JP2008003742A - Authentication system and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system and an authentication method capable of authenticating a terminal device without inputting personal information from the terminal device. <P>SOLUTION: A request response part 32 in an authentication server 30 receives a request and transmits a response including a device ID request and the terminal device 20 transmits a request including device ID correspondingly to the response. An authentication management part 33 in the authentication server 30 receives the request, records temporary registration information composed of generated temporary ID and the device ID in an information recording part 31 and transmits the generated temporary ID and the terminal device 20 displays the received temporary ID. An equipment registration part 34 in the authentication server 30 receives user ID and the temporary ID from the terminal device 20 and a personal computer 40, refers to the temporary registration information on the basis of the temporary ID and registers device ID in user information specified by the user ID. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication system and an authentication method for authenticating a terminal device, and more particularly to an authentication system and an authentication method for authenticating a terminal device having a unique device ID.

  In recent years, network environments such as the Internet have been improved, and content such as audio data, image data, and video data has been provided to user-owned terminal devices via a network such as Inch-Net. When providing, it is common to perform user authentication by inputting a user ID, a password, or the like.

  When issuing a user ID or password, it is necessary to register personal information such as address, telephone number, card number, etc., but it is complicated to operate because the personal information must be registered every time the service provider is different. Become. Therefore, an authentication server having a user database for storing personal information about the user is provided on the network, and a universal ID issued by the authentication server is used instead of registration of personal information, so that purchase of goods and services via the network can be performed. Has been proposed (see, for example, Patent Literature 1).

However, in the prior art, by inputting the universal ID, there is no need to input personal information such as an address, a telephone number, and a card number each time. However, when the personal information is registered in the authentication server, the terminal is still used. Personal information such as an address, a telephone number, and a card number has to be input from the device, and there is a problem that the operation becomes complicated in a terminal device with few operation keys.
JP 2001-244927 A

  The present invention has been made in view of such problems, and the object of the present invention is to input a terminal device without inputting personal information such as an address, a telephone number, or a card number from a terminal device with few operation keys. It is in the point which provides the authentication system and authentication method which can authenticate.

In order to solve the above problems, the present invention has the following configuration.
The authentication system of the present invention is an authentication system comprising a terminal device having a unique device ID and an authentication server for authenticating the terminal device connected to a network, wherein the authentication server is a user including a user ID. When receiving a request for an address for receiving information from the terminal device, an information recording unit for recording information includes a device ID request for requesting transmission of a device ID, and a response for designating an ID receiving address as a redirect destination When a request for the ID reception address including the device ID is received from the terminal device, a temporary ID is generated, and the temporary registration including the generated temporary ID and the device ID is received. The information is recorded in the information recording means, and the generated temporary ID is When the authentication management means for transmitting to the device, the user ID and the temporary ID are received from another device different from the terminal device, the user ID is referred to by referring to the temporary registration information based on the temporary ID. Device registration means for registering the device ID in the user information specified in step (b), wherein the terminal device includes a response from the authentication server including the device ID request and a redirect destination is specified. The condition includes data management means for transmitting a request including the device ID to the ID receiving address, and display means for displaying the temporary ID received from the authentication server.

  Furthermore, in the authentication system of the present invention, the authentication management means of the authentication server transmits a cookie recording the device ID to the terminal device, and the data management means of the terminal device receives from the authentication server. The recorded cookie is recorded, and the recorded cookie is transmitted together with a request for the reception address.

  Furthermore, in the authentication system of the present invention, when the request response unit of the authentication server receives a request for the reception address from the terminal device, it determines whether or not the device ID is added to the request as the cookie. When the device ID is added to the request, the user information recorded in the information recording unit is specified based on the added device ID, and a response based on the specified user information Is transmitted to the terminal device.

