JP2006311529A - Authentication system and authentication method therefor, authentication server and authentication method therefor, recording medium, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication server which is enhanced in security of a time limit password to be used for identification when initializing a password. <P>SOLUTION: When issuing of a time limit password is requested from a user terminal 1 to an authentication server 10, the authentication server 10 generates the time limit password using a cipher Hash function from a server password, a user ID and time information (e.g., for the unit of a minute) and transmits it to the user terminal 1. A user uses the received time limit password and the user ID to transmit a password resetting request to the authentication server 10. When the password resetting request is received, the authentication server 10 re-generates a time limit password using a cipher Hash function from the user ID, the present time and the server password, re-generates time limit passwords using time information retroactive from the present time minute by minute, and checks presence/absence of a time limit password matching the time limit password transmitted form the user terminal 1. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  In the present invention, when the password is initialized (reissue of the password), the identity can be surely confirmed, and the security of the password temporarily issued for the identity confirmation (timed password) is increased. The present invention relates to an authentication system and an authentication method thereof, an authentication server and an authentication method thereof, a recording medium, and a program, which can further enhance a password initialization process.

  In a service that requires password authentication for access, a countermeasure must be prepared in case the user forgets the password. In the case of an authentication system that takes security into consideration, an approach that reminds the password is not valid because the password itself is not stored, such as storing a value obtained by multiplying the password by a cryptographic hash function. Therefore, a common countermeasure is to reset the password of the account in question to a random one and notify the user, and this process is called “password initialization”.

  There is one problem with password initialization. The user sends an initialization request to the system after having forgotten the password, but the problem is how the system should determine whether the initialization request is really from the user. Become. Since the user has forgotten the password, normal authentication (identification) cannot be performed. Even in a situation where password authentication is sealed, a mechanism that enables a minimum identity verification is required so that a malicious third party cannot arbitrarily initialize another person's password.

  As a conventional technique that is often used as an identification method in an emergency in which password authentication cannot be used, there is an identification method using a secret question. In this method, a question that can be answered only by the user and the answer are registered in the authentication server in advance. Then, when there is a password initialization request, if that question is answered and answered correctly, the person is confirmed.

  FIG. 6 is a diagram for explaining a method of identity verification using a secret question. Referring to FIG. 6, when the user forgets the password, a password initialization request is transmitted from the user terminal to the authentication server (step S31). The authentication server extracts a secret question corresponding to the user (requester) who has made the initialization request from the question table in the database and transmits it to the requester's user terminal (step S32). The requester who requested initialization of the password transmits the answer to the secret question from the user terminal to the authentication server (step S33). The authentication server verifies the requester's response against the response registered in the database and determines (confirms) the requester as the principal, performs password initialization, and requests the randomly determined initial password The password is rewritten (step S34). Then, the authentication server transmits the initialized password to the user terminal by e-mail, and the user terminal acquires the initialization password (step S35).

  There are several problems with the secret question method. First, the user must think about questions that cannot be guessed by others. For example, the question “What is your pet's name?” May be immediately apparent to family and friends. Moreover, even if it is a completely different person, there is a possibility that a correct answer can be obtained by trial of answers by several guesses. Therefore, the user must carefully select a secret question to register. Further, the user may be too conscious of questions that cannot be guessed by others, and may select a question that cannot be answered by the person himself and register it in the authentication server. Further, in the authentication server, since secret questions must be registered for the number of users, the necessary resources increase accordingly. Furthermore, since the secret question can be said to be private information of each user, there is a problem that the responsibility on the authentication server side that manages it increases.

As a conventional technique, a password system with improved password safety has been proposed (see, for example, Patent Document 1). The password system includes an electronic terminal that inputs a password and a password generation device that generates a random password. The electronic terminal transmits a password generation request to the password generation device. In response to the password generation request, a password is generated and transmitted to the electronic terminal. In this case, the password is invalidated and discarded after the expiration of the valid time. However, even if the password is disposable, it is necessary to store the password for each user on the authentication server side for verification at the time of identity verification. If this information is leaked, the identity verification mechanism will break down. Therefore, protection of password information is also an important issue.
JP 2001-209616 A

  In the case of the secret question method for password verification, the question that the user must think about that cannot be guessed by others, or the secret question for the number of users registered in the authentication server. Therefore, there is a problem that necessary resources increase accordingly. Further, since the secret question can be said to be private information of each user, there is a problem that the responsibility on the authentication server side for storing the secret question increases.

