JP2008003745A - Authentication system and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system and an authentication method capable of authenticating a terminal device without inputting personal information from the terminal device. <P>SOLUTION: User information including a device ID is previously stored in a user information recording part 31 and a request response part 32 receives a request to a receiving address from the terminal device 40 and then transmits a response including the device ID request and for specifying an ID receiving address as a redirect address to the terminal device 40. The terminal device 40 transmits a request including the device ID to the ID receiving address or a condition that the response from an authentication server 30 includes the device ID request and the redirect address is specified and an authentication management part 33 receives the request including the device ID, determines whether the device ID has been registered in user information or not, and when the device ID has been registered in the user information, authenticates the terminal device 40. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication system and an authentication method for authenticating a terminal device, and more particularly to an authentication system and an authentication method for authenticating a terminal device having a unique device ID.

  In recent years, network environments such as the Internet have been improved, and content such as audio data, image data, and video data has been provided to user-owned terminal devices via a network such as Inch-Net. When providing, it is common to perform user authentication by inputting a user ID, a password, or the like.

  When issuing a user ID or password, it is necessary to register personal information such as address, telephone number, card number, etc., but it is complicated to operate because the personal information must be registered every time the service provider is different. Become. Therefore, an authentication server having a user database for storing personal information about the user is provided on the network, and a universal ID issued by the authentication server is used instead of registration of personal information, so that purchase of goods and services via the network can be performed. Has been proposed (see, for example, Patent Literature 1).

However, in the prior art, by inputting the universal ID, there is no need to input personal information such as an address, a telephone number, and a card number each time. However, when the personal information is registered in the authentication server, the terminal is still used. Personal information such as an address, a telephone number, and a card number has to be input from the device, and there is a problem that the operation becomes complicated in a terminal device with few operation keys.
JP 2001-244927 A

  The present invention has been made in view of such problems, and the object of the present invention is to input a terminal device without inputting personal information such as an address, a telephone number, or a card number from a terminal device with few operation keys. It is in the point which provides the authentication system and authentication method which can authenticate.

In order to solve the above problems, the present invention has the following configuration.
An authentication system according to the present invention is an authentication system including a terminal device having a unique device ID and an authentication server that performs authentication of the terminal device connected to a network, and the authentication server includes the device ID. User information storage means for storing user information, and when receiving a request for an address for reception from the terminal device, a response including a device ID request for requesting transmission of a device ID, and specifying an ID reception address as a redirect destination, When the request response means for transmitting to the terminal device and the request including the device ID with respect to the ID receiving address are received from the terminal device, the user information in which the device ID is recorded in the user information recording means And whether the device ID is the user ID or not. Authentication management means for authenticating the terminal device when registered in the information, the terminal device includes a response from the authentication server including the device ID request, and a redirect destination is designated. The request including the device ID is transmitted to the ID receiving address.

  Furthermore, in the authentication system of the present invention, the authentication management means of the authentication server sends authenticated information indicating that authentication has been performed to the terminal device when the device ID is registered in the user information. And the terminal device records the authenticated information. When the authenticated information is recorded, the terminal device stores the authenticated information when transmitting a request to the reception address. It is added and transmitted.

  Further, in the authentication system of the present invention, the authentication management means corresponds to an encryption protocol, and the request response means designates the ID reception address indicating that it corresponds to the encryption protocol as a redirect destination. The terminal device is the ID reception address indicating that the response from the authentication server includes the device ID request and that the redirect destination corresponds to the encryption protocol. On the condition that the request including the device ID is transmitted to the ID receiving address.

  The authentication server of the present invention is an authentication server that performs authentication of a terminal device having a unique device ID via a network, and includes a user information storage unit that stores user information including the device ID, and a reception address. When receiving a request from the terminal device, a request response means including a device ID request for requesting transmission of a device ID, and transmitting a response designating an ID receiving address as a redirect destination to the terminal device, and the ID receiving address On the other hand, when a request including the device ID is received from the terminal device, it is determined whether or not the device ID is registered in the user information recorded in the user information recording unit. Authentication for authenticating the terminal device when registered in the user information Characterized by comprising a management unit.

