JP2005174262A - Client authentication method for transmitting data and receiving service and its system and apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a client authentication method for transmitting data and receiving service involving no cumbersome input work by a user and preventing unauthorized service provision; and to provide its system and apparatus. <P>SOLUTION: Data transmission and reception between computers 101, 105 through a network 102 involves: reading individual information 109a identifying the solid object of an electronic instrument from the electronic instrument 109 connected to the computer 105 at a client side; transmitting the solid object information to the computer 101 at a server side. The computer at the server side approves service provision associated with the electronic instrument based on the reception of the individual information. The computer at the server side issues 104 user identification information to the computer at the client side based on the reception of the solid object information from the computer at the client side. The computer at the server side prohibits the service provision by registering 111 the individual information prohibiting the service provision based on the reception of the user identification information from the computer at the client side. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a client authentication method in a data transmission / reception service via a network, and a system and apparatus therefor.

  Conventionally, as an example of authenticating a client to be serviced in a data transmission / reception service via a network, a network service that can be used only by a user who bought a product such as a digital camera has been provided (see Patent Document 1). ). With this service, images taken with a digital camera can be uploaded to a server on the network and shared with others, or a print service can be ordered.

In general, in order to receive these services, a user needs to register in advance and receive a login name and password, and enter a user ID to receive authentication when receiving the service.
JP-A-11-313237

  In such a service, for example, when only a user who purchased a digital camera is targeted, the user needs to input a serial number of the digital camera at the time of user registration.

  However, unauthorized user registration is possible by randomly entering a serial number, and it has been difficult to limit the service to only users who have purchased a product such as a digital camera. In addition, the user has to enter the serial number by hand, which is troublesome. In addition, after registering as a user, you must obtain a login name and password, and when you actually receive the service, you must enter the login name and password for authentication, which is cumbersome and forgets the password. In some cases, the service could not be used until the reissue.

  SUMMARY OF THE INVENTION In view of the above-described conventional problems, the present invention provides a client authentication method in a data transmission / reception service and a system and apparatus thereof that do not require a troublesome input operation by a user and prevent unauthorized service provision.

  In order to solve the above problems, a client authentication method according to the present invention is a client authentication method in the case where data is transmitted and received between computers via a network, and is obtained from an electronic device connected to a client computer. Individual information for identifying an individual electronic device is read out and transmitted to a server computer, and the server computer authorizes provision of a service related to the electronic device based on the reception of the individual information. Features.

  Here, the individual information is stored in the electronic device so as to be readable by a computer. The individual information is encrypted. Further, the server-side computer prohibits the provision of a service related to the electronic device when the transmitted individual information is registered in advance as individual information for prohibiting the provision of a service. The server computer registers the individual information forbidden to provide the service based on the reception of the user identification information from the client computer. Further, the server-side computer permits provision of the service based on reception of user identification information from the client-side computer. The server-side computer issues user identification information to the client-side computer based on the reception of individual information from the client-side computer. The user identification information includes a login name and a password. Further, the electronic device is a digital camera, and the individual information is a serial number of the digital camera.

  The system of the present invention is a system for transmitting and receiving data between computers via a network, in which a client computer reads out individual information for identifying an individual electronic device from a connected electronic device. And means for transmitting the individual information to a server-side computer, and the server-side computer authorizes provision of a service related to the electronic device based on the reception of the individual information. It is characterized by having.

  Here, based on the reception of the individual information, the server-side computer issues user identification information and transmits it to the client-side computer, and receives the user identification information from the client-side computer. Then, it further comprises prohibition means for prohibiting service for the individual information corresponding to the user identification information, and the client side computer receives and stores the user identification information, and the user identification information Is further transmitted to the computer on the server side, and setting means for setting prohibition of service to the individual information corresponding to the user identification information.

  The server-side computer of the present invention is a server-side computer in a system that transmits and receives data between computers via a network, and is based on the reception of the individual information and provides services related to the electronic device. An authorization means for authorizing provision, a transmission means for issuing user identification information based on reception of the individual information and transmitting it to the client side computer, and receiving the user identification information from the client side computer, And prohibiting means for prohibiting service for the individual information corresponding to the user identification information.