  Even if the password is disposable, it is necessary to store the password for each user on the authentication server side for verification at the time of identity verification. If this information is leaked, the identity verification mechanism will break down. There was a problem that.

  The present invention has been made to solve such problems. The purpose of the present invention is to ensure identity verification at the time of password initialization (password reissue). Provided is an authentication system, an authentication method thereof, an authentication server, an authentication method thereof, a recording medium, and a program capable of enhancing the safety of a temporarily issued password (timed password) to be used and further automating the password initialization process. There is.

The present invention has been made in order to solve the above-described problem, and includes an authentication server and a password issuing server, and receives a user ID and password input to a user terminal from the user terminal to verify the validity of the user. The authentication system for determining, wherein the password issuing server is a password that is temporarily used from a user ID, a storage unit that stores seed information that is unique information of the authentication server, and a user terminal Timed password request receiving means for receiving a password transmission request together with a user ID, and when receiving a timed password transmission request from the user terminal, the seed information stored in the storage unit is read, the seed information, and the user ID And the time information of the time stamp of the current time as input, generate a timed password using a cryptographic hash function A time-limited password generating means; and a time-limited password transmitting means for transmitting the time-limited password generated by the time-limited password generating means to the user terminal, and the authentication server transmits the user ID and the user terminal from the user terminal. An authentication request receiving means for receiving an authentication request including a timed password, and when receiving an authentication request from the user terminal, the current time, user ID, and seed information are input, and the timed password is obtained by a cryptographic hash function. Any one of the timed password regenerating unit that regenerates the timed password at a predetermined time in the time range that is a predetermined time back from the current time, and the timed password regenerated by the timed password regenerating unit And the timed password received from the user terminal And timed password determination means for determining whether or not there is the,
And a personal identification means for determining that the personal identification has been successful when it is determined by the timed password determination means that any of the regenerated time passwords matches the timed password received from the user terminal. Authentication system.
In such a configuration, the user terminal of the user who has forgotten the password requests the password issuing server to issue a timed password, and the password issuing server sends the seed information, user ID, time stamp information (for example, in minutes) ) As an input, a timed password is generated using a cryptographic hash function and transmitted to the user terminal. The user transmits an authentication request to the authentication server using the received timed password and user ID. When the authentication server receives the authentication request from the user terminal, it regenerates the timed password from the user ID, the seed information, and the current time using a cryptographic hash function, and when the time unit is set to, for example, minutes, the current time A timed password is regenerated at a predetermined time in the range of time that goes back. Then, the authentication server compares the timed password transmitted from the user terminal with the regenerated timed password, and determines whether there is a match. If there is a match, authentication can be performed as successful identification.
Thereby, the validity confirmation (identity confirmation) of the timed password presented by the user can be performed by the timed password generated by the cryptographic hash function having the user ID, time information, and seed information as input. You can verify your identity with improved safety. In addition, since there is no need to save a timed password on the authentication server side, resources can be saved and security management standards on the authentication server side can be reduced accordingly. Can be reduced.

Further, in the authentication system of the present invention, the time unit of the time information used for generating the timed password in the timed password generating means of the password issuing server and playing back the timed password in the timed password regenerating means of the authentication server is: It is one of seconds, minutes, and hours.
With such a configuration, when generating a timed password by the cryptographic hash function using the user ID, seed information, and time information of the time stamp as input, the unit of time information is seconds, minutes, hours Use one of the units.
Thereby, the time unit of the time information used for generating the timed password can be selected and used according to the type of application and the system configuration. For this reason, for example, if the time unit can be selected, the load of the process for regenerating the timed password and the process for determining the timed password can be reduced as compared with the case of selecting the unit of seconds or minutes.