  Further, in the authentication server of the present invention, the authentication management means transmits, when the device ID is registered in the user information, transmitting authenticated information indicating that the device ID has been authenticated to the terminal device. Features.

  Further, in the authentication server of the present invention, the authentication management means corresponds to an encryption protocol, and the request response means designates the ID receiving address indicating that it corresponds to the encryption protocol as a redirect destination. A response to be transmitted to the terminal device.

  The terminal device according to the present invention is a terminal device having a unique device ID, on the condition that a response from the authentication server includes the device ID request and a redirect destination is specified. A request including an ID is transmitted to the ID receiving address.

  Furthermore, in the terminal device of the present invention, when the authenticated information indicating that the authentication has been performed is received from the authentication server and recorded, and the authenticated information is recorded, the reception address When the request is transmitted to the server, the authenticated information is added and transmitted.

  Furthermore, in the terminal device of the present invention, on the condition that the response from the authentication server includes the device ID request and the redirect destination is the ID reception address indicating that the encryption protocol is supported. A request including a device ID is transmitted to the ID receiving address.

  The authentication method of the present invention is an authentication method in which an authentication server performs authentication of a terminal device having a unique device ID via a network, and the authentication server stores user information including the device ID. Then, when a request for the reception address is received from the terminal device, it includes a device ID request for requesting transmission of a device ID, and transmits a response designating an ID reception address as a redirect destination to the terminal device. , A request including the device ID is transmitted to the ID receiving address on the condition that a response from the authentication server includes the device ID request and a redirect destination is specified. A request including the device ID is received from the terminal device for the receiving address. Then, it is determined whether or not the device ID is registered in the recorded user information, and the terminal device is authenticated when the device ID is registered in the user information. To do.

  Furthermore, in the authentication method of the present invention, when the device ID is registered in the user information, the authentication server transmits authenticated information indicating that authentication has been performed to the terminal device, and the terminal The apparatus records the authenticated information, and transmits the request with the authenticated information added when transmitting a request to the reception address.

  Further, in the authentication method of the present invention, the ID reception address corresponds to an encryption protocol, and the authentication server designates the ID reception address indicating that it corresponds to the encryption protocol as a redirect destination. The terminal device is the ID reception address indicating that the response from the authentication server includes the device ID request and that the redirect destination corresponds to the encryption protocol. On the condition, a request including the device ID is transmitted to the authentication server.

  In the authentication system and the authentication method of the present invention, the authentication server stores user information including a device ID, and includes a device ID request for requesting transmission of a device ID when a request for a reception address is received from a terminal device. , A response designating an ID reception address as a redirect destination is transmitted to the terminal device, and the terminal device includes a device ID on the condition that the response from the authentication server includes a device ID request and the redirect destination is designated. When the request including the device ID is received from the terminal device with respect to the ID receiving address, the authentication server is registered in the user information recorded in the device ID. If the device ID is registered in the user information, the terminal device is authenticated By configuring so that the user information including the device ID is recorded in advance in the authentication server using another device, and only by transmitting a request from the terminal device to the reception address of the authentication server, Since the device ID of the terminal device can be used for authentication, the terminal device can be authenticated without inputting personal information such as address, telephone number, card number, etc. from the terminal device with few operation keys. The operation required for authentication of the terminal device can be greatly reduced.

  Furthermore, in the authentication system and the authentication method of the present invention, the authentication server transmits authenticated information indicating that the authentication has been performed to the terminal device when the device ID is registered in the user information. By recording the authenticated information and sending the request to the reception address with the authenticated information added, the authentication server side authenticates the presence or absence of the authenticated information. There is an effect that it is possible to easily determine whether or not it is completed.

  Furthermore, in the authentication system and the authentication method of the present invention, the ID reception address corresponds to the encryption protocol, and the authentication server designates the ID reception address indicating that it corresponds to the encryption protocol as the redirect destination. The response is transmitted to the terminal device, and the terminal device receives the device ID on the condition that the response from the authentication server includes a device ID request and the redirect destination is an ID reception address indicating that the encryption protocol is supported. By transmitting the request including the request to the authentication server, it is possible to safely transmit the device ID from the terminal device to the authentication server, and to prevent unauthorized use of the device ID. Play.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  1 is a block diagram showing a configuration of an embodiment of an authentication system according to the present invention, and FIG. 2 is a diagram showing an example of user information recorded in a user information recording unit shown in FIG. FIG. 2 is a block diagram showing a configuration of a terminal device shown in FIG. 1.

