JP2006285648A - Authentication support system, authentication support device, authentication support method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce a user's labor of inputting authentication information to a plurality of online services. <P>SOLUTION: A user terminal 20 sends a user ID and the like to an authentication support device 30. The authentication support device 30 sends information including the user ID received from the user terminal 20 to a server apparatus 40, and the server apparatus 40 returns login information including a login ID and a login password for each online service corresponding to the user ID. The authentication support device 30 sends an authentication request to a service provision apparatus 10 according to the login information, and transfers screen data for service screen display returned from the service provision apparatus 10 to the user terminal 20. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an authentication support system, an authentication support device, an authentication support method, and a program.

In online services such as online shopping and Internet banking, user authentication using a password or the like is generally performed. User IDs and passwords used for user authentication are different for each online service, making it difficult for the user to remember all user IDs and passwords. In order to cope with such a problem, for example, Patent Document 1 proposes a system that centrally manages user IDs and passwords together with fingerprint authentication information.
JP 2002-169779 A

  However, even if the user ID and password can be managed by the system described in Patent Document 1, for example, the user needs to input the user ID and password every time the online service is used.

  The present invention has been made in view of such a background, and provides an authentication support system, an authentication support apparatus, an authentication support method, and a program capable of reducing the effort of inputting authentication information for a user's online service. The purpose is to do.

  The invention described in claim 1 of the present invention for solving the above-mentioned problems is a system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service, the user terminal and An authentication support device communicably connected to each of the service providing devices; and a server device communicably connected to the authentication support device, wherein the server device is a key for identifying the authentication support device A login information storage unit for storing login information including information, service specifying information for specifying the service providing apparatus, and service authentication information which is authentication information necessary for authentication of the user in the service providing apparatus, and the authentication support An apparatus includes a key information storage unit that stores the key information, and the key information stored in the key information storage unit. A key information transmission unit that transmits the key information transmitted from the authentication support device, and the login information corresponding to the received key information. A login information acquisition unit that reads from the information storage unit; and a login information transmission unit that transmits the read login information to the authentication support device, wherein the authentication support device receives the login information transmitted from the server device. The login information receiving unit, and for each of the received login information, the service included in the login information with respect to the service providing apparatus specified by the service specifying information included in the login information. An authentication request transmission unit that transmits an authentication request in which authentication information is set is provided.

  According to the authentication support system of the present invention, without receiving input of authentication information such as a user ID or a password, the service providing apparatus is registered in advance in the server apparatus corresponding to the key information set in the authentication support apparatus. It is possible to receive user authentication by transmitting an authentication request in which authentication information of the user who has been set is set. Therefore, it is possible to reduce the user's trouble in inputting authentication information that differs for each online service.

  The invention according to claim 2 is the authentication support system according to claim 1, wherein the login information includes user specifying information for specifying the user, and the authentication support apparatus includes the user A user identification information receiving unit configured to receive the user identification information transmitted from a terminal; and the key information transmission unit included in the authentication support apparatus transmits the user identification information together with the key information to the server apparatus. The login information acquisition unit included in the server device reads the login information corresponding to the key information and the user specifying information from the login information storage unit.

  The invention according to claim 3 is a system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service, and can communicate with each of the user terminal and the service providing apparatus. And an authentication support device connected to the authentication support device, and a server device communicably connected to the authentication support device, wherein the server device specifies user specifying information for specifying the user, and a service for specifying the service providing device. A login information storage unit that stores login information including identification information and service authentication information that is authentication information necessary for authentication in the service providing apparatus, wherein the authentication support apparatus receives the user identification information from the user terminal; And a user identification information receiving unit for transmitting the received user identification information to the server device A server for transmitting the user identification information transmitted from the authentication support apparatus, and the login information corresponding to the received user identification information as the login information. A login information acquisition unit that reads from the storage unit; and a login information transmission unit that transmits the read login information to the authentication support device. The authentication support device receives the login information transmitted from the server device. For each of the login information received by the login information receiving unit, the service authentication included in the login information with respect to the service providing apparatus specified by the service specifying information included in the login information. An authentication request transmission unit that transmits an authentication request in which information is set is provided.

  According to the authentication support system of the present invention, when user identification information is received from a user terminal, an authentication request in which the authentication information of the user is set is transmitted to the service providing apparatus to receive user authentication. Can do. Therefore, it is possible to reduce the user's trouble in inputting authentication information that differs for each online service.

  The invention according to claim 4 is the authentication support system according to claim 3, wherein the login information includes key information for identifying the authentication support apparatus, and the authentication support apparatus A key information storage unit for storing key information, wherein the user identification information transmission unit transmits the key information together with the user identification information, and the login information acquisition unit corresponds to the user identification information and the key information. The login information is read from the login information storage unit.

  In this case, since the server apparatus manages the login information in association with the key information, authentication support apparatuses from which the login information is acquired can be restricted. Therefore, user authentication information can be managed more safely.

  The invention according to claim 5 is the authentication support system according to claim 3, wherein the login information includes system authentication information which is authentication information necessary for authentication of the user in the authentication support system. Included, the user specifying information receiving unit receives the system authentication information together with the user specifying information from the user terminal, and the user specifying information transmitting unit transmits the system authentication information together with the user specifying information, The login information acquisition unit reads the login information corresponding to the user identification information and the authentication information from the login information storage unit.