  The authentication server of the present invention is an authentication server that performs authentication of a terminal device having a unique device ID via a network, and includes information recording means for recording user information including a user ID, and the authentication server A request response means for transmitting to the terminal device a response for specifying an ID reception address as a redirect destination, including a device ID request for requesting transmission of a device ID upon receiving a request for a business address from the terminal device; When a request for the ID reception address including the ID is received from the terminal device, a temporary ID is generated, and temporary registration information including the generated temporary ID and the device ID is recorded in the information recording unit. Authentication management means for transmitting the generated temporary ID to the terminal device, and the user When the ID and the temporary ID are received from another device different from the terminal device, the device ID is added to the user information specified by the user ID by referring to the temporary registration information based on the temporary ID. Device registration means for registration.

  Furthermore, in the authentication server of the present invention, the authentication management means transmits a cookie recording the device ID to the terminal device.

  Furthermore, in the authentication server of the present invention, when the request response means receives a request for the reception address from the terminal device, the request response means determines whether the device ID is added to the request as the cookie, When the device ID is added, the user information recorded in the information recording unit is specified based on the added device ID, and a response based on the specified user information is sent to the terminal device. It is characterized by transmitting.

  The terminal device according to the present invention is a terminal device having a unique device ID, on the condition that a response from the authentication server includes the device ID request and a redirect destination is specified. Data management means for transmitting a request including an ID to the ID receiving address, and display means for displaying the temporary ID received from the authentication server are provided.

  Furthermore, in the terminal device of the present invention, the data management means records the cookie received from the authentication server, and transmits the recorded cookie together with a request for the reception address. To do.

  The authentication method of the present invention is an authentication method in which an authentication server performs authentication of a terminal device having a unique device ID via a network, and the authentication server records user information including a user ID. Then, when a request for the reception address is received from the terminal device, it includes a device ID request for requesting transmission of a device ID, and transmits a response designating an ID reception address as a redirect destination to the terminal device. , On the condition that the response from the authentication server includes the device ID request and a redirect destination is specified, the request including the device ID is transmitted to the ID receiving address, and the authentication server A request for the ID reception address including the device ID is received from the terminal device. Then, a temporary ID is generated, temporary registration information including the generated temporary ID and the device ID is recorded, and the generated temporary ID is transmitted to the terminal device. The temporary ID received from the server is displayed. When the authentication server receives the user ID and the temporary ID from another device different from the terminal device, the authentication server refers to the temporary registration information based on the temporary ID. Thus, the device ID is registered in the user information specified by the user ID.

  Further, in the authentication method of the present invention, the authentication server transmits a cookie recording the device ID to the terminal device, and the terminal device records the cookie received from the authentication server, and records the cookie. The cookie is transmitted together with a request for the reception address.

  Further, in the authentication method of the present invention, when the authentication server receives a request for the reception address from the terminal device, the authentication server determines whether or not the device ID is added to the request as the cookie. When the device ID is added, user information recorded based on the added device ID is specified, and a response based on the specified user information is transmitted to the terminal device. And

  In the authentication system and authentication method of the present invention, the authentication server includes a device ID request that records user information including a user ID and requests transmission of a device ID when a request for a reception address is received from a terminal device. , A response designating an ID reception address as a redirect destination is transmitted to the terminal device, and the terminal device includes a device ID on the condition that the response from the authentication server includes a device ID request and the redirect destination is designated. When the request for the ID reception address including the device ID is received from the terminal device, the authentication server generates a temporary ID, and from the generated temporary ID and device ID The temporary registration information is recorded, and the generated temporary ID is transmitted to the terminal device. The temporary ID received from the authentication server is displayed. When the authentication server receives the user ID and the temporary ID from another device different from the terminal device, the temporary server refers to the temporary registration information based on the temporary ID. By configuring the device ID to be registered in the user information specified by the ID, the user information including the user ID is recorded in advance in the authentication server, and a request is made from the terminal device to the reception address of the authentication server. Since the terminal device can be authenticated by a simple operation of transmitting the temporary ID displayed on the terminal device and the user ID to the authentication server using another device simply by transmitting The terminal device can be authenticated without inputting personal information such as address, telephone number, card number, etc. from a few terminal devices, and the operations necessary for authentication of the terminal device can be performed. An effect that it is possible to reduce the width.