  Referring to FIG. 1, the authentication system according to the present embodiment includes a content server 20 that distributes content via a network 10 such as the Internet, an authentication server 30 that authenticates access to the content server 20, and a network 10. A terminal device 40 that receives content via the terminal device 40 and a personal computer 50 are configured. Note that, in the present embodiment, the content server 20 and the authentication server 30 are functionally described separately, but the content server 20 and the authentication server 30 are servers composed of one or more information processing devices that operate by program control. It can be realized as a system, and each server may be managed by different operators, or two or more of each server may be managed by the same operator.

  The content server 20 has a function as a Web server that responds to a request from the terminal device 40, and is a recording unit such as an HDD in which contents such as “audio data”, “image data”, and “video data” are recorded. When the content request is received from the terminal device 40, the recorded content is transmitted to the terminal device 40 via the network 10.

  The authentication server 30 has a function as a Web server that responds to various requests from the terminal device 40. Referring to FIG. 2, a user information recording unit 31, a request response unit 32, an authentication management unit 33, and a device A registration unit 34 and a transmission / reception unit 35 are provided. The request response unit 32, the authentication management unit 33, and the device registration unit 34 receive network addresses such as different URLs, the request response unit 32 receives reception addresses, and the authentication management unit 33 receives device IDs. A registration address for receiving user information from the personal computer 50 is assigned to each of the ID reception address and the device registration unit 34. Requests from the terminal device 40 and the personal computer 50 are transmitted to the request response unit by the transmission / reception unit 35. 32, the authentication management unit 33 or the device registration unit 34.

  The user information recording unit 31 is a recording unit such as an HDD in which user information is recorded. Referring to FIG. 2, the user information includes personal information that identifies a user including a user name and address, and model information that identifies a terminal device 40 including a model name and a device ID. 50 is registered.

  When receiving a GET request from the terminal device 40 for the reception address as an authentication request, the request response unit 32 determines whether or not authenticated information is added to the authentication request. The authenticated information is information indicating that the terminal device 40 has been authenticated, and is sent as a cookie. When the authenticated information is added to the authentication request, the request response unit 32 uses the transmission / reception unit 35 to send a Redirect response that designates a delivery address assigned to the content server 20 as a redirect destination. And transmitted to the terminal device 40. Further, when authenticated information is not added to the authentication request, a device ID request for requesting the terminal device 40 to transmit a device ID is included in the header, and SSL (Secure Socket Layer) is used as a redirect destination. ) Or the like is transmitted to the terminal device 40 via the network 10 using the transmission / reception unit 35. The device ID request is a unique header negotiated with the terminal device 40, and is used as a necessary condition when the device ID is transmitted from the terminal device 40.

  The authentication management unit 33 corresponds to an encryption protocol such as SSL (Secure Socket Layer), and the ID reception address assigned to the authentication management unit 33 corresponds to an encryption protocol such as SSL. Can be determined. When the encryption protocol is SSL, the URL that does not support SSL is “http: // ˜”, whereas the URL that supports SSL is “https: // ˜”. It is possible to determine whether or not it is compatible with SSL.

  When the authentication management unit 33 receives a GET request from the terminal device 40 whose device ID is included in the request header, the authentication device 33 registers the included device ID in the user information recorded in the user information recording unit 31. It is judged whether it is done. When the device ID is registered in the authentication information, the authentication management unit 33 is a cookie (cookie) in which the authentication completion screen for informing that the authentication has been completed and the authenticated information indicating that the authentication has been recorded are recorded. Are transmitted to the terminal device 40 via the network 10 using the transmission / reception unit 35. When the device ID is not registered in the user information, the authentication management unit 33 uses the transmission / reception unit 35 to display a guidance screen for prompting registration of the user information using the personal computer 50, that is, registration of the terminal device 40. To the terminal device 40 via the network 10.

