JP2004140821A - Authentication method using mobile terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize personal authentication which uses a mobile phone, which is simple and easy, and which does not impose economical burden on the user. <P>SOLUTION: A special number of an authentication center is called in a sending number display state and is cut off by one call from a mobile terminal. Because the authentication center can identify the sending number of the mobile terminal, as long as the sending number display for the call is done in spite of cutting the call off, the center collates a member-registered sending number which corresponds to the sending number by searching the database provided at the authentication center. An authentication processing is executed thereby, and the result is output. <P>COPYRIGHT: (C)2004,JPO

Description

{Circle over (1)} The present invention relates to a simple authentication technique that is performed using a mobile terminal such as a mobile phone at the time of member authentication such as use of an entertainment facility, purchase of a product at a store, use of a service, and the like.

In pachinko parlors and recreational facilities, etc., in order to keep a specified number of customers in the fierce competition for customers at other facilities, we have adopted a membership registration system for our own facilities, and Business models that give various scores are becoming established.

In the above member registration system, a member or a point accumulated by the member is managed by a magnetic stripe card, a bar code or an IC card, and the member authentication and the point management are performed by a computer system provided in the facility. Met.

However, in the above-mentioned system, it is essential to carry a medium such as a membership card for certifying the membership when entering the entertainment facility or using the facilities / equipment. Systems tend to be shunned.

In other words, the more facilities that adopt the membership card system, the more individuals have to carry a large number of cards when going out, and from the consumer's point of view, a system that requires a membership card is rather troublesome. Had become.

に つ い て In this regard, a number of authentication systems using mobile phones, which are rapidly increasing in personal possession, have been proposed.

In a member authentication system using this mobile phone, for example, a telephone number of an authentication center set for each entertainment facility is called from the mobile phone, and a member number, a recitation number, and the like are tone-signaled according to a voice question from the authentication center. It was common to send in and authenticate.

In the case of a mobile phone having a network display function, a user accesses a URL (Uniform Resource Locator) of an authentication center set in advance, calls an authentication screen, and inputs a membership number and a corresponding password by inputting the membership number. It is designed to perform entrance authentication to facilities.
As a prior patent document of a personal authentication method using a mobile phone, there is Japanese Patent Application Laid-Open No. 2003-6366 (Patent Document 1).
JP-A-2003-6366

An authentication system using such a mobile terminal can be used for member authentication of a plurality of entertainment facilities with one mobile phone, thereby relieving customers of the trouble of carrying a card for each entertainment facility or store as in the past. Was to do.

However, even in the authentication system using a mobile phone as described above, a member customer is charged for a call to the authentication center, a packet fee for network access, and the like. I was forced to use a terminal device.

The present invention has been made in view of such a point, and in an authentication technology using a mobile terminal, a simple operation can be performed without requiring a complicated operation to a customer member and without generating an economic burden. It is a technical task to realize effective personal authentication.

The present invention has been made in view of such a point, and in an authentication technology using a mobile terminal, a simple operation can be performed without requiring a complicated operation to a customer member and without generating an economic burden. It is a technical task to realize effective personal authentication.

According to the present invention, in order to solve the above-mentioned problem, a special number of an authentication center is called from a portable terminal in a calling number display state. At this time, the call may be interrupted immediately after the call is confirmed. Even if the call is interrupted, the authentication center can recognize the mobile terminal call number if the call number is displayed on the call, so that the authentication center searches a database provided in the authentication center and corresponds to the call number. Check with the registered member's calling number. Thus, the authentication process is executed and the result is output.

By adopting the above-described means, the customer member calls (calls) the telephone number of the entertainment facility only once from his / her own portable terminal (mobile phone) when using the entertainment facility or the like. Member authentication is completed. Since this one-time call is not answered by the authentication center, the caller's mobile phone fee is not added.

Note that the outgoing call may be directly operated on the mobile terminal, or a control device such as a personal computer or an adapter may be attached to the mobile terminal to perform outgoing call and interrupt control. Further, the cutoff control may be performed on the authentication center side.
According to the present invention, the authentication process can be completed only by the user performing a simple operation without the risk of being charged by using the mobile terminal, and the service can be easily performed through an entertainment facility or a network. Individual authentication can be realized.

<Example 1>
Hereinafter, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 shows the minimum system configuration of the present invention.
As shown in FIG. 1, the system includes a mobile phone 1 (portable terminal) and a personal computer 3, and the personal computer 3 has a terminating device 2 (TA) for terminating a telephone line such as an ISDN line. And the display device 4 are connected.

