JP2004234329A - Single sign-on system, method, program and storage medium utilizing id mapping - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a single sign-on system for enabling respective participating companies to perform user management with specific ID systems and enabling a user to use an ID which he has conventionally used. <P>SOLUTION: A site (for example, SB) which has received a service request of the user transmits a notice of receiving the request to a site (for example, SD) which has an ID authenticated by the user and the site SD authenticates the user and transmits the results with the user ID to a server 11. The server 11 checks whether the user ID received from the site SD is registered on a table 12 and, in the case that it is not registered, an unused ID is read from a table 16 for registering unused ID of the site SB beforehand and registers the unused ID on the table 12. Then, the server 11 transmits the authentication results received from the site SD and the user ID for the site SB read from the table 12 to the site SB and the site SB provides a commodity or service which is requested to the user. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a single sign-on system in which a user (end user) can authenticate another site using an ID and a password acquired at one site on the Internet.
[0002]
[Prior art]
Conventionally, as a single sign-on technology, an agent module type, a reverse proxy type, and an account aggregation type have been known, but these have the following problems, respectively.
(1) Agent module type
Each member company can manage users only with a unified ID system, and cannot manage users with an individual ID system used before joining the system.
The user cannot use the ID that has been used conventionally, and needs to obtain a new single sign-on ID.
[0003]
(2) Reverse proxy type
-Since all contents are provided via the proxy server, the load is concentrated on the proxy server.
・ Each member company cannot manage users with their own ID system.
-The user needs to obtain a new single sign-on ID.
(3) Account aggregation type
-The user must individually register ID at each site.
-The user needs to obtain a new single sign-on ID.
[0004]
In addition, in the conventional single sign-on system, when the format and communication method of personal information and product information are different for each member company, there is no function to convert them mutually. In addition, the format and communication method of personal information and product information had to be changed based on system regulations. The following patent documents are known as conventional techniques of the single sign-on system.
[0005]
[Patent Document 1]
JP-A-2002-335239
[Patent Document 2]
JP-A-2002-334056
[Patent Document 3]
JP 2002-324051 A
[Patent Document 4]
JP-A-2002-288139
[Patent Document 5]
JP 2002-278933 A
[Patent Document 6]
JP-A-2002-269272
[Patent Document 7]
JP-A-2002-169777
[Patent Document 8]
JP-A-2002-032340
[Patent Document 9]
JP 2000-259566 A
[Patent Document 10]
JP 2000-222360 A
[Patent Document 11]
JP 2000-172646 A
[Patent Document 12]
JP-A-2000-106552
[Patent Document 13]
JP-A-10-269184
[0006]
[Problems to be solved by the invention]
The present invention has been made in view of the above circumstances, and its purpose is to allow each affiliated business operator (site operator) to manage users by using an individual ID system used before joining the system. It is another object of the present invention to provide a single sign-on system in which a user does not need to newly obtain an ID / password and can use an ID / password which has been conventionally used as it is.
Another object of the present invention is to provide a single sign-on system in which an end user can authenticate various sites with one ID.
[0007]
Still another object of the present invention is to provide a single sign-on system in which each member company can provide a content service to a user who owns an ID of another company.
It is still another object of the present invention to provide a single sign-on system in which each member company can manage users with a unique ID system.
Still another object of the present invention is to provide a single-signed system that allows each affiliated company to cooperate with other sites without being conscious of conversion of data interface protocols required for cooperating with other sites. To provide an on-system.
[0008]
Still another object of the present invention is to provide a single sign-on system in which a content folder can provide an authentication / content service without providing an ID to an end user.
Still another object of the present invention is to provide a single sign-on system in which each member company can join the system without changing the format of personal information and product information and the communication method.