In the authentication system of the present invention, when the timed password regenerating means of the authentication server regenerates the timed password for each predetermined time in a time range that is a predetermined time back from the current time, the maximum N time unit ( N: an integer) until the timed password is regenerated, and the timed password determination unit of the authentication server uses the timed password received from the user terminal as the timed password regenerated within the range of the timed validity. Only when the time-limited password received from the user terminal exceeds the valid time, it is determined that the identity verification has failed.
With such a configuration, when the time limit password is valid, for example, when the time unit is minutes and the valid time is determined to be 5 minutes (N = 5), the valid time range from the current time to 5 minutes before The timed password is regenerated in the server, and it is determined whether there is a password that matches the timed password transmitted from the user terminal.
As a result, it is possible to prevent the authentication server from accepting a timed password that has expired. With this timed function, it is possible to prevent reuse of timed passwords and further improve safety.

In the authentication system of the present invention, the reissued password is encrypted by a cryptographic hash function and stored in the storage unit of the password issuing server.
With such a configuration, the password reissued by the authentication server is encrypted by the cryptographic hash function and stored in the storage unit.
Thereby, it is not necessary to store the password itself in the authentication server, and the security of the password can be improved.

  Further, the present invention is an authentication method in an authentication system comprising an authentication server and a password issuing server, and receiving a user ID and password input to a user terminal from the user terminal to determine the validity of the user, The storage unit of the password issuing server stores a user ID and seed information that is unique information of the authentication server itself, and the timed password request receiving means of the password issuing server is temporarily used from the user terminal When a timed password transmission request that is a password is received together with a user ID, and the timed password generation means of the password issuing server receives a timed password transmission request from the user terminal, the seed information stored in the storage unit is stored. Read, input the seed information, user ID, and time information of the current time stamp Then, a timed password is generated by a cryptographic hash function, the timed password transmitting unit of the password issuing server transmits the timed password generated by the timed password generating unit to a user terminal, and an authentication request receiving unit of the authentication server Receiving an authentication request including a user ID and a timed password transmitted to the user terminal from the user terminal, and when the timed password regenerating means of the authentication server receives the authentication request from the user terminal, Using the time, user ID, and seed information as input, regenerates the timed password using a cryptographic hash function, and regenerates the timed password every predetermined time in a time range that is a predetermined time back from the current time. The timed password determining means of the authentication server is configured to regenerate the timed password. One of the timed passwords regenerated by the above and the timed password received from the user terminal are compared to determine whether or not there is a match, and the identity verification unit of the authentication server reproduces the timed password by the timed password determining unit. An authentication method is characterized in that, when it is determined that any of the generated timed passwords matches the timed password received from the user terminal, the identity verification is determined to be successful.

  The present invention also provides a timed password included in the authentication request, wherein the password issuing server reads the seed information stored in the storage unit, and obtains the seed information, the user ID, and the time information of the current time stamp. As an input, when receiving an authentication request from the user terminal, an authentication request receiving means for receiving a timed password generated by a cryptographic hash function, and when receiving an authentication request from the user terminal, the current time, user ID, and seed information are input. A timed password regenerating unit that regenerates the timed password by a cryptographic hash function and regenerates the timed password every predetermined time in a time range that is a predetermined time back from the current time; and the timed password regenerating unit Compare one of the timed passwords regenerated with the timed password received from the user terminal. If the timed password determination means for determining whether there is a match, and the timed password determination means determine that either of the regenerated timed passwords matches the timed password received from the user terminal, It is an authentication server characterized by comprising identity verification means for determining success.

  Further, the present invention is an authentication method of an authentication server for determining the validity of a user, which is a timed password included in an authentication request, wherein the password issuing server reads the seed information stored in the storage unit, and the seed information And the user ID and the time information of the timestamp of the current time as input, the timed password generated by the cryptographic hash function is received from the user terminal by the authentication request receiving means of the authentication server, and the authentication request is received from the user terminal. Is received, the timed password regenerating means of the authentication server receives the current time, the user ID, and the seed information as inputs, regenerates the timed password by a cryptographic hash function, and generates a predetermined time from the current time. Regenerate a timed password at a predetermined time in a time range that is back in time, and determine the timed password for the authentication server Compares any of the timed passwords regenerated by the timed password regenerating unit with the timed password received from the user terminal, determines whether there is a match, and reproduces the timed password by the timed password determining unit. The authentication method is characterized in that, when it is determined that any of the generated time passwords matches the time password received from the user terminal, the identity verification means of the authentication server determines that the identity verification is successful.