  The invention according to claim 6 is a system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service, and can communicate with each of the user terminal and the service providing apparatus. And an authentication support device connected to the authentication support device, and a server device communicably connected to the authentication support device. The server device specifies key information for identifying the authentication support device, and the service providing device. A login information storage unit that stores login information including service identification information and service authentication information that is authentication information necessary for authentication of the user in the service providing apparatus, and the authentication support apparatus stores the key information A key information storage unit; and a key information transmission unit that transmits the key information stored in the key information storage unit to the server device. The server device includes a key information receiving unit that receives the key information transmitted from the authentication support device, and a login information acquisition unit that reads the login information corresponding to the received key information from the login information storage unit. A login information transmitting unit that transmits the read login information to the authentication support device, the authentication support device receiving a login information receiving unit that receives the login information transmitted from the server device; For each login information, a login command that sets the service specifying information and the service authentication information included in the login information, and transmits a login command for instructing to receive the authentication in the service providing apparatus to the user terminal. An instruction transmission unit is provided.

  The invention according to claim 7 is a system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service, and can communicate with each of the user terminal and the service providing apparatus. And an authentication support device connected to the authentication support device, and a server device communicably connected to the authentication support device, wherein the server device specifies user specifying information for specifying the user, and a service for specifying the service providing device. A login information storage unit that stores login information including identification information and service authentication information that is authentication information necessary for authentication in the service providing apparatus, wherein the authentication support apparatus receives the user identification information from the user terminal; And a user identification information receiving unit for transmitting the received user identification information to the server device A server for transmitting the user identification information transmitted from the authentication support apparatus, and the login information corresponding to the received user identification information as the login information. A login information acquisition unit that reads from the storage unit; and a login information transmission unit that transmits the read login information to the authentication support device. The authentication support device receives the login information transmitted from the server device. A login information receiving unit, and a login for instructing to receive the authentication in the service providing apparatus in which the service specifying information and the service authentication information included in the login information are set for each of the received login information A login command transmission unit for transmitting a command to the user terminal To.

  The invention according to claim 8 is an authentication support apparatus that supports user authentication performed between a user terminal and a service providing apparatus that provides a service, and each of the user terminal and the service providing apparatus Log-in that is communicably connected and includes key information for identifying the authentication support device, service specifying information for specifying the service providing device, and service authentication information that is authentication information necessary for authentication of the user in the service providing device The login corresponding to the key information, which is communicably connected to a server device that manages information, sets the key information stored in the key information storage unit, and stores the key information A login information acquisition request transmission unit that transmits a login information acquisition request, which is a command for acquiring information, to the server device; Each of the login information receiving unit that receives the login information corresponding to the key information, transmitted from the server device in response to the login information acquisition request, and the received login information is included in the login information. An authentication request transmitting unit configured to transmit an authentication request in which the service authentication information included in the login information is set to the service providing apparatus specified by the service specifying information.

  The invention according to claim 9 is an authentication support apparatus that supports user authentication performed between a user terminal and a service providing apparatus that provides a service, and includes each of the user terminal and the service providing apparatus. Login information including user identification information for identifying the user, service identification information for identifying the service providing apparatus, and service authentication information that is authentication information necessary for authentication of the user in the service providing apparatus. A user specifying information receiving unit that is communicably connected to a server device that manages the user and receives the user specifying information from the user terminal; and the login information corresponding to the user specifying information in which the received user specifying information is set Log for transmitting a login information acquisition request, which is a command for acquiring the server, to the server device Each of the login information acquisition request transmission unit, the login information reception unit that receives the login information corresponding to the user identification information, transmitted from the server device in response to the login information acquisition request, and the received login information An authentication request transmitting unit that transmits an authentication request in which the service authentication information included in the login information is set to the service providing apparatus specified by the service specifying information included in the login information It shall be provided with.

  The invention according to claim 10 is a method for supporting user authentication performed between a user terminal and a service providing apparatus that provides a service, and can communicate with each of the user terminal and the service providing apparatus. An authentication support device connected to the authentication support device and a server device communicably connected to the authentication support device, wherein the server device identifies key information for identifying the authentication support device, and the service providing device. And login information including service authentication information that is authentication information necessary for user authentication in the service providing apparatus is stored in a memory, and the authentication support apparatus stores the key information in the memory. The key information stored in the memory is transmitted to the server device, and the server device is the authentication support device. The key information to be transmitted is received, the login information corresponding to the received key information is read, the read login information is transmitted to the authentication support device, and the authentication support device is transmitted from the server device. The login information is included in the login information for each of the received login information, with respect to the service providing device specified by the service specifying information included in the login information. An authentication request in which service authentication information is set is transmitted.

  The invention according to claim 11 is a method for supporting user authentication performed between a user terminal and a service providing apparatus that provides a service, and can communicate with each of the user terminal and the service providing apparatus. An authentication support device connected to the authentication support device and a server device communicably connected to the authentication support device, the server device includes user specifying information for specifying the user, and the service providing device. Login information including service identification information to be identified and service authentication information which is authentication information necessary for authentication in the service providing apparatus is stored in a memory, and the authentication support apparatus receives the user identification information from the user terminal. The received user identification information is transmitted to the server device, and the server device is the authentication support device. The transmitted user identification information is received, the login information corresponding to the received user identification information is read, the read login information is transmitted to the authentication support device, and the authentication support device is transmitted from the server device. The login information transmitted is received, and each of the received login information is included in the login information with respect to the service providing device specified by the service specifying information included in the login information. An authentication request in which the service authentication information is set is transmitted.