[0009]
[Means for Solving the Problems]
SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and the invention according to claim 1 manages a user terminal, a site managed by a plurality of businesses that provide goods or services, and manages the entire system. In a single sign-on system that is connected to a single sign-on server via a network, a first site that receives a request for a product or service from a user determines that the request has been made by the authenticated ID of the user. To a second site that owns, or via a single sign-on server, the second site authenticates the user and the result along with a user ID or something similar to the single sign-on server And the single sign-on server sends the user ID received from the second site or It is checked whether the user ID of the first site corresponding to the first site is registered in the first storage means. If not, the unused ID of the first site is registered in advance. The unused ID is read out from the second storage unit and registered in the first storage unit, and then the single sign-on server reads the authentication result received from the second site and the authentication result received from the first storage unit. The first site transmits the read user ID for the first site to the first site, and the first site registers the user ID in an internal storage unit and stores the requested product or service in the user. This is a single sign-on method characterized by providing to a single sign-on.
[0010]
According to a second aspect of the present invention, in the single sign-on method according to the first aspect, the first site receives a request from the second site directly or via a single sign-on server to receive a product or service. Information to the single sign-on server, the single sign-on server converts the format of the information about the product or service for the second site based on the information in the internal storage means, and converts the format. Transmitting information about a later product or service to the second site, the second site performing a billing process based on the information about the product or service, and transmitting the result to the single sign-on server, A single sign-on server sends the result to the first site.
[0011]
According to a third aspect of the present invention, in the single sign-on method according to the first aspect, the second site relates to the user in response to a request from the first site directly or via a single sign-on server. Sending information to the single sign-on server, the single sign-on server converts the format of the information about the user for the first site based on the information in the internal storage means, The first site transmits information on the user to an internal storage unit.
[0012]
According to a fourth aspect of the present invention, in the single sign-on method according to the first aspect, when the single sign-on server communicates with each site, the single sign-on server converts a communication method based on information in an internal storage unit. And communicate with each site.
[0013]
According to a fifth aspect of the present invention, there is provided a single terminal in which a user terminal, a site managed by a plurality of businesses providing goods or services, and a single sign-on server managing the entire system are connected via a network. In the sign-on system, each site, when receiving a request for a product or service from a user, transmitting means for transmitting the authentication of the user to another site holding the authenticated ID of the user, An authentication means for authenticating the user when a user authentication request is made and transmitting the result to a single sign-on server together with a user ID or a similar one, wherein the single sign-on server is provided for each user. First storing means for storing a user ID used in each site, and an unused ID of each site in advance. Registered second storage means, registration means for registering an ID read from the second storage means for a user ID not registered in the first storage means, and a user ID received from the site or Means for reading out the user ID of the transmission destination site from the first storage means based on the order, and transmitting the user ID together with the authentication result received from the site to the transmission destination site. It is.
[0014]
According to a sixth aspect of the present invention, in the single sign-on system according to the fifth aspect, the site directly or in response to a request from another site via a single sign-on server transmits the information on the product or service to the single sign-on system. Means for transmitting to the sign-on server, the single sign-on server converts the format of the information on the product or service for the destination site based on the information in the internal storage means, after the format conversion Means for transmitting information on goods or services to a destination site, wherein the site performs a billing process based on information on goods or services received from the single sign-on server, and transmits the result to the single sign-on server. Means for transmitting to the single sign-on server There characterized by comprising means for transmitting a result of the charging process to the destination site.
[0015]
According to a seventh aspect of the present invention, in the single sign-on system according to the fifth aspect, the site receives the request from another site directly or through a single sign-on server and transmits the information on the user to the single sign-on. Means for transmitting to the on-server, wherein the single sign-on server converts the format of the information about the user for the destination site based on the information in the internal storage means, and the information about the user after the format conversion To a destination site, and the site has means for registering information about the user received from the single sign-on server in an internal storage means.
[0016]
According to an eighth aspect of the present invention, in the single sign-on system according to the fifth aspect, when the single sign-on server communicates with each site, the single sign-on server converts a communication method based on information in an internal storage unit. And communicate with each site.
