JP2005310069A - Authentication device, method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent stealing of authentication information such as a password by a fraudulent act such as brute force attack. <P>SOLUTION: A WWW server device 20 determines a standby time on the basis of the number of authentication errors. For example, when the number of authentication errors is X, the standby time will be 5<SP>x</SP>(seconds). When the standby time is determined, the WWW server device 20 starts count of elapsed time, and after the standby time has passed, an authentication image plane described with a response message prompting input of the authentication information again is sent to WWW client devices 30a and 30b. By purposely taking time in response processing when there is an authentication error, notification that there is an authentication error is intentionally delayed with respect to a person having input the authentication information. By doing so, since a third party will require a considerably longer time than conventional until the authentication information is found, an act of the third party trying to steal the authentication information can be suppressed. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a technique for authenticating a user.

  When a user tries to access a computer or network resource, a procedure for confirming whether the user is valid is often performed. This procedure is called “user authentication”. In general, the user ID and password entered by the user are checked against the pre-registered contents, and the user's legitimacy is determined by whether or not they match. Judging sex. Hereinafter, information necessary for user authentication, such as the user ID and password, is collectively referred to as “authentication information”.

  However, in a network environment such as the Internet that allows access from an unspecified number of users, such an authentication method is not necessarily safe and reliable. This is because a malicious third party attempts to access tens of thousands of times using a suitably large number of authentication information and specifies the authentication information when the access is granted. This is because a large amount of real authentication information can be stolen. Such cheating is called “brute force attack”. Recently, there is no end to the so-called “spoofing” damage that behaves as if it is a legitimate user using authentication information stolen by this brute force attack.

  For such “spoofing” threats, for example, if wrong authentication information is entered three times in a single user authentication process, access is denied for a certain period thereafter. ing. However, since the same unauthorized access can be attempted again after a certain period of time has passed, there is a risk that the authentication information will be stolen. Of course, if the most important thing is that authentication information is not stolen, if the authentication information is wrong three times in a row, all subsequent access will be allowed unless there is a formal offer from a legitimate user. You just have to refuse it forever. However, since there are many cases where a legitimate user forgets his / her authentication information, if the security level is increased more than necessary, the user's usability becomes worse.

  As another countermeasure, for example, Patent Document 1 proposes that when access is permitted through user authentication, the user terminal registered in advance is notified immediately of the access. Thereby, even if the third party succeeds in unauthorized access, the fact of the access can be immediately notified to a legitimate user. The technology described in Patent Document 1 is intended to notify an authorized user of the fact of unauthorized access, so that the user can take an appropriate action, but prevents unauthorized access itself. Is difficult. This is because, from the viewpoint of the user, there is no way to interrupt the access instantly or to identify the identity of a third party performing unauthorized access just because the fact of unauthorized access is notified.

JP 2002-91917 A

  The present invention has been made in view of such circumstances, and an object of the present invention is to prevent authentication information such as a password from being stolen as much as possible by an illegal act such as a brute force attack.

  In order to achieve the above object, the present invention provides a storage means for storing authentication information determined for each user, a receiving means for receiving authentication information input to the communication apparatus from the communication apparatus, and the reception Authentication means for determining whether or not the authentication information received by the storage means is stored in the storage means, and when it is determined that the received authentication information is not stored in the storage means for a certain period of time. An authentication device is provided comprising access control means for transmitting to the communication device response information indicating that access from the communication device is not permitted after waiting until the time elapses.

  According to this authentication apparatus, when the authentication means determines that the authentication information is not stored in the storage means, the access control means waits for a certain period of time and then does not permit access from the communication apparatus. Is transmitted to the communication device. That is, from the viewpoint of a person who inputs authentication information to the communication terminal, the fact that the authentication information is wrong and the authentication has failed cannot be known without waiting for a certain time. When a third party steals authentication information by, for example, a brute force attack, authentication errors should be repeated many times. Therefore, it takes much more time than before to steal authentication information. Thus, in this invention, the action of the 3rd party who tries to steal authentication information is suppressed by deliberately taking time for the response in the case of an authentication error. Note that “access” in the present invention is a concept including various instructions such as a FAX instruction and a print instruction in addition to requesting and obtaining information.

  The present invention also provides a storage means for storing authentication information determined for each user, a receiving means for receiving authentication information input to the communication apparatus from the communication apparatus, and an authentication received by the receiving means. An authentication unit that determines whether or not information is stored in the storage unit; and if it is determined that the received authentication information is stored in the storage unit, access from the communication device is permitted. Access permission means, error count storage means for storing for each user the number of times that the received authentication information is determined not to be stored by the storage means, and the number of times stored by the error count storage means A waiting time determining means for determining a waiting time according to the information, and a lapse from a time when it is determined that the received authentication information is not stored in the storage means. A time measuring means for measuring the interval, and when the authentication means determines that the authentication information is not stored in the storage means, the elapsed time measured by the time measuring means is determined by the determining means. An access refusal means for transmitting a response message to the communication device to prompt the user to input the authentication information again to the communication device when the elapsed time exceeds the standby time. An authentication device is provided.