  The device registration unit 34 receives user information from the personal computer 50 and records the received user information in the user information recording unit 31.

  The transmission / reception unit 35 has a function of connecting to the network 10 by wire or wireless, and performs information communication with the terminal device 40 via the network 10 based on a protocol such as HTTP (Hypertext Transfer Protocol) or FTP (File Transfer Protocol). Do.

  Referring to FIG. 3, the terminal device 40 is a portable information processing device that has a unique device ID and operates under program control of an audio player or the like that reproduces content (audio data, image data, video data). A transmission / reception unit 41, an information recording unit 42, a display unit 43 such as a liquid crystal display, an operation unit 44, a reproduction processing unit 45, and a data management unit 46.

  The transmission / reception unit 41 has a function of connecting to the network 10 by wire or wireless, and performs information communication with the content server 20 and the authentication server 30 based on a protocol such as HTTP or FTP.

  The information recording unit 42 is a recording unit such as an HDD or a silicon memory. The information recording unit 42 receives the authentication server 30 and the network address recording unit 421 in which the reception address assigned to the request response unit 32 of the authentication server 30 is stored. It consists of a cookie recording unit 422 in which cookies are recorded and a content recording unit 423 in which content received from the content server 20 is recorded.

  The display unit 43 is a display unit such as a liquid crystal display, and displays an authentication completion screen and a guidance screen received from the authentication server 30 via the network 10 and a reproduction processing unit based on the content recorded in the content recording unit 423. The image and video reproduced by 45 are displayed.

  The operation unit 44 is an operation unit such as an operation button, and accepts an authentication instruction input and content acquisition input for instructing access to the authentication server 30 and various inputs related to reproduction of received and recorded content.

  The reproduction processing unit 45 expands and reproduces the content recorded in the content recording unit 423 of the information recording unit 42, displays images and videos on the display unit 43, and outputs audio to the connected headphones 47. .

  When an authentication instruction input is input from the operation unit 44 before authentication, the data management unit 46 transmits / receives a GET request for the reception address recorded in the network address recording unit 421 of the information recording unit 42 as an authentication request. The data is transmitted to the authentication server 30 via the network 10 using the unit 41. Further, the data management unit 46 includes a device ID request for requesting transmission of a device ID in the header, and authenticates a Redirect response that designates an ID reception address assigned to the authentication management unit 33 as a redirect destination. When receiving from the server 30, the GET request including the device ID in the request header for the ID reception address is transmitted to the authentication server 30 via the network 10 using the transmission / reception unit 41.

  When a content acquisition input is input from the operation unit 44 after authentication, the data management unit 46 receives a GET request for the reception address recorded in the network address recording unit 421 of the information recording unit 42, and a cookie recording unit 422. The cookie (Cookie) recorded in the URL is transmitted as a content request to the authentication server 30 via the network 10 using the transmission / reception unit 41, and the distribution address assigned to the content server 20 is designated as a redirect destination When the Redirect response is received from the authentication server 30, a GET request for the distribution address is transmitted as a content request to the content server 20 via the network 10 using the transmission / reception unit 41.

  The personal computer 50 has a function of connecting to the network 10 and registers user information by accessing a registration address assigned to the device registration unit 34. In the present embodiment, the user information is registered by the personal computer 50. However, the user information may be registered by another device that can be connected to the network 10 such as a mobile phone.

Next, the operation of the present embodiment will be described in detail with reference to FIG. 4 and FIG.
FIG. 4 is a flowchart for explaining the authentication operation in the embodiment of the authentication system according to the present invention, and FIG. 5 is a diagram for explaining the operation after the authentication in the embodiment of the authentication system according to the present invention. It is a flowchart.

First, the authentication operation of the terminal device 40 by the authentication server 30 will be described in detail with reference to FIG.
When the user inputs an authentication instruction to instruct access to the authentication server 30 from the operation unit 44 of the terminal device 40 (step A1), the data management unit 46 records in the network address recording unit 421 of the information recording unit 42. A GET request for the received reception address is transmitted as an authentication request to the authentication server 30 via the network 10 using the transmission / reception unit 41 (step A2).