[0017]
According to a ninth aspect of the present invention, there is provided a single terminal in which a user terminal, a site managed by a plurality of businesses providing goods or services, and a single sign-on server managing the entire system are connected via a network. A program used in the single sign-on server in the sign-on system, wherein the user ID received from the first site or the user ID of the second site corresponding to the user ID received from the first site is stored in the single sign-on server. A procedure for checking whether or not an unused ID is registered in the first storage means, and a second storage means in which an unused ID of the second site is registered in advance when the ID is not registered in the first storage means. Reading the unused ID from the first storage means and registering the unused ID in the first storage means, and the authentication result received from the first site. When a program for executing the steps of transmitting a user ID for the second site read from said first storage means to the second site.
[0018]
According to a tenth aspect of the present invention, in the program according to the ninth aspect, a procedure for converting a format of information on the product or service received from the site for another site in accordance with information in an internal storage means. Transmitting the information on the goods or services after the format conversion to the other site.
According to an eleventh aspect of the present invention, in the program according to the ninth aspect, a procedure for converting a format of information about the user received from the site for another site according to information in an internal storage means;
Transmitting the information on the user after the format conversion to the other site.
[0019]
According to a twelfth aspect of the present invention, in the program according to the ninth aspect, when communicating with the site, a procedure for reading a communication method from an internal storage means and communicating with each site according to the read communication method is provided. It is characterized by.
[0020]
According to a thirteenth aspect of the present invention, there is provided a single terminal in which a user terminal, a site managed by a plurality of businesses providing goods or services, and a single sign-on server managing the entire system are connected via a network. A storage medium storing a program used in the single sign-on server in the sign-on system, wherein the single sign-on server has a second site corresponding to a user ID received from a first site or a user ID received from the first site. For checking whether or not the user ID of the second site is registered in the first storage unit, and when the user ID is not registered in the first storage unit, the unused ID of the second site is registered in advance. Reading the unused ID from the second storage means and registering the unused ID in the first storage means; A program for executing a procedure for transmitting the authentication result received from the first site and the user ID for the second site read from the first storage unit to the second site. .
[0021]
According to a fourteenth aspect of the present invention, in the storage medium storing the program according to the thirteenth aspect, the format of the information on the product or service received from the site is changed according to the information in the internal storage means for another site. And a step of transmitting information on the goods or services after the format conversion to the other site.
According to a fifteenth aspect of the present invention, in the storage medium storing the program according to the thirteenth aspect, the format of the information on the user received from the site is converted for another site according to the information in the internal storage means. And a step of transmitting information about the user after the format conversion to the another site.
[0022]
According to a sixteenth aspect of the present invention, in the storage medium storing the program according to the thirteenth aspect, when communicating with the site, a communication method is read from an internal storage means, and communication with each site is performed according to the read communication method. It is characterized by having a procedure to perform.
[0023]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a single sign-on system according to one embodiment of the present invention. In this figure, reference numerals SA to SD denote sites of operators A, B, C, and D which are members of the single sign-on system, respectively. A server, an authentication server for authenticating the user, and a billing settlement server for billing the user are provided respectively. Only the service server is provided at the site SB of the company B, and the service server is provided at the site SC of the company C. And an authentication server, and a service server, an authentication server, and a billing settlement server are provided at the site SD of the company D. Each of the sites SA to SD is connected to the Internet 5.
[0024]
, 7,... Are user terminals connected to the Internet 5.
Reference numeral 11 denotes a single sign-on server that controls this system. The single sign-on server 11 is connected to each of the sites SA to SD and the user terminals 7, 7,... Via the Internet 5, and has an ID mapping function and an I / F conversion function described below as main functions. I have. And the following tables are built in.
[0025]
(1) ID mapping table 12
In this system, the user can use the ID already obtained at any site without any change. However, the ID acquired by a user at one site is unique to that site, but the possibility that the same ID is registered at another site, or the ID system managed at that site is different at other sites May not be manageable. Therefore, the single sign-on server 11 assigns a new ID to the other user than the operator who has acquired the ID for the same user, and registers the assigned ID in the ID mapping table 12 (ID mapping table 12). function).
[0026]
Referring to the ID mapping table 12 shown in FIG. 2, a user named Takei has registered an ID “takei” on the site of the company C. In this case, the single sign-on server 11 assigns the ID “MA0001” to the operator A, the ID “MB0001” to the operator B, and the ID “MD0001” to the operator D for Mr. Takei. Assign. Then, the assigned ID is registered in the ID mapping table 12. This registration is performed when necessary. The type of ID to be registered will be described later.