  The invention according to claim 12 is a program to be executed by an authentication support apparatus that supports user authentication performed between a service providing apparatus that provides a service and a user terminal, the user terminal and Key information identifying the authentication support apparatus, service specifying information identifying the service providing apparatus, and authentication information necessary for authenticating the user in the service providing apparatus. The step of storing the key information in a memory and the key information stored in the memory are set in the authentication support device communicably connected to a server device that manages login information including certain service authentication information A login information acquisition request that is a command for acquiring the login information corresponding to the key information. The login information corresponding to the key information transmitted from the server device in response to the login information acquisition request, and the login information received for each of the received login information. Transmitting an authentication request in which the service authentication information included in the login information is set to the service providing apparatus specified by the service specifying information included in the information. To do.

  The invention according to claim 13 is a program to be executed by an authentication support apparatus that supports user authentication performed between a service providing apparatus that provides a service and a user terminal, the user terminal and User identification information for identifying the user, service identification information for identifying the service provision apparatus, and authentication information required for authentication of the user in the service provision apparatus, which are communicably connected to each of the service provision apparatuses. Receiving the user identification information from the user terminal in the authentication support apparatus communicably connected to a server apparatus that manages login information including service authentication information; and setting the received user identification information, Login information that is a command for obtaining the login information corresponding to the user identification information A step of transmitting an acquisition request to the server device; a step of receiving the login information corresponding to the user identification information transmitted from the server device in response to the login information acquisition request; and For each, transmitting an authentication request in which the service authentication information included in the login information is set to the service providing apparatus specified by the service specifying information included in the login information; To be executed.

  ADVANTAGE OF THE INVENTION According to this invention, the effort of inputting the authentication information with respect to a user's online service can be reduced.

=== System configuration ===
FIG. 1 is a diagram showing an overall configuration of an authentication support system 1 according to the present embodiment. As shown in the figure, an authentication support system 1 according to the present embodiment includes an authentication support apparatus 30 installed between a service providing apparatus 10 that provides an online service and a user terminal 20 of a user who uses the online service. And the server apparatus 40 communicable with the authentication assistance apparatus 30 is comprised. The service providing device, the authentication support device 30, and the server device 40 are each connected to the Internet 50.

  The service providing apparatus 10 is a computer that provides online services such as Internet banking and online shopping. The service provided by the service providing apparatus 10 requires user authentication by inputting a user ID and a password. A plurality of service providing apparatuses 10 are connected to the Internet 50, and each service providing apparatus 10 manages a unique user ID and password. In the following description, a user ID and password required for user authentication in the service providing apparatus 10 are referred to as a login ID and a login password.

  The user terminal 20 is a user computer that uses a service provided by the service providing apparatus 10. The user terminal 20 executes an application program such as a web browser, and the user operates the web browser to use the service of the service providing apparatus 10. In the present embodiment, as shown in FIG. 1, an authentication support apparatus 30 is disposed between the user terminal 20 and the Internet 50, and the user terminal 20 connects to the Internet 50 via the authentication support apparatus 30. Communication with 10 is possible.

  The authentication support device 30 is a computer that transfers data between the user terminal 20 and the Internet 50 and transmits an authentication request to the service providing device 10 on behalf of the user. Details of the processing of the authentication support apparatus 30 will be described later.

=== Service Providing Device 10 ===
FIG. 2 shows a hardware configuration of the service providing apparatus 10. As shown in the figure, the service providing apparatus 10 includes a CPU 101, a memory 102, a storage device 103, and a communication interface 104. The storage device 103 stores programs and data, for example, a hard disk, a flexible disk, a CD-ROM, or the like. The CPU 101 implements various functions by reading a program stored in the storage device 103 into the memory 102 and executing it. The communication interface 104 is an interface for connecting to the Internet 50. The communication interface 104 is, for example, an adapter for connecting to Ethernet (registered trademark) or a modem for connecting to a public telephone line.

  FIG. 3 is a functional block diagram of the service providing apparatus 10. As shown in the figure, the service providing apparatus 10 includes a login request transmission unit 111, a login processing unit 112, and a service screen transmission unit 113.

The login request transmission unit 111 receives a command (hereinafter referred to as a login request) instructing to perform user authentication required for using the online service from an external device connected to the Internet 50. As will be described later, in this embodiment, the authentication support device 30 transmits a login request to the service providing device 10. In the login request, a login ID and a login password necessary for user authentication in the service providing apparatus 10 are set.
The login processing unit 112 performs general user authentication processing using the login ID and login password set in the login request.
The service screen transmission unit 113 is described in, for example, HTML (Hyper Text Markup Language) for generating a screen used for the online service (hereinafter referred to as a service screen) when the user authentication by the login processing unit 112 is successful. The screen data such as the web page and the image data thus transmitted is transmitted to the external device that is the transmission source of the login request.

