JP2006092303A - Information processing system, information processor and authentication method in information processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing system, an information processor and an authentication method in the information processing system which has extremely high security. <P>SOLUTION: A user notifies a center server of his or her telephone number and location information from a portable terminal. The center server specifies authentication information corresponding to the telephone number based on a user ID list, and selects a terminal unit which is the nearest to the user from a terminal unit list based on the location information, and records the selected terminal unit in an access permission list, and notifies the portable terminal of the information related with the terminal unit. The terminal unit receives document ID, user ID and password, and notifies them to the center server. At the time of confirming that the terminal number has been recorded, the center server compares the user ID with the password, and when they are matched, transfers a document corresponding to the document ID notified from the terminal unit to the terminal unit. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing system, an information processing apparatus, and an authentication method in an information processing system, and more particularly to an information processing system, an information processing apparatus, and an authentication method in an information processing system that acquire information that requires personal authentication with a terminal.

  There are terminals installed all over the country, and companies that are extremely strict about security can develop who can remotely retrieve information that requires personal authentication using this terminal. It is necessary to specify where information is extracted from the terminal. Various proposals for deploying such services have been made.

  For example, there is an authentication system and an authentication server that perform access authentication by inputting a user ID and a password in order to access a specific application in the server (see, for example, Patent Document 1).

Further, for example, there are an IC card that authenticates using an IC card and an IC card reader, its device, its management device, and its system (see, for example, Patent Document 2).
JP 2002-278930 A JP 2002-175509 A

  However, with the technique described in Patent Document 1, all users who know information for authentication are authenticated. Therefore, by storing the information for authentication only in the head of the user himself / herself, this information may not be known to a third party, so that the information is written on paper or stored in a storage medium so as not to forget it. If this is done, there is a possibility that this information may be passed to a third party by some mistake, and it cannot be said that the security level is high.

  In addition, in the technology described in Patent Document 2, IC card issuance (necessary for users), IC card management (new issue, loss handling, disposal, etc.), IC card reader installed (necessary for terminals) are considered. Then, enormous cost will occur. Moreover, when the application is limited, the cost burden becomes heavier. Since it takes a very long time to realize an environment that can be used for various purposes and can be used with various terminals, it is very difficult to construct an all-in-one system.

  Furthermore, as security continues to decline as technology advances, it is difficult to maintain security unless such a system is changed to a new one in about five years.

  Therefore, it is not difficult to build a system that performs such management within a limited range, such as within a company, but a terminal that is installed outside such a limited range. There are some problems in the system that runs on the machine.

  Problem 1. Is it possible to record exactly who, when and where the information was accessed?

  Problem 2 How much does it cost?

  Problem 3 Is fraud countermeasures possible?

  Issue 4 How to select a terminal when there are multiple terminals in the vicinity.

  Problem 5 Is it possible to properly handle the expiration date of information?

  Accordingly, an object of the present invention is to provide an information processing system, an information processing apparatus, and an authentication method in the information processing system with extremely high security while solving the above problems.

  In order to achieve the above object, an invention according to claim 1 is an information processing system in which an information processing apparatus and a plurality of terminals are connected via a network, wherein the information processing apparatus includes various content information and the terminal. First communication means for performing communication processing with the second communication means, second communication means for performing communication processing with the mobile terminal, an authentication information list that lists authentication information corresponding to the unique information of the mobile terminal, A terminal list that lists information related to a plurality of terminals, and a permission list that records the terminals that are allowed to acquire the content information by the first communication means, and the portable terminal Specific information and position information of the portable terminal are transmitted to the information processing apparatus by the second communication means, and the information processing apparatus is based on the authentication information list. The authentication information corresponding to the unique information received from the mobile terminal is specified, the terminal having a predetermined condition is selected based on the terminal list and the location information received from the mobile terminal, and the selected terminal Information about the machine and the authentication information are recorded in the permission list, information about the terminal recorded in the permission list is transmitted to the portable terminal by the second communication means, and the terminal recorded in the permission list When a request for content information is received by the first communication means, the content information is transferred to the terminal by the first communication means.

  According to a second aspect of the present invention, in the first aspect of the invention, the information processing apparatus sends a request for the content information from the terminal together with information about the terminal and the authentication information by the first communication unit. When the information is received, it is confirmed whether or not the information about the terminal and the authentication information are recorded in the permission list. If it is confirmed that the information is recorded in the permission list, the content information is stored in the terminal. Is transferred by the first communication means, and when it is confirmed that it is not recorded in the permission list, the first communication means notifies the terminal that acquisition of the content information is not permitted. And

  The invention of claim 3 is characterized in that, in the invention of claim 2, when the information processing apparatus confirms that the information is not recorded in the permission list, the information processing apparatus requests the mobile terminal to authenticate again. .