  According to this authentication apparatus, when the authentication unit determines that the authentication information is stored in the storage unit, the access permission unit permits access from the communication device, while the authentication unit stores the authentication information in the storage unit. If it is determined that the information is not stored, the communication device displays a response message for prompting the user to input the authentication information again to the communication device after the access refusal means waits until the predetermined waiting time elapses. Send to. That is, from the viewpoint of the person who inputs the authentication information to the communication terminal, if the authentication information is wrong and the authentication is successful, access is permitted as it is. On the other hand, if the authentication information is wrong and the authentication fails, the fact of the authentication error is delayed by the waiting time. Therefore, there is no particular disadvantage for the user who entered correct authentication information, but when an unauthorized third party tries to steal authentication information by a brute force attack, etc. It will take a lot of time. Thus, in this invention, the action of the 3rd party who tries to steal authentication information is suppressed by deliberately taking time for the response in the case of an authentication error.

  In a preferred aspect of the present invention, the waiting time determining means determines the waiting time by calculating a waiting time that increases according to the number of times stored in the error number storage means. As the number of authentication failures increases, the possibility of unauthorized access increases. Therefore, if the waiting time is increased according to the number of times stored in the error number storage means, the authentication information will be stolen. It is effective in suppressing the actions of third parties.

  Further, the waiting time determining means may determine the waiting time by calculating a waiting time that increases exponentially according to the number of times stored in the error number storage means. This is desirable because the effect of suppressing the action of a third party trying to steal authentication information becomes very large.

  In addition, an error notification unit that transmits a message having a content related to the authentication error to the second communication device while waiting for the elapsed time to exceed the standby time by the access rejection unit. It may be. In this way, if it is assumed that a third party tries to make an unauthorized access, the user of the second communication device can be notified that the authentication has failed. In response to this notification, the user can take an appropriate response until the standby time elapses. It is desirable that the second communication device is a portable communication device that can always be carried by the user.

In the present invention, the authentication device receives authentication information input to the communication device from the communication device, and determines whether the received authentication information matches the content stored in advance. And when it is determined that the authentication information does not match the content stored in advance, a step of waiting until a certain time elapses and an access from the communication device is not permitted after the certain time elapses An authentication method comprising the step of transmitting response information indicating that to the communication device.

  In the present invention, the authentication device receives authentication information input to the communication device from the communication device, and determines whether the received authentication information matches the content stored in advance. Determining a waiting time according to the number of times that the authentication information is determined not to match the content stored in advance, and when determining that the authentication information does not match the content stored in advance Starting the measurement of elapsed time, waiting until the measured elapsed time exceeds the determined standby time, and when the measured time exceeds the standby time, the authentication information is sent to the communication And transmitting a response message to the communication device to prompt the user to input again to the device.

  The present invention also provides a storage function for storing authentication information determined for each user in a computer, and an authentication function for determining whether authentication information received from a communication device is stored by the storage function. When it is determined that the authentication information is not stored by the storage function, after waiting until a certain time elapses, response information indicating that access from the communication device is not permitted is sent to the communication device. A program for realizing an access control function for performing processing for transmission is provided.

  The present invention also provides a storage function for storing authentication information determined for each user in a computer, and an authentication function for determining whether authentication information received from a communication device is stored by the storage function. When it is determined that the authentication information is stored by the storage function, it is determined that an access permission function for permitting access from the communication device and that the authentication information is not stored by the storage function. The number of errors stored for each user, a waiting time determination function for determining a waiting time according to the number of times stored by the error number storage function, and the authentication information are stored by the storage function. A timekeeping function for measuring the elapsed time from the time when it is determined that the authentication information is not determined, and that the authentication information is determined not to be stored by the storage function If the elapsed time exceeds the standby time determined by the determination function, the authentication information is input to the communication device again when the elapsed time exceeds the standby time. There is provided a program for realizing an access denial function for performing a process for transmitting a response message for prompting the user to do so to the communication device.

