JP2009031880A - System for providing information for authenticating user - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system for authenticating access from a user terminal with high precision by a simple operation. <P>SOLUTION: This system is provided with: a user terminal 10 for enabling a registered user 5 to input first authentication information Z1; an incoming server 60 for validating second authentication information Z2 associated with the incoming number of an incoming call only in a prescribed valid time from the incoming time; and an authentication device 39 for inquiring the second authentication information Z2 associated with the first authentication information Z1 acquired from the user terminal 10 to the incoming server 60, and for, when the second authentication information Z2 is valid, authenticating the access by the user terminal 10. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a system and method for providing information for authenticating a user.

In Patent Document 1, a predetermined ID and password are given to a registered user, and when accessing an information server or the like, only the person who presents the user is requested to present the predetermined ID and password. An authentication system that secures security by permitting access is described. Further, it is described that the user can easily determine the risk of password theft, and that the user is provided with an authentication device that does not need to change the password. Specifically, when there is a call from the user system telephone, the center system telephone number confirmation unit confirms that the incoming call is the registered user's telephone number, and the password management unit at a short time interval. The updated password is sent to the phone. The user inputs the password obtained from the telephone to the local system of the user system and transmits it to the second communication unit via the Internet line. The password management unit of the center system authenticates the received password and performs access. to approve.
JP 2002-318785 A

  It is hard to say that it is an easy task for a user to enter a different password each time he logs into the system or requests access to a database. Furthermore, if the password is an unfamiliar, meaningless, random alphanumeric character string, it is not so easy to input the alphanumeric character string without fail. In addition, if a mistake is made and the time has elapsed, it is necessary to call again to obtain a valid password. If you fear that your password will be stolen, you will need to change your password at shorter intervals, and you will also need to increase the number of alphanumeric characters in your password. Therefore, such an authentication device may have high security, but authentication errors may be repeated. For this reason, it is easy to give an impression that a telephone fee is high or a system in which access is permitted after authentication, for example, a database or application software is difficult to use, and there is a possibility that business progress using the system may be hindered.

  It is also possible to authenticate the user with higher accuracy using biometric information such as a fingerprint, a retina pattern, and a voice pattern. However, in order to be authenticated by the biometric information, it is necessary to register the information in advance, and it is necessary to prepare a device that can acquire the biometric information. For example, when a user tries to receive information from an information providing server using an unspecified personal computer connected to the Internet as a user terminal, there are cases in which biometric information cannot always be used as authentication information.

  For this reason, it is desired to provide an authentication apparatus and method that can authenticate the user and perform high security with a simple system by work familiar to the user.

  According to one aspect of the present invention, a registered user inputs a first authentication information and a second incoming call associated with an incoming call number for a predetermined effective time from an incoming call time by an incoming call from a mobile phone. The incoming call management device that validates the authentication information and the second authentication information associated with the first authentication information obtained from the user terminal are referred to the incoming call management device, and the second authentication information is valid. And an authentication device that authenticates access by a user terminal.

  In this system, a user (registered user) inputs first authentication information for authenticating his / her input to the user terminal, and before and after that, the user can grasp the incoming call management device from the mobile phone. Make a call to a given phone number. Due to the incoming call, in the incoming call management device, the second authentication information associated with the incoming call incoming number is valid for a predetermined valid time from the incoming call time. The authentication device queries the incoming call management device for second authentication information associated with the first authentication information obtained from the user terminal, and authenticates the access by the user terminal if the second authentication information is valid. . In this system, access to a user terminal is authenticated by inputting authentication information such as a user ID and a password registered by the user into the user terminal, and further, the user calls a predetermined telephone number with the user's mobile phone. Is done.

  Entering authentication information such as a user ID and a password registered by the user into the user terminal and making a call using a mobile phone are common tasks for the user. The mobile phone number (caller's phone number, incoming call number) is personal information that is strictly managed by the service provider of the mobile phone network. Users also do not lend their mobile phones to third parties unnecessarily, and a system for authenticating using fingerprints, voices, faces, etc. has been introduced to use mobile phones. The incoming call from is very likely the act of the owner of the mobile phone. Therefore, the authentication device can improve security by using the second authentication information in addition to the first authentication information. Further, the time when the first authentication information is input and the second authentication information by limiting the time (valid time) that becomes valid as the second authentication information related to the incoming call number by the incoming call from the mobile phone Correlation with the timing when becomes valid can also be used as third authentication information (authentication condition) for authenticating the user. Therefore, it is possible to provide a system that can ensure high security by performing a series of operations familiar to the user.