  Furthermore, in the authentication system and authentication method of the present invention, the authentication server transmits a cookie in which the device ID is recorded to the terminal device, and the terminal device records the cookie received from the authentication server and records the cookie. Is transmitted together with the request for the reception address, the authentication server side can easily determine whether or not it has been authenticated based on the presence or absence of the cookie in which the device ID is recorded.

  Furthermore, in the authentication system and the authentication method of the present invention, when the authentication server receives a request for the reception address from the terminal device, the authentication server determines whether or not the device ID is added as a cookie to the request, and the device ID is included in the request. When added, the user information recorded in the information recording unit is specified based on the added device ID, and a response based on the specified user information is transmitted to the terminal device. As a result, the authentication server side can identify the user based on the device ID and perform a response in accordance with the user ID, so that it is possible to construct a system with excellent usability.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of an embodiment of an authentication system according to the present invention, and FIG. 2 is a diagram showing an example of user information and provisional registration information recorded in an information recording unit shown in FIG. FIG. 3 is a block diagram showing a configuration of the terminal device shown in FIG.

  Referring to FIG. 1, the authentication system according to the present embodiment includes a terminal device 20 having a function of connecting to a network 10 such as the Internet, an authentication server 30 that authenticates the terminal device 20, and a personal computer 40. . Note that the authentication server 30 of the present embodiment can be realized as a server system including one or more information processing apparatuses that operate by program control, and each server may be managed by a different provider. Two or more servers may be managed by the same operator.

  The authentication server 30 has a function as a Web server that responds to various requests from the terminal device 20, and referring to FIG. 2, an information recording unit 31, a request response unit 32, an authentication management unit 33, and device registration A unit 34, a transmission / reception unit 35, and a content recording unit 36 are provided. The request response unit 32, the authentication management unit 33, and the device registration unit 34 receive network addresses such as different URLs, the request response unit 32 receives reception addresses, and the authentication management unit 33 receives device IDs. A registration address for receiving user information from the personal computer 40 is assigned to each of the ID reception address and the device registration unit 34, and a request from the terminal device 20 and the personal computer 40 is transmitted to the request response unit 32 by the transmission / reception unit 35. It is allocated to the authentication management unit 33 or the device registration unit 34.

  The information recording unit 31 is a recording unit such as an HDD in which user information and temporary registration information are recorded. The user information is information created by user registration using the personal computer 40. With reference to FIG. 2A, the user information, personal information that identifies the user, such as a user name and address, and the user's use. It consists of the device ID of the terminal device 20 that performs. Note that the device ID is blank as shown in FIG. 2A until the terminal device 20 is authenticated. 2B, the temporary registration information is a temporary file created when authenticating the terminal device 20, and is generated by the device ID unique to the terminal device 20 and the authentication management unit 33. It consists of a temporary ID and the generation date and time of the temporary ID, and is deleted at the time of authentication of the terminal device 20 or after a predetermined time, so that the same temporary ID does not exist at the same time.

  When receiving a request (for example, a GET request) from the terminal device 20 for the reception address, the request response unit 32 determines whether or not a device ID is added to the request. The device ID is information unique to the terminal device 20, and is generated, for example, as a decimal number from the ID of a semiconductor chip used in the terminal device 20, and sent as a cookie. When the device ID is added as a cookie to the request, the request response unit 32 specifies the user information in the information recording unit 31 based on the added device ID, and based on the specified user information The response is transmitted to the terminal device 20 via the network 10 using the transmission / reception unit 35. The response based on the user information is, for example, when a user's preference information or usage history information is recorded, a distribution homepage for distributing the content recorded in the content recording unit 36 is used as the preference information. Or customized responses based on usage history information.