  The transmission / reception unit 35 of the authentication server 30 allocates an authentication request from the terminal device 40 to the request response unit 32, and the request response unit 32 determines whether or not authenticated information is added to the authentication request (step A3). . Before the authentication of the terminal device 40 by the authentication server 30, the authenticated information is not added to the authentication request. Therefore, it is determined that the authenticated information is not added to the authentication request. If it is determined that the authenticated information is not added to the authentication request, the request response unit 32 includes, in the header, a device ID request that requests the terminal device 40 to transmit a device ID in response to the authentication request. In addition, a Redirect response designating the ID reception address assigned to the authentication management unit 33 as a redirect destination is transmitted to the terminal device 40 via the network 10 using the transmission / reception unit 35, and the device is transmitted to the terminal device 40. Request transmission of ID (step A4).

  The data management unit 46 of the terminal device 40 includes an ID reception address indicating that the device ID request for requesting transmission of the device ID is included in the header, and that the encryption destination protocol such as SSL is supported as a redirect destination. Is received from the authentication server 30, a GET request including the device ID in the request header for the ID reception address is transmitted to the authentication server 30 via the network 10 using the transmission / reception unit 41 (step A 5 ). That is, when the data management unit 46 transmits the device ID, the ID reception address indicating that the device ID request is included in the response from the authentication server 30 and that the encryption protocol such as SSL is supported is redirected. It is done on condition that it is specified as the destination.

  The authentication management unit 33 is compatible with an encryption protocol such as SSL (Secure Socket Layer) and receives a GET request from the terminal device 40 whose device ID is included in the request header. Is registered in the user information recorded in the user information recording unit 31 (step A6), and if the device ID is registered in the authentication information, the authentication management unit 33 An authentication completion screen informing that the authentication has been completed and a cookie in which authenticated information indicating that the authentication has been completed are transmitted to the terminal device 40 via the network 10 using the transmission / reception unit 35 (step A7). Step A8). If the device ID is not registered in the user information, the authentication management unit 33 uses the transmission / reception unit 35 to display a guidance screen for registering the terminal device 40, that is, for registering user information using the personal computer 50. To the terminal device 40 via the network 10.

  When receiving the authentication completion screen from the authentication server 30, the terminal device 40 data management unit 46 displays the received authentication completion screen on the display unit 43 to notify the user that the terminal device 40 has been authenticated (step A6). ), When a cookie is received from the authentication server 30, the cookie recording the authenticated information is recorded in the cookie recording unit 422 of the information recording unit.

Next, the content distribution operation after authentication of the terminal device 40 will be described in detail with reference to FIG.
When the user performs content acquisition input for instructing access to the authentication server 30 from the operation unit 44 of the terminal device 40 (step B1), the reception address recorded in the network address recording unit 421 of the information recording unit 42 And a cookie (Cookie) recorded in the cookie recording unit 422 as a content request is transmitted to the authentication server 30 via the network 10 using the transmission / reception unit 41 (step B2). The authentication instruction input can be performed with the same operation key as the authentication instruction input for instructing the authentication of the terminal device 40, and the content request is substantially the same as the authentication request for requesting the authentication of the terminal device 40. If the cookie is recorded in the cookie recording unit 422, that is, after authentication, the cookie is transmitted together with the GET request.

  The transmission / reception unit 35 of the authentication server 30 allocates the content request from the terminal device 40 to the request response unit 32, and the request response unit 32 determines whether or not authenticated information is added to the authentication request (step B3). . After the authentication of the terminal device 40 by the authentication server 30, since the authenticated information is added as a cookie to the authentication request, it is determined that the authenticated information is added to the authentication request. When it is determined that authenticated information is added to the authentication request, the request response unit 32 uses the transmission / reception unit 35 to send a Redirect response that designates a delivery address assigned to the content server 20 as a redirect destination. To the terminal device 40 via the network 10 (step B4).