  In the process of authenticating a user, if authentication information such as a user ID and a password input by the user matches that registered in advance (that is, if authentication is successful), access is immediately permitted. On the other hand, if it is different from the one registered in advance (that is, in the case of an authentication error), a response message to prompt the user to input again the authentication information is notified. In the embodiment of the present invention, it is noted that when a third party tries to steal authentication information by a brute force attack, the authentication error should be repeated many times. Is intentionally slowed to inform the person who entered the authentication information of the fact of the authentication error. In this way, it takes much more time than before for the third party to find the correct authentication information, so the act of stealing the authentication information is suppressed. It becomes possible to do.

Hereinafter, embodiments of the present invention will be described in detail.
(1) Configuration FIG. 1 is a diagram showing an overall configuration of a system according to an embodiment of the present invention. In FIG. 1, the mobile communication network 1 and the Internet 2 are connected by a gateway device (not shown), and bidirectional data communication is possible between the mobile communication network 1 and the Internet 2 via the gateway device. It has become. A WWW (World Wide Web) server device 20 is connected to the Internet 2 via an ISDN network (Integrated Services Digital Network), an ADSL network (Asymmetric Digital Subscriber Line), or a dedicated line (not shown). The WWW server device 20 stores data in a file format described in HTML (Hypertext Markup Language) (hereinafter referred to as an HTML file), and transmits this HTML file in response to a request from the WWW client devices 30a and 30b. It is supposed to be.

  The WWW client devices 30a and 30b are, for example, personal computers and the like, and include a control unit including a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), an HDD (Hard Disk Drive), and the like. A storage unit, a communication unit such as a modem and various communication devices, a display unit such as a liquid crystal display device, and an operation unit such as a keyboard and a mouse. These WWW client devices 30a and 30b are connected to the Internet 2 via an ISDN network or an ADSL network (not shown). A WWW browser program is stored in the storage units of the WWW client devices 30a and 30b. When the control unit executes the WWW browser program, the WWW client devices 30a and 30b communicate with the WWW server device 20 via the Internet 2 in accordance with HTTP (Hypertext Transfer Protocol) and are transmitted by the WWW server device 20. When the HTML file is received, the contents are interpreted and various information is displayed on the display unit.

  The mobile communication network 1 is composed of a base station and an exchange station (not shown), and provides mobile communication services to the mobile phone 40. The cellular phone 40 is capable of, for example, a cellular phone capable of data communication of PDC (Personal Digital Cellular) method and IMT-2000 (International Mobile Telecommunications-2000) method, and PHS (Personal Handyphone System; registered trademark) method. Simple mobile phone. The mobile phone 40 includes a control unit configured by a CPU, a ROM, a RAM, a storage unit such as an EEPROM (Electrically Erasable and Programmable Read Only Memory), a communication unit such as an antenna and a wireless communication device, a liquid crystal display device, and the like Display section and an operation section such as a plurality of keys and a jog dial. A mailer program is stored in the EEPROM, and the CPU of the mobile phone 40 can send and receive e-mails by executing this mailer program.

  In FIG. 1, it is assumed that the user A operates the WWW client device 30a and the mobile phone 40, and the user B operates the WWW client device 30b. In FIG. 1, only one or two WWW server devices, mobile phones, and WWW client devices are shown in order to avoid the complexity of the drawing, but there are actually many more. .

  Next, the configuration of the WWW server apparatus 20 will be described with reference to the block diagram shown in FIG. As shown in FIG. 2, the WWW server device 20 includes a control unit 201, a communication unit 202, and a nonvolatile storage unit 203. The control unit 201 includes an arithmetic device such as a CPU and various memories such as a ROM and a RAM. The arithmetic unit of the control unit 201 controls each unit of the WWW server device 20 by reading and executing a computer program stored in a memory such as a ROM or the non-volatile storage unit 203. The communication unit 202 includes a modem for connecting to the Internet 2 and various communication devices, and performs data communication via the Internet 2 under the control of the control unit 201.

  The nonvolatile storage unit 203 is a mass storage device such as a hard disk. The nonvolatile storage unit 203 stores a WWW server application program 203a in which a procedure for functioning as a WWW server is described. The WWW server application program 203a includes a CGI (Common Gateway interface) program in which a procedure for authenticating the users of the WWW client devices 30a and 30b is described. Hereinafter, this CGI program is referred to as an “authentication CGI program”. The nonvolatile storage unit 203 stores a large number of HTML file groups 203c provided to the WWW client devices 30a and 30b. Each HTML file included in the HTML file group 203c is hierarchically related by a hyperlink, and the users of the WWW client devices 30a and 30b follow the hyperlinks of these HTML files one by one, thereby causing the WWW The client devices 30a and 30b can acquire the HTML files one by one from the WWW server device 20 and display them on the display unit.