  Further, when the device ID is not added to the request, the request response unit 32 includes a device ID request for requesting the terminal device 20 to transmit the device ID in the header, and SSL as a redirect destination. A Redirect response (for example, 307 response) designating an ID receiving address indicating that the encryption protocol such as (Secure Socket Layer) is supported is transmitted to the terminal device 20 via the network 10 using the transmission / reception unit 35. To do. The device ID request is a unique header negotiated with the terminal device 20.

  The authentication management unit 33 corresponds to an encryption protocol such as SSL (Secure Socket Layer), and the ID reception address assigned to the authentication management unit 33 corresponds to an encryption protocol such as SSL. Can be determined. When the encryption protocol is SSL, the URL that does not support SSL is “http: // ˜”, whereas the URL that supports SSL is “https: // ˜”. It is possible to determine whether or not it is compatible with SSL.

  In addition, when receiving a request (for example, a GET request) from the terminal device 20 in which the device ID is included in the header, the authentication management unit 33 generates a temporary ID, the generated temporary ID, and the temporary ID generation date and time. And the temporary registration information including the device ID is recorded in the information recording unit 31, and the generated temporary ID and the cookie (Cookie) in which the device ID is recorded are transmitted to the terminal via the network 10 using the transmission / reception unit 35. Transmit to device 20. The generated temporary ID is transmitted, for example, as a structured document such as OPML (Outline Processor Markup Language) which is one of the specifications of XML (Extensible Markup Language) in which the temporary ID is embedded in the title element. The temporary ID is an ID composed of an alphanumeric string temporarily used until the terminal device 20 is authenticated, and the temporary registration information is deleted at the time of authentication of the terminal device 20 or after a predetermined time. At the same time, it is not necessary, so that the same temporary ID can be used in the range where the same temporary ID does not exist, and the number of digits can be set small.

  When the device registration unit 34 receives a request (for example, a GET request) from the personal computer 40 including association information including a user ID and a temporary ID, the device registration unit 34 records the request in the information recording unit 31 based on the temporary ID. By referring to the provisional registration information, the device ID is registered in the user information specified by the user ID. The device registration unit 34 associates the user ID with the device ID based on the temporary registration information including the device ID and the temporary ID and the association information including the user ID and the temporary ID. Instead of receiving the association information composed of the ID and the temporary ID from the personal computer 40 at a time, the temporary ID may be received after logging in with the user ID.

  The transmission / reception unit 35 has a function of connecting to the network 10 by wire or wireless, and performs information communication with the terminal device 20 via the network 10 based on a protocol such as HTTP (Hypertext Transfer Protocol) or FTP (File Transfer Protocol). Do.

  The content recording unit 36 is a recording unit such as an HDD in which contents such as “audio data”, “image data”, and “video data” are recorded.

  The terminal device 20 is a portable information processing device that has a unique device ID and operates by program control of an audio player or the like that reproduces content (audio data, image data, video data). An information recording unit 22, a display unit 23 such as a liquid crystal display, an operation unit 24, a reproduction processing unit 25, and a data management unit 26 are provided.

  The transmission / reception unit 21 has a function of connecting to the network 10 by wire or wireless, and performs information communication with the authentication server 30 based on a protocol such as HTTP or FTP.

  The information recording unit 22 is a recording unit such as an HDD or a silicon memory. The information recording unit 22 receives the authentication server 30 and the network address recording unit 221 in which the reception address assigned to the request response unit 32 of the authentication server 30 is recorded. It consists of a cookie recording unit 222 in which cookies are recorded and a content recording unit 223 in which received content is recorded.

  The display unit 23 is a display unit such as a liquid crystal display, and displays the temporary ID received from the authentication server 30 via the network 10 and is reproduced by the reproduction processing unit 25 based on the content recorded in the content recording unit 223. Displayed images and videos.