Although not shown, the personal computer 3 has a main memory (MM), a hard disk device (HD), and the like, mainly a central processing unit (CPU), and the hard disk device (HD) includes an operating system (HD). OS), an authentication program, a communication program, a database (DB), and the like are stored. The central processing unit (CPU) sequentially reads various programs such as an authentication program via a main memory (MM) and executes the control described below.

The personal computer 3 and the receiving device 2 (TA) are connected by a serial cable such as RS-232C or USB, and the personal computer 3 can be connected to a keyboard and the like (not shown) in addition to the receiving device 2 (TA). It is.

The database (DB) stored in the hard disk drive (HD) is not shown, but the member name, reading, postal code, address, gender, date of birth, mobile phone number, mobile mail address, etc. are registered. I have. These information may be input by the operator based on information obtained in advance from the customer member at the time of joining, or the member may input the information from his or her own mobile phone 1 using the network connection function of the mobile phone. .

FIG. 2 is a block diagram showing a functional configuration of a mobile phone, a receiving device, a personal computer, and the like, and FIG. 3 is a block diagram showing an operation sequence of the mobile phone, the receiving device, the personal computer, and the like.

As shown in FIGS. 2 and 3, the telephone number given to the receiving device 2 is called from the mobile phone 1 in the calling number display mode. At this time, in order to display the calling number, the other party's telephone number (special number) is attached with a number "186" for displaying the calling party's telephone number, and the call is originated. The number can be recognized.

ユ ー ザ Here, the user (member customer) may disconnect the line only by calling the mobile phone 1 once (one call). At this time, even if the line is cut off by one call, the receiving device 2 can recognize that there is an incoming call by the calling number. Hand over.

In the above description, an example has been described in which the user (member customer) disconnects the line by one call (one call) by himself. However, such a line disconnection function based on one call (one call) is provided by a receiving device. You may have it on two sides.

Next, the calling number from the mobile phone 1 is transmitted to the personal computer 3 via the serial cable.

(4) The central processing unit (CPU) of the personal computer 3 monitors the serial port, and upon detecting an interruption from the receiving device 2, receives the transmission number notification.

Next, the central processing unit (CPU) searches the database (DB) in the hard disk device (HD), checks each mobile phone number of the customer member, and finds a number that matches the transmission number.

Here, if the matching number is found, the user is authenticated as a member, and the authentication result is transferred to another program. The other program may be, for example, a program for displaying the authentication result on the display device 4 or a program for increasing the points of the customer member according to the number of uses.

FIGS. 4 and 5 show a modification of the first embodiment.

In this modification, a terminal (PC) is connected to the mobile phone 1, and the terminal (PC) controls the calling of the mobile phone 1. The receiving side has the same configuration as that described with reference to FIGS.

In this modification, a terminal (PC) is connected to the mobile phone 1 via a modem cable connected via an interface such as RS-232C or USB, and the terminal (PC) uses the control command such as an AT command to carry the mobile phone. The telephone 1 can be controlled by a modem.

As such control commands such as AT commands, commands that can control the opening of a port, the initialization of a modem, and the number of calls are prepared, and a command control program is stored in a terminal (PC) using these commands. The mobile phone 1 is controlled so that the telephone number of the receiving device 2 is stored only once and stored.

As described above, by controlling the outgoing call of the mobile phone 1 using the terminal (PC) connected by the modem cable, the member customer does not have to operate the line disconnection operation after the one outgoing call by himself / herself. In addition, the operation on the member customer side accompanying the authentication becomes simpler.

Note that the terminal (PC) may be a desktop or notebook personal computer, but is preferably a small computer such as a PDA having excellent portability. It may be an adapter that is simply connected to the connector of the mobile phone 1. In the case of such an adapter structure, when entering a recreational facility, a member customer simply attaches an adapter to his / her own mobile phone 1 to make only one call to the terminating device 2 and automatically processes up to line disconnection. be able to.

FIG. 6 and FIG. 7 show further modifications of the first embodiment.
In this modification, the authentication process using the mobile phone 1 is the same as that described with reference to FIGS. 1 to 3, except that the member customer can display the authentication result using a terminal (PC). .

That is, when personal authentication is required for Internet shopping or the like, in the conventional technology, the ID and password input on the WEB are transmitted and authenticated by using a communication method protected by encryption technology such as SSL. In this modification, the mobile phone 1 performs the authentication process in parallel with the WEB display.