=== User terminal 20 ===
FIG. 4 is a hardware configuration diagram of the user terminal 20 operated by a user who uses the online service. As shown in the figure, the user terminal 20 includes a CPU 201, a memory 202, a storage device 203, a communication interface 204, an input device 205, and an output device 206. The CPU 201, the memory 202, the storage device 203, and the communication interface 204 are the same as those in the service providing apparatus 10 described above. In the present embodiment, the authentication support apparatus 30 is connected to the communication interface 204, and the user terminal 20 is connected to the Internet 50 via the authentication support apparatus 30. The input device 205 is, for example, a keyboard, a mouse, a touch panel, a pen tablet, or a microphone that inputs data. The output device 206 is, for example, a display, a printer, or a speaker that outputs data.

  FIG. 5 is a functional block diagram of the user terminal 20. As shown in the figure, the user terminal 20 includes a user ID input screen acquisition request transmission unit 211, a user ID input screen reception unit 212, a user ID input screen output unit 213, a user ID input unit 214, a user ID transmission unit 215, Each function unit includes a service screen receiving unit 216 and a service screen output unit 217.

  The user ID input screen acquisition request transmission unit 211 is a screen for receiving input of a user ID (corresponding to user identification information of the present invention) given to the user in the authentication support system 1 (hereinafter referred to as user ID input screen). A command (hereinafter referred to as a user ID input screen acquisition request) for acquiring screen data for displaying “.” Is transmitted to the authentication support apparatus 30. In the present embodiment, the screen data is a Web page described in HTML, and the user terminal 20 transmits a user ID input screen acquisition request from the Web browser to the authentication support apparatus 30. In the present embodiment, a password (corresponding to the system authentication information of the present invention) is entered in addition to the user ID.

  In the present embodiment, the authentication support apparatus 30 allocates an IP address to the user terminal 10 by DHCP (Dynamic Host Configuration Protocol), and the authentication support apparatus 30 always has the same address (in this embodiment, “192.168. .0.1 ”)), it can be used from the user terminal 20. Thus, when the user accesses the authentication support apparatus 30 using a Web browser, the user ID input screen 60 is displayed by specifying the above-mentioned “192.168.0.1” as the address of the authentication support apparatus 30. Screen data can be acquired.

  The user ID input screen receiving unit 212 receives screen data for displaying the user ID input screen, which is transmitted from the authentication support apparatus 30 in response to the user ID input screen acquisition request.

  The user ID input screen output unit 213 outputs a user ID input screen to the output device 206 based on the screen data received by the user ID input screen reception unit 212. FIG. 6 shows an example of the user ID input screen 60. The user ID input screen 60 of this embodiment includes a user ID input field 61, a password input field 62, and a login button 63.

The user ID input unit 214 receives the user ID and password input on the user ID input screen 60. For example, when the login button 64 on the user ID input screen 670 is pressed, the user ID input unit 214 receives data input in the input fields 62 and 63 as a user ID and a password.
The user ID transmission unit 215 transmits the input user ID and password to the authentication support apparatus 30.
The service screen receiving unit 216 receives the screen data for displaying the service screen of the online service provided from the plurality of service providing apparatuses 10 transferred from the authentication support apparatus 30.
The service screen output unit 217 outputs the service screen of each online service to the output device 206 based on each of the screen data received by the service screen reception unit 216.

=== Server Device 40 ===
The login ID and login password of the user are managed by the server device 40 in association with the user ID assigned to the user in the authentication support system 1. FIG. 7 shows the hardware configuration of the server 40. As shown in the figure, the server device 40 includes a CPU 401, a memory 402, a storage device 403, and a communication interface 404, and has the same hardware configuration as that of the service providing device 10 described above.

  FIG. 11 is a functional block diagram of the server device 40. As shown in the figure, the server device 40 includes a login information acquisition request receiving unit 411, a login information transmitting unit 412, and a login information database 451.

  The login information database 451 stores information including a login ID and a password necessary for user authentication in each of the plurality of service providing devices 10 for each user (hereinafter referred to as login information). FIG. 9 shows the configuration of login information registered in the login information database 451. As shown in the figure, the login information includes a user ID, password, key information, login destination URL, login ID, login password, login method, login variable name, login password variable name, and incidental information. The user ID and password are assigned to the user in the authentication support system 1. The key information is identification information of the authentication support device 30 in the authentication support system 1. The login destination URL is information indicating an access destination where user authentication is performed by the service providing apparatus 10 that provides an online service. As the login method, “GET” or “POST” defined in HTTP (Hyper Text Transfer Protocol), which is a method of accessing the login destination URL, is set. The login ID variable name and the login password variable name are variable names for setting the login ID and the login password when accessing the login destination URL by HTTP. The incidental information is information required in addition to the login ID and the login password in the user authentication in the service providing apparatus 10. Login information is managed using a user ID, password, and key information as keys.

  The login information acquisition request receiving unit 411 receives a command for acquiring login information (hereinafter referred to as a login information acquisition request) transmitted from the authentication support apparatus 30. The user ID, password, and key information are set in the login information acquisition request.

  The login information transmission unit 412 reads login information corresponding to the user ID, password, and key information set in the login information acquisition request from the login information database 451, and transmits the read login information to the authentication support apparatus 30.