  The operation unit 24 is an operation unit such as an operation button, and accepts an access instruction input for instructing access to the authentication server 30 and accepts various inputs related to reproduction of received and recorded content.

  The reproduction processing unit 25 decompresses and reproduces the content recorded in the content recording unit 223 of the information recording unit 22, displays images and videos on the display unit 23, and outputs audio to the connected headphones 27. .

  When an access instruction input is input from the operation unit 24 before authentication, the data management unit 26 sends a request (for example, a GET request) to the reception address recorded in the network address recording unit 221 of the information recording unit 22. The data is transmitted to the authentication server 30 via the network 10 using the transmission / reception unit 21. In addition, the data management unit 26 includes a device ID request for requesting transmission of a device ID in the header, and authenticates a Redirect response that designates an ID reception address assigned to the authentication management unit 33 as a redirect destination. When received from the server 30, a request (for example, a GET request) including a device ID in the header with respect to the ID reception address is transmitted to the authentication server 30 via the network 10 using the transmission / reception unit 21. The device ID is information unique to the terminal device 20 and is generated, for example, in decimal numbers from the ID of the semiconductor chip used in the terminal device 20. Further, when the data management unit 26 receives the temporary ID from the authentication server 30, the data management unit 26 displays the received temporary ID on the display unit 23 and receives the cookie (Cookie) in which the device ID is recorded. (Cookie) is recorded in the cookie recording unit 222 of the information recording unit 22.

  When an access instruction input is input from the operation unit 24 after authentication, the data management unit 26 receives a request (for example, a GET request) for a reception address recorded in the network address recording unit 221 of the information recording unit 22. The cookie (Cookie) recorded in the cookie recording unit 222 and recorded in the cookie recording unit 222 is transmitted to the authentication server 30 via the network 10 using the transmission / reception unit 21.

  The personal computer 40 has a function of connecting to the network 10, registers user information by accessing a registration address assigned to the device registration unit 34, and registers the user ID and the display unit 23 of the terminal device 20. The displayed temporary ID is transmitted. In the present embodiment, the user information is registered by the personal computer 40. However, the user information may be registered by another device that can be connected to the network 10 such as a mobile phone.

Next, the operation of the present embodiment will be described in detail with reference to FIGS.
FIG. 4 is a flowchart for explaining an authentication operation in the embodiment of the authentication system according to the present invention, and FIG. 5 is a flowchart for explaining a device registration operation in the embodiment of the authentication system according to the present invention. FIG. 6 is a flowchart for explaining the operation after authentication in the embodiment of the authentication system according to the present invention.

First, the authentication operation of the terminal device 20 by the authentication server 30 will be described in detail with reference to FIG.
When the user inputs an access instruction for instructing access to the authentication server 30 from the operation unit 24 of the terminal device 20 (step A1), the data management unit 26 records in the network address recording unit 221 of the information recording unit 22 A request (for example, a GET request) for the received reception address is transmitted to the authentication server 30 via the network 10 using the transmitting / receiving unit 21 (step A2).

  The transmission / reception unit 35 of the authentication server 30 allocates a request from the terminal device 20 to the reception address to the request response unit 32, and the request response unit 32 determines whether or not a device ID is added as a cookie. (Step A3). Before the authentication of the terminal device 20 by the authentication server 30, the device ID is not added, so that it is determined that the device ID is not added. When determining that the device ID is not added, the request response unit 32 includes a device ID request for requesting the terminal device 20 to transmit the device ID in the header in response to the request, A Redirect response that designates an ID reception address assigned to the authentication management unit 33 as a redirect destination is transmitted to the terminal device 20 via the network 10 using the transmission / reception unit 35, and the terminal device 20 is requested to transmit a device ID. (Step A4).