  According to a fourth aspect of the present invention, in the first aspect of the present invention, the terminal having the predetermined condition is a terminal installed at the shortest position from the position information.

  According to a fifth aspect of the present invention, in the first aspect of the present invention, the terminal having the predetermined condition is a terminal installed within a certain range from the position information.

  The invention according to claim 6 is the invention according to claim 1, wherein the information processing apparatus sets an expiration date in the record of the information about the terminal and the authentication information in the permission list, and the expiration date has passed. In this case, the second communication means notifies the portable terminal that the expiration date has passed.

  According to a seventh aspect of the present invention, there is provided an information processing system in which an information processing apparatus and a plurality of terminals are connected via a network, wherein the information processing apparatus performs various content information and communication processing with the terminal. A communication means for performing authentication, and an authentication information list in which authentication information corresponding to the unique information of the portable terminal is listed. The portable terminal is connected to the terminal, and the unique information and the authentication of the portable terminal are connected. Information is transmitted to the terminal, the terminal transmits unique information and authentication information received from the mobile terminal to the information processing apparatus by the communication means, and the information processing apparatus receives from the terminal. It is confirmed whether the unique information and the authentication information are recorded in the authentication information list, and if it is confirmed that they are recorded in the permission list, the communication device of the terminal The permit acquisition of the content information, if it is confirmed not recorded in the permission list, characterized in that it does not allow the acquisition of the content information to the terminal in accordance with.

  The invention according to claim 8 is the invention according to claim 7, wherein the information processing apparatus sets an expiration date for permission to acquire the content information by the communication unit of the terminal, and the expiration date has passed. In this case, the communication means notifies the terminal that the expiration date has passed.

  According to a ninth aspect of the present invention, in an information processing apparatus connected to a plurality of terminals via a network, various content information, a first communication means for performing communication processing with the terminal, a portable terminal, A second communication means for performing communication processing; an authentication information list that lists authentication information corresponding to unique information of the mobile terminal; a terminal list that lists information about the plurality of terminals; And a permission list that records a terminal that permits acquisition of the content information by the first communication means, and the second communication means has received the unique information and position information that the portable terminal has from the portable terminal. In this case, the authentication information corresponding to the received unique information is identified based on the authentication information list, and a predetermined condition is determined based on the terminal list and the received location information. Selects a terminal provided, records information on the selected terminal and the authentication information in the permission list, and transmits information on the terminal recorded in the permission list to the portable terminal by the second communication unit. When the request for the content information is received from the terminal recorded in the permission list by the first communication means, the content information is transferred to the terminal by the first communication means. And

  Further, the invention of claim 10 is the invention of claim 9, wherein when the content information request and the authentication information are received from the terminal by the first communication means, It is confirmed whether the information about the terminal and the authentication information are recorded in the permission list. If it is confirmed that the information is recorded in the permission list, the content information is sent to the terminal in the first communication. When it is confirmed that the content information is not recorded in the permission list, the first communication means notifies the terminal that acquisition of the content information is not permitted.

  The invention of claim 11 is characterized in that, in the invention of claim 10, when it is confirmed that the information is not recorded in the permission list, the mobile terminal is requested to authenticate again.

  The invention of claim 12 is characterized in that, in the invention of claim 9, the terminal having the predetermined condition is a terminal installed at a shortest position from the position information.

  According to a thirteenth aspect of the present invention, in the ninth aspect of the present invention, the terminal having the predetermined condition is a terminal installed within a certain range from the position information.

  Further, in the invention of claim 14, in the invention of claim 9, an expiration date is set in the record of the information related to the terminal and the authentication information in the permission list, and when the expiration date has passed, The second communication means notifies the portable terminal that the expiration date has passed.

  In the information processing apparatus connected to a plurality of terminals via a network, the content information, communication means for performing communication processing with the terminal, and unique information possessed by the mobile terminal are provided. A list of authentication information corresponding to the authentication information, and when the communication device receives the unique information and the authentication information that the mobile terminal has from the terminal, the unique information received from the terminal and Check whether authentication information is recorded in the authentication information list, and if it is confirmed that the authentication information is recorded in the permission list, permit the acquisition of the content information by the communication means of the terminal, and If it is confirmed that the content information is not recorded, the terminal is not permitted to acquire the content information.

  Further, the invention of claim 16 is the invention of claim 15, wherein an expiration date is set for permission of acquisition of the content information by the communication means of the terminal, and when the expiration date has passed, the terminal The communication means notifies the machine that the expiration date has passed.

