JP2005078371A - Information processing server and information processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing server 1 that utilizes authentication information which an authentication terminal has to authenticate a communication terminal having no authentication information. <P>SOLUTION: The information processing server 1 includes: an authentication identifier storage device 103 for storing authentication information; an authentication image creation means 111 which, when receiving a request to authenticate the communication terminal 2, creates an authentication image including a generated authentication parameter to send the image to the communication terminal 2 while storing the authentication parameter in an authentication parameter storage device 101; an authentication information acquisition means 112 for acquiring the authentication image information acquired from the communication terminal 2, and from the authentication terminal 3 the authentication information which the authentication terminal 3 has; and an authentication information collation means 113 which refers to the authentication parameter storage device 101 to determine whether information on the authentication image acquired by the authentication information acquisition means 112 matches the information of the image generated by the authentication image generation means 111, and whether the authentication information that the authentication terminal 3 has, matches the authentication information stored in the authentication identifier storage device 103, and which sends the results to the communication terminal 2. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an information processing server and an information processing method for authenticating a communication terminal that does not include authentication information by using authentication information included in the authentication terminal.

  Now, with the spread of the Internet and mobile terminals, information communication can be performed anytime and anywhere. For this reason, various types of encryption have been considered so that information to be communicated is not leaked to others, and information is often transmitted to a server using an encrypted protocol such as HTTPS (Hypertext Transfer Protocol Security). Has been done.

  In the case of a mobile terminal, since the standard is determined by the communication carrier, for example, by acquiring a device identifier for identifying the mobile terminal, the server can perform authentication of the mobile terminal with high accuracy.

  However, it is difficult to authenticate a computer or the like in a communication network such as the Internet. That is, according to a protocol such as a browser or HTTP (Hypertext Transfer Protocol) used to connect to the Internet or the like with a computer, it is impossible to acquire an identifier for identifying the computer and transmit it to the server like a portable terminal. It is. In practice, the encrypted ciphertext created by the server is stored in the browser cookie, and the ciphertext is sent to the server at the time of authentication, or the user is prompted to enter the password when connecting to the server. is there.

A user information database that stores authentication information of a user who is connected to a partner site on the Web via a network and is allowed to access the partner site, and authentication information input to the partner site are acquired and stored in the user information database. There is an authentication system that includes a control unit that performs authentication processing based on this and transmits an authentication result to a partner site (for example, Patent Document 1).
JP 2003-6164 A

  However, in Patent Document 1 described above, if authentication is performed only in the authentication system, authentication for a plurality of affiliated sites is not required. However, when eavesdropping is performed in authentication in the authentication system, there is an immeasurable loss of the user. .

  On the other hand, with the spread of mobile terminals such as mobile phones, there are many users who enjoy various services using mobile phones, and personal information such as names and addresses may be registered when providing services. In this case, it is very difficult to register such personal information in a portable terminal having a poor input user interface, and many users desire registration on a computer. However, there is a problem at the time of user authentication as described above in registration with a computer, and development of a system that overcomes this problem is desired.

  Accordingly, an object of the present invention is to provide an information processing server and an information processing method for authenticating a communication terminal not provided with authentication information by using authentication information provided in the authentication terminal.

  In order to solve the above-mentioned problem, the present invention uses authentication information provided in an authentication terminal to authenticate the authentication information stored in an information processing server used in an information processing system for authenticating a communication terminal not provided with authentication information. Upon receiving an authentication request for the information storage device and the communication terminal, an authentication image is generated by generating an authentication parameter, generating an authentication image including the authentication parameter, transmitting it to the communication terminal, and storing the authentication parameter in the authentication parameter storage device And the authentication image acquired by the authentication information acquisition unit with reference to the authentication parameter acquisition unit and the authentication parameter storage device, the authentication information acquisition unit acquiring the authentication image information acquired from the communication terminal and the authentication information included in the authentication terminal. Is the information of the image generated by the authentication image generation means, and further the authentication information provided in the authentication terminal is stored in the authentication information storage device. It determines whether to match the authentication information, and an authentication information collation means for transmitting the result to the communication terminal.

  According to the present invention, even a terminal having no authentication information can be authenticated by using the authentication information.

  The authentication parameter generated by the authentication image generating means preferably includes one or more of a random number and date / time that can be uniquely specified.

  In this case, since it becomes difficult to guess the authentication parameter generated by the information processing server, a higher security level can be guaranteed.