  The server-side computer control method of the present invention is a server-side computer control method in a system that transmits and receives data between computers via a network, and is based on the reception of the individual information. An authorization step for authorizing provision of a service related to the device, a transmission step for issuing user identification information based on reception of the individual information and transmitting it to the client side computer, and the user identification information on the client side And a prohibiting step of prohibiting service for the individual information corresponding to the user identification information.

  Furthermore, the present invention also provides a program that realizes the server-side computer control method and a storage medium that stores the program in a computer-readable manner.

  The client computer according to the present invention is a client computer in a system that transmits and receives data between computers via a network, and includes individual information for identifying an individual electronic device from a connected electronic device. Reading means for reading, transmitting means for transmitting the individual information to a server-side computer, storage means for receiving and storing user identification information from the server-side computer, and the user identification information to the server-side computer And setting means for setting a prohibition of service to the individual information corresponding to the user identification information.

  Furthermore, the present invention also provides a program that realizes the server-side computer control method and a storage medium that stores the program in a computer-readable manner.

  The digital camera of the present invention is characterized in that the serial number is stored in a computer-readable manner. Here, the stored production number is an encrypted serial number.

  ADVANTAGE OF THE INVENTION According to this invention, the client authentication method in the data transmission / reception service which prevents a user's troublesome input operation and prevents unauthorized service provision, and its system and apparatus can be provided.

  For example, since user registration can be performed using information unique to an electronic device such as a digital camera, a service for only a purchaser of the electronic device can be provided. In addition, when receiving a service, authentication is automatically performed using information unique to the electronic device, so there is no need to enter a troublesome ID. It is also possible to prevent unauthorized use of the service due to ID theft. In addition, since a mechanism for restricting authentication is provided for a specific electronic device, even if the electronic device is stolen, it is possible to prevent others from enjoying the service illegally.

  Hereinafter, according to the accompanying drawings, authentication for service to a client who has purchased a digital camera will be described in detail as an embodiment of the present invention. The present invention is not limited to digital cameras, but is effective in electronic equipment products that receive data transmission / reception services, and these are also included in the present invention.

<Configuration example of data transmission / reception service system of this embodiment>
FIG. 1 is a diagram illustrating a configuration example of a data transmission / reception service system according to the present embodiment.

  Reference numeral 105 denotes a known client personal computer (hereinafter referred to as PC). Reference numeral 109 denotes a digital camera which is an electronic device product of the present embodiment, and is connected to the PC 105 by a cable or wireless 108. The digital camera 109 has a serial number 109a that can be read by the PC 105 attached at the time of manufacture. The serial number 109a may be stored in hardware or software, but a non-rewritable and highly confidential storage method such as encryption stored in ROM is preferable. A server computer 101 (hereinafter referred to as a server) is connected to the PC 105 via a network 102 such as the Internet.

  In the PC 105, 107 is a serial number acquisition unit realized as software executed in the PC, and acquires a serial number 109 a described later from the digital camera 109. Reference numeral 106 denotes a user ID storage unit realized as a hard disk of a PC, and stores a user ID issued by a user ID issuing unit 104 of the server 101 described later. A transmission / reception unit 110 transmits a serial number, a user ID, or content to be uploaded to the server 101, and receives a user ID or downloaded content from the server 101. The transmission / reception unit 110 is realized by software and hardware in the PC. .

  In the server 101, 104 is a user ID issuing unit that issues a user ID according to the serial number passed from the PC 105, and is realized by software in the server, a hard disk, and the like. An approval unit 103 permits transmission / reception of data including image upload and download from the client, and is realized as software in the server. 111 is a specific serial number holding unit for holding a specific serial number, which is realized by software in the server, a hard disk, etc., and when the digital camera is stolen, the held serial number is the client. Data transmission / reception with the client is prohibited.

  FIG. 2 is a block diagram showing a hardware configuration example of the data transmission / reception service system of this embodiment. In FIG. 2, the same components as those in FIG. 1 are denoted by the same reference numerals.

  The client PC 105 includes an arithmetic control CPU 11, a ROM 12 that stores fixed programs and parameters, a transmission / reception unit 13 that communicates with the server 101 via the network 102, a RAM 14 that primarily stores data and a program executed by the CPU 11, a hard disk, A large-capacity external storage unit 15 such as a floppy (registered trademark), a CD, or a memory card, a display unit 16a, a keyboard 16b, a mouse 16c, and an input / output interface 16 connected to the digital camera 109 via a cable or wireless 108 are provided.