  The invention according to claim 17 is an authentication method in an information processing system in which an information processing apparatus and a plurality of terminals are connected via a network. The position information is transmitted to the information processing apparatus, and the information processing apparatus corresponds to the unique information received from the portable terminal based on the authentication information list that lists the authentication information corresponding to the unique information of the portable terminal. Based on a terminal list that identifies authentication information, lists information on the plurality of terminals, and location information received from the mobile terminal, a terminal that satisfies a predetermined condition is selected, and the selected terminal Information related to the device and the authentication information are recorded in a permission list that records the terminals that are permitted to acquire the content information stored in the information processing device. Then, information related to the terminal recorded in the permission list is transmitted to the portable terminal, and when the request for the content information is received from the terminal recorded in the permission list, the content information is transferred to the terminal. It is characterized by doing.

  The invention according to claim 18 is the invention according to claim 17, wherein when the information processing apparatus receives information about the terminal and the authentication information together with the request for the content information from the terminal, Check whether the information related to the terminal and the authentication information are recorded in the permission list. If it is confirmed that the authentication information is recorded in the permission list, the content information is transferred to the terminal, and the permission list When it is confirmed that the content information is not recorded, the terminal is notified that the acquisition of the content information is not permitted.

  The invention of claim 19 is characterized in that, in the invention of claim 18, when the information processing apparatus confirms that the information processing apparatus is not recorded in the permission list, the information processing apparatus requests the mobile terminal to authenticate again. .

  The invention of claim 20 is characterized in that, in the invention of claim 17, the terminal having the predetermined condition is a terminal installed at the shortest position from the position information.

  The invention of claim 21 is the invention of claim 17, wherein the terminal having the predetermined condition is a terminal installed within a certain range from the position information.

  According to a twenty-second aspect of the present invention, in the seventeenth aspect, the information processing apparatus sets an expiration date in the record of the information about the terminal and the authentication information in the permission list, and the expiration date has passed. In this case, the mobile terminal is notified that the expiration date has passed.

  The invention of claim 23 is an authentication method in an information processing system in which an information processing device and a plurality of terminals are connected via a network, wherein the portable terminal is connected to the terminal and the portable terminal has The unique information and the authentication information are transmitted to the terminal, the terminal transmits the unique information and the authentication information received from the mobile terminal to the information processing apparatus, and the information processing apparatus receives the information from the terminal. If it is confirmed that the unique information and the authentication information are recorded in the authentication information list that lists the authentication information corresponding to the unique information that the portable terminal has, and confirmed that it is recorded in the permission list, When it is confirmed that the content information stored in the information processing apparatus of the terminal is not recorded in the permission list, Characterized in that it does not permit the acquisition of serial content information.

  According to a twenty-fourth aspect of the present invention, in the twenty-third aspect, the information processing apparatus sets an expiration date for permission to acquire the content information by the communication unit of the terminal, and the expiration date has passed. In this case, the terminal is notified that the expiration date has passed.

  According to the present invention, it is possible to perform information management with extremely high security.

  In addition, according to the present invention, it is possible to change the terminal with a simple operation even when the terminal to be used is changed depending on the movement situation.

  In addition, according to the present invention, there is an effect that the user can acquire information without knowing the place where the terminal is installed.

  In addition, according to the present invention, it is possible for the user to know that a time-out has occurred before operating the terminal.

  In addition, according to the present invention, it is possible to set the expiration date in detail according to the instructed situation and the location where the terminal is installed.

  Further, according to the present invention, there is an effect that it is possible to extend the expiration date with only a minimal influence on security.

  In addition, according to the present invention, it is possible to continue processing even if a timeout occurs during operation of the terminal.

  Embodiments of an information processing system, an information processing apparatus, and an authentication method in the information processing system according to the present invention will be described below in detail with reference to the accompanying drawings.

  FIG. 1 is a diagram showing an example of the configuration of an information processing system 1 according to the present invention.

  As shown in FIG. 1, the information processing system 1 includes a center server 3 connected to a network 2 and a plurality of terminals 4.

  The center server 3 stores various content information such as documents, voices, moving images, application programs, and the like, and transfers the content information to the terminal 4 in response to a request from the terminal 4. However, authentication processing by the center server 3 is necessary for the terminal 4 to acquire content information. The center server 3 has a restriction that content information cannot be downloaded by a browser such as a PC (Personal Computer) or a portable terminal.

  The terminal 4 accesses the center server 3 via the network 2 and acquires content information from the center server 3. The terminal 4 has a unique terminal number for each terminal.

  In the present embodiment, an example will be described in which a user accesses a center server from a desired location using a mobile terminal and acquires a document, which is content information stored in the center server, with a terminal.

  FIG. 2 is a diagram illustrating the first embodiment of the authentication process in the information processing system.

  The user performs personal authentication with a mobile terminal such as a mobile phone and notifies the telephone number and position information from the mobile terminal to the center server.

  Here, the mobile terminal has authentication based on a user ID and password, a personal authentication function such as a fingerprint authentication function and a GPS (Global Positioning System) function, performs personal authentication by the personal authentication function, and acquires position information by the GPS function. To do.