Further, the non-volatile storage unit 203 stores an authentication table 203b in which information used when the control unit 201 executes the authentication CGI program is described.
Here, FIG. 3 is a diagram illustrating an example of contents described in the authentication table 203b. As shown in FIG. 3, in the authentication table 203b, items of “user ID”, “password”, “number of authentication errors”, “notification destination address”, and “notification method” are associated with each other. Among these items, “user ID” means an identifier assigned in advance to the users of the WWW client devices 30a and 30b. The “password” is a password designated in advance by the user of the WWW client devices 30 a and 30 b or the administrator of the WWW server device 20. The control unit 201 collates “user ID” and “password” described in the authentication table 203b in advance with “user ID” and “password” input to the WWW client devices 30a and 30b by the user, If they match, it is determined that the user is a valid user, and if they do not match, it is determined that the user is not a valid user. In the following description, the user ID and password are collectively referred to as “authentication information” as necessary.

  If the authentication information input to the WWW client devices 30a and 30b does not match the contents described in the authentication table 203b in advance, an authentication error has occurred. Therefore, the WWW server apparatus 20 transmits a response message that prompts the user of the WWW client apparatuses 30a and 30b to re-enter authentication information to the WWW client apparatuses 30a and 30b. “Number of authentication errors” in the authentication table 203b indicates the cumulative number of times authentication errors have occurred continuously. As described above, in the case of an authentication error, the response is intentionally taken so that when the WWW server device 20 transmits the response message to the WWW client devices 30a and 30b, the number of authentication errors The system waits for a waiting time determined according to the request time, and transmits the response message after the waiting time has elapsed.

  When the number of authentication errors reaches a predetermined number (for example, 3 times) or more, the WWW server device 20 transmits a notification message to the effect that “the authentication error has occurred continuously” to the communication device designated in advance by the user. To do. The “notification destination address” in the authentication table 203b means a communication address assigned to the communication device as described above. This notification message is transmitted from the WWW server device 20 to the communication device during standby until the standby time elapses. The notification destination address is preferably a communication address of a portable communication device that a user such as a mobile phone can always carry, such as a mail address or a telephone number assigned to the mobile phone 40 in FIG. . Further, the “notification method” means a communication method when performing notification with the “notification destination address” as a destination, and is, for example, an e-mail or a telephone.

  For example, in the example illustrated in FIG. 3, the password of the user indicated by the user ID “user001” is “1111”, an authentication error has occurred twice at this time, and an authentication error has occurred once more. Reaches a total of three times, an e-mail addressed to a mail client (herein referred to as a mobile phone 40) to which a mail address “tanaka@abc.co.jp” is assigned is sent from the WWW server device 20 to the mobile phone 40. Shown to be sent. The communication destination address and the notification method are notified in advance to the administrator of the WWW server device 20 by a legitimate user. Therefore, if it is assumed that the third party is trying to make an unauthorized access, if the authentication error is repeated a predetermined number of times or more, it can be immediately notified to the legitimate user. It is also possible to take some appropriate measures such as contacting the administrator of the WWW server device 20 immediately after receiving it.

  At this time, since the notification message is transmitted from the WWW server device 20 during the standby until the above-described standby time elapses, while the malicious third party is waiting for the authentication result to be found, , The notification message should reach the legitimate user. Therefore, a legitimate user can take an appropriate response with a time margin. As shown in FIG. 3, the notification destination address can be set to the communication address of the communication device of the administrator of the WWW server device 20 instead of the communication address of the communication device owned by the user.

(2) Operation FIG. 4 is a flowchart showing a procedure described in the above-described authentication CGI program. In FIG. 4, when the control unit 201 of the WWW server apparatus 20 detects that the communication unit 202 has received an HTTP request for requesting an authentication screen (step S1; Yes), in order to display the authentication screen accordingly. Are read from the nonvolatile storage unit 203 (step S2). Next, the control unit 201 generates an HTTP response including the HTML file and transmits the HTTP response to the WWW client device that is the transmission source of the HTTP request by the communication unit 202 (step S3).

  Next, when the control unit 201 detects that the communication unit 202 has received an HTTP request including authentication information as a CGI parameter (step S4; Yes), the control unit 201 extracts the authentication information from the HTTP request, and this authentication information (user (ID and password) using the user ID as a key, it is determined whether or not the received authentication information matches that stored in the authentication table 203b (step S5). If they match (step S6; Yes), the control unit 201 clears the number of authentication errors in the authentication table 203b to “0”, and permits access by the WWW client device that sent the request (step S7).