  The RAM 14 has a data storage area and a program load area. In this example, the serial number 14a read from the connected digital camera 109, the user ID 14b provided from the server 101, and the digital camera 109 to the server 101 are stored in the data storage area. Image data 14c of an image to be uploaded to or downloaded from the server 101 to the PC 105, and display screen data 14d for inputting a user ID and the like to the user from the display unit 16a.

  The external storage unit 15 has a data storage area and a program storage area that is loaded into the RAM 14 and executed. In this example, a user ID 15a and image data 15b are provided as data storage areas, and a program storage area is a transmission / reception program 15d that controls communication with the OS 15c and the server 101, and a user that controls user registration in the server 101. A registration program 15e (see FIG. 4), a service processing program 15f (see FIG. 5) for processing a service by the server 101, and an authentication control program 15g (see FIG. 6) for controlling whether to authenticate or stop the service. The user registration program 15e, the service processing program 15f, and the authentication control program 15g constitute a part executed by the PC 105 in FIGS. Further, these programs may not exist independently but may exist as a common program for realizing the procedure of FIG. 3, for example, and is not limited to the configuration of FIG.

  The server 101 includes an arithmetic control CPU 21, a ROM 22 that stores fixed programs and parameters, a transmission / reception unit 13 that communicates with the client PC 105 via the network 102, a RAM 24 that primarily stores data and programs executed by the CPU 21, a hard disk, A large-capacity external storage unit 25 such as a floppy (registered trademark), a CD, or a memory card is included.

  The RAM 24 has a data storage area and a program load area. In this example, the serial number 24a transmitted from the PC 105, the user ID 24b provided to the PC 105, an image uploaded to the server 101 from the digital camera 109, or An area such as image data 24c of an image to be downloaded from the server 101 to the PC 105 is included.

  The external storage unit 25 has a data storage area and a program storage area that is loaded into the RAM 24 and executed. In this example, the data storage area includes a serial number 25a of the digital camera whose service is to be stopped, a serial number / user ID table area for storing the correspondence between the registered serial number and the user ID, and the program storage area. , OS 25c, transmission / reception program 25d for controlling communication with the PC 105, user ID issuing program 25e (see FIG. 4) for issuing a user ID at the time of user registration in the server 101, and service approval program for approving the service to the PC 105 by the server 101 25f (see FIG. 5) and a specific serial number control program 25g (see FIG. 6) for controlling whether to authenticate or stop the service. The user ID issuance program 25e, the service approval program 25f, and the specific serial number control program 25g constitute a part executed by the server 101 shown in FIGS. Further, these programs may not exist independently but may exist as a common program for realizing the procedure of FIG. 3, for example, and is not limited to the configuration of FIG.

<Configuration example of data transmission / reception service system of this embodiment>
Next, an example of an operation procedure between the components in the system configuration of the present embodiment shown in FIGS. 1 and 2 will be described with reference to FIG.

  In the case of user registration, first, the serial number is read from the digital camera 109 to which the client PC 105 is connected (S11). This serial number is preferably encrypted. The serial number is transmitted from the PC 105 to the server 101 (S12 / S21). The server 101 checks whether or not the received serial number (decrypted if encrypted) is already registered (S22). If it has already been registered, a response to that effect is sent. If not registered, a unique user ID (login name, password) is assigned to the serial number and transmitted to the PC 105 (S23 / S13). The PC 105 stores the received user ID (S14).

  In the case of service processing, as in user registration, the serial number is read from the digital camera 109 connected to the PC 105 (S11), and transmitted from the PC 105 to the server 101 (S12 and S21). The server 101 checks whether the received serial number matches the stored specific serial number (S24). If there is a matching specific serial number, the service is prohibited, and if not, the service is permitted (S25). -S15).

  Note that user registration and service processing may be executed as independent processing by the PC 105, and as is apparent from FIG. 3, the processing up to transmission of the serial number to the server 101 is common processing. The user registration and service processing may be determined and processed.