  The second authentication information may be a mobile phone number (calling number, incoming number). Further, the second authentication information may be other information that can identify the user, and the second authentication information can be set by the user or a third party. Therefore, the mobile phone number, which is the user's personal information, is managed only by the incoming call management device, and the mobile phone number can be prevented from leaking to the authentication device as information. Further, if the second authentication information is information for identifying a registered user other than the phone number of the mobile phone, the authentication device uses the second authentication information that is valid only between the authentication device and the incoming call management device. The incoming call management device can be inquired about the validity / invalidity of the authentication information. Response security between the authentication device and the incoming call management device can also be secured.

  One form of an incoming call management device included in this system registers an incoming call database including an incoming call time and an incoming call number, and authentication information and incoming call time associated with the incoming call number in the incoming call database when an incoming call is received from a mobile phone. And means for deleting authentication information whose valid time has elapsed from the incoming time registered in the incoming database.

  The authentication information registered in the incoming database is preferably an incoming call number. In that case, it is preferable that the incoming call management device further includes means for validating the authentication information of the registered user related to the incoming call number registered in the incoming call database. It is avoided that the mobile phone number is transmitted between devices. It is also possible to assign a plurality of authentication information to one incoming number, and it is possible for one user to set different second authentication information for a plurality of authentication devices. Become.

  The incoming call management device preferably further includes means for identifying an authentication device that permits a response to the second authentication information query. The contracted authentication device can be identified by the identification number of the authentication device acquired at the time of inquiry, and the security when validating / invalidating the second authentication information can be further improved.

  The incoming call management device preferably further includes means for charging for the second authentication information inquiry. The validity of the second authentication information changes with the passage of time, and it is also a feature of the second authentication information that the validity changes with the time. That is, the validity / invalidity of the second authentication information at the timing of inquiry is valuable as information. Therefore, this second authentication information is information worth charging according to the number of times it is queried.

  Another aspect of the present invention is an incoming call management device (incoming call management server) connected to the authentication device via a computer network such as wired, wireless, or the Internet. That is, an incoming call management device that validates the authentication information of a registered user associated with an incoming call incoming number for a predetermined effective time from the incoming call time when an incoming call from the mobile phone is received. And the incoming database containing the incoming call number, the means for registering the authentication information and incoming call number associated with the incoming call number in the incoming call database, and the valid time elapses from the incoming call time registered in the incoming call database. Means for deleting the authentication information, and means for responding to the inquiry of the authentication information from the authentication device whether the inquired authentication information is valid / invalid. An example of the authentication information registered in the incoming database is an incoming call number, and it is desirable that the incoming call management device has means for validating the authentication information of a registered user related to the incoming call number registered in the incoming database.

  According to another aspect of the present invention, the authentication device acquires the first authentication information input to the user terminal, and the incoming call management device receives a predetermined call from the incoming time by receiving the incoming call from the mobile phone. And validating the second authentication information associated with the incoming called number for the valid time, and the authentication device obtains the second authentication information associated with the first authentication information obtained from the user terminal. The authentication method includes introducing to the incoming call management device and authenticating access by the user terminal if the second authentication information is valid.

  According to another aspect of the present invention, there is provided an incoming call management function for validating registered user authentication information associated with an incoming called number for a predetermined effective time from an incoming time when an incoming call is received from a mobile phone. A program provided by a computer. This program registers the authentication information and the incoming time associated with the incoming call number in the incoming database when an incoming call is received from the mobile phone, and deletes the authentication information whose valid time has elapsed from the incoming time registered in the incoming database. The authentication information of the registered user related to the incoming call number registered in the incoming call database, and valid / invalidity of the inquired authentication information in response to the inquiry of the authentication information from the authentication device. Is a program for executing the above by a computer. This program can be provided by being recorded on an appropriate recording medium such as a CD-ROM. It can also be provided via a computer network such as the Internet.

  It is desirable to further execute identification of an authentication device that permits a response by this program. Further, it is desirable to further execute charging for the inquiry of authentication information by this program.