    Further, the present invention is a program that is executed by a computer of an authentication server that determines the legitimacy of a user, is a timed password included in an authentication request, and the password issuing server reads the seed information stored in the storage unit, The seed information, the user ID, and the time information of the time stamp of the current time are input, an authentication request receiving process for receiving a timed password generated by a cryptographic hash function from the user terminal, and an authentication request from the user terminal When received, the current time, the user ID, and the seed information are input, and the timed password is regenerated by a cryptographic hash function, and for each predetermined time in a time range that is a predetermined time back from the current time. Play back by the timed password regeneration process to regenerate the timed password and the timed password regeneration process. One of the timed passwords compared with the timed password received from the user terminal and determining whether there is a match, and one of the timed passwords regenerated by the timed password determining process When it is determined that the timed password received from the user terminal matches, this is a program for causing the computer to execute the personal identification process for determining that the personal identification is successful.

  Further, the present invention is a recording medium for storing a program to be executed by a computer of an authentication server for determining the validity of a user, which is a timed password included in an authentication request and stored in a storage unit by a password issuing server An authentication request reception process for reading the seed information, receiving the seed information, the user ID, and the time information of the current time stamp as input, and receiving a timed password generated by a cryptographic hash function from the user terminal; and the user When receiving the authentication request from the terminal, the current time, the user ID, and the seed information are input, the timed password is regenerated by the cryptographic hash function, and in a time range that is a predetermined time backward from the current time A timed password regeneration process for regenerating a timed password at a predetermined time, and the timed password regeneration One of the timed passwords regenerated by the generation process is compared with the timed password received from the user terminal, and it is regenerated by the timed password determination process for determining whether there is a match or the timed password determination process. This is a recording medium for storing a program for causing a computer to execute personal identification processing for determining that personal identification is successful when it is determined that one of the timed passwords matches the timed password received from the user terminal.

  Next, the best mode for carrying out the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram for explaining an outline of an authentication server according to the present invention. In the authentication server of the present invention, at the time of password initialization, a temporary password (timed password) is exchanged as a kind of “password” between the user terminal 1 and the authentication server 10 to confirm the identity. . Hereinafter, a rough processing flow in the authentication server 10 will be described with reference to FIG.

  When the user forgets the password, the user terminal 1 transmits a request for issuing a timed password to the authentication server 10 (step S1). The authentication server 10 receives the server password (species information), the user ID, and the time stamp information, which are confidential information unique to the authentication server 10, and generates a timed password using a cryptographic hash function (step S2). , It is transmitted to the user terminal 1 by electronic mail. The timed password may be generated not by the authentication server but by another server such as a password issuing server. In this case, the server password is notified in advance from the password issuing server to the authentication server. In the present embodiment, description will be made assuming that the function of the password generation server is provided in the authentication server. The user transmits an authentication request to the authentication server 10 using the timed password received by e-mail (step S3). Then, the authentication server 10 determines the validity of the timed password and authenticates the user (step S4).

  Since the cryptographic hash function used to generate the timed password has the property that it cannot be reversely converted, the input value cannot be obtained from the timed password by reverse conversion. Further, since the server password kept secret by the authentication server 10 is adopted as one of the inputs, the time-limited password can be generated only by the authentication server 10 that knows the server password. Therefore, unless a timed password notification mail is leaked, a malicious third party cannot illegally re-register the password with respect to the authentication server 10.

  The identity verification method in the authentication server 10 of the present invention is limited to the point of whether or not the user can receive an e-mail. This is to avoid storing extra data such as secret questions in the authentication server 10 and placing a burden on it. Since the timed password can be regenerated only for the authentication server 10 that knows the server password, it is not necessary to store it on the authentication server 10 side.