  Further, the authentication image generating means further stores the authentication parameter effective date and time in the authentication parameter storage device, and the authentication information matching means stores the date and time acquired by the authentication information acquisition means in the authentication parameter storage device. Preferably, the authentication is permitted before the valid date and time, and the authentication is disabled when it is after the valid date and time of the authentication parameter.

  According to this, by providing the effective date and time of authentication, even if fraud is performed between the communication terminal and the authentication terminal, the authentication can be eliminated.

  The authentication image generation means transmits the authentication image to the communication terminal using the first communication network, and the authentication information acquisition means authenticates using the second communication network different from the first communication network. It is preferable to acquire authentication image information and authentication information from the terminal.

  According to this, since the authentication image and the authentication information are transmitted and received through different networks, it is very difficult to acquire both pieces of information even if the network is wiretapped.

  Further, the authentication image information is preferably information obtained by decoding the authentication image acquired from the communication terminal at the authentication terminal. Further, the authentication image information is preferably information obtained by decoding the authentication image acquired from the communication terminal and received from the authentication terminal.

  Such authentication information transmitted and received in the present invention is not limited as long as necessary information is included.

  When acquiring authentication image information from the communication terminal, it is preferable that the authentication terminal captures and decodes the authentication image presented to the communication terminal.

  According to this, the user can easily capture the authentication image into the authentication terminal 3 by photographing the authentication image and decoding it by the authentication terminal 3. Further, at the time of decoding, the decoding may be performed based on the key stored in the authentication terminal.

  The information processing system further includes a content providing server that provides content to the communication terminal. The authentication image generating means receives the communication terminal authentication request from the content providing server, and the authentication information collating means Is preferably transmitted to the content providing server.

  According to this, even in a server other than the information processing server, the communication terminal can be authenticated at a high security level by using the authentication function of the information processing server of the present invention.

  The present invention relates to an information processing method used in an information processing system for authenticating a communication terminal not provided with authentication information by using authentication information provided in the authentication terminal, and a step of storing the authentication information in an authentication information storage device; Upon receiving the authentication request of the communication terminal by the image generation means, an authentication parameter is generated, an authentication image including the authentication parameter is generated and transmitted to the communication terminal, and an authentication image for storing the authentication parameter in the authentication parameter storage device is generated. The authentication information acquisition unit refers to the authentication parameter storage device by the authentication information verification unit, the step of acquiring the authentication image information acquired from the communication terminal and the authentication information included in the authentication terminal from the authentication terminal. The authentication image information is the image information generated in the step of generating the authentication image. Authentication information included in may determine whether to match the authentication information stored in the authentication information storage unit, and a step of collating the authentication information and transmits the result to the communication terminal.

  The authentication parameter generated in the step of generating the authentication image preferably includes one or more of a random number and date / time that can be uniquely specified.

  Further, in the step of generating the authentication image, the effective date and time of the authentication parameter is further stored in the authentication parameter storage device, and in the step of collating the authentication information, the date and time acquired by the step of acquiring the authentication information is the authentication parameter storage device. It is preferable that the authentication is permitted before the valid date and time of the authentication parameter stored in the table, and the authentication is disabled when after the valid date and time of the authentication parameter.

  In the step of generating the authentication image, the authentication image is transmitted to the communication terminal using the first communication network, and in the step of acquiring the authentication information, a second communication network different from the first communication network is provided. It is preferable to use the authentication terminal to acquire authentication image information and authentication information.

  Further, the authentication image information is preferably information obtained by decoding the authentication image acquired from the communication terminal at the authentication terminal.

  Further, the authentication image information is preferably information obtained by decoding the authentication image acquired from the communication terminal and received from the authentication terminal.

  When acquiring authentication image information from the communication terminal, it is preferable that the authentication terminal captures and decodes the authentication image presented to the communication terminal.

  The information processing system further includes a content providing server that provides content to the communication terminal. In the step of generating an authentication image, the authentication request of the communication terminal is received from the content providing server and the authentication information is collated. In the step, the result is preferably transmitted to the content providing server.

  ADVANTAGE OF THE INVENTION According to this invention, the information processing server and information processing method which authenticate the communication terminal which is not provided with authentication information using the authentication information with which an authentication terminal is provided can be provided.

according to this,
Next, embodiments of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

(First embodiment)
With reference to FIG. 1, an information processing server 1 according to a first embodiment of the present invention and an information processing system using the information processing server 1 will be described. The information processing server 1 is realized by installing a software program for executing a predetermined process in a general computer including a central processing control device and a memory.