  In the case of authentication control, when the user ID stored at the time of registration is sent from the PC 105 to the server 101 (S16 / S26), the server 101 authenticates whether this user ID is registered (S27) and is authenticated. Then, the serial number corresponding to the user ID is added to the specific serial number, and the service is not provided even if the same serial number is received thereafter. That is, when the digital camera is stolen or lost, the user ID is transmitted to prevent others from receiving the service (S28). When the digital camera returns to hand, the provision of service is resumed by transmitting the user ID and deleting the corresponding serial number from the specific serial number (S28).

  FIG. 4 is a flowchart showing the operation procedure of the entire user registration system in the present embodiment. This flowchart includes the procedures of the PC 105 and the server 101, but the respective operations will become clear with reference to FIG.

  In step S201, the user first connects the digital camera 109 to the PC 105. In step S202, the serial number acquisition unit 107 of the PC 105 acquires the digital camera serial number 109a from the digital camera 109, and the transmission / reception unit 110 transmits the digital camera serial number 109a to the server 101 via the Internet 102 or the like. The serial number referred to here is a number assigned at the time of manufacturing the digital camera and uniquely identifying each individual.

  Next, in step S203, the user ID issuing unit 104 of the server 101 receives the serial number and confirms whether the serial number has not been received in the past. If not received, the user ID issuing unit 104 issues a user ID in step S204 and records the user ID and the serial number in association with each other. The user ID is composed of a serial number and a one-to-one login name and password, and is used as an alternative when authentication with the serial number of the digital camera cannot be performed, such as when the digital camera is lost.

  In step S205, the user ID recording unit 106 of the PC 105 receives the user ID and stores it in the PC. In step 203, if the user ID issuing unit has received the same serial number in the past, the process ends without issuing the user ID.

  FIG. 5 is a flowchart showing the operation of user authentication in this embodiment. In this embodiment, user authentication is performed by connecting the digital camera 109 to the PC 105 and transmitting the serial number to the server 101. This flowchart includes the procedures of the PC 105 and the server 101, but the respective operations will become clear with reference to FIG.

  In step S301, first, the user connects the digital camera 109 to the PC 105. Next, in step S <b> 302, the serial number acquisition unit 107 of the PC 105 acquires the digital camera serial number 109 a from the digital camera 109 and transmits it to the server 101 via the Internet 102 or the like.

  In step S303, the approval unit 103 of the server 101 checks whether the transmitted serial number is recorded in the specific serial number holding unit 111. The serial number recorded here is forbidden to use. If it is not recorded in the specific serial number holding unit 111, in step S304, the approval unit 103 permits services such as image uploading and downloading, so that the user can enjoy the service. In step S303, when the transmitted serial number is recorded in the specific serial number holding unit 111, the approval unit 103 prohibits the service from being provided to the user, thereby preventing the user from receiving the service.

  FIG. 6 shows a case where the authentication using the serial number of the digital camera is prohibited when the authentication using the serial number of the digital camera cannot be performed in order to prevent others from enjoying the service illegally, such as when the digital camera is lost. It is a flowchart showing the operation | movement at the time of canceling | releases a prohibition state. This flowchart includes the procedures of the PC 105 and the server 101, but the respective operations will become clear with reference to FIG. In this embodiment, when prohibiting or canceling the authentication by the digital camera, the user ID is transmitted to the server for authentication.

  In step S <b> 401, the user ID storage unit 106 of the PC 105 transmits a user ID (login name and password) to the approval unit 103.

  In step S “402, the approval unit 103 of the server 101 receives the user ID, and checks whether the user ID has been issued in the past. If the user ID is correct, in step S403, the approval unit 103 sets the corresponding serial number. This is recorded in the specific serial number holding unit 111. Thus, as described with reference to Fig. 5, when a serial number that has been prohibited from use is transmitted, the approval unit 103 refuses to provide the service. If the ID is not correct, it is considered that an unauthorized user has logged in, and authentication using a serial number cannot be prohibited or canceled.

  The user ID is sent to the server so that the service can be taught even if the digital camera is lost or not at hand, and the server's approval unit 103 checks whether the user ID is correct. You may enable it to enjoy service.

  The present invention is not limited to digital cameras, but is effective in electronic equipment products that receive data transmission / reception services, and these are also included in the present invention. In this embodiment, authentication between the server and the client has been described as an example. However, the present invention can be applied to authentication for services between computers connected via a network, and these are also included in the present invention. It is.