  The time information of the time stamp can be freely selected from seconds, minutes and hours. For example, the authentication server 10 acquires the current time in minutes and generates a timed password. Then, when the valid time of the timed password is set to 5 minutes, it is determined whether or not the timed password presented by the user is generated within 5 minutes. Specifically, the timed password is regenerated with a time stamp that goes back by 5 minutes at a time, and it is determined whether or not it matches the one presented by the user. Even if the time-limited password generated by the authentication server 10 is not accepted after the valid time. This timed function prevents the reuse of timed passwords and improves safety.

  As described above, in the authentication server of the present invention, the validity determination (identity confirmation) of the timed password presented by the user is generated by a cryptographic hash function using the user ID, time information, and server password as input. Since it is done with a timed password, it is possible to perform identity verification with improved safety. In addition, there is no need to store a timed password on the authentication server side, so that the security of the timed password can be improved and resources can be saved. In addition, as a timed password, a password that has expired is not accepted, and this timed function prevents reuse of the timed password and further improves safety.

FIG. 2 is a functional block diagram showing an example of the configuration of the authentication server of the present invention, showing the parts directly related to the present invention.
As shown in FIG. 2, the authentication server 10 of the present invention includes a control unit 11 that performs overall control of the entire authentication server 10, a communication interface 12 that connects a communication network such as the Internet 2 and the authentication server 10, and The processing program unit 20 performs various types of processing necessary for the authentication server 10 and a database (storage unit) 13 stores various types of data necessary for processing in the authentication server 10.

Further, the processing program unit 20 includes the following processing units.
The timed password request reception processing unit (timed password request receiving means) 21 is a processing unit that receives a timed password transmission request (including a user ID) from the user terminal 1 of the user who has forgotten the password.
The timed password generation processing unit (timed password generating means) 22 reads the server password stored in the database 13, and receives the server password, the user ID, and the time information of the current time stamp as an input, and the cryptographic hash This is a processing unit that generates a timed password using a function.

The e-mail address extraction processing unit (e-mail address extracting means) 23 is a processing unit that refers to the database 13 using a user ID as an index and extracts an e-mail address corresponding to the user ID.
The timed password transmission processing unit (timed password transmission means) 24 is a processing unit that transmits the timed password generated by the timed password generation processing unit 22 to the user terminal 1 by e-mail.
The authentication request reception processing unit (authentication request receiving unit) 25 is a processing unit that receives an authentication request including a user ID and a timed password transmitted to the user terminal 1 from the user terminal 1.

  When the authentication request reception processing unit 25 receives an authentication request from the user terminal 1, the timed password regeneration processing unit (timed password regeneration means) 26 receives the current time, the user ID, and the server password as inputs. The processing unit regenerates the timed password by a cryptographic hash function and regenerates the timed password at each time that is sequentially back from the current time by a predetermined time unit (for example, in minutes). The timed password re-generation process is performed until a valid time (for example, 10 minutes) determined in advance and stored in the authentication server 10. The timed password may be regenerated at a predetermined time in a time range that is a predetermined time after the current time. For example, the timed password may be regenerated every time at predetermined time unit intervals from the time that is 10 minutes after the current time to the current time.

  The timed password determination processing unit (timed password determination means) 27 compares one of the timed passwords regenerated by the timed password regenerating processing unit 26 with the timed password received from the user terminal 1, and there is a match. It is a processing unit for determining whether or not. If there is a match, it is determined that the identity verification is successful.

  The database 13 includes a server password unique to the authentication server, a user ID, an e-mail address corresponding to the user ID (may include other user attribute information), a cryptographic hash function, and the like. The encrypted password, the validity time of the timed password, etc. are recorded.

FIG. 3 is a diagram illustrating a hardware configuration example of the authentication server. As shown in this figure, the authentication server 10 has a hardware configuration as shown in FIG. The hardware configuration includes a CPU (Central Processing Unit), a RAM (Random Access Memory) / ROM (Read Only Memory), an HDD (Hard Disk Drive), an I / F (Interface), and the like. Then, in the authentication server 10, the CPU reads a program recorded in the RAM / ROM or HDD, and performs processing of each function of each processing unit 21 to 29 in the processing program unit 20 shown in FIG. The database 13 is composed of an HDD.
Each processing unit of the authentication server according to the present invention performs processing of each processing unit shown in the functional block diagram of FIG. 2 when the CPU reads and executes the program.