  The data management unit 26 of the terminal device 20 includes an ID reception address indicating that the device ID request for requesting the transmission of the device ID is included in the header, and that it corresponds to an encryption protocol such as SSL as a redirect destination Is received from the authentication server 30, a request (for example, a GET request) including the device ID in the header with respect to the ID reception address is transmitted to the authentication server 30 via the network 10 using the transmission / reception unit 21. (Step A5). That is, when the data management unit 26 transmits the device ID, the ID reception address indicating that the device ID request is included in the response from the authentication server 30 and that the encryption protocol such as SSL is supported is redirected. It is done on condition that it is specified as the destination.

  When the authentication management unit 33 supports an encryption protocol such as SSL (Secure Socket Layer) and receives a request (for example, a GET request) from the terminal device 20 in which the device ID is included in the header, the temporary management ID Is generated (step A6). Next, the authentication management unit 33 causes the information recording unit 31 to record temporary registration information including the generated temporary ID, the generation date and time of the temporary ID, and the device ID (step A7), and the generated temporary ID, A cookie in which the device ID is recorded is transmitted to the terminal device 20 via the network 10 using the transmission / reception unit 35 (step A8, step A9).

  When the data management unit 26 of the terminal device 20 receives the temporary ID and the cookie (Cookie) in which the device ID is recorded from the authentication server 30, the data management unit 26 receives the temporary ID from the authentication server 30 and displays the received temporary ID. 23 (step A10), when a cookie (Cookie) in which its device ID is recorded is received, the received cookie (cookie) is recorded in the cookie recording unit 222 of the information recording unit 22 (step A11).

Next, a device registration operation using the personal computer 40 will be described with reference to FIG. 5. The user visually recognizes the temporary ID displayed on the display unit 23 of the terminal device 20, and uses the recognized user ID and temporary ID as a personal computer. When the device registration input is performed after the input to 40 (step B1), the personal computer 40 includes a user ID and a temporary ID for the registration address assigned to the device registration unit 34 of the authentication server 30. A request (for example, a GET request) to which the association information is added is transmitted to the authentication server 30 via the network 10 (step B2). In the present embodiment, the association information is transmitted to the authentication server 30 by the personal computer 40 so as to associate the user ID with the device ID, but other devices that can be connected to the network 10 such as a mobile phone. Thus, the association information may be transmitted to the authentication server 30.

  When the device registration unit 34 receives a request (for example, a GET request) from the personal computer 40 including association information including a user ID and a temporary ID, the device registration unit 34 records the request in the information recording unit 31 based on the temporary ID. By referring to the provisional registration information, the device ID is registered in the user information specified by the user ID (step B3).

Next, an access operation after authentication from the terminal device 20 to the authentication server 30 will be described in detail with reference to FIG.
When the user inputs an access instruction for instructing access to the authentication server 30 from the operation unit 24 of the terminal device 20 (step C1), the data management unit 26 records in the network address recording unit 221 of the information recording unit 22 Along with a request for a received address (for example, a GET request), a cookie (Cookie) recorded in the cookie recording unit 222 and recorded with its own device ID is transmitted via the network 10 using the transmission / reception unit 21. It transmits to the authentication server 30 (step C2).

  The transmission / reception unit 35 of the authentication server 30 allocates a request from the terminal device 20 to the reception address to the request response unit 32, and the request response unit 32 sends the user information to the information recording unit 31 based on the added device ID. The distribution homepage for distributing the content recorded in the content recording unit 36 is specified based on the specified user information, and the customized distribution homepage is transmitted to the network 10 using the transmission / reception unit 35. Via the terminal device 20 (step C4).