  In addition, the telephone number and position information are notified to the center server by digital communication, packet communication, mail function, etc. For example, a dedicated application is installed in advance in the mobile terminal, and the application automatically sets the telephone number and position. A configuration for notifying information is realistic.

  Note that the mobile terminal does not necessarily have a personal authentication function and a GPS function. In other words, in the case of a mobile terminal that does not have a GPS function, a configuration in which position information (address, etc.) is manually input or position information (address, name of a store where the terminal is installed, etc.) according to the above-described application guidance is also input. Applicable.

  The center server has a user ID list that lists authentication information (user ID and password) corresponding to telephone numbers, and a terminal list that lists terminals and terminal numbers connected to the network, and is based on the user ID list. The authentication information corresponding to the telephone number notified from the mobile terminal is specified, and the nearest terminal is selected from the terminal list by the user based on the location information notified from the mobile terminal, and the selected terminal Specify the terminal number.

  The center server has an access permission list that lists terminals that are allowed access for a certain period of time. In order to allow access from the terminals identified above for a certain period of time, the specified server number and authentication information are permitted to access. The information is recorded in the list, and information on the terminal and the document ID that can be acquired are notified to the portable terminal.

  When the portable terminal acquires the information about the terminal and the document ID, the portable terminal displays the acquired information about the terminal and the document ID on the screen of the portable terminal.

  The user confirms the information about the terminal displayed on the screen of the mobile terminal, goes to the place where the terminal is installed, confirms the document ID displayed on the screen of the mobile terminal, and obtains the document to be acquired by the terminal Enter the document ID, user ID, and password.

  When the terminal receives the document ID, user ID, and password, the terminal notifies the center server of the received document ID, user ID, password, and terminal number of the terminal.

  The center server confirms whether or not the terminal number notified from the terminal is recorded in the access permission list, and if it is confirmed that the terminal number is recorded, the authentication information recorded together with the terminal number and the terminal The user ID and the password notified from are compared, and if they match, the document corresponding to the document ID notified from the terminal is transferred to the terminal. If it is confirmed that the terminal number is not recorded in the access permission list, or if the authentication information does not match the user ID and password, an error is notified to the terminal and access to the terminal is permitted. Notify that there is no

  The terminal outputs the document transferred from the center server. For example, if the terminal is a printer, a document is printed.

  Then, the center server deletes the terminal number and the authentication information from the access permission list after a certain time.

  Next, an authentication processing procedure performed by the mobile terminal, the terminal, and the center server in the information processing system will be described with reference to a flowchart shown in FIG.

  The portable terminal performs personal authentication (step S301), and notifies the center server of the telephone number and location information (step S302).

  The center server specifies authentication information (user ID and password) based on the telephone number notified from the mobile terminal (step S303), and selects the nearest terminal based on the location information notified from the mobile terminal. The terminal number of the terminal is identified (step S304), the identified terminal number and authentication information are recorded in the access permission list (step S305), and the terminal information and the document ID that can be acquired are notified to the portable terminal. (Step S306).

  The mobile terminal displays the terminal information and document ID notified from the terminal (step S307). Here, the user confirms the information of the terminal, goes to the place where the terminal is installed, and inputs the document ID, user ID and password of the document to be acquired in the terminal.

  The terminal notifies the center server of the input document ID, user ID, password, and terminal number of the terminal (step S308).

  The center server confirms that the terminal number notified from the terminal is recorded in the access permission list, and that the authentication information recorded together with the terminal number matches the user ID and password notified from the terminal. If it is confirmed (YES in step S309), the document corresponding to the document ID notified from the terminal is transferred to the terminal (step S310).

  The terminal outputs the document transferred from the center server (step S311), and the center server deletes the terminal number and the authentication information from the access permission list after a predetermined time (step S312).

  In addition, the center server notifies that the terminal number notified from the terminal is not recorded in the access permission list, or the terminal information is recorded from the terminal and the authentication information recorded together with the terminal number. If it is confirmed that the user ID and the password do not match (NO in step S309), an error is notified to the terminal (step S313).

  The terminal displays the error notified from the center server (step S314).

  Next, selection of a terminal based on position information notified from the portable terminal performed by the center server will be described with reference to FIG.

  FIG. 4 is a diagram illustrating a terminal selection method performed by the center server.

  As shown in FIG. 4, when the user notifies the center server of the telephone number and location information from the mobile terminal, the center server selects the nearest terminal from the user list based on the location information.

  As a selection method performed by the center server at this time, as shown in FIG. 4, the first terminal that selects the nearest terminal (or the terminal installed in the nearest store) from the place where the user is located There is a selection method or a second terminal selection method for selecting at least one terminal (or a terminal installed in a store within a certain range) within a certain range from the place where the user is. .

  When the first terminal selection method is performed, only the information related to the nearest terminal selected by the center server is notified to the mobile terminal.