  FIG. 4 is a diagram illustrating an implementation example of a program for generating a timed password. The timed password generation program is implemented as a Java (registered trademark) Class as shown in FIG. The timed password class TimeLimitPassword has a server password basePassword_ as an instance variable. Use method generatePassword () to generate timed password.

  By passing the user ID as an argument, a timed password is generated and returned using the server password and the current time stamp. Method confirmPassword () is used to confirm the timed password. The validity of the timed password is confirmed by passing the password, user ID, and valid time presented by the user as arguments.

  FIG. 5 is a flowchart showing a processing procedure in the authentication server. Hereinafter, the flow of the processing will be described with reference to FIG.

  First, the user who has forgotten the password transmits a user ID from the user terminal 1 to the authentication server 10 (step S11). The authentication server 10 receives the user ID transmitted from the user terminal 1 (step S12).

  In the authentication server 10, the server password stored in the database 13 is read out, and the server password, the user ID, and the current time information of the time stamp (in this example, the hour and hour in minutes) A timed password is generated by applying the hash function (step S13).

  Further, the database 13 is referenced using the user ID as an index, the e-mail address corresponding to the user ID is extracted, and the generated timed password is transmitted by e-mail (step S14).

  The user terminal 1 receives the timed password from the authentication server 10 by e-mail (step S15), and sends an authentication request including the timed password and the user ID within a predetermined effective time stored in the database 13 ( In this example, it is transmitted to the authentication server 10 every minute (such as 10 minutes) (step S16).

  The authentication server 10 receives an authentication request including a user ID and a timed password from the user terminal 1 (step S17), and first multiplies the current time (in minutes), the user ID, and the server password by a cryptographic hash function, Regenerate the timed password. Next, the timed password corresponding to the time obtained by subtracting 1 minute from the current time (the time that goes back by 1 minute) is regenerated. Similarly, the time is traced back to the valid time N minutes such as 2 minutes, 3 minutes,... N minutes, and the timed password corresponding to these times is regenerated. The effective time N minutes is determined in advance as 10 minutes, for example, and is written in the database 13 (step S18).

  Next, the regenerated time password is compared with the original time password received from the user terminal 1 to determine whether there is a match (step S19). As a result, if there is a match, it is determined that the identity verification has succeeded (step S20), and if it does not match, the identity verification has failed and an identity verification error is issued and the process is terminated (step S21). In addition to the method of storing the information for the effective time N in advance in a database and reading the information, there are methods such as directly describing in the program or reading from a setting file other than the database.

  In the example described above, time information in minutes is used when generating the timed password. However, the time information is not limited to this, and may be in seconds or hours. In the above-described example, the time-limited password to be regenerated is generated for all times up to N minutes, which is predetermined as 0 minutes, 1 minute, 2 minutes,... N minutes, and then regenerated. Although an example in which each of the timed passwords is compared with the original timed password received from the user terminal 1 is shown, the present invention is not limited to this, and each timed password may be compared with the original timed password. .

As described above, the validity of the timed password presented by the user (identity confirmation) is determined by the timed password regenerated by the cryptographic hash function from the user ID, the server password, and the time information by the processing procedure described above Can do. Therefore, it is not necessary to store the timed password on the authentication server side. Since the timed password does not need to be saved, there is no need for protection. If the e-mail address registered first and recorded in the authentication server is normal, there is no risk of sending a timed password to others, so the user performs the above process when forgetting the password, for example. Authentication can be performed using a timed password distributed from the authentication server.
Further, after the user forgets the password, after the user is authenticated by the above-described authentication server process, the password may be generated and transmitted again automatically or based on the user process. .

  As shown in FIG. 3, the authentication server 10 of the present invention has a computer system inside. A series of processes related to the above-described process is stored in a computer-readable recording medium in the form of a program, and the above-described process is performed by the computer reading and executing this program.