  As described above, according to the present embodiment, the authentication server 30 records user information including the user ID in the information recording unit 31, and the request response unit 32 sends a request for the reception address to the terminal device. 20 includes a device ID request for requesting transmission of a device ID, and transmits a response designating an ID reception address as a redirect destination to the terminal device 20, and the terminal device 20 receives a response from the authentication server 30 as a device. A request including the device ID is transmitted to the ID receiving address on the condition that the redirect request is specified including the ID request, and the authentication management unit 33 of the authentication server 30 receives the ID including the device ID. When a request for a business address is received from the terminal device, a temporary ID is generated, and the generated temporary ID and device ID are generated. Is recorded in the information recording unit 31, the generated temporary ID is transmitted to the terminal device 20, and the terminal device 20 displays the temporary ID received from the authentication server 30. When the device registration unit 34 receives the user ID and the temporary ID from the personal computer 40 with the terminal device 20, the device registration unit 34 refers to the temporary registration information based on the temporary ID, thereby adding the device ID to the user information specified by the user ID. By configuring so as to register, user information including the user ID is recorded in advance in the information recording unit 31 of the authentication server 30, and a request is transmitted from the terminal device 20 to the reception address of the authentication server 30. The temporary ID displayed on the terminal device 20 and the user ID are simply transmitted to the authentication server using the personal computer 40, and the authentication of the terminal device 20 is performed. Therefore, the terminal device 20 can be authenticated without inputting personal information such as an address, a telephone number, and a card number from the terminal device 20 with few operation keys. There is an effect that necessary operations can be greatly reduced.

  Further, according to the present embodiment, the authentication management unit 33 of the authentication server 30 transmits a cookie in which the device ID is recorded to the terminal device 20, and the terminal device 20 records the cookie received from the authentication server. By configuring so that the recorded cookie is transmitted together with the request for the reception address, the authentication server 30 can easily determine whether or not the authentication has been performed based on the presence or absence of the cookie in which the device ID is recorded. There is an effect that can be done.

  Further, according to the present embodiment, when the request response unit 32 of the authentication server 30 receives a request for the reception address from the terminal device 20, the request response unit 32 determines whether or not the device ID is added to the request as a cookie. When the device ID is added to the request, the user information recorded in the information recording unit 31 is specified based on the added device ID, and a response based on the specified user information is sent to the terminal device 20. By configuring so as to transmit, the authentication server 30 side can identify a user based on the device ID and can make a response according to the user, so that it is possible to construct a system with excellent usability. Play.

  Note that the present invention is not limited to the above-described embodiments, and it is obvious that the embodiments can be appropriately changed within the scope of the technical idea of the present invention. In addition, the number, position, shape, and the like of the constituent members are not limited to the above-described embodiment, and can be set to a suitable number, position, shape, and the like in practicing the present invention. In each figure, the same numerals are given to the same component.

It is a block diagram which shows the structure of embodiment of the authentication system which concerns on this invention. It is a figure which shows the user information and temporary registration information example which are recorded on the information recording part shown in FIG. It is a block diagram which shows the structure of the terminal device shown in FIG. It is a flowchart for demonstrating the authentication operation | movement in embodiment of the authentication system which concerns on this invention. It is a flowchart for demonstrating the apparatus registration operation | movement in embodiment of the authentication system which concerns on this invention. It is a flowchart for demonstrating the operation | movement after the authentication in embodiment of the authentication system which concerns on this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Network 20 Terminal device 21 Transmission / reception part 22 Information recording part 23 Display part 24 Operation part 25 Playback process part 26 Data management part 30 Authentication server 31 Information recording part 32 Request response part 33 Authentication management part 34 Device registration part 35 Transmission / reception part 36 Content Recording unit 40 PC 221 Network address recording unit 222 Cookie recording unit 223 Content recording unit

Claims (11)