It is a figure which shows the structural example of the data transmission / reception service system of this embodiment. It is a block diagram which shows the hardware structural example of the data transmission / reception service system of this embodiment. It is a figure which shows the example of an operation | movement procedure of the data transmission / reception service system of this embodiment. It is a flowchart explaining the operation | movement procedure which issues the user ID of this embodiment. It is a flowchart explaining the example of the authentication procedure by the serial number of this embodiment. It is a flowchart explaining the example of an operation | movement procedure which suppresses authentication of the specific serial number of this embodiment.

Claims (20)

A client authentication method for transmitting and receiving data between computers via a network,
Read the individual information for identifying the individual electronic device from the electronic device connected to the client computer, and send it to the server computer.
A server-side computer authorizes provision of a service related to the electronic device based on the reception of the individual information.   The client authentication method according to claim 1, wherein the individual information is stored in the electronic device so as to be readable by a computer.   The client authentication method according to claim 2, wherein the individual information is encrypted.   The server-side computer prohibits the provision of a service related to the electronic device when the transmitted individual information is registered in advance as individual information for prohibiting the provision of a service. 1. The client authentication method according to 1.   5. The client authentication method according to claim 4, wherein the server-side computer registers individual information that prohibits the provision of the service based on reception of user identification information from the client-side computer.   2. The client authentication method according to claim 1, wherein the server-side computer permits the provision of the service based on reception of user identification information from the client-side computer.   7. The server-side computer issues user identification information to the client-side computer based on reception of individual information from the client-side computer. Client authentication method.   The client authentication method according to claim 5, wherein the user identification information includes a login name and a password.   9. The client authentication method according to claim 1, wherein the electronic device is a digital camera, and the individual information is a serial number of the digital camera. A system for transmitting and receiving data between computers via a network,
The client computer
Reading means for reading individual information for identifying the individual electronic device from the connected electronic device;
Transmission means for transmitting the individual information to a server-side computer,
The computer on the server side
A system comprising: an authorization unit that authorizes provision of a service related to the electronic device based on reception of the individual information. The server computer is
Based on the reception of the individual information, transmitting means for issuing user identification information and transmitting it to the client-side computer;
When receiving the user identification information from the client side computer, further comprising a prohibiting means for prohibiting service for the individual information corresponding to the user identification information,
The client computer is
Storage means for receiving and storing the user identification information;
11. The system according to claim 10, further comprising setting means for transmitting the user identification information to the computer on the server side and setting prohibition of service for the individual information corresponding to the user identification information. A server-side computer in a system that transmits and receives data between computers via a network,
Authorization means for authorizing provision of a service related to the electronic device based on reception of the individual information;
Based on the reception of the individual information, transmitting means for issuing user identification information and transmitting it to the client-side computer;
A server-side computer comprising: prohibiting means for prohibiting a service for individual information corresponding to the user identification information when the user identification information is received from the client-side computer. A method of controlling a computer on a server side in a system that transmits and receives data between computers via a network,
An authorization step of authorizing provision of a service related to the electronic device based on the reception of the individual information;
A transmission step of issuing user identification information and transmitting it to the client-side computer based on the reception of the individual information;
A server computer control method comprising: a step of prohibiting a service for individual information corresponding to the user identification information when the user identification information is received from the client computer.   A program for realizing the server-side computer control method according to claim 13.   A storage medium for storing the program according to claim 14 in a computer-readable manner. A client-side computer in a system that transmits and receives data between computers via a network,
Reading means for reading individual information for identifying the individual electronic device from the connected electronic device;
Transmitting means for transmitting the individual information to a server-side computer;
Storage means for receiving and storing user identification information from the server computer;
A client-side computer comprising: setting means for setting the prohibition of service to individual information corresponding to the user identification information by transmitting the user identification information to the server-side computer.   The program which implement | achieves the control method of the client side computer of Claim 16.   A storage medium for storing the program according to claim 17 in a computer-readable manner.   A digital camera which stores a serial number so as to be readable by a computer.   20. The digital camera according to claim 19, wherein the stored manufacturing number is an encrypted serial number.

Images