That is, each processing in the processing program unit 20 shown in FIG. 2 is performed by a central processing unit such as a CPU reading the above program into a main storage device such as a ROM or RAM, and executing information processing and arithmetic processing. Is realized.
Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

  As mentioned above, although embodiment of this invention was described, the authentication server of this invention is not limited only to the above-mentioned example of illustration, A various change can be added in the range which does not deviate from the summary of this invention. Of course.

The figure for demonstrating the outline | summary of the authentication server of this invention. The functional block diagram which shows the structural example of the authentication server of this invention. The figure which shows the hardware structural example of the authentication server of this invention. The figure which shows the program implementation example of a timed password generation. The flowchart which shows the process sequence of the authentication server of this invention. The figure for demonstrating the method of identity verification by a secret question.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 User terminal, 2 Internet, 10 Authentication server, 11 Control part 12 Communication interface, 13 Database, 20 Processing program part 21 Timed password request reception processing part, 22 Timed password generation processing part 23 E-mail address extraction processing part, 24 Time period Password transmission processing unit 25 Authentication request reception processing unit 26 Timed password regeneration processing unit 27 Timed password determination processing unit

Claims (9)

An authentication system comprising an authentication server and a password issuing server, and receiving a user ID and password input to a user terminal from the user terminal to determine the validity of the user,
The password issuing server is
A storage unit that stores a user ID and seed information that is unique information of the authentication server itself;
A timed password request receiving means for receiving a transmission request of a timed password, which is a password used temporarily, from the user terminal together with the user ID;
When a timed password transmission request is received from the user terminal, the seed information stored in the storage unit is read out, and the seed information, the user ID, and the time information of the time stamp of the current time are input, and the cryptographic hash A timed password generating means for generating a timed password by a function;
A timed password transmitting means for transmitting the timed password generated by the timed password generating means to the user terminal,
The authentication server is
An authentication request receiving means for receiving an authentication request including a user ID and a timed password transmitted to the user terminal from the user terminal;
When an authentication request is received from the user terminal, the current time, user ID, and seed information are input, and a timed password is regenerated using a cryptographic hash function, and a time that is a predetermined time later than the current time A timed password regeneration means for regenerating a timed password at a predetermined time in the range;
Comparing any of the timed passwords regenerated by the timed password regenerating means with the timed password received from the user terminal, and determining whether there is a match, timed password determining means;
Personal identification means for determining that the identity verification is successful when it is determined by the timed password determination means that either of the regenerated time passwords matches the timed password received from the user terminal. Authentication system. The time unit of time information used for generating the timed password in the timed password generating unit of the password issuing server and for reproducing the timed password in the timed password regenerating unit of the authentication server is in units of seconds, minutes, hours It is either. The authentication system of Claim 1 characterized by the above-mentioned. The timed password regeneration means of the authentication server, when regenerating the timed password every predetermined time in a time range that is a predetermined time back from the current time, is valid up to N time units (N: integer). Regenerate the timed password as
The timed password determination unit of the authentication server compares the timed password received from the user terminal with only the timed password regenerated within the valid time range, so that the timed password received from the user terminal is The authentication system according to claim 1, wherein if the time has passed, it is determined that the identity verification has failed. The authentication system according to any one of claims 1 to 3, wherein the reissued password is encrypted by a cryptographic hash function and stored in a storage unit of the password issuing server. An authentication method in an authentication system comprising an authentication server and a password issuing server, receiving a user ID and password input to a user terminal from the user terminal and judging the validity of the user,
The storage unit of the password issuing server stores a user ID and seed information that is unique information of the authentication server itself,
The timed password request receiving means of the password issuing server receives a transmission request for a timed password, which is a temporarily used password, from the user terminal together with the user ID,
When the timed password generating means of the password issuing server receives a timed password transmission request from the user terminal, the seed information stored in the storage unit is read, the seed information, the user ID, and the time of the current time Using the stamp time information as an input, generate a timed password using a cryptographic hash function,
The timed password transmission means of the password issuing server transmits the timed password generated by the timed password generation means to the user terminal,
The authentication request receiving means of the authentication server receives an authentication request including a user ID and a timed password transmitted to the user terminal from the user terminal,