  The information processing server 1 of the present invention authenticates a communication terminal 2 that does not include authentication information by using authentication information included in the authentication terminal 3. Here, the communication terminal 2 is a general computer, and the authentication terminal 3 is a communication terminal such as a mobile phone provided with authentication information. The authentication information may be fingerprint authentication information, but in the present embodiment, it is assumed that the authentication information is an authentication identifier that is issued by the information processing server 1 and cannot be tampered with.

  In the information processing system according to the embodiment of the present invention, the information processing server 1 can be connected to the communication terminal 2 via the first communication network 4a, and further, the authentication terminal via the second communication network 4b. 3 can be connected to each other. The first communication network 4a and the second communication network 4b are communication networks that do not at least partially cross each other.

  The information processing server 1 according to the embodiment of the present invention includes an authentication parameter storage device 101, an authentication information storage device 102, an authentication identifier storage device 103, an authentication image generation unit 111, an authentication information acquisition unit 112, an authentication information collation unit 113, Input / output control means 121 is provided.

  The authentication identifier storage device 103 is a storage device that stores an authentication identifier (authentication information) for authenticating the authentication terminal 3 issued by the information processing server 1.

  Upon receiving an authentication request from the communication terminal 2, the authentication image generation unit 111 generates an authentication parameter, generates an authentication image including the authentication parameter, transmits the authentication image to the communication terminal 2, and stores the authentication parameter in the authentication parameter storage device 101. It is means to do.

  Here, the authentication parameter generated by the authentication image generation unit 111 and stored in the authentication parameter storage device 101 is information including one or more of a random number and a date and time such as a one-time password that can be uniquely specified. The date and time of the authentication parameter may be the date and time when the authentication parameter is generated or the date and time when the authentication request of the communication terminal 2 is received. The authentication parameter storage device 101 may also store a valid date and time that is a time limit for validating the authentication parameter. The authentication image generation unit 111 transmits the authentication image to the communication terminal 2 via the first communication network 4a. Here, it is described that the authentication image is transmitted, but text may be used as long as the authentication terminal 3 can decode the information. In the case of text, text having a large number of digits that cannot be easily eavesdropped is preferable.

  The authentication information acquisition unit 112 is a unit that acquires the authentication image information acquired from the communication terminal 2 and the authentication information included in the authentication terminal 3 from the authentication terminal 3 and stores them in the authentication information storage device 102. The authentication information acquisition unit 112 receives authentication information from the authentication terminal 3 via the second communication network 4b. Here, the authentication image information may be information obtained by decoding the authentication image acquired from the communication terminal 2 in the authentication terminal 3, or the authentication image acquired from the communication terminal 2 and received from the authentication terminal 3 Information decoded by the information processing server 1 may be used. Furthermore, when acquiring authentication image information from the communication terminal 2, the authentication image presented to the communication terminal 2 may be captured and decoded by the authentication terminal 3. Further, the authentication terminal 3 may acquire an authentication image by using near field communication such as infrared communication between the communication terminal 2 and the authentication terminal 3 or by using a removable disk.

  The authentication information verification unit 113 refers to the authentication parameter storage unit 101, the authentication information storage unit 102, and the authentication identifier storage unit 103, and the authentication image generation unit 111 generates the authentication image information acquired by the authentication information acquisition unit 112. A means for determining whether or not the authentication information included in the authentication terminal 3 matches the authentication information stored in the authentication identifier storage device 103 and transmitting the result to the communication terminal 2. is there. Further, when the authentication parameter effective date and time is stored in the authentication parameter storage device 101, the date and time acquired by the authentication information acquisition unit 112 is before the effective date and time of the authentication parameter stored in the authentication parameter storage device 101. Authentication may be permitted, and authentication may be disabled when the authentication parameter is after the effective date and time.

  The input / output control means 121 is means for controlling input and output of the information processing server 1 and transmitting the information to each network and means.