(4) The user (customer member) first inputs a predetermined URL from the terminal (PC) to display a member registration screen of the authentication server. Then, the user inputs a name, a mobile phone number, and the like according to the displayed registration form. The personal information thus input is stored in a database server (DB server).

Next, the user (customer member) accesses the URL of the WEB server to be authenticated from the terminal (PC) to be authenticated via the Internet from the terminal (PC) to be authenticated, inputs his / her ID, and displays the authentication screen of the WEB server. .

In parallel with the operation of such a terminal (PC), the user (customer member) sets his / her mobile phone 1 in the calling number display mode and calls a telephone number associated with the WEB server. This call may be immediately disconnected with only one call.

(4) The CTI server that has received the call from the mobile phone 1 hands over the calling telephone number to the DB server. The DB server checks the calling telephone number against its own database, and outputs an authentication signal to the WEB server when the corresponding telephone number is found.

(4) The WEB server that has received the authentication signal generates an authentication completion screen and causes the terminal (PC) to display the authentication screen.

As described above, in the modified examples of FIGS. 6 and 7, call authentication from the mobile phone 1 can be used for authentication on the Internet, and complicated operation and economic burden are imposed on the user (member customer). A simple and reliable authentication process without applying a password can be performed.
<Example 2>

8 and 9 are an explanatory diagram and a sequence diagram showing another example of the present embodiment.
FIG. 1 shows a mechanism for performing authentication by focusing on the fact that the mobile phone 1 always transmits the serial number (individual number) of the mobile phone 1 to the base station 2.

That is, the base station 12 always recognizes the mobile phones (here, 1A, 1B, 1C) in the power-on state that are within the radio range of the base station 2. In the case of FIG. 8, the mobile phones 1A and 1C are in a power-on state, and 1B is in an off-state. Therefore, the base station recognizes the mobile phones 1A and 1C by their serial numbers (individual numbers).

The authentication device (not shown) connected to the base station 12 has a database similar to that described in the first embodiment. In this database, the mobile phone serial number (individual number) is also included in addition to the mobile phone number. It shall be registered.

(4) The authentication device has received information on the mobile phones (here, 1A and 1C) in a power-on state from the base station 2 within the service area.

In this state, the user (customer member) who wants to perform the authentication executes the operation shown in FIG.
That is, when the user (customer member) who owns the mobile phone 1B wants to be authenticated, the mobile phone 1B is switched from the power-off state to the power-on state. Thereby, the base station 12 recognizes the presence of the mobile phone 1B in the service area, and notifies the authentication device of the manufacturing number (individual number) of the mobile phone 1B.

(4) Upon receiving the serial number (individual number) of the mobile phone 1B from the base station 12, the authentication device starts an authentication timer of the authentication device and turns on an authentication flag.

Next, the user (customer member) who carries the mobile phone 1B turns off the power of the mobile phone 1B within a fixed time (for example, within one minute) after the power is turned on. With this operation, the base station 12 cannot recognize the manufacturing number (individual number) of the mobile phone 1B in the area, and notifies the authentication device of the in-range absence information of the manufacturing number (individual number).
At this time, the authentication device updates the recognition flag of the serial number (individual number) from on to off.

Next, the user (customer member) who carries the mobile phone 1B turns on the power of the mobile phone 1B again. With this operation, the base station 12 recognizes again the manufacturing number (individual number) of the mobile phone 1B in the service area, and notifies the authentication device of this information.

The authentication device updates the authentication flag of the mobile phone 1B to ON again.
As described above, the authentication device searches the database for the serial number (individual number) of the mobile phone 1B having the specific serial number (individual number) within a certain period of time when the authentication is repeatedly performed. When a number matching the production number (individual number) is found, the authentication request made by the production number (individual number) is authenticated as valid.

As described above, in the second embodiment, the authentication process is completed only by repeatedly turning on and off the power of the mobile phone 1B without performing the calling operation itself by the mobile phone 1B.
<Example 3>

The present embodiment is for realizing a user authentication technology by “one-cut” from a telephone (hereinafter, a mobile telephone and a landline telephone are generally referred to as telephones) formed by combining a server & client or a CTI (Computer Telephony Integration). Things.

Hereinafter, a third embodiment will be described with reference to FIGS. 10 and 11.
In FIG. 10, an information transmission server 1001 also serves as an authentication host 1002, and is configured by a general-purpose network information processing device. The information transmission server 1001 stores an authentication server program 1003. On the other hand, the client terminal 1004 stores a browser program 1005 and an authentication client program 1006, which function as a browser and an authentication client.