[0027]
(2) Product information format conversion table 13
Formats such as a product code, a product name, a quantity display, and a unit price display used by each of the businesses A to D are usually different from each other. Therefore, in this system, the merchandise information format conversion table 13 is provided so that each business operator can use the format which has been used conventionally even after joining the system. FIG. 3 shows an example. As shown in this example, a format for registering product information is registered in the product information format conversion table 13 for each company, and by using the product information format conversion table 13, the The product information format can be easily changed (I / F conversion function). The registration of the product information format conversion table 13 is performed when each business operator joins the system.
[0028]
(3) Personal information format conversion table 14
The format of personal information used by each of the businesses A to D is usually different from each other. Therefore, in this system, the personal information format conversion table 14 is provided so that each business operator can use the format which has been used conventionally even after joining the system. FIG. 3 shows an example. As shown in this example, a format for registering personal information is registered in the personal information format conversion table 14 for each business entity. The personal information format can be easily changed (I / F conversion function). The registration of the personal information format conversion table 14 is performed when each company joins the system.
[0029]
(4) Communication method conversion table 15
The communication systems used by the operators A to D are usually different from each other. Therefore, in this system, this communication system conversion table 15 is provided so that each business operator can use the communication system which has been used conventionally even after joining the system. FIG. 3 shows an example. As shown in this example, the communication method is registered in the communication method conversion table 15 for each business operator, and by using the communication method conversion table 15, the single sign-on server 11 -It is possible to easily change the communication method when communicating with the SD (I / F conversion function). The registration of the communication system conversion table 15 is performed when each company joins the system.
[0030]
(5) Mapping ID table 16
As described above, the single sign-on server 11 assigns an ID to a company other than the company that first registered an ID or something similar thereto, and stores the result in the ID mapping table 12. register. However, if the single sign-on server 11 assigns an appropriate ID, there is a possibility that the ID is already used by the business operator. Therefore, each business operator notifies the single sign-on server 11 of a character / numeric string which may be used as an ID in advance when joining the system as a mapping ID. The single sign-on server 11 registers the notified mapping ID in the mapping ID table 16. Then, when the ID mapping table 12 is registered, the mapping ID read from the mapping ID table 16 is registered in the table 12.
[0031]
Next, the operation of the above-described single sign-on system will be described with reference to FIGS. FIG. 4 is an explanatory diagram of the system, and FIGS. 5 and 6 are flowcharts of the operation.
First, a business affiliated with the system notifies the single sign-on server 11 in advance of contents, services, and the like for which single sign-on is permitted. At this time, if necessary, information necessary for cooperating with other sites, such as the format of product information and personal information, a communication protocol, etc., is also notified.
[0032]
Now, suppose that the user Y shown in FIG. 4 is a user who has acquired an ID and a password from the site SD of the company D. Hereinafter, a case will be described as an example where the user Y accesses the site SB of the company B and receives the provision of the content.
The user Y first accesses the site SB from the terminal 7 and requests a content (step (1) in FIG. 4). The service server of the site SB receives this access and transmits a service screen to the terminal 7 of the user Y (step S1 in FIG. 5). FIG. 7 shows an example of this service screen. As shown in this figure, options for selecting a site for performing ID authentication are displayed on the service screen. Here, the user Y selects the business operator D. When this selection is made, an authentication request is transmitted to the site SD of the linked company D (step (2) in FIG. 4, step S2a in FIG. 5).