The communication terminal 2 according to the embodiment of the present invention includes an authentication image data storage device 201, an authentication image acquisition unit 211, an authentication image presentation unit 212, and an authentication result acquisition unit 213.
The authentication image acquisition unit 211 is a unit that acquires the authentication image generated by the authentication image generation unit 111 of the information processing server 1 and stores it in the authentication image data storage device 201.
The authentication image presenting means 212 is means for presenting the authentication image data stored in the authentication image data storage device 201 to the authentication terminal 3.
Further, the authentication result acquisition unit 213 is a unit that acquires the authentication result transmitted by the authentication information matching unit 113 of the information processing server 1.

The authentication terminal 3 according to the embodiment of the present invention includes an authentication image data storage device 301, an authentication identifier storage device 302, an authentication image photographing unit 311, and an authentication information transmission unit 312.
The authentication image photographing means 311 is a means for photographing the image presented by the authentication image presenting means 212 of the communication terminal 2 and storing it in the authentication image data storage device 301. It is not necessary to take an image, and any means may be used as long as the authentication image transmitted to the communication terminal 2 can be acquired by the authentication terminal 3.
The authentication information transmission unit 312 receives the authentication identifier acquired from the information processing server 1 and the image information stored in the authentication image data storage device 301 stored in the authentication identifier storage device 302 via the second communication network 4b. Means for transmitting to the information processing server 1.

  Next, an information processing method according to the first embodiment of the present invention will be described with reference to FIG.

First, in step S101, when the information processing server 1 receives an authentication request from the communication terminal 2 by the authentication image generating unit 111, in step S102, the information processing server 1 generates an authentication image including information such as a one-time password and date and time, and authentication parameters. Store in the storage device 101. Further, in step S103, the information processing server 1 transmits the generated authentication image to the communication terminal 2.
When receiving the authentication image in step S103, the communication terminal 2 presents the received image in step S104.
When an authentication image is presented at the communication terminal 2 in step S104, the authentication terminal 3 captures the presented authentication image and stores it in the authentication image data storage device 301 in step S105. Further, in step S106, the authentication terminal 3 creates authentication information by combining the authentication image information stored in the authentication image data storage device 301 and the authentication identifier of the authentication terminal 3 stored in the authentication identifier storage device 302. In S107, the authentication information is transmitted to the information processing server 107.

In step S107, when the information processing server 1 receives the authentication information from the authentication terminal 3, the authentication information acquiring unit 112 stores the received authentication information in the authentication information storage device 102. In step S108, the information processing server 1 authenticates the authentication information. The authentication information is collated by referring to the parameter storage device 101, the authentication information storage device 102, and the authentication identifier storage device 103.
When the authentication result of the authentication information is output, the information processing server 1 transmits the authentication result to the communication terminal 2, and the communication terminal 2 receives the authentication result by the authentication result acquisition unit 213.

  According to the information processing server 1 according to the first embodiment of the present invention, by using the authentication information of the authentication terminal 3, the communication terminal 2 that does not include the authentication information can be authenticated. Therefore, if the user has one authentication terminal 3, the user can be similarly authenticated for a plurality of terminals.

  Furthermore, according to the first embodiment of the present invention, information that should originally be input by a mobile phone is input by a computer having a rich user interface, and in a state where the security level is high, The entered information can be sent to the server.

(Second Embodiment)
The information processing system according to the second embodiment of the present invention shown in FIG. 3 includes a content providing server 5 as compared with the information processing system according to the first embodiment of the present invention shown in FIG. Is different. Furthermore, the communication terminal 2 is different in that the authentication result acquisition unit 213 is not provided but the content acquisition unit 214 is provided.

  The information processing server 1 according to the second exemplary embodiment of the present invention receives an authentication request for the communication terminal 2 from the content providing server 5 in the authentication image generation unit 111 and outputs the result in the authentication information matching unit 113. To the providing server 5.

The content providing server 5 according to the second embodiment of the present invention authenticates the communication terminal 2 using information of the information processing server 1 and the authentication terminal 3, and distributes the content to the authenticated communication terminal 2. In addition, a content storage device 501, an authentication request unit 511, an authentication result acquisition unit 512, and a content distribution unit 513 are provided.
The content storage device 501 is a storage device in which content provided by the content providing server 5 is stored.
The authentication request unit 511 is a unit that requests the information processing server 1 to authenticate the communication terminal 2 when there is a content acquisition request from the communication terminal 2, for example.
The authentication result acquisition unit 512 is a unit that acquires the authentication result of the communication terminal 2 requested by the authentication request unit 511 from the information processing server 1.
The content distribution unit 513 is a unit that transmits the content stored in the content storage device 501 to the communication terminal 2 when the communication terminal 2 is authenticated.