The user is registered in the authentication host 1002 (information transmission server 1001) in advance, and this is performed by directly accessing the authentication host 1002 (information transmission server 1001) from the client terminal 1004 and registering the user's telephone 1008 or the like. .
The information generated in this manner is stored in a storage area in the authentication host 1002 managed by the authentication server 1003 as a database as shown in FIG.

Next, when using the contents and applications of the information transmission server 1001, the user accesses a predetermined URL (Uniform Resource Locator) of the information transmission server 1001 through the browser program 1005 of the client terminal 1004.

Next, the user inputs the user ID and the password requested by the authentication server program 1003 on the client terminal 1004 (the input of the user ID and the password may be omitted). After that, the authentication server program 1003 sends an execution command for prompting the “one-cut” to the authentication client program 1006. At this time, the authentication process of the user ID and the password may be omitted.

Next, the authentication client program 1006 enters a standby state for receiving a one-way call from the user telephone set 1008.
Next, the user makes a one-way call from the user telephone set 1008 to the communication terminal 1007. In this case, the user telephone set 1008 is set to a calling number display mode, and a call is made to the communication terminal 1007 using a push button. Then, the call is immediately disconnected ("one-cut") after the call is made. At this time, the communication terminal 1007 can recognize the call from the user telephone set 1008 by the calling number display function, but is not charged by the carrier (telephone line operating company) in the call processing.

When the communication terminal 1007 confirms the "one-ring" incoming call, the communication terminal 1007 sends the caller ID of the user telephone 1008 and the one-round reception communication terminal 1007 to the authentication client program 1006 of the client terminal 1004 via the serial port. The unique ID (that is, the own unique ID) is transmitted.

Next, the authentication client program 1006 includes a caller number (a) from the user telephone 1008, a unique ID (b) of the one-way reception communication terminal 1007, and a client terminal 1004 (PC or the like) on which the authentication client program 1006 is installed. ) Is encrypted and sent to the authentication server program 1003. Here, general-purpose SSL communication or the like can be used for the encryption.

Next, the authentication server program 1003 that has received the information (a) to (c) decodes the information and performs a callback to the user telephone 1008 based on the caller number (a). To the CTI server 1009 for execution.

Next, CTI server 1009 calls user telephone 1008 (callback execution).
After receiving the callback, the user operates the push button of the user telephone 1008 according to the CTI guidance transmitted from the CTI server 1009 to perform a predetermined consent input. The information thus input is returned to the CTI server as a consent notice by voice or a push signal.
Next, the CTI server 1009 sends a notification to the effect that the information of the consent from the user has been received to the authentication server program 1003. Through such a series of processes, the authentication server program 1003 completes the authentication of the user.

Next, a modification of the third embodiment will be described with reference to FIGS.
This modification is based on the communication procedure when the client terminal does not have a communication terminal for one-ring incoming call, and has an application program (i-appli (NTT DOCOMO i-appli) This includes the case where an application such as NTT DoCoMo) is used.

When the user is registered in the authentication host 2002 (information transmission server 2001) in advance, the authentication server program 2003 stores the information shown in FIG. 13 in the database. The method of constructing this database is the same as that described above.

Next, when the user uses the content or the application program, the user accesses the information transmission server 2001 through the browser program 2005 of the client terminal 2004.

Next, the authentication server program 2003 generates an access ID 2007 for uniquely identifying the above access from the authentication server program 2003, and receives the access ID 2007 from the authentication client program 2006 or the browser program 2005 on the client 2004 via the information transmission server 2001. hand over. At the same time, information is stored in the access information database shown in FIG.

Next, the user operates the client terminal 2004 in accordance with the authentication client program 2006, or makes a one-call call from the telephone 2008 by inputting the telephone number displayed in the browser program 2005 into the telephone 2008.

Next, CTI server 2009 receives caller information and subaddress information from telephone 2008.
Next, the CTI server 2009 transmits the information received above to the authentication server program 2003 by encrypted communication such as SSL communication.
Next, the authentication server program 2003 performs user authentication based on the information stored in the access information database (FIG. 14) and the information received from the CTI server 2009.

Next, the authentication server program 2003 generates and sends a consent notice indicating the consent information from the user to the information transmission server 2001, and sends the consent notification on the client terminal 2004 to the authentication client program 2006 or the browser program 2005. , The authentication result is notified, and the authentication process is terminated.