On the other hand, if the authentication information does not match (step S6; No), the control unit 201 increments the number of authentication errors corresponding to the user ID included in the HTTP request by “1” (step S8). Then, the control unit 201 determines a standby time based on the number of authentication errors described in the authentication table 203b (step S9). In the present embodiment, the standby time when the number of authentication errors is X is 5 ^× (seconds). For example, when the number of authentication errors is 1, the waiting time is 5 ¹ = 5 seconds, when the number of authentication errors is 2, the waiting time is 5 ² = 25 seconds, and when the number is 3, the waiting time is 5 ³ = 125 seconds. In the case of four times, the waiting time is 5 ⁴ = 625 seconds. After determining the standby time in this way, the control unit 201 starts counting elapsed time (step S10).

  Next, the control unit 201 determines whether or not to send a notification message based on whether or not the number of authentication errors is a predetermined number (three times) or more (step S11). That is, if the number of authentication errors is 3 or more (step S11; Yes), the control unit 201 sends a notification message to the notification destination address described in the authentication table 203b while waiting until the above-described waiting time elapses. To the communication device (step S12). Thereafter, when the control unit 201 determines that the elapsed time that has been counted exceeds the standby time (step S13; Yes), an HTML file for displaying an authentication screen in which a message that prompts re-input of authentication information is described. The data is read from the nonvolatile storage unit 203 (step S14), and is transmitted to the WWW client device by the communication unit 202 (step S3). Thereafter, the same processing as described above is repeated.

(3) Operation Example Next, a specific operation example will be described with reference to FIGS. 5 and 6.
The sequence shown in FIG. 5 shows the flow of processing until the user A operates the WWW client device 30a and access to the WWW server device 20 is permitted. In FIG. 5, first, the user A operates the operation unit of the WWW client device 30a to start the WWW browser program. Next, when the user A inputs or selects the URL of the authentication screen prepared by the WWW server device 20, the WWW client device 30a transmits an HTTP request r1 including the URL.

  When the WWW server apparatus 20 receives the HTTP request r1, the WWW client apparatus 30a sends an HTTP response r2 including an HTML file for displaying an authentication screen through the processing of steps S1 → S2 → S3 shown in FIG. Send.

  When receiving the HTTP response r2, the WWW client device 30a interprets the content of the HTML file included therein and displays an authentication screen on the display unit. This authentication screen is provided with a text box for inputting a user ID and a password. When the user A inputs the user ID “user001” and the password “1111” in this text box and performs an operation of instructing “send”, the WWW client device 30a responds to this operation with the input user ID “ An HTTP request r3 including “user001” and the password “1111” as CGI parameters is transmitted to the WWW server device 20.

  When receiving the HTTP request r3, the WWW server apparatus 20 performs the processing of steps S4 → S5 → S6 → S7 in FIG. That is, the WWW server device 20 extracts the user ID “user001” and the password “1111” from the HTTP request r3, and collates with the contents stored in the authentication table 203b using the user ID “user001” as a key. Here, since the user ID “user001” and the password “1111” are described in the authentication table 203b as shown in FIG. 3, the WWW server apparatus 20 clears the number of authentication errors in the authentication table 203b before the WWW client apparatus. Access by 30a is permitted. When the access is permitted, the WWW client device 30a can acquire and display a desired HTML file from the WWW server device 20 and receive various services provided by the WWW server device 20.

  Next, referring to the sequence shown in FIG. 6, an operation example when the user B tries to access the WWW server apparatus 20 by operating the WWW client apparatus 30b will be described. Note that the user B has already obtained the user A's user ID “user001” illegally by some means, and is also a malicious third party who tries to steal the password “1111” of the user A by brute force attack. Assume that

  In FIG. 6, first, the user B operates the WWW client device 30b to start the WWW browser program. Next, when the user B inputs or selects the URL of the authentication screen prepared by the WWW server device 20, the WWW client device 30b transmits an HTTP request r11 including the URL.

  Upon receiving the HTTP request r11, the WWW server device 20 transmits an HTTP response r12 including an HTML file for displaying an authentication screen to the WWW client device 30b through the processing of steps S1 → S2 → S3 shown in FIG. To do.

  When receiving the HTTP response r12, the WWW client device 30b interprets the content of the HTML file included therein and displays an authentication screen on the display unit. When the user B inputs the user ID “user001” and an appropriately defined password (for example, “0000”) in the text box of the authentication screen and performs an operation of instructing “send”, in response to this operation, The WWW client device 30b transmits an HTTP request r13 including the input user ID “user001” and password “0000” as CGI parameters to the WWW server device 20.

  When receiving the HTTP request r13, the WWW server apparatus 20 performs the processes of steps S4 → S5 → S6 → S8 in FIG. That is, the WWW server device 20 extracts the user ID “user001” and the password “0000” from the received HTTP request r13, and collates with the contents stored in the authentication table 203b using the user ID “user001” as a key. Here, as shown in FIG. 3, since the password corresponding to the user ID “user001” is “1111”, the WWW server device 20 determines that the passwords do not match and sets the number of authentication errors of the user ID “user001” to “1”. Increment only.