[0033]
The site SD of the company D receives this transmission and transmits an authentication screen to the terminal 7 of the user Y (FIG. 4, step (3), FIG. 5, step S2b). The user Y inputs an ID and a password on the authentication screen displayed on the terminal 7 (see step S2c in FIG. 5, and FIG. 8), and clicks a login button. Thus, the ID and the password input by the user Y are transmitted from the terminal 7 to the site SD (FIG. 4, step (4)). The site SD receives this ID and password, and performs authentication based on the internal database (FIG. 5, step S3). If the authentication result is "NG", a display screen for an authentication error is transmitted to the terminal 7 (step S4). Thereby, an authentication error is displayed on the terminal 7 (FIG. 5, step S5). If the authentication result is “OK”, the notification of the authentication “OK” of the user Y, the ID of the user Y or something equivalent thereto, and the ID cooperation request of the company B are transmitted to the single sign-on system 11. (Step (5) in FIG. 4, Step S6 in FIG. 5).
[0034]
Upon receiving this request, the single sign-on server 11 refers to the IP mapping table 12 and checks whether or not the ID of the business entity B has already been mapped (registered) for the user Y (FIG. 5, steps S7 and S8). . If not mapped, the mapping ID of the operator B is read from the mapping table 16 and registered in the ID mapping table 12 (FIG. 4, step (6), FIG. 5, steps S9, S10). Next, the single sign-on system 11 transmits the ID registered in the mapping table 12 to the site SB of the operator B (FIG. 4, step (7), FIG. 5, step S11). If “YES” is determined in the step S8, the process jumps the steps S9 and S10 and proceeds to the step S11.
[0035]
The site SB receiving the ID manages the content request received from the user Y by using the ID (step S12). Next, the site SB determines whether or not billing settlement is necessary for the request from the user Y (FIG. 6, step S13). Then, if the billing settlement is necessary, a content purchase confirmation screen is transmitted to the terminal 7 of the user Y (step S14). The user Y looks at the screen displayed on the terminal 7 and, when purchasing content (products), selects a screen indicating the intent to purchase. When this selection is made, a billing settlement request is sent to the linked site SD (step S15).
[0036]
Upon receiving this request, the site SD transmits a product information request to the single sign-on server 11 (step S16). The single sign-on server 11 transmits this request to the site SB of the operator B (Step S17). The site SB receives the request, reads out the product information from the storage unit, and transmits the product information to the single sign-on server 11 (FIG. 4, step (8), FIG. 6, step S18). The single sign-on server 11 converts the format of the product information into the format of the company D using the product information format conversion table 13, and transmits the format to the site SD of the company D (step S19). The company D obtains the price of the product based on the unit price and the quantity included in the product information, performs a billing and settlement process for the obtained amount, and transmits the result to the single sign-on server 11 (FIG. 4, step ( 11), FIG. 6 and step S20). The single sign-on server 11 transmits the result of the billing and settlement to the site SB of the operator B (FIG. 4, step (12), FIG. 6, step S21).
[0037]
The site SB checks the result of the charge settlement (step S22), and if "NG", transmits a "charge settlement error" display screen to the terminal 7 of the user Y. As a result, a “billing settlement error” is displayed on the terminal 7 (step S23). If the determination in step S22 is "OK", the process proceeds to step S24. If the result of the determination in step S13 is "NO", steps S14 to S23 are jumped to proceed to step S24.
[0038]
In step S24, the site SB determines whether the personal information of the user Y is necessary. Then, if necessary, a personal information request is transmitted to the single sign-on server 11 (step S25). The single sign-on server 11 transmits the request to the site SD (Step S26). The site SD reads the personal information of the user Y from the storage unit and transmits the personal information to the single sign-on server 11 (Step S27).
[0039]
The single sign-on server 11 converts the format of the personal information received from the site SD into the personal information format of the company B using the personal information format conversion table 14, and transmits the format to the site SB (step S28). The site SB registers this personal information in the internal storage unit (step S29). Then, a service (content distribution) is provided to the user Y (FIG. 4, step (13), FIG. 6, step S30). If the decision result in the step S24 is "NO", the steps S25 to S29 are jumped, and the process proceeds to the step S30. The user Y who has received the service from the site SB uses the service (step S31).
[0040]
【The invention's effect】
According to the present invention, the following effects can be obtained.
(1) The site operator (each affiliated company) can manage users by using an individual ID system used before joining the system.
(2) The site operator can provide a content service to a user who has another company's ID.