When the timed password regeneration unit of the authentication server receives an authentication request from the user terminal, the current time, the user ID, and the seed information are input, and the timed password is regenerated by a cryptographic hash function. Regenerate a timed password for each predetermined time in a time range that is a predetermined time after the current time,
The timed password determination unit of the authentication server compares either the timed password regenerated by the timed password regenerating unit with the timed password received from the user terminal, and determines whether there is a match.
The identity verification unit of the authentication server determines that the identity verification is successful when the timed password determination unit determines that any of the regenerated timed passwords matches the timed password received from the user terminal. Authentication method. It is a timed password included in the authentication request, and the password issuing server reads the seed information stored in the storage unit, and inputs the seed information, the user ID, and the time information of the current time stamp as a cryptographic hash An authentication request receiving means for receiving the timed password generated by the function from the user terminal;
When an authentication request is received from the user terminal, the current time, user ID, and seed information are input, and a timed password is regenerated using a cryptographic hash function, and a time that is a predetermined time later than the current time A timed password regeneration means for regenerating a timed password at a predetermined time in the range;
Comparing any of the timed passwords regenerated by the timed password regenerating means with the timed password received from the user terminal, and determining whether there is a match, timed password determining means;
If it is determined by the timed password determination means that any of the regenerated timed passwords matches the timed password received from the user terminal, the person confirmation means for determining that the person confirmation is successful,
An authentication server comprising: An authentication method of an authentication server for determining the legitimacy of a user,
It is a timed password included in the authentication request, and the password issuing server reads the seed information stored in the storage unit, and inputs the seed information, the user ID, and the time information of the current time stamp as a cryptographic hash The authentication request receiving means of the authentication server receives the timed password generated by the function from the user terminal,
When receiving an authentication request from the user terminal, the timed password regeneration unit of the authentication server receives the current time, the user ID, and the seed information as input, and regenerates the timed password using a cryptographic hash function. Regenerate a timed password for each predetermined time in a time range that is a predetermined time after the current time,
The timed password determination unit of the authentication server compares either the timed password regenerated by the timed password regenerating unit with the timed password received from the user terminal, and determines whether there is a match.
When the timed password determination unit determines that any of the regenerated timed passwords matches the timed password received from the user terminal, the identity verification unit of the authentication server determines that the identity verification is successful. Authentication method. A program for causing an authentication server computer to determine the validity of a user,
It is a timed password included in the authentication request, and the password issuing server reads the seed information stored in the storage unit, and inputs the seed information, the user ID, and the time information of the current time stamp as a cryptographic hash Authentication request reception processing for receiving the timed password generated by the function from the user terminal,
When an authentication request is received from the user terminal, the current time, user ID, and seed information are input, and a timed password is regenerated using a cryptographic hash function, and a time that is a predetermined time later than the current time A timed password regeneration process for regenerating the timed password at a predetermined time in the range;
Comparing any of the timed passwords regenerated by the timed password regenerating process with the timed password received from the user terminal, and determining whether there is a match,
When it is determined by the timed password determination process that any of the regenerated timed passwords matches the timed password received from the user terminal, the person verification process for determining that the person verification is successful;
A program that causes a computer to execute. A recording medium for storing a program to be executed by a computer of an authentication server for determining the legitimacy of a user,
It is a timed password included in the authentication request, and the password issuing server reads the seed information stored in the storage unit, and inputs the seed information, the user ID, and the time information of the current time stamp as a cryptographic hash Authentication request reception processing for receiving the timed password generated by the function from the user terminal,
When an authentication request is received from the user terminal, the current time, user ID, and seed information are input, and a timed password is regenerated using a cryptographic hash function, and a time that is a predetermined time later than the current time A timed password regeneration process for regenerating the timed password at a predetermined time in the range;
Comparing any of the timed passwords regenerated by the timed password regenerating process with the timed password received from the user terminal, and determining whether there is a match,
When it is determined by the timed password determination process that any of the regenerated timed passwords matches the timed password received from the user terminal, the person verification process for determining that the person verification is successful;
Medium for storing a program for causing a computer to execute the program.

Images