  When the data management unit 46 of the terminal device 40 receives from the authentication server 30 a Redirect response that designates a distribution address assigned to the content server 20 as a redirect destination, the data management unit 46 uses the GET request for the distribution address as a content request, and transmits and receives 41 is transmitted to the content server 20 via the network 10 (step B5). Upon receiving a content request from the terminal device 40, the content server 20 transmits the recorded content to the terminal device 40 via the network 10. (Step B6). In the present embodiment, when the content server 20 receives the content request, the content server 20 is configured to transmit the content immediately. However, a content selection screen for selecting content may be responded to the content request. good.

  As described above, according to the present embodiment, user information including the device ID is stored in the user information recording unit 31 of the authentication server 30, and the request response unit 32 of the authentication server 30 When the request is received from the terminal device 40, the response including the device ID request for requesting the transmission of the device ID and specifying the ID receiving address as the redirect destination is transmitted to the terminal device 40. The terminal device 40 receives the request from the authentication server 30. On the condition that the response includes a device ID request and a redirect destination is specified, the request including the device ID is transmitted to the ID reception address, and the authentication management unit 33 of the authentication server 30 On the other hand, when a request including the device ID is received from the terminal device 40, the device ID is recorded. It is determined whether or not the user ID is registered in the user information, and when the device ID is registered in the user information, the terminal device 40 is configured to be authenticated so that the device ID can be obtained in advance using the personal computer 50. It is possible to perform authentication using the device ID of the terminal device 40 simply by recording the user information including “” in the authentication server 30 and transmitting a request from the terminal device 40 to the reception address of the authentication server 30. Therefore, the terminal device 40 can be authenticated without inputting personal information such as an address, a telephone number, and a card number from the terminal device 40 with few operation keys, and operations necessary for authentication of the terminal device can be greatly increased. There is an effect that it can be reduced.

  Further, according to the present embodiment, the authentication management unit 33 of the authentication server 30 transmits authenticated information indicating that authentication has been performed to the terminal device 40 when the device ID is registered in the user information. The terminal device 40 records the authenticated information as a cookie in the cookie recording unit 422 of the information recording unit 42, and adds the authenticated information when transmitting the request to the reception address. By configuring so as to transmit, there is an effect that the authentication server 30 side can easily determine whether or not it has been authenticated based on the presence or absence of the authenticated information.

  Furthermore, according to the present embodiment, the authentication management unit 33 of the authentication server 30 is compatible with the encryption protocol, and sends a response that designates an ID reception address indicating that it corresponds to the encryption protocol as a redirect destination. To the terminal device 40. The terminal device 40 is configured on the condition that the response from the authentication server 30 includes a device ID request and that the redirect destination is an ID reception address indicating that the encryption protocol is supported. By configuring the request including the ID to be transmitted to the authentication server 30, it is possible to safely transmit the device ID from the terminal device 40 to the authentication server 30, and to prevent unauthorized use of the device ID. There is an effect that can be done.

  Note that the present invention is not limited to the above-described embodiments, and it is obvious that the embodiments can be appropriately changed within the scope of the technical idea of the present invention. In addition, the number, position, shape, and the like of the constituent members are not limited to the above-described embodiment, and can be set to a suitable number, position, shape, and the like in practicing the present invention. In each figure, the same numerals are given to the same component.

It is a block diagram which shows the structure of embodiment of the authentication system which concerns on this invention. It is a figure which shows the example of user information recorded on the user information recording part shown in FIG. It is a block diagram which shows the structure of the terminal device shown in FIG. It is a flowchart for demonstrating the authentication operation | movement in embodiment of the authentication system which concerns on this invention. It is a flowchart for demonstrating the operation | movement after the authentication in embodiment of the authentication system which concerns on this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Network 20 Content server 30 Authentication server 31 User information recording part 32 Request response part 33 Authentication management part 34 Device registration part 35 Transmission / reception part 40 Terminal device 41 Transmission / reception part 42 Information recording part 43 Display part 44 Operation part 45 Playback process part 46 Data Management unit 50 Personal computer 421 Network address recording unit 422 Cookie recording unit 423 Content recording unit

Claims (12)