  When the second terminal selection method is performed, information related to at least one terminal within a certain range selected by the center server is notified to the mobile terminal.

  When the second terminal selection method is performed and two or more terminals are selected, the terminal numbers of all terminals and user authentication information are recorded in the access permission list of the center server. The user ID and password are valid for all terminals. However, if the center server is accessed from any of the two or more selected terminals, access using the same user ID and password cannot be performed from the remaining terminals.

  In addition, when the second terminal selection method is performed and two or more terminals are selected, it is possible to lengthen the access expiration date for each terminal. For example, the location of the user and the terminal Depending on the distance to the machine, the length is changed according to the user's personal information such as past usage records, and further according to the nature and importance of the requested information. You can turn it on.

  Furthermore, it is also possible to change the selection of the terminal as the user moves, the previously selected terminal moves away, and another terminal approaches. Here, when the first terminal selection method is performed, when the terminal moves and another terminal approaches, the terminal that has approached is selected again as the nearest terminal, and authentication information for the previously selected terminal And the access expiration date is taken over. In addition, when the second terminal selection method is performed, by narrowing the selection range according to the travel time, only the terminal can be accessed when it arrives at the target terminal. It can also be created.

  Next, in the information processing system, when the user accesses the center server from an unauthorized terminal other than the terminal selected by the center server, authentication processing performed by the mobile terminal, the unauthorized terminal and the center server The procedure will be described with reference to the flowchart shown in FIG.

  The user inputs a document ID, a user ID, and a password to a terminal that is not permitted to access.

  The terminal that is not permitted to access notifies the center server of the input document ID, user ID, password, and terminal number of the terminal (step S501).

  The center server confirms that the terminal number notified from the access-unauthorized terminal is not recorded in the access-permitted list (step S502), notifies the access-unauthorized terminal (step S503), The terminal whose access is not permitted displays the error notified from the center server (step S504).

  Then, the center server requests re-authentication from the mobile terminal (step S505).

  The portable terminal notifies the center server of the terminal information, the user ID, and the password (step S506).

  The center server records the terminal number included in the terminal information notified from the mobile terminal in the access permission list, the authentication information recorded together with the terminal number, and the user ID notified from the mobile terminal, and When it is confirmed that the password matches (YES in step S507), the terminal number and authentication information notified from the terminal that is not permitted to access are added to the access permission list (step S508), and the terminal that is not permitted to access. The document corresponding to the document ID notified from is transferred to the terminal permitted to access (step S509).

  The terminal permitted to access outputs the document transferred from the center server (step S510), and the center server deletes the terminal number and the authentication information from the access permission list after a predetermined time (step S511).

  In addition, the center server does not record the terminal number included in the terminal information notified from the mobile terminal in the access permission list, or the terminal number is recorded but the authentication recorded together with the terminal number. If it is confirmed that the information does not match the user ID and password notified from the portable terminal (NO in step S507), an error is notified to the terminal that is not permitted to access (step S512).

  The access-unauthorized terminal displays the error notified from the center server (step S513).

  Next, a timeout procedure performed by the center server in the information processing system will be described with reference to the flowchart shown in FIG.

  The portable terminal performs personal authentication (step S601), and notifies the center server of the telephone number and location information (step S602).

  The center server specifies authentication information (user ID and password) based on the telephone number notified from the mobile terminal (step S603), and selects the nearest terminal based on the location information notified from the mobile terminal. The terminal number of the terminal is specified (step S604), the specified terminal number and authentication information are recorded in the access permission list (step S605), and the terminal information and the obtainable document ID are notified to the portable terminal. (Step S606).

  The portable terminal displays the terminal information and document ID notified from the terminal (step S607).

  The center server starts time counting (step S608), and when a timeout occurs (YES in step S609), the terminal number and authentication information are deleted from the access permission list (step S610), and the timeout is notified to the portable terminal (step S610). S611).

  The time-out is not notified from the center server, but the user can be notified of the time-out using the schedule function of the portable terminal. In this case, the terminal server informs the portable terminal of the terminal information and the document ID. The expiration date is also notified. It is also possible to notify the user before timeout occurs.

  Further, when the distance from the location where the user is to the nearest terminal is far, the extension of the expiration date can be requested from the mobile terminal to the center server. However, since it is a security problem to allow an unlimited extension, the center server places certain restrictions on the expiration date extension process. For example, there are restrictions such as providing a prohibition time for a predetermined time before performing the expiration date extension process, and gradually shortening the expiration date when the expiration date extension process is continuously performed.

  Also, if a timeout occurs during document output at the terminal, the expiration of the timeout period is stopped until the document output is completed, thereby avoiding an unexpected loss of the expiration date.