  In FIG. 3, the content providing server 5 according to the second embodiment of the present invention is connected to the first communication network 4a, but any communication network can be used if it can communicate with the information processing server 1 mutually. May be connected.

An information processing method according to the second embodiment of the present invention will be described with reference to FIG.
First, in step S202, when a content request is made from the communication terminal 2 to the content providing server 5, the content providing server 5 requests the information processing server 1 to authenticate the communication terminal 2 by the authentication request unit 511 in step S202. To do.
Thereafter, the processing from step S203 to step 209 is the same as the processing from step S102 to step S108 in FIG.

In step S209, when the authentication result is obtained in the information processing server 1, the information processing server 1 transmits the authentication result of the communication terminal 2 to the content providing server 5 in step S210.
When the authentication is permitted, the content providing server 5 provides the content from the content storage device 501 to the communication terminal 2 in step S211.
This method is effective when content is acquired from the content providing server 5 using a general browser in the communication terminal 2.

Next, an information processing method according to a modification of the second embodiment of the present invention will be described with reference to FIG.
First, when the communication terminal 2 requests content from the content providing server 5 in step S251, the content providing server 5 requests authentication information from the communication terminal 2 in step S252.
In response to this, the communication terminal 2 makes an authentication request to the information processing server 1 in step S253.
Thereafter, the processing from step S254 to step 260 is the same as the processing from step S102 to step S108 in FIG.
In step S260, when the authentication result is obtained in the information processing server 1, the information processing server 1 transmits the authentication result of the communication terminal 2 to the communication terminal 2 in step S261, and the communication terminal 2 receives the authentication result in step S262. The authentication result is transmitted to the content providing server 5.
Upon receiving the authentication result, the content providing server 5 provides the content from the content storage device 501 to the communication terminal 2 in step S263 if authentication is permitted.
This method is effective when content is provided to the content providing server 5 in the communication terminal 2 by an application including an authentication request program provided by the content providing server 5 or the information processing server 1.

  According to the second embodiment of the present invention, the information processing server 1 can accept an authentication function of a plurality of servers, and can cause various servers to perform authentication at a high security level.

(Third embodiment)
In the first and second embodiments of the present invention, authentication of the communication terminal 2 has been mainly described. However, in the third embodiment of the present invention, a user who operates the communication terminal 2 and the authentication terminal 3. The authentication will be described.

  The information processing server 1 according to the third embodiment of the present invention shown in FIG. 6 is different from the information processing server 1 according to the first embodiment of the present invention shown in FIG. The difference is that a reminder question and answer registration unit 114 and a password reissue unit 115 are provided. Furthermore, the authentication terminal 3 according to the third embodiment is different from the authentication terminal 3 according to the first embodiment in that it includes a reminder question and answer registration unit 313 and a reissue password acquisition unit 314. .

  The reminder question-and-answer registration unit 114 causes the user to select a plurality of questions and answers that the user can answer from among the plurality of question-and-answers by the reminder question-and-answer registration unit 313 of the authentication terminal 3, and associates the user with the authentication identifier of the user. Is a means for storing the question-and-answer selected and the answer in the reminder question-and-answer storage device 104.

  When the user forgets the password, the password reissue means 115 refers to the reminder question and answer storage device 104 when the reissue password acquisition means 314 of the authentication terminal 3 requests reissue of the password. This is a means for causing the user to answer the selected question, determining whether the response matches the response stored in the reminder question-and-answer storage device 104, and issuing a password to the user when all the questions are answered.

  As shown in FIG. 7, the plurality of questions and answers presented by the information processing server 1 according to the third embodiment of the present invention includes items of a question candidate and a response select list. Furthermore, it may be provided with items of question genre and select number in the select list. The user causes the user to select a predetermined number (for example, four) or more of questions that the user can answer reliably from these question candidates. As described above, when the user selects four or more questions during registration, the number of combinations for selecting four or more questions from 11 questions is 1817.

  For example, if the user selects the question “How many days is your mother born?”, The selection list includes 1st to 31st days, and the user selects the correct answer. These are repeated by a predetermined number, and the authentication terminal 3 transmits to the information processing server 1. For example, if the user selects four questions with 15 selections, the number of combinations of the answers is 15 to the fourth power, which is 50625. By adopting such a method, it becomes impossible to decipher the question and the response selected by the user, and a higher security level can be maintained.