An authentication system comprising a terminal device having a unique device ID and an authentication server for authenticating the terminal device connected to a network,
The authentication server includes user information storage means for storing user information including the device ID;
When receiving a request for the reception address from the terminal device, a request response means including a device ID request for requesting transmission of a device ID and transmitting a response specifying the ID reception address as a redirect destination to the terminal device;
When a request including the device ID is received from the terminal device with respect to the ID reception address, it is determined whether or not the device ID is registered in the user information recorded in the user information recording means. And an authentication management means for authenticating the terminal device when the device ID is registered in the user information,
The terminal device transmits a request including the device ID to the ID receiving address on condition that a response from the authentication server includes the device ID request and a redirect destination is specified. Authentication system. When the device ID is registered in the user information, the authentication management unit of the authentication server transmits authenticated information indicating that authentication has been performed to the terminal device,
The terminal device records the authenticated information. When the authenticated information is recorded, the terminal device adds the authenticated information when transmitting a request to the reception address. The authentication system according to claim 1, wherein the authentication system is transmitted. The authentication management means corresponds to an encryption protocol,
The request response means transmits a response designating the ID receiving address indicating that it corresponds to an encryption protocol as a redirect destination to the terminal device,
The terminal device includes a request including the device ID, on the condition that the response from the authentication server includes the device ID request and the redirect destination is the ID reception address indicating that it corresponds to an encryption protocol. The authentication system according to claim 1, wherein the authentication system is transmitted to the ID receiving address. An authentication server that performs authentication of a terminal device having a unique device ID via a network,
User information storage means for storing user information including the device ID;
When receiving a request for the reception address from the terminal device, a request response means including a device ID request for requesting transmission of a device ID and transmitting a response specifying the ID reception address as a redirect destination to the terminal device;
When a request including the device ID is received from the terminal device with respect to the ID reception address, it is determined whether or not the device ID is registered in the user information recorded in the user information recording means. An authentication server comprising authentication management means for authenticating the terminal device when the device ID is registered in the user information.   5. The authentication server according to claim 4, wherein, when the device ID is registered in the user information, the authentication management unit transmits authenticated information indicating that the device ID has been authenticated to the terminal device. . The authentication management means corresponds to an encryption protocol,
6. The authentication server according to claim 4 or 5, wherein the request response means transmits a response specifying the ID reception address indicating that it corresponds to an encryption protocol as a redirect destination to the terminal device. A terminal device having a unique device ID,
A terminal device characterized by transmitting a request including the device ID to the ID receiving address on condition that a response from the authentication server includes the device ID request and a redirect destination is designated. Received and recorded authenticated information indicating that it has been authenticated from the authentication server,
8. The terminal device according to claim 7, wherein when the authenticated information is recorded, the authenticated information is added when the request is transmitted to the reception address.   On the condition that the response from the authentication server includes the device ID request and the redirect destination is the ID reception address indicating that it corresponds to the encryption protocol, a request including the device ID is received for the ID reception. The terminal device according to claim 7 or 8, which transmits to an address. An authentication method for performing authentication of a terminal device having a unique device ID by an authentication server via a network,
The authentication server stores user information including the device ID,
When receiving a request for an address for reception from the terminal device, a device ID request for requesting transmission of a device ID is transmitted, and a response specifying an ID reception address as a redirect destination is transmitted to the terminal device.
The terminal device transmits a request including the device ID to the ID reception address on the condition that a response from the authentication server includes the device ID request and a redirect destination is specified,
When the authentication server receives a request including the device ID from the terminal device with respect to the ID reception address, the authentication server determines whether or not the device ID is registered in the recorded user information, An authentication method comprising: authenticating the terminal device when a device ID is registered in the user information. The authentication server, when the device ID is registered in the user information, transmits authenticated information indicating that it has been authenticated to the terminal device,
11. The authentication according to claim 10, wherein the terminal device records the authenticated information, and transmits the request with the authenticated information added when transmitting a request to the reception address. Method. The ID receiving address corresponds to an encryption protocol,
The authentication server transmits a response specifying the ID receiving address indicating that it corresponds to an encryption protocol as a redirect destination to the terminal device,
The terminal device includes a request including the device ID, on the condition that the response from the authentication server includes the device ID request and the redirect destination is the ID reception address indicating that it corresponds to an encryption protocol. The authentication method according to claim 10, wherein the authentication method is transmitted to the authentication server.

Images