  Moreover, in the said Example, a center server selects a terminal based on the positional information contained in the acquisition request of a document from a user's portable terminal, notifies the selected terminal to a user's portable terminal, and then this terminal When the document acquisition request from the machine is authenticated, the document is transmitted to the terminal. However, the present invention is not limited to this configuration, and the location information included in the document acquisition request is not limited to this configuration. When the terminal is selected on the basis of the terminal, the document is transmitted to the selected terminal, and after the document acquisition request from the terminal is authenticated, the document is already transmitted to the terminal. You may comprise so that the printing permission with respect to a document may be performed. By configuring the center server to transmit the document in advance to the selected terminal in this way, the user does not wait for the document transfer time when the user requests acquisition (for example, printing) of the document at the terminal. Can be obtained.

  FIG. 7 is a diagram illustrating a second embodiment of the authentication process in the information processing system.

  The user performs personal authentication using a mobile terminal such as a mobile phone, and notifies the mobile terminal ID, user ID, and password from the mobile terminal to the terminal.

  Here, the portable terminal has a personal authentication function such as an authentication based on a user ID and a password and a fingerprint authentication function, and performs personal authentication by the personal authentication function. Note that the mobile terminal does not necessarily have a personal authentication function.

  In addition, notification of the user ID and password to the terminal is performed by short-range communication such as a wireless LAN. For example, an application for accessing the dedicated site of the information processing system in advance and accessing the terminal is stored in the mobile terminal. When the application is installed and the application is started, a configuration in which the portable terminal is connected to a nearby terminal using the near field communication function is realistic.

  The terminal notifies the center server of the mobile terminal ID, user ID, and password notified from the mobile terminal.

  The center server has a related mobile terminal ID, a user ID list in which user IDs and passwords are listed, and a terminal connected to the network, and the mobile terminal ID and user ID notified from the terminal based on the user ID list If the mobile terminal ID, the user ID, and the password are confirmed to match, the terminal device is notified of an acquirable document ID. When it is confirmed that the mobile terminal ID, the user ID, and the password do not match, an error is notified to the terminal, and the terminal is not allowed to access.

  The terminal displays the document ID notified from the center server.

  The user confirms the document ID displayed on the terminal, and inputs the document ID of the acquired document on the terminal.

  When the terminal receives the document ID, the terminal notifies the received document ID to the center server.

  The center server transfers a document corresponding to the document ID notified from the terminal to the terminal.

  The terminal outputs the document transferred from the center server. For example, if the terminal is a printer, a document is printed.

  Next, an authentication processing procedure performed by the mobile terminal, the terminal, and the center server in the information processing system will be described with reference to a flowchart shown in FIG.

  The mobile terminal performs personal authentication (step S801) and notifies the mobile terminal ID, user ID, and password to the terminal (step S802).

  The terminal notifies the center server of the mobile terminal ID, user ID, and password (step S803).

  When the center server confirms that the portable terminal ID, user ID, and password notified from the terminal match (YES in step S804), the document ID is notified to the terminal (step S805).

  The terminal displays the document ID notified from the center server (step S806). Here, the user confirms the document ID and inputs the document ID of the document to be acquired to the terminal.

  The terminal notifies the input document ID to the center server (step S807).

  The center server transfers the document corresponding to the document ID notified from the terminal to the terminal (step S808).

  The terminal outputs the document transferred from the center server (step S809).

  When the center server confirms that the mobile terminal ID, user ID, and password notified from the terminal do not match (NO in step S804), an error is notified to the terminal (step S810).

  The terminal displays the error notified from the center server (step S811).

  The terminal acquires the current location information of the mobile terminal from the mobile terminal and notifies the center server. If the center server has location information about the installation location of the terminal, compares the location information of the terminal with the current location information notified from the terminal, and confirms that these are almost the same location, the terminal You can also allow output on the machine.

  Since the access expiration date of the center server and the timeout process performed by the center server are the same as those described in the first embodiment, detailed description thereof is omitted. When the mobile terminal and the terminal are connected, the time count can be reset to “0” every time the mobile terminal is operated.

  In the first and second embodiments, when the terminal is a multifunction device having multiple functions, the authenticated user uses all the functions (copy, print, scan, fax, etc.) of the multifunction device. can do.

  In the first embodiment and the second embodiment, by performing authentication based on information from the mobile terminal, the usage fee of the terminal can be charged in addition to the call charge of the mobile terminal.

  In the first and second embodiments, when a document is stored from the mobile terminal to the center server, information specific to the mobile terminal (for example, mobile phone number, information for identifying an individual, etc.) is added to the document. It can be added as information, and when the document is acquired, the additional information can be notified from the portable terminal to the center server, and the terminal can permit output of only the document that matches the additional information.

  In the first and second embodiments, the time count can be reset to “0” every time the terminal is operated.