  FIG. 1 shows an embodiment of the present invention. FIG. 1 describes three systems each including a different authentication device. One system (system A) includes an authentication device 19 mounted on a personal computer (PC) 10 which is a user terminal. The authentication device 19 logs in or accesses a registered user to the PC 10, uses a specific application software (application) such as an operating system (OS), and accesses a storage (for example, hard disk) 11 installed in the personal computer 10. Used to grant and / or restrict.

  One of the other systems (system B) includes an authentication device 39 mounted on the information providing server 30. This authentication device 39 is used to permit the user terminal 10 to log in to the information providing server 30 via the Internet 1. The authentication device 39 is used to permit and / or restrict access to a service provided by the information providing server 30 and access to the database 31 included in the information providing server 30. One of the other systems (system C) includes an authentication device 59 mounted on the server 50 of the authentication station 70. This authentication device 59 is used for permitting and / or restricting access to and maintenance of user registration information 51 mounted on the authentication server 50 via the user terminal 10 and the Internet 1. Note that the functions or services to which these authentication devices 19, 39, and 59 authenticate, permit, and / or restrict registered users are not limited to the above, and are not limited to the functions or services described below. Absent.

  First, the system A will be described. The system A includes a PC 10 that is a user terminal, an authentication device 19 mounted on the PC 10, and an incoming server 60 that can communicate with the PC 10 via the Internet 1. For example, the authentication device 19 of the system A is used for the user 5 to log in to the PC 10 that is a user terminal. When the user 5 attempts to log in to the PC 10, a login authentication screen 17 a is displayed on the display 17. The user 5 inputs the user ID 18a and the password 18b according to the display on the screen 17a (operation X). The password 18b may be arbitrarily set by the user. Before and after the operation X, the user 5 makes a call (call) to a predetermined telephone number using the mobile phone 9 owned by the user 5 (operation Y). A call by the mobile phone 9 arrives at the incoming server 60 of the authentication station 70 connected to the telephone network 2 by a connection service provided by a mobile phone company including the base station 3 and the telephone network 2.

  The incoming server 60 is an incoming call management device, and records incoming calls caused by calls from the mobile phone 9. The incoming server 60 records the incoming time Rt from the mobile phone 9 and the incoming number (calling number, caller number) Rn of the mobile phone 9 in the incoming database 61 of the incoming server 60. The incoming call server 60 registers the incoming call number Rn in the incoming call database 61 for a predetermined time (valid time, eg, several minutes) Te from the incoming call time Rt. To do. The incoming server 60 may receive a call from the mobile phone 9 to start a call and return a confirmation that the call has been received, for example, a voice response. However, in the incoming server 60, basically, it is only necessary to obtain the incoming time Rt and the incoming call number Rn, and it may be prevented that the call charge is charged by not starting the call. The necessity of the voice response may be an element that the user 5 can select as user registration information.

  The authentication device 19 of the PC 10 uses the user identification information (user ID) 18a and the password 18b input by the operation X as the first authentication information Z1, and matches the information previously registered in the disk 11 as the user registration information 18c. Confirm. For a user ID that is permitted to disclose only information with a low security grade, the user may be authenticated at this stage and use of a limited range of the PC 10 may be permitted.

  Furthermore, the authentication device 19 confirms whether there is an incoming call from the user 5 via the Internet 1 with respect to the incoming call server 60. For this purpose, the authentication device 19 acquires from the user registration information 18c the second authentication information Z2 for referring to the incoming server 60 for the user ID 18a, and sends the second authentication information Z2 valid / Query invalid. The second authentication information Z2 may be the incoming call number Rn registered as the mobile phone number of the user 5, and the user registers his / her mobile phone phone number as the second authentication information Z2 as the user registration information 18c. You may do it. Further, as the second authentication information Z2, the first authentication information Z1 or a part thereof, for example, the user ID 18a may be used.

  In this incoming server 60, appropriate identification information different from the telephone number of the user 5's mobile phone can be registered in the user registration information 18c as the second authentication information Z2, and the user registration information of the authentication device 19 can be registered. It is possible to avoid registering a mobile phone number which is personal information of the user as 18c. However, the user 5 registers the same identification information as the second authentication information Z2 in the user registration information 18c of the authentication device 19 and the incoming server 60, and the authentication device 19 receives the incoming call of the user 5 from the incoming server 60. It is necessary to be able to inquire whether or not there is the common second authentication information Z2. The incoming server 60 validates the second authentication information Z2 designated by the user 5 if the incoming database 61 has the incoming number Rn of the mobile phone of the user 5.