Next, the WWW server apparatus 20 performs the processes of steps S9 → S10 → S11 → S13 → S14 → S3 in FIG. That is, the WWW server device 20 calculates the standby time 5 ¹ = 5 seconds based on the number of authentication errors “1” described in the authentication table 203b, and starts counting the elapsed time. Furthermore, the WWW server device 20 determines whether or not to send a notification message. Here, since the number of authentication errors is one and has not reached the predetermined “three times”, the WWW server apparatus 20 determines that there is no need to transmit a notification message. Thereafter, when the WWW server apparatus 20 determines that the elapsed time that has been counted exceeds the waiting time of 5 seconds, the HTML file for displaying an authentication screen in which a message for prompting re-input of authentication information is described in a non-volatile manner It reads out from the storage unit 203 and transmits an HTTP response r14 including this to the WWW client device 30b.

  When receiving the HTTP response r14, the WWW client device 30b interprets the content of the HTML file included therein and displays an authentication screen on the display unit. The authentication screen includes a text box for entering the user ID and password, and a message prompting the user ID and password to be re-entered because the previously entered user ID and password are incorrect. When the user B inputs the user ID “user001” and the next appropriately defined password “0001” in this text box and performs an operation of instructing “send”, the WWW client device 30b responds to this operation. The HTTP request r15 including the input user ID “user001” and the password “0001” as CGI parameters is transmitted to the WWW server apparatus 20.

  When receiving the HTTP request r15, the WWW server apparatus 20 performs the processes of steps S4 → S5 → S6 → S8 in FIG. That is, the WWW server device 20 extracts the user ID “user001” and the password “0001” from the received HTTP request r15, and collates with the contents stored in the authentication table 203b using the user ID “user001” as a key. Here, as shown in FIG. 3, since the password corresponding to the user ID “user001” is “1111”, the WWW server apparatus 20 determines that the password is incorrect, and sets the number of authentication errors of the user ID “user001” to “1”. "Is incremented. As a result, the number of authentication errors is “2” as shown in FIG.

Next, the WWW server apparatus 20 performs the processes of steps S9 → S10 → S11 → S13 → S14 → S3 in FIG. That is, the WWW server apparatus 20 calculates the standby time 5 ² = 25 seconds based on the number of authentication errors “2” described in the authentication table 203b, and starts counting the elapsed time. Furthermore, the WWW server device 20 determines whether or not to send a notification message. Here, the number of authentication errors is 2, and since the predetermined “3 times” has not been reached, the WWW server device 20 determines that it is not necessary to transmit a notification message. After that, if the WWW server device 20 determines that the elapsed time that has been counted exceeds the waiting time of 25 seconds, the HTML file for displaying an authentication screen in which a message prompting re-input of authentication information is described is nonvolatile. It reads out from the storage unit 203, and transmits an HTTP response r16 including this to the WWW client device 30b.

  When the WWW client device 30b receives the HTTP response r16, the WWW client device 30b interprets the content of the HTML file included therein and displays the authentication screen as described above on the display unit again. When the user B inputs the user ID “user001” and the next appropriately defined password “0002” in this text box and performs an operation of instructing “send”, the WWW client device 30b responds to this operation. The HTTP request r17 including the input user ID “user001” and the password “0002” as CGI parameters is transmitted to the WWW server device 20.

  When receiving the HTTP request, the WWW server device 20 performs the processes of steps S4 → S5 → S6 → S8 in FIG. That is, the WWW server device 20 extracts the user ID “user001” and the password “0002” from the received HTTP request r17, and collates with the contents stored in the authentication table 203b using the user ID “user001” as a key. Here, as shown in FIG. 3, since the password corresponding to the user ID “user001” is “1111”, the WWW server apparatus 20 determines that the password is incorrect, and sets the number of authentication errors of the user ID “user001” to “1”. "Is incremented. As a result, the number of authentication errors is “3”.

Next, the WWW server device 20 performs the processes of steps S9 → S10 → S11 → S12 → S13 → S14 → S3 in FIG. That is, the waiting time 5 ³ = 125 seconds is calculated based on the number of authentication errors “3” described in the WWW server device 20 and the authentication table 203b, and the counting of the elapsed time is started. Next, the WWW server apparatus 20 determines whether or not to send a notification message. Here, since the number of authentication errors is three and the predetermined number has been reached, the WWW server device 20 determines that it is necessary to transmit a notification message, and the notification destination address “tanaka” described in the authentication table 203b is determined. @ Abc.co.jp "is generated as an address, and an e-mail r18 describing that authentication errors are continued three times is generated and transmitted.