It is a figure showing an example of composition of information processing system 1 concerning the present invention. It is a figure which shows Example 1 of the authentication process in an information processing system. It is a flowchart which shows the process sequence of the authentication which a portable terminal, a terminal device, and a center server perform in an information processing system. It is a figure explaining the terminal selection system which a center server performs. In an information processing system, when a user accesses a center server from an unauthorized terminal other than the terminal selected by the center server, a procedure for authentication performed by the mobile terminal, the unauthorized terminal and the center server is shown. It is a flowchart. It is a flowchart which shows the process sequence of the timeout which a center server performs in an information processing system. It is a figure which shows Example 2 of the authentication process in an information processing system. It is a flowchart which shows the process sequence of the authentication which a portable terminal, a terminal device, and a center server perform in an information processing system.

Explanation of symbols

1 Information processing system 2 Network 3 Center server 4 Terminal

Claims (24)

In an information processing system in which an information processing apparatus and a plurality of terminals are connected via a network,
The information processing apparatus includes:
Various content information,
First communication means for performing communication processing with the terminal;
A second communication means for performing communication processing with the mobile terminal;
An authentication information list in which authentication information corresponding to the unique information of the mobile terminal is listed;
A terminal list that lists information on the plurality of terminals;
A permission list recording a terminal that permits the acquisition of the content information by the first communication means, and
The portable terminal is
The unique information and the position information that the portable terminal has in the information processing device are transmitted to the information processing device by the second communication means,
The information processing apparatus includes:
Based on the authentication information list, identify authentication information corresponding to the unique information received from the mobile terminal,
Based on the terminal list and the location information received from the mobile terminal, select a terminal having a predetermined condition,
Record information about the selected terminal and the authentication information in the permission list;
Sending information about the terminal recorded in the permission list to the portable terminal by the second communication means;
When the request for the content information from the terminal recorded in the permission list is received by the first communication means, the content information is transferred to the terminal by the first communication means. Information processing system. The information processing apparatus includes:
When the information about the terminal and the authentication information are received by the first communication means together with the request for the content information from the terminal, the information about the terminal and the authentication information are recorded in the permission list. Check whether or not
When it is confirmed that it is recorded in the permission list, the content information is transferred to the terminal by the first communication means,
2. The information processing system according to claim 1, wherein when it is confirmed that the content information is not recorded in the permission list, the first communication unit notifies the terminal that the acquisition of the content information is not permitted. The information processing apparatus includes:
The information processing system according to claim 2, wherein if it is confirmed that the information is not recorded in the permission list, the portable terminal is requested to authenticate again. A terminal having the predetermined condition is:
The information processing system according to claim 1, wherein the information processing system is a terminal installed at a shortest position from the position information. A terminal having the predetermined condition is:
The information processing system according to claim 1, wherein the information processing system is a terminal installed within a certain range from the position information. The information processing apparatus includes:
Set an expiration date in the record of the authentication information and information related to the terminal in the permission list,
The information processing system according to claim 1, wherein when the expiration date has passed, the second communication means notifies the portable terminal that the expiration date has passed. In an information processing system in which an information processing apparatus and a plurality of terminals are connected via a network,
The information processing apparatus includes:
Various content information,
A communication means for performing communication processing with the terminal;
An authentication information list in which authentication information corresponding to unique information possessed by the mobile terminal is listed, and
The portable terminal is
Connected to the terminal,
Transmitting the unique information and the authentication information of the portable terminal to the terminal;
The terminal is
Transmitting the unique information and the authentication information received from the portable terminal to the information processing apparatus by the communication means;
The information processing apparatus includes:
Check whether the unique information and authentication information received from the terminal is recorded in the authentication information list,
When it is confirmed that it is recorded in the permission list, the acquisition of the content information by the communication means of the terminal is permitted,
When it is confirmed that the content list is not recorded in the permission list, the terminal does not permit the content information to be acquired. The information processing apparatus includes:
Set an expiration date for permission to acquire the content information by the communication means of the terminal,
The information processing system according to claim 7, wherein when the expiration date has passed, the communication unit notifies the terminal that the expiration date has passed. In an information processing apparatus connected to a plurality of terminals via a network,
Various content information,
First communication means for performing communication processing with the terminal;
A second communication means for performing communication processing with the mobile terminal;
An authentication information list in which authentication information corresponding to the unique information of the mobile terminal is listed;
A terminal list that lists information on the plurality of terminals;
A permission list recording a terminal that permits the acquisition of the content information by the first communication means, and
When the second communication means receives the unique information and position information that the portable terminal has from the portable terminal,
Based on the authentication information list, identify authentication information corresponding to the received unique information,
Based on the terminal list and the received location information, select a terminal having a predetermined condition,
Record information about the selected terminal and the authentication information in the permission list;
Sending information about the terminal recorded in the permission list to the portable terminal by the second communication means;