  For example, as shown in FIG. 8, according to a password consisting of only alphanumeric characters, combining alphanumeric characters (26 alphabetic characters from A to Z and 10 numbers from 0 to 9), 1 in 36 4th power , 679, 616.

  On the other hand, according to the method described in the third embodiment of the present invention, if four questions are selected from eleven questions as shown in FIG. 7, and there are 50,625 select list combinations for the four questions. The number of combinations that the user can take is 91,985,625 or more at least. As can be seen from FIG. 8, it can be seen that when only alphanumeric characters are used as passwords, 5 to 6 digits are strong, and when only numbers are used as passwords, 7 to 8 digits are strong.

With reference to FIG. 9, an information processing method according to the third embodiment of the present invention will be described.
First, when registering a reminder question-and-answer, in step S301, the information processing server 1 transmits a combination of a question and an answer option to the authentication terminal 3, and allows the user to determine a question that can be answered with certainty and its answer. Next, in step S <b> 302, the information processing server 1 receives a predetermined number or more of combinations of questions and answers from the authentication terminal 3 and stores them in the reminder question and answer storage device 104.
When the password is reissued, the information processing server 1 receives the password reissue request from the authentication terminal 3 in step S351. In step S352, the information processing server 1 sends the question transmitted to the authentication terminal 3 in step S301. And the same combination of answer options are transmitted, and the user is made to answer the question answered in step S302.
In step S353, when the combination of the question and answer answered at the time of registration is received from the authentication terminal 3, the answer is checked with reference to the reminder question and answer storage device 104 in step S354, and the selected question is obtained as a result of the matching. If all the answers to the question match, the password is reissued in step S353.

  The information processing system according to the third embodiment of the present invention can authenticate a user with a very high security level.

  As described above, the first to third embodiments of the present invention have been described. However, it should not be understood that the description and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples, and operational techniques will be apparent to those skilled in the art.

  It goes without saying that the present invention includes various embodiments not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

1 is a functional block diagram of an information processing server according to a first embodiment of the present invention and a system configuration diagram of an information processing system in which the information processing server is used. It is a sequence diagram which shows the information processing method which concerns on the 1st Embodiment of this invention. It is a functional block diagram of the information processing server which concerns on the 2nd Embodiment of this invention, and the system block diagram of the information processing system in which an information processing server is used. It is a sequence diagram which shows the information processing method which concerns on the 2nd Embodiment of this invention. It is a sequence diagram which shows the information processing method which concerns on the modification of the 2nd Embodiment of this invention. It is the functional block diagram of the information processing server which concerns on the 3rd Embodiment of this invention, and the system configuration | structure figure of the information processing system in which an information processing server is used. It is an example of the question list | wrist which the information processing server which concerns on the 3rd Embodiment of this invention shows to a user, and its select list | wrist. It is the figure which showed the combination in the case of the authentication by the conventional password. It is a sequence diagram which shows the information processing method which concerns on the 3rd Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Information processing server 2 ... Communication terminal 3 ... Authentication terminal 4a, 4b ... Communication network 101 ... Authentication parameter storage device 102 ... Authentication information storage device 103 ... Authentication identifier storage device 104 ... Reminder question-and-answer storage device 107 ... Information processing server 111 ... Authentication image generation means 112 ... Authentication information acquisition means 113 ... Authentication information collation means 114 ... Reminder question and answer registration means 115 ... Password reissue means 121 ... Input / output control means 201 ... Authentication image data storage device 211 ... Authentication image acquisition means 212 ... Authentication image presentation means 213 ... Authentication result acquisition means 214 ... Content acquisition means 301 ... Authentication image data storage device 302 ... Authentication identifier storage device 311 ... Authentication image photographing means 312 ... Authentication information transmission means 313 ... Reminder question and answer registration means 314 ... Reissue Seward acquisition means 501 ... content storage device 511 ... authentication request means 512 ... authentication result acquisition means 513 ... content distribution means

Claims (16)