=== Authentication Support Device 30 ===
FIG. 10 is a hardware configuration diagram of the authentication support apparatus 30, and FIG. 11 is a diagram illustrating a state in which the authentication support apparatus 30 is connected. As illustrated in FIG. 10, the authentication support apparatus 30 includes a CPU 301, a memory 302, a storage device 303, a male connector 304, a female connector 305, and a power supply unit 306. As shown in FIG. 11, the authentication support apparatus 30 of the present embodiment has a small connector shape, and the male connector 304 is directly inserted into the communication interface 204 provided in the user terminal 20. A male connector 52 included in a cable 51 for connecting to the Internet 50 is fitted into the female connector 305. The male connector 304 and the female connector 305 are, for example, RJ45-shaped connectors. In addition, the shape of the male connector 304 and the female connector 305 can be made into arbitrary shapes according to the shape of the communication interface 204 which the user terminal 20 has, and the shape of the connector 52 which the cable 51 has.

  The storage device 303 is, for example, NVRAM, EEPROM, flash memory, or the like that stores programs and data. The CPU 301 implements various functions by reading the program stored in the storage device 303 into the memory 302 and executing it. The power supply unit 306 receives power supply from the cable 51 connected to the female connector 305. In the present embodiment, it is assumed that the power supply unit 306 receives power supply by PoE (Power over the Ethernet) defined in IEEE 802.3af. The power supply unit 26 may receive power supply from a connector such as a USB or a power adapter, for example.

  FIG. 12 is a functional block diagram of the authentication support apparatus 30. As shown in the figure, the authentication support apparatus 30 includes a user ID input screen acquisition request reception unit 311, a user ID input screen transmission unit 312, a user ID reception unit 313, a login information acquisition request transmission unit 314, and a login information reception unit 315. A login request transmission unit 316, a service screen reception unit 317, a service screen transfer unit 318, an address assignment unit 319, a data transfer unit 320, and a key information storage unit 351.

  The address assignment unit 319 assigns addresses to the male connector 304 and the user terminal 20 to which the male connector 304 is connected. The address assignment unit 319 can assign an address to the user terminal 20 by, for example, DHCP. In the present embodiment, the address assignment unit 319 assigns an address “192.168.0.1” to the male connector 304, and assigns an address such as “192.168.0.2” to the user terminal 10. assign. Further, the address assigning unit 319 is an address of the male connector 304 of the authentication support apparatus 30 as a gateway to the Internet 50 when assigning an address to the user terminal 20 by DHCP or the like “192.168.0.1. "Is set. The data transfer unit 320 transfers data transmitted / received between the user terminal 20 and the Internet 50. The data transfer unit 320 converts the address of the user terminal 20 into an address for connecting to the Internet 50 by, for example, NAT (Network Address Translation). The authentication support apparatus 30 functions as a so-called router by the data transfer unit 320 described above.

The user ID input screen acquisition request reception unit 311 receives a user ID input screen acquisition request transmitted from the user terminal 20, and the user ID input screen transmission unit 312 receives a user ID input screen acquisition request according to the user ID input screen acquisition request. Is transmitted to the user terminal 20. This screen data is a Web page written in HTML for displaying the user ID input screen 60 as shown in FIG. 6 described above, for example, and is stored in the storage device 303 in advance.
The user ID receiving unit 313 receives the user ID and password input from the user terminal 20 and input on the user ID input screen 60.

  The key information storage unit 351 stores key information that is identification information of the authentication support apparatus 30 assigned to the authentication support apparatus 30 in the authentication support system 1. The key information is text data described by alphanumeric characters, for example.

The login information acquisition request transmission unit 314 transmits a login information acquisition request in which the user ID and password received by the user ID reception unit 313 and the key information stored in the key information storage unit 351 are set to the server device 40. .
The login information receiving unit 315 receives login information transmitted from the server device 40 in response to the login information acquisition request.

  The login request transmission unit 316 transmits a login request to the login destination URL for each piece of login information received by the login information reception unit 315. In the login request, a login ID and a login password included in the login information are set. In the login request, the login ID included in the login information is set in the variable of the login ID variable name, the login password is set in the variable of the login password variable name, and additional information is added. In this embodiment, since the login request is transmitted by HTTP, the format of the login request is “login ID variable name = login ID & login password variable name = login password & incidental information”. The login request transmission unit 316 transmits the login request to the service providing apparatus 10 specified by the login destination URL in a method specified by the login method together with the login destination URL.

  The service screen receiving unit 317 receives screen data for displaying the service screen transmitted from the service providing apparatus 10 in response to the login request, and the service screen transfer unit 318 receives the screen received by the service screen receiving unit 317. Data is transferred to the user terminal 20.

=== Authentication process ===
FIG. 13 is a sequence diagram showing the flow of authentication processing.
The user designates “192.168.0.1”, which is the address of the authentication support apparatus 30, to the user terminal 20, and the user terminal 20 transmits a user ID input screen acquisition request to the authentication support apparatus 30 (S701). ). In response to the user ID input screen acquisition request, the authentication support apparatus 30 transmits screen data for displaying the user ID input screen 60 to the user terminal 20 (S602). The user terminal 20 displays the user ID input screen 60 of FIG. 6 based on the received screen data (S603). When receiving the user ID and password input on the user ID input screen 60 (S604), the user terminal 20 transmits the input user ID and password (authentication information) to the authentication support apparatus 30 (S605).

  The authentication support device 30 creates a login information acquisition request in which the received user ID and password and the key information stored in the key information storage unit 351 are set, and transmits the created login information acquisition request to the server device 40. (S606).

  Upon receiving the login information acquisition request, the server device 40 searches the login information database 451 for login information using the user ID, password, and key information set in the received login information acquisition request as keys (S607). The server device 40 transmits the retrieved login information to the authentication support device 30 (S608).