(3) The site operator holding the content can provide the authentication / content service without providing the ID to the user.
(4) The site operator can use the user data (ID / password / personal information), data on goods / services, and the data format which have been managed so far without any change.
[0041]
(5) Cooperation between a plurality of companies (sites) that individually manage IDs in a company can be performed while maintaining the ID management system.
(6) The user does not need to obtain a new ID / password, and can use the ID / password which has been conventionally used as it is.
(7) The user can authenticate various sites with one ID.
(8) It is possible to reduce the trouble of the user acquiring a new ID or registering personal information.
(9) A user who does not have any member site ID can use the content service of all sites with the same ID and password by acquiring the ID at any one of the member sites. .
[0042]
(10) The user can use the content service of another company's site without registering the user data (ID / password / personal information) registered on the site to which he or she belongs.
(11) A site operator can cooperate with another site without being aware of conversion of a communication method such as a data interface protocol necessary for cooperating with another site.
(12) The content provider / ID payout source can request / reply information necessary for cooperating with another site in a format that can be read by the company.
(13) The site operator can provide authentication / content services with unique IDs for users of various sites by using the authentication / content service provision mechanism of the site as it is. This makes the single sign-on function available to all services.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a single sign-on system according to an embodiment of the present invention.
FIG. 2 is an explanatory diagram for explaining an ID mapping table 12 and an ID mapping function in the same system.
FIG. 3 is an explanatory diagram for explaining a product information format conversion table 13, a personal information format conversion table 14, a communication method conversion table 15, and an I / F conversion function in the same system.
FIG. 4 is an explanatory diagram for explaining an operation of the system.
FIG. 5 is a flowchart for explaining the operation of the system.
FIG. 6 is a flowchart for explaining the operation of the system.
FIG. 7 is a display screen diagram for explaining an operation of the system.
FIG. 8 is a display screen diagram for explaining the operation of the system.
[Explanation of symbols]
5. Internet
7 ... User terminal
11 Single sign-on server
12 ... ID mapping table
13 ... Product information format conversion table
14 ... Personal information format conversion table
15: Communication method conversion table
16. Mapping ID table
SA, SB, SC, SD… Site

Claims (16)

In a single sign-on system in which a user terminal, a site managed by a plurality of businesses that provide goods or services, and a single sign-on server that manages the entire system are connected via a network,
A first site receiving a request for goods or services from a user, transmitting the request to a second site holding the authenticated ID of the user, directly or via a single sign-on server;
The second site authenticates the user, and sends the result to the single sign-on server together with a user ID or the like,
The single sign-on server checks whether the user ID of the first site corresponding to the user ID received from the second site or a user ID corresponding thereto is registered in the first storage unit, If not registered, the unused ID of the first site is read in advance from the second storage unit in which the unused ID is registered and registered in the first storage unit,
Next, the single sign-on server sends the authentication result received from the second site and the user ID for the first site read from the first storage means to the first site,
A single sign-on method, wherein the first site registers the user ID in an internal storage unit and provides a requested product or service to the user. The first site transmits information on goods or services to the single sign-on server in response to a request from the second site directly or via a single sign-on server;
The single sign-on server converts a format of the information on the product or service for the second site based on information in an internal storage unit, and converts the information on the product or service after format conversion into the second format. Submit to the site,
The second site performs a billing process based on the information on the product or service and transmits the result to the single sign-on server;
The single sign-on method according to claim 1, wherein the single sign-on server sends the result to the first site. The second site transmits information about the user to the single sign-on server in response to a request from the first site, directly or via a single sign-on server;
The single sign-on server converts a format of the information about the user for the first site based on information in an internal storage unit, and transmits the information about the user after the format conversion to the first site. ,
2. The single sign-on method according to claim 1, wherein the first site registers information on the user in an internal storage unit. The single sign-on server according to claim 1, wherein, when communicating with each site, the single sign-on server converts a communication method based on information in an internal storage unit and communicates with each site. Method. In a single sign-on system in which a user terminal, a site managed by a plurality of businesses that provide goods or services, and a single sign-on server that manages the entire system are connected via a network,
Each of the above sites
Transmitting means for transmitting, when a request for a product or service is received from a user, authentication of the user to another site holding the authenticated ID of the user,