In an information processing server used in an information processing system that authenticates a communication terminal that does not have authentication information by using authentication information that the authentication terminal has,
An authentication information storage device storing the authentication information;
An authentication image generating means for generating an authentication parameter upon receiving the authentication request of the communication terminal, generating an authentication image including the authentication parameter, transmitting the authentication image to the communication terminal, and storing the authentication parameter in an authentication parameter storage device; ,
Authentication information acquisition means for acquiring information of the authentication image acquired from the communication terminal and the authentication information included in the authentication terminal from the authentication terminal;
The authentication image information acquired by the authentication information acquisition unit with reference to the authentication parameter storage device is information of an image generated by the authentication image generation unit, and further, the authentication information provided in the authentication terminal An information processing server comprising: an authentication information collating unit that determines whether or not the authentication information matches the authentication information stored in the authentication information storage device and transmits the result to the communication terminal.   The information processing server according to claim 1, wherein the authentication parameter generated by the authentication image generation unit includes at least one of a random number and a date that can be uniquely specified. In the authentication image generation means, the authentication parameter storage device further stores an effective date and time of the authentication parameter,
In the authentication information collating means, authentication is permitted when the date and time acquired by the authentication information acquiring means is before the effective date and time of the authentication parameter stored in the authentication parameter storage device, and after the effective date and time of the authentication parameter. The information processing server according to claim 1, wherein authentication is disabled in some cases. In the authentication image generation means, the authentication image is transmitted to the communication terminal using a first communication network,
The authentication information acquisition means acquires the authentication image information and the authentication information from the authentication terminal using a second communication network different from the first communication network. 4. The information processing server according to any one of items 3.   5. The information processing server according to claim 1, wherein the authentication image information is information obtained by decoding the authentication image acquired from the communication terminal at the authentication terminal. 6.   5. The information processing according to claim 1, wherein the authentication image information is information obtained by decoding the authentication image acquired from the communication terminal and received from the authentication terminal. server.   The authentication image presented to the communication terminal is captured and decoded by the authentication terminal when the authentication image information is acquired from the communication terminal. Information processing server. The information processing system further includes a content providing server that provides content to the communication terminal,
In the authentication image generation means, an authentication request for the communication terminal is received from the content providing server,
The information processing server according to claim 1, wherein the authentication information matching unit transmits the result to the content providing server. In an information processing method used for an information processing system for authenticating a communication terminal not provided with authentication information by using authentication information provided in the authentication terminal,
Storing the authentication information in an authentication information storage device;
Upon receiving the authentication request of the communication terminal by the authentication image generation means, an authentication parameter is generated, an authentication image including the authentication parameter is generated and transmitted to the communication terminal, and the authentication parameter is stored in the authentication parameter storage device Generating the authentication image;
Obtaining the authentication image information acquired from the communication terminal and the authentication information included in the authentication terminal from the authentication terminal by an authentication information acquisition unit;
The authentication information collating means refers to the authentication parameter storage device, and the authentication image information is image information generated in the step of generating the authentication image, and the authentication information included in the authentication terminal. Determining whether or not it matches the authentication information stored in the authentication information storage device, and collating the authentication information transmitted to the communication terminal. .   The information processing method according to claim 9, wherein the authentication parameter generated in the step of generating the authentication image includes at least one of a random number and a date that can be uniquely specified. In the step of generating the authentication image, the authentication parameter storage device further stores an effective date and time of the authentication parameter,
In the step of collating the authentication information, if the date and time acquired by the step of acquiring the authentication information is before the effective date and time of the authentication parameter stored in the authentication parameter storage device, authentication is permitted, The information processing method according to claim 9 or 10, wherein authentication is disabled when the date is after the valid date. In the step of generating the authentication image, the authentication image is transmitted to the communication terminal using a first communication network,
The step of acquiring the authentication information includes acquiring the authentication image information and the authentication information from the authentication terminal using a second communication network different from the first communication network. The information processing method according to any one of 9 to 11.   The information processing method according to claim 9, wherein the authentication image information is information obtained by decoding the authentication image acquired from the communication terminal at the authentication terminal.   The information processing apparatus according to any one of claims 9 to 12, wherein the authentication image information is information obtained by decoding the authentication image acquired from the communication terminal and received from the authentication terminal. Method.   15. When acquiring the authentication image information from the communication terminal, the authentication terminal captures and decodes the authentication image presented to the communication terminal by the authentication terminal. Information processing method. The information processing system further includes a content providing server that provides content to the communication terminal,
In the step of generating the authentication image, an authentication request for the communication terminal is received from the content providing server,
The information processing method according to any one of claims 9 to 15, wherein in the step of collating the authentication information, the result is transmitted to the content providing server.

Images