  The authentication support apparatus 30 creates a login request based on the received login information, and transmits the created login request to the service providing apparatus 10 specified by the login destination URL included in each login information ( S609).

  When receiving the login request, the service providing apparatus 10 performs user authentication based on the login ID and login password set in the login request (S610). The service providing apparatus 10 transmits screen data for displaying a service screen corresponding to the result of the user authentication to the authentication support apparatus 30 that is the transmission source of the login request (S611), and the authentication support apparatus 30 receives the received screen. Data is transferred to the user terminal 20 (S612). The user terminal 20 outputs a service screen to the output device 206 based on the received screen data (S613).

  As described above, in the authentication support system 1 according to the present embodiment, the user simply enters the user ID and password assigned in the authentication support system 1 on the user ID input screen 60 once. An authentication request is transmitted from the authentication support device 30 to the providing device 10. Therefore, the authentication support system 1 can automatically receive user authentication for a plurality of online services by inputting a set of user IDs and passwords. Therefore, it is possible to reduce the user's labor for inputting different user IDs and passwords for each online service.

  Further, key information is stored in the authentication support apparatus 30 of the present embodiment, and the key information is required when acquiring the login information. Therefore, unless the authentication support apparatus 30 is arranged between the user terminal 20 and the Internet 50, login information cannot be acquired, and the login ID and login password cannot be easily extracted from the server apparatus 40. As a result, it is possible to improve the security for the user's login ID, login password, and the like.

  In the authentication support system 1 of the present embodiment, the login ID and the login password are transmitted in accordance with the authentication request used in the existing online service. Therefore, the authentication support system 1 can be easily realized without modifying the service providing apparatus 10 used for the existing online service.

  In the present embodiment, it is assumed that the authentication support apparatus 30 receives the user ID and password from the user terminal 20, but a login information acquisition request in which only the key information stored in the authentication support apparatus 30 is set. You may make it transmit to the server apparatus 40. FIG. In this case, the user ID and password can be omitted from the login information managed in the server device 40. Thus, the service screen from the online service can be displayed on the user terminal 20 only by connecting the authentication support apparatus 30 between the user terminal 20 and the Internet 50. In this case, only the user ID may be received from the user terminal 20, and the login information may be managed using the user ID and key information as keys. By accepting the input of the user ID, it is possible to greatly reduce the labor of user input related to user authentication of the online service while improving security.

  In the present embodiment, the login request is transmitted from the authentication support apparatus 30, but may be transmitted from the user terminal 20. In this case, the authentication support apparatus 30 includes a login command transmission unit that transmits a command (hereinafter referred to as a login command) to instruct the user terminal 20 to transmit a login request to the service providing apparatus 10 based on the login information. The user terminal 20 includes a login command receiving unit that receives a login command transmitted from the authentication support device 30, and a login request transmitting unit that transmits the login command to the service providing device 10 according to the received login command. Be prepared. In the login command, a login destination URL, a login ID, a login password, and the like set in the login information are set. The login command can be easily realized by, for example, a script (Java Script) described in an HTML file. As a result, an authentication request is transmitted directly from the user terminal 20 to the service providing apparatus 10. For example, it is possible to easily cope with the case where the service providing apparatus 10 issues cookie data or session data. Can do. Thereby, the data exchange concerning provision of an online service can be performed smoothly. In addition, the processing load related to the data transfer of the authentication support apparatus 30 can be reduced.

  In this embodiment, the authentication support apparatus 30 functions as a router. However, the present invention is not limited to this, and the authentication support apparatus 30 may be connected to the Internet 50 as a computer accessible from the user terminal 20. In this case, for example, the authentication support apparatus 30 can broadcast the address assigned by, for example, DHCP on the Internet 50 and notify the user terminal 20 of the address.

  In the present embodiment, the authentication support apparatus 30 is directly connected to the user terminal 20, but may be connected to a network to which a plurality of user terminals 20 are connected, for example, via a hub. In this case as well, it can function as a router that connects the above-described network to the Internet 50 and can accept user IDs and passwords from a plurality of user terminals 20.

  In the present embodiment, the key information is identification information of the authentication support apparatus 30. However, the key information may be authentication information for authenticating the authentication support apparatus 30. In this case, the server device 40 can authenticate the authentication support device 30 based on the key information set in the login information acquisition request. Thereby, login information can be managed more safely.

  Although the present embodiment has been described above, the above embodiment is intended to facilitate understanding of the present invention and is not intended to limit the present invention. The present invention can be changed and improved without departing from the gist thereof, and the present invention includes equivalents thereof.

It is a figure showing the whole online service system composition concerning this embodiment. 2 is a hardware configuration diagram of a service providing apparatus 10. FIG. 2 is a functional block diagram of a service providing device 10. FIG. 2 is a hardware configuration diagram of a user terminal 20. FIG. 3 is a functional block diagram of a user terminal 20. FIG. It is a figure which shows an example of the user ID input screen. 3 is a functional block diagram of a server device 40. FIG. 3 is a functional block diagram of a server device 40. FIG. It is a figure which shows the structure of the login information registered into the login information database 451. FIG. 2 is a hardware configuration diagram of an authentication support apparatus 30. FIG. It is a figure which shows a mode that the authentication assistance apparatus 30 is connected. 3 is a functional block diagram of an authentication support apparatus 30. FIG. It is a sequence diagram which shows the flow of an authentication process.