  The authentication device 19 inquires of the incoming server 60 whether the second authentication information Z2 is valid. If it is obtained from the incoming server 60 that the second authentication information Z2 is valid, the authentication device 19 permits the user 5 to log in because both the first authentication information Z1 and the second authentication information Z2 are valid. , Use of the application software 13 including the OS is permitted. If either the first authentication information Z1 or the second authentication information Z2 is invalid, the login of the user 5 is not permitted.

  The system B includes a PC 10 that is a user terminal, an authentication device 39 mounted on the information providing server 30, and an incoming server 60. The PC 10, the information providing server 30, and the incoming server 60 are connected in a communicable state via the Internet 1. The authentication device 39 of the information providing server 30 performs login management for the WEB server 32. When the user 5 accesses the WEB server function (WEB server) 32 provided by the information providing server 30 via the Internet 1 by the user terminal 10, the WEB server 32 calls the authentication device 39. The authentication device 39 transmits a screen 17a for inputting authentication information (first authentication information) Z1 including the user ID 18a and the password 18b to the user terminal 10 by a known technique.

  The authentication device 39 further acquires the first authentication information Z1 input to the browser of the PC 10 using an encryption technique such as SSL (Secure Socket Layer). At this stage, a service for accessing information different from publicly available WEB information may be started. For example, since the user who is accessing the information providing server 30 is identified by the first authentication information Z1, if the service permitted to be used by the user is limited to a service with a low security grade, You may start the limited service of the information provision server 30 in the step.

  Based on the user registration information 38, the authentication device 39 further uses the second authentication information Z2 for confirming the incoming server 60 whether or not the user authenticated by the first authentication information Z1 is valid. Query valid / invalid. If the first authentication information Z1 and the second authentication information Z2 are valid, the authentication device 39 authenticates the access of the user terminal 10 to the WEB server 32. Therefore, the user 5 inputs the first authentication information Z1 to the user terminal 10 and makes a call to the incoming call server 60 by the mobile phone 9 before and after that. The service 33 can be used. For example, it is possible to access the database 31 managed by the server 30, log in to an application program provided by the server 30, and use functions provided by the information providing server 30.

  The authentication station 70 included in the system C provides information including the presence / absence of a valid incoming call in response to the inquiry from the registered information providing server 30 or the registered user terminal 10. The system C includes the PC 10 and the authentication server 50 and the incoming server 60 of the authentication station 70. The PC 10 and the authentication station 70 are connected in a communicable state via the Internet 1. The authentication server 50 and the incoming server 60 are connected in a communicable state via the Internet 1 or a LAN. The authentication device 59 of the authentication server 50, for incoming inquiries made via the Internet 1, the user registration information registered in advance in the user registration database 51 includes unique information such as the IP address and MAC address of the inquiry source. If they match, the provision of incoming information is permitted. Further, similarly to the authentication device 39 of the information providing server 30 described above, the first authentication information Z1 obtained from the user terminal 10 and the second authentication information Z2 for confirming valid incoming of the incoming database 61 are provided. If both are valid, the user 5 is permitted, and access to the user registration database 51 and use of the service 53 including maintenance are permitted via the user terminal 10.

  FIG. 2 shows a functional block diagram of the incoming server 60. The incoming server 60 responds to the inquiry of the second authentication information Z2 by the authentication server 50 included in the authentication station 70, and the second authentication information Z2 by another authentication device connected by a computer network or the like. Respond to a query. The incoming server 60 includes a function of providing incoming information (incoming history) and billing information for access authenticated by the authentication server 50. Therefore, the authentication server 50 includes a WEB server function 52, an authentication function (authentication apparatus) 59, and a service function 53 that manages user registration information 58 of the database 51.

  The incoming server 60 includes an incoming database 61, an incoming call management function 62, and a telephone interface 63 for communicating using the public telephone network 2. The incoming call management function 62 includes a telephone number incoming call detecting device 65 that detects a caller ID (called number) when there is an incoming call at the telephone interface 63, and an incoming call database management device 66. The telephone number incoming call detection device 65 confirms that the incoming call number Rn is the telephone number of the user registered in the registered user information 67. If the incoming number Rn is a registered user's telephone number, the management device 66 associates the incoming time Rt with the incoming number Rn in the incoming database 61 and records (stores and registers) it as one record 66a. including. The management device 66 further includes a function 66b that periodically searches the contents of the incoming database 61 and automatically deletes records that have passed the valid time Te from the incoming time Rt. The incoming database 61 stores incoming data (including the incoming time Rt and incoming number Rn) within the effective time Te, and does not include other incoming data.