Next, a modified example of the present embodiment will be described with reference to FIGS.
This modification relates to a communication procedure in a case where a web site is accessed using a mobile phone that can be connected to a network.
In this modification, when a user is registered in the authentication host 3002 (information transmission server 3001) in advance, the authentication server program 3003 stores information shown in FIG. 16 in a database.
Then, the identification number of the local station authentication host 3002 is registered in the CTI server 3005 in advance.

Next, when using the content or the application program, the user accesses the information transmission server 3001 through the mobile phone 3004.
Next, after the user ID / password authentication, the authentication server program 3003 notifies the user of the message prompting the user to perform the one-off operation. At this time, the access destination telephone number or a combination of the access destination telephone number and the subaddress is displayed in the message. Here, the sub-address is an authentication host identification number, and specifically corresponds to a number following “##” shown as “0120123456 ## 0123456789”.

The user once disconnects the WEB session on the mobile phone 304 and dials (one-off) the access destination notified as described above.
Next, upon confirming the one-time reception, the CTI server 3005 identifies the sub-address, and transmits the caller number of the user mobile phone 3004 and the access date / time (call date / time) to the corresponding authentication host 3002 by encryption such as SSL communication. And send it in the communication.

Next, the authentication server program 3003 that has received the information from the CTI server 3005 sends URL information for resuming WEB access and authentication establishment information to the user's mobile phone 3004 in an e-mail format. It is desirable that the e-mail be an address given to the mobile phone 3004 as a transmission destination and that the e-mail can be directly received by the mobile phone 3004.

(4) The user who has received the e-mail with the mobile phone 3004 selects and confirms the URL information described in the main body of the e-mail, and restarts the WEB communication session.

FIG. 1 is an explanatory diagram illustrating a system configuration according to a first embodiment of the present invention. Functional block diagram of the first embodiment Operation sequence diagram of the first embodiment System configuration diagram in a modified example of the first embodiment Operation sequence diagram of a modification of the first embodiment System configuration diagram of a further modified example of the first embodiment Operation sequence diagram of a further modification of the first embodiment Schematic explanatory diagram of Embodiment 2. Operation sequence diagram of the second embodiment System configuration diagram of a third embodiment Explanatory drawing showing the contents of the authentication information database of the third embodiment System configuration diagram of a modification of the third embodiment Explanatory diagram showing the contents of an authentication information database according to a modification of the third embodiment. Explanatory diagram showing the contents of an access information database according to a modification of the third embodiment. System configuration diagram showing a further modification of the third embodiment. Explanatory diagram showing the contents of an authentication information database according to a modification of the third embodiment.

Explanation of reference numerals

1 (1A, 1B, 1C) Mobile phone 2 Terminating device (TA)
3 personal computer 4 display device 12 base station

Claims (4)

A personal authentication method using a mobile terminal,
Call a special number of the authentication means from the mobile terminal in the calling number display state of the mobile terminal,
The authentication means recognizes the mobile terminal calling number and performs authentication by searching a database provided in the authentication means after the call is cut off and checking the database with a member registered calling number corresponding to the calling number. Execute the process,
An authentication method using a mobile terminal that outputs an authentication processing result from the authentication means. The authentication method using a portable terminal according to claim 1, wherein the portable terminal is connected to a control device, and the number of calls is limited by control of the control device. A personal authentication method using a mobile terminal,
A base station for identifying an individual number of a mobile terminal within the service area by turning on the power of the mobile terminal, and an authentication unit that receives information on the individual number from the base station and checks it against an authentication database,
The authentication unit identifies the authentication request from the mobile terminal by repeating the operation of turning on and off the power of the mobile terminal within a certain time a certain number of times, searches the individual database from an authentication database, and obtains the authentication result. Personal authentication method using a mobile terminal that outputs a message. Transmitting a content or application use request from the user terminal to the information transmission server;
Receiving, at the user terminal, an immediate disconnection execution command after a call from an authentication server linked to the information transmission server;
Prompting the user terminal to immediately execute disconnection after calling from the user's telephone;
Upon receiving an immediate disconnection process after calling from the user's telephone, transmitting the calling number of the user's telephone and the ID of the user terminal to the authentication server,
Performing a callback from the authentication server to the telephone via the CTI server;
Receiving a consent operation performed by the user on the telephone in response to the callback, and notifying the authentication server of the completion of the authentication.

Images