Explanation of symbols

10 Service Providing Device 101 CPU
102 Memory 103 Storage Device 104 Communication Interface 111 Login Request Transmitter 112 Login Processor 113 Service Screen Transmitter 20 User Terminal 201 CPU
202 Memory 203 Storage Device 204 Communication Interface 211 User ID Input Screen Acquisition Request Transmitter 212 User ID Input Screen Receiving Unit 213 User ID Input Screen Output Unit 214 User ID Input Unit 215 User ID Transmitter 216 Service Screen Receiving Unit 217 Service Screen Output Unit 30 Authentication support device 301 CPU 302 Memory 303 Storage device 304 Male connector 305 Female connector 306 Power supply unit 311 User ID input screen acquisition request reception unit 312 User ID input screen transmission unit 313 User ID reception unit 314 Login information acquisition request transmission unit 315 Login information reception unit 316 Login request transmission unit 317 Service screen reception unit 318 Service screen transfer unit 319 Address allocation unit 320 Data transfer unit 40 Server device 411 Login information acquisition request reception 412 Login information transmission unit 451 Login information database 50 Internet 51 Cable 52 Connector

Claims (13)

A system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service,
An authentication support device that is communicably connected to each of the user terminal and the service providing device, and a server device that is communicably connected to the authentication support device;
The server device
Login information for storing login information including key information for identifying the authentication support device, service specifying information for specifying the service providing device, and service authentication information that is authentication information necessary for authentication of the user in the service providing device. A storage unit,
The authentication support device includes:
A key information storage unit for storing the key information;
A key information transmission unit that transmits the key information stored in the key information storage unit to the server device;
The server device
A key information receiving unit for receiving the key information transmitted from the authentication support device;
A login information acquisition unit that reads the login information corresponding to the received key information from the login information storage unit;
A login information transmission unit that transmits the read login information to the authentication support device;
The authentication support device includes:
A login information receiving unit for receiving the login information transmitted from the server device;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. An authentication request transmission unit for transmitting
An authentication support system characterized by The authentication support system according to claim 1,
The login information includes user specifying information for specifying the user,
The authentication support apparatus includes a user identification information receiving unit that receives the user identification information transmitted from the user terminal,
The key information transmission unit included in the authentication support device transmits the user identification information together with the key information to the server device,
The login information acquisition unit included in the server device reads the login information corresponding to the key information and the user identification information from the login information storage unit;
An authentication support system characterized by A system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service,
An authentication support device that is communicably connected to each of the user terminal and the service providing device, and a server device that is communicably connected to the authentication support device;
The server device
A login information storage unit for storing login information including user identification information for identifying the user, service identification information for identifying the service providing apparatus, and service authentication information that is authentication information necessary for authentication in the service providing apparatus; ,
The authentication support device includes:
A user identification information receiving unit for receiving the user identification information from the user terminal;
A user identification information transmission unit that transmits the received user identification information to the server device;
The server device
A user identification information receiving unit for receiving the user identification information transmitted from the authentication support device;
A login information acquisition unit that reads the login information corresponding to the received user identification information from the login information storage unit;
A login information transmission unit that transmits the read login information to the authentication support device;
The authentication support device includes:
A login information receiving unit for receiving the login information transmitted from the server device;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. An authentication request transmission unit for transmitting
An authentication support system characterized by The authentication support system according to claim 3,
The login information includes key information for identifying the authentication support device,
The authentication support apparatus includes a key information storage unit that stores the key information.
The user specifying information transmitting unit transmits the key information together with the user specifying information;
The login information acquisition unit reads the login information corresponding to the user identification information and the key information from the login information storage unit;
An authentication support system characterized by The authentication support system according to claim 3,
The login information includes system authentication information which is authentication information necessary for authentication of the user in the authentication support system,
The user identification information receiving unit receives the system authentication information together with the user identification information from the user terminal,
The user identification information transmitting unit transmits the system authentication information together with the user identification information,
The login information acquisition unit reads the login information corresponding to the user identification information and the authentication information from the login information storage unit;
An authentication support system characterized by A system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service,
An authentication support device that is communicably connected to each of the user terminal and the service providing device, and a server device that is communicably connected to the authentication support device;
The server device
Login information for storing login information including key information for identifying the authentication support device, service specifying information for specifying the service providing device, and service authentication information that is authentication information necessary for authentication of the user in the service providing device. A storage unit,
The authentication support device includes:
A key information storage unit for storing the key information;
A key information transmission unit that transmits the key information stored in the key information storage unit to the server device;
The server device
A key information receiving unit for receiving the key information transmitted from the authentication support device;
A login information acquisition unit that reads the login information corresponding to the received key information from the login information storage unit;
A login information transmission unit that transmits the read login information to the authentication support device;
The authentication support device includes:
A login information receiving unit for receiving the login information transmitted from the server device;
For each of the received login information, a login command for setting the service specifying information and the service authentication information included in the login information and instructing the user to receive the authentication in the service providing apparatus is given to the user terminal. A login command transmission unit for transmitting,
An authentication support system characterized by A system that supports user authentication performed between a user terminal and a service providing apparatus that provides a service,
An authentication support device that is communicably connected to each of the user terminal and the service providing device, and a server device that is communicably connected to the authentication support device;
The server device
A login information storage unit for storing login information including user identification information for identifying the user, service identification information for identifying the service providing apparatus, and service authentication information that is authentication information necessary for authentication in the service providing apparatus; ,
The authentication support device includes:
A user identification information receiving unit for receiving the user identification information from the user terminal;
A user identification information transmission unit that transmits the received user identification information to the server device;
The server device
A user identification information receiving unit for receiving the user identification information transmitted from the authentication support device;
A login information acquisition unit that reads the login information corresponding to the received user identification information from the login information storage unit;
A login information transmission unit that transmits the read login information to the authentication support device;
The authentication support device includes:
A login information receiving unit for receiving the login information transmitted from the server device;
For each of the received login information, a login command for setting the service specifying information and the service authentication information included in the login information and instructing the user to receive the authentication in the service providing apparatus is given to the user terminal. A login command transmission unit for transmitting,
An authentication support system characterized by An authentication support apparatus that supports user authentication performed between a user terminal and a service providing apparatus that provides a service,
Connected to each of the user terminal and the service providing apparatus in a communicable manner;
Server device for managing login information including key information for identifying the authentication support device, service specifying information for specifying the service providing device, and service authentication information that is authentication information necessary for authentication of the user in the service providing device Communicatively connected to
A key information storage unit for storing the key information;
Login information acquisition request transmission that transmits the login information acquisition request, which is a command for acquiring the login information corresponding to the key information, in which the key information stored in the key information storage unit is set. And
A login information receiving unit that receives the login information corresponding to the key information, transmitted from the server device in response to the login information acquisition request;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. An authentication request transmitter for transmitting
An authentication support apparatus comprising: An authentication support apparatus that supports user authentication performed between a user terminal and a service providing apparatus that provides a service,
Connected to each of the user terminal and the service providing apparatus in a communicable manner;
A server device for managing login information including user specifying information for specifying the user, service specifying information for specifying the service providing device, and service authentication information that is authentication information necessary for authentication of the user in the service providing device; Connected to communicate,
A user identification information receiving unit for receiving the user identification information from the user terminal;
A login information acquisition request transmission unit configured to transmit the login information acquisition request, which is a command for acquiring the login information corresponding to the user identification information, to which the received user identification information is set;
A login information receiving unit that receives the login information corresponding to the user identification information, transmitted from the server device in response to the login information acquisition request;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. An authentication request transmitter for transmitting
An authentication support apparatus comprising: A method of supporting user authentication performed between a user terminal and a service providing apparatus that provides a service,
In a system configured to include an authentication support device communicably connected to each of the user terminal and the service providing device, and a server device communicably connected to the authentication support device,
The server device is
Key information for identifying the authentication support device, service specifying information for specifying the service providing device, and login information including service authentication information that is authentication information necessary for authentication of the user in the service providing device is stored in a memory. ,
The authentication support device is
Storing the key information in a memory;
Sending the key information stored in the memory to the server device;
The server device is
Receiving the key information transmitted from the authentication support device;
Read the login information corresponding to the received key information,
Send the read login information to the authentication support device,
The authentication support device is
Receiving the login information transmitted from the server device;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. Sending
An authentication support method characterized by the above. A method of supporting user authentication performed between a user terminal and a service providing apparatus that provides a service,
In a system configured to include an authentication support device communicably connected to each of the user terminal and the service providing device, and a server device communicably connected to the authentication support device,
The server device is
User identification information for identifying the user, service identification information for identifying the service providing apparatus, and login information including service authentication information that is authentication information necessary for authentication in the service providing apparatus is stored in a memory,
The authentication support device is
Receiving the user identification information from the user terminal;
Transmitting the received user identification information to the server device;
The server device is
Receiving the user identification information transmitted from the authentication support device;
Read the login information corresponding to the received user identification information,
Send the read login information to the authentication support device,
The authentication support device is
Receiving the login information transmitted from the server device;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. Sending
An authentication support method characterized by the above. A program for causing an authentication support apparatus that supports user authentication performed between a service providing apparatus and a user terminal to provide a service,
Connected to each of the user terminal and the service providing apparatus in a communicable manner;
Server device for managing login information including key information for identifying the authentication support device, service specifying information for specifying the service providing device, and service authentication information that is authentication information necessary for authentication of the user in the service providing device To the authentication support device connected to be communicable with
Storing the key information in a memory;
Transmitting the login information acquisition request, which is a command for acquiring the login information corresponding to the key information, in which the key information stored in the memory is set;
Receiving the login information corresponding to the key information transmitted from the server device in response to the login information acquisition request;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. A step of sending
A program for running A program for causing an authentication support apparatus that supports user authentication performed between a service providing apparatus and a user terminal to provide a service,
Connected to each of the user terminal and the service providing apparatus in a communicable manner;
A server device for managing login information including user specifying information for specifying the user, service specifying information for specifying the service providing device, and service authentication information that is authentication information necessary for authentication of the user in the service providing device; To the authentication support apparatus connected to be communicable,
Receiving the user identification information from the user terminal;
Transmitting the login information acquisition request, which is a command for acquiring the login information corresponding to the user identification information, which sets the received user identification information, to the server device;
Receiving the login information corresponding to the user identification information transmitted from the server device in response to the login information acquisition request;
For each of the received login information, an authentication request in which the service authentication information included in the login information is set for the service providing apparatus specified by the service specifying information included in the login information. A step of sending
A program for running

Images