  The management device 66 further includes a function 66c that refers to the registered user information 67 and validates authentication information related to the incoming call number Rn registered in the incoming call database 61. This function 66c invalidates the authentication information related to the incoming call number Rn deleted from the incoming call database 61 and validates only the authentication information related to the incoming call number Rn registered in the incoming call database 61. The authentication information validated / invalidated by this function 66c is information corresponding to the second authentication information Z2 inquired from the station authentication device 59 and the external authentication devices 39 and 19.

  In the function 66c for validating the authentication information, the number of second authentication information Z2 that is valid by one incoming number Rn is not limited to one. The validity / invalidity of the same second authentication information Z2 may be inquired from the authentication devices 19, 39 and 59, and the validity / invalidity of different second authentication information Z2 is inquired from the authentication devices 19, 39 and 59, respectively. May be. The second authentication information Z2 may be registered in the incoming call database 61 together with the incoming call number Rn or instead of the incoming call number Rn. In any case, only the second authentication information Z2 associated with the incoming call number Rn that the incoming call management function 62 of the server 60 recognizes as having received an incoming call is valid only during the effective time Te from the incoming call time Rt.

  The incoming server 60 further determines whether or not the inquired second authentication information Z2 is valid for the inquiry from the communication interface 71 for communicating via the Internet 1 and the authentication device 19, 39 or 59. An incoming call information providing function 72 for providing such information, and a charging information providing function 73 for providing charging information registered in the charging database 75 in response to an inquiry of charging information. Whether the second authentication information Z2 is valid only for inquiries from the contracted server 30 or PC 10 based on the contractor information registered in the contractor registration information 78 in advance. Provide information including whether or not. The contractor can be specified by an IP address, a MAC address, or the like. For the determination (authentication) of the contractor, the function of the authentication device 59 of the authentication server 50 can be used. The validity / invalidity of the second authentication information Z2 is personal information of the user, and security can be ensured by disclosing only to the contractor.

  The second authentication information Z2 is valid only between the incoming server 60 in which the authentication information is registered in advance and the authentication device 19, 39 or 59. Therefore, the incoming information providing function 72 may be configured to ensure security by responding only to an inquiry for the valid second authentication information Z2 and not responding to other authentication information. Since the second authentication information Z2 is information that is valid only for the valid time Te when an incoming call is received, it is very unlikely that a device outside the contract will accidentally find the second authentication information. Accordingly, the authentication devices 19, 39, and 59 make an inquiry to the incoming server 60 for the second authentication information Z2 registered in advance for the first authentication information Z1 via a general-purpose communication line such as the Internet. It is very easy to obtain highly reliable authentication information for the registered user related to the first authentication information Z1.

  The response of the incoming server 60 to the inquiry from the contractor, that is, the authentication devices 39 and 19 is charged and recorded in the charging database 75. In the incoming server 60, whether or not the second authentication information Z2 is valid is information that changes over time, and the second authentication information Z2 is valid when an inquiry (inquiry) is received from the contractor. Whether or not it is important in authenticating the user. Therefore, the information that the incoming server 60 responds to each inquiry of the second authentication information Z2 is valuable. For this reason, a fee corresponding to the number of times of response is set, and the contractor side, for example, a provider that develops the service by the information providing server 30 including the authentication device 39, a manufacturer that provides the service via the provider, and registration for authentication It is possible to collect a usage fee from the user.

  The billing destination (billing fee) may be each contractor, each registered user, and each second authentication information. In addition, since the mobile phone number of the registered user is known at the incoming server 60, it is possible to charge a usage fee for the incoming call management function of the incoming server 60 in addition to the telephone usage fee.

  In the authentication procedure for accessing the accounting database 75, an authentication device 59 is used, and an authentication method using the first authentication information Z1 and the second authentication information Z2 can be used. In order to authenticate access for updating the contractor registration information 78, an authentication method using the authentication device 59 and the first authentication information Z1 and the second authentication information Z2 can be used.

