponding to the telephone number of the user terminal that has sent the connection request this time. An extraction step of extracting only the telephone number of the own device in the order of receiving the connection request; and referring to the first correspondence table, reading out a predetermined code corresponding to the telephone number of the own device extracted by the extraction step. A second creating step of creating an authentication code; and the second of the authentication codes existing in the second correspondence table.
Second determining step of determining whether or not there is a match with the authentication code created by the creating step, and if it is determined by the second determining step that there is a match, the normal service usage Authenticating that the request is a service provision request from a person and granting connection permission to the user side terminal that has transmitted the connection request this time, and determining that connection permission has been given by the first determination step. And a providing step of providing a service by establishing a line connection with the user terminal that has transmitted the connection request this time. 17. A telephone number having a first telephone number and a second telephone number group consisting of a plurality of telephone numbers, and each telephone number of the second telephone number group has a plurality of predetermined codes. And a second correspondence table in which a plurality of authentication codes created by using the plurality of predetermined codes are respectively associated with a plurality of authorized service users, A computer-readable storage medium that stores, as a program, an authentication method applied to a service providing side device to which a service user side terminal is connected via a network, wherein the authentication method is from the user side terminal. When the connection request is received, the telephone numbers that have received the connection request are the first telephone number and the second telephone number.
A first telephone number group, and when the first telephone number group is determined to be the second telephone number group by the first step, The telephone number and the telephone number of the user-side terminal that has transmitted the connection request are acquired and stored in the storage device in association with each other. A first creating step of creating history information in the storage device; and a connection request history created by the first creating step when the first phone number is determined by the first determining step. An extraction step of extracting from the information only the telephone number of the own device corresponding to the telephone number of the user-side terminal that has transmitted the connection request this time, and the first correspondence table, with reference to the extraction step. Reads a predetermined code corresponding to the telephone number of its own device which has been extracted by the extraction step, a second generation step of generating an authentication code, of the authentication code present in the second correspondence table, the second
Second determining step of determining whether or not there is a match with the authentication code created by the creating step, and if it is determined by the second determining step that there is a match, the normal service usage And a step of authenticating as a service providing request from a person and providing a service to the user terminal that has transmitted the connection request this time.