Since this electronic mail is received by the mobile phone 40 of the user A, the user A may take some appropriate measures such as contacting the administrator of the WWW server device 20 when receiving this notification. Thereafter, if the WWW server device 20 determines that the elapsed time that has been counted exceeds the standby time of 125 seconds, the HTML file for displaying an authentication screen in which a message for prompting re-input of authentication information is stored in a nonvolatile storage. The HTTP response r19 including this is read from the unit 203 and transmitted to the WWW client device 30b.
Thereafter, the same processing as described above is repeated until the authentication is successful.

  According to the embodiment described above, the time required for response processing in the case of an authentication error is intentionally increased exponentially according to the number of authentication errors, so that authentication is performed for a user who tries to access. It can be slow to inform the fact of the error. In this way, it takes a considerable amount of time until a malicious third party finds the correct authentication information. Therefore, the third party who tries to steal authentication information is required. It becomes possible to suppress the act. Further, when the number of authentication errors exceeds a predetermined number, a notification is sent to the communication device designated in advance by an authorized user or administrator that the number of authentication errors has exceeded the predetermined number. Therefore, if it is assumed that the third party is trying to make an unauthorized access, if an authentication error is repeated several times, a right user can be notified immediately. Upon receiving this notification, the user can take some appropriate measures such as contacting the administrator of the WWW server device 20.

(4) Modifications The present invention is not limited to the above-described embodiments, and the following modifications are possible.
(4-1) Modification 1
In the embodiment, the standby time is determined so as to increase exponentially according to the number of authentication errors, but this standby time may be determined in any way. For example, when the number of authentication errors is X, the standby time may be increased in proportion to the number of authentication errors, with standby time = A (arbitrary constant) × X seconds, or the number of authentication errors is 1. The waiting time is increased stepwise by an arbitrarily determined difference for each number of authentication errors, such as 3 seconds for the second time, 10 seconds for the second time, 30 seconds for the third time, and so on. May be. Further, the waiting time may be fixed regardless of the number of authentication errors. Note that the maximum allowable number of authentication errors is determined to be 10 times, for example. If the authentication error is repeated 10 times in succession, access may be denied for a certain period thereafter, or from a legitimate user. Unless there is an official offer, any subsequent access may be permanently denied.

(4-2) Modification 2
The WWW client terminals 30a and 30b used by the user are not limited to personal computers, but may be cellular phones or PDAs capable of wireless data communication. Further, the WWW server device 20 does not need to be configured by a single server device as described in the embodiment, and may be configured by a plurality of server device groups. For example, a server device responsible for a function related to authentication and a server device responsible for a function related to an HTML file providing service are configured separately, and these server devices cooperate with each other to be equivalent to the WWW server device of the above embodiment. The function may be realized.

(4-3) Modification 3
In the embodiment, the user ID and the password are exemplified as the authentication information. However, the authentication information may be any information as long as it is the basis of the authentication at the time of user authentication. Further, the two pieces of information such as the user ID and the password are not limited to a combination, and may be three or more, or only one. In the embodiment, data described in HTML has been described as an example. However, the present invention is not limited thereto, and any description language of information may be used. For example, XHTML (Extensible-HTML), HDML (Handheld Device Markup Language), WML (Wireless Markup Language), or XML (Extensible Markup Language) may be used.

(4-4) Modification 4
In the embodiment, the operation example by the WWW client terminal and the WWW server apparatus has been described as an example. However, the authentication process of the present invention is not limited to such an aspect, and may be an apparatus having a normal computer function. That's fine.

(4-5) Modification 5
In the embodiment, it is described that the user inputs the authentication information by operating the client device. However, the present invention can also be applied to access control of a single computer not via a network. This is, for example, a mode in which the user inputs authentication information by operating the server device. At this time, the server device may return a response to itself rather than the client device. In this way, the authentication method of the present invention can be applied to a stand-alone computer. The present invention can also be applied to an authentication device such as an electronic lock for a residence.

(4-6) Modification 6
In the embodiment, the mobile phone is exemplified as the notification destination of the authentication error, and the e-mail and the telephone are illustrated as the notification method. However, the notification destination is not limited thereto, and the notification destination is a personal computer, a fixed phone, a pager (registered trademark), or the like. Or a notification method such as SMS (Short Message Service) may be used.

(4-7) Modification 7
The programs executed by the control unit 201 of the WWW server device 20 described above are magnetic tape, magnetic disk, floppy (registered trademark) disk, optical recording medium, magneto-optical recording medium, CD (Compact Disk) -ROM, DVD (Digital Versatile Disk) and a recording medium such as a RAM can be provided.