  FIG. 3 is a flowchart showing the operation of the incoming server 60. If there is an incoming call in step 91, the incoming call number is checked against the telephone number included in the registered user information 67 by the telephone number incoming call detection device 65 in step 92. If the incoming number matches the telephone number included in the registered user information 67, the incoming time Rt and the incoming number Rn are registered in the incoming database 61 in step 93. Accordingly, in step 94, authentication information Z2 associated with the incoming call number Rn is validated.

  In step 95, the incoming database 61 is automatically maintained at relatively short intervals (eg, minutes). When the maintenance timing is reached, all incoming data registered in the incoming database 61 are searched in step 96, and incoming data for which the valid time Te has elapsed is deleted in step 97. Accordingly, in step 98, the authentication information Z2 associated with the deleted incoming call number Rn is invalidated.

  In step 99, when there is an inquiry about the second authentication information Z2 from the contractor (server, PC), in step 100, it is verified (authenticated) that the inquiry is from a valid contractor, and whether or not a response is possible is determined. Is done. If the inquiry is from a legitimate contractor, in step 101, information including validity / invalidity of the second authentication information Z2 is provided to the contractor of the inquiry source. In step 102, the billing information in the billing database 75 is updated each time a response is received from the contractor.

  The function as the incoming server (incoming management device) 60 is provided as a program (application program, incoming management program) that operates on the computer of the server 60. The program installed to implement the function as the incoming server 60 on the computer includes instructions for executing each process (each step) of the incoming management method 90 shown in FIG. 3 by the computer. Yes, it is provided by being recorded on a suitable recording medium such as a CR-ROM. Alternatively, this program can be provided (downloaded) via a computer network such as the Internet 1.

  FIG. 4 is a block diagram showing the functions of the information providing server 30 with the authentication device 39 as the center. The information providing server 30 includes a communication interface 35 for communicating with other devices and systems connected to the Internet 1 via the Internet 1, a WEB server function 32 for providing information via the Internet 1, An authentication device (authentication function) 39. The authentication device 39 includes a first function 41 for acquiring first authentication information Z1 including a user ID 18a and a password 18b input at the user terminal 10 from the user terminal 10 via the communication interface 35. The first function 41 displays the screen 17a shown in FIG. 5A via the WEB server 32 using a WEB browser operating on the user terminal 10, and the user ID 18a input via the browser and The password 18b is acquired.

  Further, the authentication device 39 uses the second function 42 for inquiring the incoming server 60 whether or not the second authentication information Z2 is valid, and the user is identified by the first authentication information Z1 and the second authentication information Z2. A function 43 for authentication is included. As described above, the second authentication information Z2 is valid at the incoming server 60 for a predetermined effective time Te from the incoming time Rt by the incoming call from the mobile phone 9 with the incoming call number Rn.

  The function 43 for authentication includes a function 44 for determining whether the first authentication information Z1 matches the user information in the user registration information (user database) 38. The authenticating function 43 further searches the user registration information 38 for the second authentication information Z2 of the user 5 of the user ID 18a, and receives the validity of the second authentication information Z2 via the second function 42. A function 45 for inquiring the server 60 is included. As described above, the second authentication information Z2 may be the mobile phone number of the user 5 or other identification information. When it is confirmed from the incoming server 60 that the second authentication information Z2 is valid, the access of the user terminal 10 by the user 5 with the user ID 18a is authenticated. The first authentication information Z1 may be only the user ID 18a. However, in order to improve the accuracy of the first authentication information Z1 and prevent an unnecessary inquiry (inquiry) from being generated with respect to the incoming server 60, the password information 18b is included in the first authentication information Z1. desirable. Also, inputting the password 18b set by the user together with the user ID 18a is normally performed in order to receive services of many application programs, and is hardly burdened by the user. Absent.

  The authentication function 43 further includes the second authentication information related to the first authentication information Z1 because the first authentication information Z1 obtained from the user terminal 10 matches the registration information 38 of the registered user (user) 5. When Z2 is not valid in the incoming server 60, a function 46 for causing the user terminal 10 to output a telephone number for the incoming server 60 to accept as an incoming call is included. When the function 44 confirms that the first authentication information Z1 matches the user registration information 38 in the function 44 and finds that the second authentication information Z2 is not valid, FIG. As shown in the screen 17b, the number 18n to be called by the mobile phone 9 is displayed to prompt the user 5 to make a call by the mobile phone 9. Therefore, even if the user 5 forgets the telephone number of the incoming server 60, the user 5 can make a call using the mobile phone 9 with reference to the screen 17 b and can validate the second authentication information Z 2 in the incoming server 60.