When there is a user authentication request from the other site, the authentication unit performs authentication of the user, and transmits the result to a single sign-on server together with a user ID or a similar one,
The single sign-on server,
First storage means for storing a user ID used in each site for each user;
Second storage means in which an unused ID of each site is registered in advance;
Registration means for registering an ID read from the second storage means for a user ID not registered in the first storage means;
Means for reading the user ID of the destination site from the first storage means based on the user ID received from the site or something similar thereto, and transmitting the user ID to the destination site together with the authentication result received from the site;
A single sign-on system comprising: The site includes means for transmitting information on goods or services to the single sign-on server in response to a request from another site directly or via a single sign-on server,
The single sign-on server converts the format of the information on the product or service for the destination site based on the information in the internal storage unit, and sends the format-related information on the product or service to the destination site. Means for transmitting,
The site comprises means for performing a billing process based on information on goods or services received from the single sign-on server and transmitting the result to the single sign-on server,
The single sign-on system according to claim 5, further comprising: a unit configured to transmit the result of the charging process to the destination site by the single sign-on server. The site includes means for transmitting information about the user to the single sign-on server in response to a request from another site directly or via a single sign-on server,
The single sign-on server converts the format of the information about the user for the destination site based on the information in the internal storage unit, and transmits the information about the user after the format conversion to the destination site,
6. The single sign-on system according to claim 5, wherein said site has means for registering information about the user received from said single sign-on server in an internal storage means. The single sign-on server according to claim 5, wherein, when communicating with each site, the single sign-on server converts a communication method based on information in an internal storage unit and communicates with each site. system. The single sign-on server in a single sign-on system in which a user terminal, a site managed by each of a plurality of businesses that provide goods or services, and a single sign-on server that manages the entire system are connected via a network. A program used in
In the single sign-on server,
Checking whether or not the user ID of the second site corresponding to the user ID received from the first site or the one corresponding thereto is registered in the first storage means;
When the unused ID is not registered in the first storage unit, the unused ID is read from the second storage unit in which the unused ID of the second site is registered in advance and registered in the first storage unit. Instructions and
Transmitting the authentication result received from the first site and the user ID for the second site read from the first storage unit to the second site;
The program to execute. Converting the format of the information on the product or service received from the site for another site according to the information in the internal storage means;
A step of transmitting information on the goods or services after the format conversion to the other site,
The program according to claim 9, further comprising: Converting the format of the information about the user received from the site for other sites according to the information in the internal storage means;
Transmitting information about the user after the format conversion to the other site,
The program according to claim 9, further comprising: The program according to claim 9, further comprising a step of reading a communication method from an internal storage unit when communicating with the site, and communicating with each site according to the read communication method. The single sign-on server in a single sign-on system in which a user terminal, a site managed by a plurality of businesses that provide goods or services, and a single sign-on server that manages the entire system are connected via a network. A storage medium storing a program used in
In the single sign-on server,
Checking whether or not the user ID of the second site corresponding to the user ID received from the first site or the one corresponding thereto is registered in the first storage means;
When the unused ID is not registered in the first storage unit, the unused ID is read from the second storage unit in which the unused ID of the second site is registered in advance and registered in the first storage unit. Instructions and
Transmitting the authentication result received from the first site and the user ID for the second site read from the first storage unit to the second site;
Storage medium storing a program for executing the program. Converting the format of the information on the product or service received from the site for another site according to the information in the internal storage means;
A step of transmitting information on the goods or services after the format conversion to the other site,
A storage medium storing the program according to claim 13, characterized by comprising: Converting the format of the information about the user received from the site for other sites according to the information in the internal storage means;
Transmitting information about the user after the format conversion to the other site,
A storage medium storing the program according to claim 13, characterized by comprising: 14. The storage medium according to claim 13, further comprising a step of reading a communication method from an internal storage unit when communicating with the site, and communicating with each site according to the read communication method.

Images