1 is a block diagram showing an overall configuration of a system according to an embodiment of the present invention. It is a block diagram which shows the structure of the WWW server apparatus in the embodiment. It is a figure which shows an example of the content of the authentication table in the embodiment. It is a flowchart which shows the procedure described in the authentication CGI program which the WWW server apparatus in the embodiment memorize | stored. It is a sequence diagram which shows the operation example of the whole system in the embodiment. It is a sequence diagram which shows the operation example of the whole system in the embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Mobile communication network, 2 ... Internet, 20 ... WWW server apparatus, 201 ... Control part, 202 ... Communication part, 203 ... Nonvolatile memory | storage part, 30a, 30b ... -WWW client device, 40 ... mobile phone.

Claims (10)

Storage means for storing authentication information determined for each user;
Receiving means for receiving authentication information input to the communication device from the communication device;
Authentication means for determining whether the authentication information received by the receiving means is stored by the storage means;
If it is determined that the received authentication information is not stored by the storage unit, response information indicating that access from the communication device is not permitted is displayed after waiting until a certain period of time has elapsed. An authentication device comprising: an access control means for transmitting to the device. Storage means for storing authentication information determined for each user;
Receiving means for receiving authentication information input to the communication device from the communication device;
Authentication means for determining whether the authentication information received by the receiving means is stored by the storage means;
If it is determined that the received authentication information is stored by the storage means, an access permission means for permitting access from the communication device;
Error number storage means for storing, for each user, the number of times that the received authentication information is determined not to be stored by the storage means;
Standby time determining means for determining a standby time according to the number of times stored by the error number storage means;
Time measuring means for measuring an elapsed time from when it is determined that the received authentication information is not stored by the storage means;
If the authentication means determines that the authentication information is not stored in the storage means, the process waits until the elapsed time measured by the time measuring means exceeds the standby time determined by the determination means, An authentication apparatus comprising: an access refusing unit that transmits a response message for prompting the user to input the authentication information to the communication apparatus again when the elapsed time exceeds the standby time.   The authentication apparatus according to claim 2, wherein the standby time determination unit determines the standby time by calculating a standby time that increases in accordance with the number of times stored in the error count storage unit.   3. The authentication apparatus according to claim 2, wherein the waiting time determining means determines the waiting time by calculating a waiting time that increases exponentially according to the number of times stored in the error number storage means.   3. An error notification unit that transmits a message having a content related to an authentication error to the second communication device while waiting for the elapsed time to exceed the standby time by the access refusal unit. The authentication device described.   The authentication device according to claim 5, wherein the second communication device is a portable communication device. The authentication device
Receiving authentication information input to the communication device from the communication device;
Determining whether the received authentication information matches the content stored in advance;
If it is determined that the authentication information does not match the content stored in advance, a step of waiting until a certain period of time elapses;
And a step of transmitting response information indicating that access from the communication device is not permitted to the communication device when the certain time has elapsed. The authentication device
Receiving authentication information input to the communication device from the communication device;
Determining whether the received authentication information matches the content stored in advance;
Determining a waiting time according to the number of times it is determined that the authentication information does not match the content stored in advance;
Starting the measurement of elapsed time when it is determined that the authentication information does not match the content stored in advance;
Waiting until the elapsed time to be measured exceeds the determined waiting time;
And transmitting a response message for prompting the user to input the authentication information to the communication device again when the measured time exceeds the waiting time. On the computer,
A storage function for storing authentication information determined for each user;
An authentication function for determining whether authentication information received from a communication device is stored by the storage function;
If it is determined that the authentication information is not stored by the storage function, response information indicating that access from the communication device is not permitted is transmitted to the communication device after waiting for a certain period of time. A program for realizing an access control function that performs processing for On the computer,
A storage function for storing authentication information determined for each user;
An authentication function for determining whether authentication information received from a communication device is stored by the storage function;
If it is determined that the authentication information is stored by the storage function, an access permission function for permitting access from the communication device;
An error count storage function for storing, for each user, the number of times that the authentication information is determined not to be stored by the storage function;
A standby time determination function for determining a standby time according to the number of times stored by the error count storage function;
A timekeeping function for measuring an elapsed time since it was determined that the authentication information is not stored by the storage function;
If it is determined that the authentication information is not stored by the storage function, the process waits until the elapsed time measured by the time measurement function exceeds the standby time determined by the determination function, and the elapsed time is A program for realizing an access denial function for performing processing for transmitting a response message to the user to prompt the user to input the authentication information to the communication device again when the waiting time is exceeded.

Images