  Using this function 46, the reliability of the second authentication information Z2 can be improved by changing the telephone number 18n that the incoming server 60 recognizes as an incoming call for each user or for each time unit. Further, since the telephone number 18n is confidential information disclosed in advance to the registered user 5, it is possible to avoid newly showing it to the user 5 on the screen 17b or the like and to improve the reliability of the second authentication information Z2. is there.

  Further, the authentication function 43 is such that the first authentication information Z1 obtained from the user terminal 10 matches the registration information 38 of the registered user, and the second authentication information Z2 related to the first authentication information Z1 is a predetermined time. The function 47 includes a function 47 for invalidating the first authentication information Z1 when a predetermined elapsed time Tw elapses. With this function 47, the time during which the first authentication information Z1 is valid can be limited, and the authentication accuracy can be improved.

  The second authentication information Z2 is valid only from the incoming time Rt to the valid time Te. Accordingly, the authentication device 39 receives the second authentication timing when the first authentication information Z1 is acquired from the user terminal 10 by the user's input (operation X) to the user terminal 10 and the user's telephone (operation Y). Authentication accuracy is improved by using the temporal coincidence (temporal correlation) with the timing when the authentication information Z2 becomes valid as the third authentication information. The second authentication information Z2 can be obtained if there is a function capable of accessing a general-purpose communication network such as the Internet from which information can be obtained from the incoming server 60, such as obtaining biometric information or accessing an IC card. No special device is required, and the information can be used by a general-purpose terminal. Therefore, the above-described system using the second authentication information Z2 can increase the security of information input / output via a general-purpose terminal.

  The mobile phone 9 is an item that the user 5 always carries (carries), and it is usually difficult to assume that the mobile phone 9 is lent or borrowed with a third party, and the caller number of the mobile phone 9 is This is effective personal information for authenticating the user 5. The fact that the caller ID of the mobile phone 9 is difficult to be forged is guaranteed by a service company that provides mobile phone service. Furthermore, a function for authenticating a user who uses the mobile phone 9 is being incorporated in the mobile phone 9 itself, and a call made by the mobile phone 9 is likely to be an action by the user 5 of the mobile phone 9. In addition, calls by the mobile phone 9 are routinely performed for many users, and making calls using the mobile phone 9 is less burdensome to the user. Therefore, by using the transmission of the mobile phone 9 as information for authenticating the user 5, the authentication accuracy of the user 5 can be improved without imposing a burden on the user 5. In addition, since the mobile phone 9 is carried on a daily basis, even if the user terminal 10 changes, it is possible to use an authentication device and method that use the incoming call of the mobile phone 9 as authentication information.

  Further, in the incoming server 60, the mobile phone number is changed to the second authentication information Z2 different from the phone number so that it can respond to the inquiry from the authentication device on the contractor side. Therefore, it is possible to prevent the mobile phone number from leaking out from the incoming server 60. Furthermore, the second authentication information Z2 can be changed at an appropriate timing on the user side or the service providing side, similarly to the first authentication information Z1, and the protection of the provided information is further strengthened. Is possible.

  In the information providing server 30, when the user 5 is authenticated by the authentication device 39, the WEB server 32 uses the application program (service) 33 included in the server 30 and the database 31 for the user terminal 10. Allow. Furthermore, registration / change of the user registration information 38 is permitted depending on the user ID 18a.

  FIG. 6 is a flowchart showing the processing in the authentication device 39. In step 81, the authentication device 39 acquires first authentication information Z <b> 1 for authenticating the registered user 5 input to the user terminal 10 by the first function 41. In step 82, if the first authentication information Z1 matches the user registration information 38, that is, if it is authenticated that the password information 18b included in the first authentication information Z1 belongs to the user with the user ID 18a, step In 83, the second function 42 inquires the incoming server 60 of validity / invalidity of the second authentication information Z2 included in the user registration information 38. In step 84, if the second authentication information Z2 is valid, in step 85, the access by the user terminal 10 is authenticated (confirmed), and the service provided via the WEB server 32 is passed through the user terminal 10. Allow login or access.