An authentication system comprising a terminal device having a unique device ID and an authentication server for authenticating the terminal device connected to a network,
The authentication server includes information recording means for recording user information including a user ID;
When receiving a request for the reception address from the terminal device, a request response means including a device ID request for requesting transmission of a device ID and transmitting a response specifying the ID reception address as a redirect destination to the terminal device;
When a request for the ID reception address including the device ID is received from the terminal device, a temporary ID is generated, and temporary registration information including the generated temporary ID and the device ID is recorded in the information recording unit. And authentication management means for transmitting the generated temporary ID to the terminal device;
When the user ID and the temporary ID are received from another device different from the terminal device, the device information is specified in the user information specified by the user ID by referring to the temporary registration information based on the temporary ID. A device registration means for registering an ID,
The terminal device is a data management means for transmitting a request including the device ID to the ID receiving address on the condition that a response from the authentication server includes the device ID request and a redirect destination is designated. When,
An authentication system comprising display means for displaying the temporary ID received from the authentication server. The authentication management means of the authentication server transmits a cookie recording the device ID to the terminal device,
The data management unit of the terminal device records the cookie received from the authentication server, and transmits the recorded cookie together with a request for the reception address. Authentication system.   When the request response unit of the authentication server receives a request for the reception address from the terminal device, the request response unit determines whether the device ID is added to the request as the cookie, and adds the device ID to the request. If it is, the user information recorded in the information recording means is specified based on the added device ID, and a response based on the specified user information is transmitted to the terminal device. The authentication system according to claim 2. An authentication server that performs authentication of a terminal device having a unique device ID via a network,
Information recording means for recording user information including a user ID;
When the authentication server receives a request for a reception address from the terminal device, the authentication server includes a device ID request for requesting transmission of a device ID, and transmits a response specifying the ID reception address as a redirect destination to the terminal device A response means;
When a request for the ID reception address including the device ID is received from the terminal device, a temporary ID is generated, and temporary registration information including the generated temporary ID and the device ID is recorded in the information recording unit. And authentication management means for transmitting the generated temporary ID to the terminal device;
When the user ID and the temporary ID are received from another device different from the terminal device, the device information is specified in the user information specified by the user ID by referring to the temporary registration information based on the temporary ID. An authentication server comprising device registration means for registering an ID.   The authentication server according to claim 4, wherein the authentication management unit transmits a cookie recording the device ID to the terminal device.   When the request response unit receives a request for the reception address from the terminal device, the request response unit determines whether the device ID is added as the cookie to the request, and the device ID is added to the request. 5. The method according to claim 4, wherein the user information recorded in the information recording unit is specified based on the added device ID, and a response based on the specified user information is transmitted to the terminal device. Or the authentication server of 5. A terminal device having a unique device ID,
Data management means for transmitting a request including the device ID to the ID receiving address on the condition that a response from the authentication server includes the device ID request and a redirect destination is designated;
A terminal device comprising display means for displaying the temporary ID received from the authentication server.   The terminal device according to claim 7, wherein the data management unit records the cookie received from the authentication server and transmits the recorded cookie together with a request for the reception address. An authentication method in which an authentication server performs authentication via a network of a terminal device having a unique device ID,
The authentication server records user information including a user ID,
When receiving a request for an address for reception from the terminal device, a device ID request for requesting transmission of a device ID is transmitted, and a response specifying an ID reception address as a redirect destination is transmitted to the terminal device.
The terminal device transmits a request including the device ID to the ID reception address on the condition that a response from the authentication server includes the device ID request and a redirect destination is specified,
When the authentication server receives a request for the ID reception address including the device ID from the terminal device, the authentication server generates a temporary ID and records temporary registration information including the generated temporary ID and the device ID. And transmitting the generated temporary ID to the terminal device,
The terminal device displays the temporary ID received from the authentication server,
When the authentication server receives the user ID and the temporary ID from another device different from the terminal device, the authentication server refers to the temporary registration information based on the temporary ID, and is specified by the user ID. An authentication method, wherein the device ID is registered in user information. The authentication server transmits a cookie recording the device ID to the terminal device,
The authentication method according to claim 9, wherein the terminal device records the cookie received from the authentication server, and transmits the recorded cookie together with a request for the reception address.   When the authentication server receives a request for the reception address from the terminal device, the authentication server determines whether the device ID is added as the cookie to the request, and when the device ID is added to the request. The authentication method according to claim 10, further comprising: identifying user information recorded based on the added device ID, and transmitting a response based on the identified user information to the terminal device.

Images