When the request for the content information from the terminal recorded in the permission list is received by the first communication means, the content information is transferred to the terminal by the first communication means. Information processing device. When the information about the terminal and the authentication information are received by the first communication means together with the request for the content information from the terminal, the information about the terminal and the authentication information are recorded in the permission list. Check whether or not
When it is confirmed that it is recorded in the permission list, the content information is transferred to the terminal by the first communication means,
10. The information processing apparatus according to claim 9, wherein, when it is confirmed that the information is not recorded in the permission list, the first communication unit notifies the terminal that acquisition of the content information is not permitted. The information processing apparatus according to claim 10, wherein if it is confirmed that the information is not recorded in the permission list, the portable terminal is requested to authenticate again. A terminal having the predetermined condition is:
The information processing apparatus according to claim 9, wherein the information processing apparatus is a terminal installed at a shortest position from the position information. A terminal having the predetermined condition is:
The information processing apparatus according to claim 9, wherein the information processing apparatus is a terminal installed within a certain range from the position information. Set an expiration date in the record of the authentication information and information related to the terminal in the permission list,
The information processing apparatus according to claim 9, wherein when the expiration date has passed, the second communication unit notifies the portable terminal that the expiration date has passed. In an information processing apparatus connected to a plurality of terminals via a network,
Various content information,
A communication means for performing communication processing with the terminal;
An authentication information list in which authentication information corresponding to unique information possessed by the mobile terminal is listed, and
When the communication unit receives the unique information and the authentication information that the mobile terminal has from the terminal,
Check whether the unique information and authentication information received from the terminal is recorded in the authentication information list,
When it is confirmed that it is recorded in the permission list, the acquisition of the content information by the communication means of the terminal is permitted,
The information processing apparatus, wherein if it is confirmed that the content list is not recorded, the terminal device is not permitted to acquire the content information. Set an expiration date for permission to acquire the content information by the communication means of the terminal,
The information processing apparatus according to claim 15, wherein when the expiration date has passed, the communication unit notifies the terminal that the expiration date has passed. In an authentication method in an information processing system in which an information processing device and a plurality of terminals are connected via a network,
Mobile devices
Transmitting the unique information and position information of the portable terminal to the information processing apparatus to the information processing apparatus;
The information processing apparatus includes:
Based on the authentication information list that lists authentication information corresponding to the unique information of the mobile terminal, the authentication information corresponding to the specific information received from the mobile terminal is identified,
Based on the terminal list that lists information on the plurality of terminals and the location information received from the mobile terminal, select a terminal that has a predetermined condition,
Record the information related to the selected terminal and the authentication information in a permission list that records the terminals that are allowed to acquire the content information stored in the information processing apparatus,
Send information about the terminal recorded in the permission list to the mobile terminal,
An authentication method in an information processing system, wherein when a request for the content information is received from a terminal recorded in the permission list, the content information is transferred to the terminal. The information processing apparatus includes:
When receiving the information on the terminal and the authentication information together with the request for the content information from the terminal, check whether the information on the terminal and the authentication information are recorded in the permission list. ,
If it is confirmed that it is recorded in the permission list, the content information is transferred to the terminal,
18. The authentication method in the information processing system according to claim 17, wherein when it is confirmed that the content information is not recorded in the permission list, the terminal is notified that the acquisition of the content information is not permitted. The information processing apparatus includes:
19. The authentication method in the information processing system according to claim 18, wherein when it is confirmed that the information is not recorded in the permission list, the mobile terminal is requested to authenticate again. A terminal having the predetermined condition is:
The authentication method in the information processing system according to claim 17, wherein the terminal is a terminal installed at a shortest position from the position information. A terminal having the predetermined condition is:
The authentication method in the information processing system according to claim 17, wherein the terminal is a terminal installed within a certain range from the position information. The information processing apparatus includes:
Set an expiration date in the record of the authentication information and information related to the terminal in the permission list,
The authentication method in the information processing system according to claim 17, wherein when the expiration date has passed, the mobile terminal is notified that the expiration date has passed. In an authentication method in an information processing system in which an information processing device and a plurality of terminals are connected via a network,
The portable terminal is
Connected to the terminal,
Transmitting the unique information and the authentication information of the portable terminal to the terminal;
The terminal is
Transmitting the unique information and the authentication information received from the portable terminal to the information processing apparatus;
The information processing apparatus includes:
Check whether the unique information and the authentication information received from the terminal are recorded in the authentication information list that lists the authentication information corresponding to the unique information that the portable terminal has,
When it is confirmed that it is recorded in the permission list, the content information stored in the information processing device of the terminal is permitted to be acquired,
An authentication method in an information processing system, wherein if it is confirmed that the content information is not recorded in the permission list, the terminal is not permitted to acquire the content information. The information processing apparatus includes:
Set an expiration date for permission to acquire the content information by the communication means of the terminal,
The authentication method in the information processing system according to claim 23, wherein when the expiration date has passed, the terminal is notified that the expiration date has passed.

Images