  On the other hand, when the second authentication information Z2 is not valid in step 84, the function 46 outputs the telephone number guidance to the user terminal 10 in step 86. Thereafter, when the second authentication information Z2 is not obtained even if the predetermined elapsed time Tw elapses in step 87, the first authentication information Z1 input to the user terminal 10 in step 88 by the function 47. Clear and disable. In step 89, an authentication error is output, access by the user terminal 10 to the WEB server 32 is denied, and login and access to a service provided through the WEB server 32 are not permitted. Alternatively, as indicated by a broken line in the figure, the processing may be started again by returning to step 81 and acquiring the first authentication information.

  In the system B, the authentication device 39 that performs such processing is realized by using hardware resources of the server 30 and is provided as a program (application program, authentication program) that operates on the computer of the server 30. The authentication program 39 installed to install the authentication device 39 in the computer includes instructions for executing each process (each step) of the authentication method 80 shown in FIG. It is provided by being recorded on an appropriate recording medium such as a CR-ROM. Alternatively, this program can be provided (downloaded) via a computer network such as the Internet 1.

  FIG. 7 is a block diagram showing functions of the PC 10 as a user terminal with the authentication device 19 as a center. The authentication device 19 mounted (implemented) on the user terminal 10 also includes the same function as the authentication device 39 of the information providing server 30 described with reference to FIG. The PC 10 includes a first interface 15 a that inputs and outputs (exchanges) information with the user 5 through a human interface such as the display 17 and the keyboard 16, and the other connected to the Internet 1 through the Internet 1. A second interface 15b for communicating with the other devices and system, and a service function 13 including an OS and application programs. The authentication device 19 includes a first function 21 for acquiring first authentication information Z1 including a user ID 18a and a password 18b input at the user terminal 10 via the first interface 15a. The first function 21 displays a screen 17 a shown in FIG. 5A on the display 17 and prompts the user to input a user ID 18 a and a password 18 b using the keyboard 16.

  The authentication device 19 further includes a second function 22, which inquires the incoming server 60 whether or not the second authentication information Z2 is valid. The authentication device 19 includes a function 23 for authenticating a user using the first authentication information Z1 and the second authentication information Z2. The function 23 for authentication searches the second authentication information Z2 from the user registration information 18c, the function 24 for determining whether the first authentication information Z1 matches the user information of the user registration information (user database) 18c, A function 25 for inquiring the incoming server 60 via the second function 22 and determining whether or not the corresponding second authentication information Z2 is valid is included. The authenticating function 23 authenticates the access by the user 5 of the user ID 18a when the associated second authentication information Z2 is valid in addition to the first authentication information Z1, and includes an OS and / or an application program. Access to the service system 13 is permitted. When the second authentication information Z2 is not valid at the incoming server 60, the authenticating function 23 causes the user terminal 10 to output a telephone number that the incoming server 60 recognizes as an incoming call, and the first authentication When the second authentication information Z2 related to the information Z1 is not obtained from the incoming server 60, a function 27 for invalidating the first authentication information Z1 when a predetermined elapsed time Tw elapses is included. These functions 23 to 27 correspond to the functions 43 to 47 described with reference to FIG. 4 and will not be described in further detail. The processing flow in the authentication device 19 is also substantially the same as in FIG. The authentication device 19 can also be provided as a program (program product).

  Also in the authentication device 19, an operation that the user 5 has conventionally performed, for example, an operation of inputting a password to access the OS (operation X), and an operation of making a call to a predetermined telephone number by the mobile phone 9. By (operation Y), the access by the user 5 can be authenticated with high accuracy. Therefore, a third party other than the registered user can be more reliably prevented from accessing the service or database prepared for the registered user using the user terminal 10, and the process using the user terminal 10 can be prevented. Can ensure security.

  The authentication device described above allows access to the user terminal by inputting authentication information such as an ID and a password registered by the user into the user terminal (operation X) and making a phone call (operation Y). It can be authenticated with high accuracy. Further, these operations X and Y are operations that the user is accustomed to, and furthermore, the mobile phone is always carried by the user. Therefore, if the above authentication device is installed in any terminal or any terminal, or if the server on which the authentication device is installed can be accessed from a browser, the authentication information is input and the mobile phone is operated. By doing so, the access from the terminal can be easily authenticated with high accuracy. In addition, the terminal and the server can be protected from unauthorized access by a third party. Further, since information related to authentication is not transmitted to the mobile phone, there is little possibility of information leaking even if the mobile phone is lost. Therefore, it is possible to provide a system that is easy to operate and highly reliable.

The figure which shows the outline | summary of the system containing an authentication apparatus. The functional block diagram of an example of an incoming call server. The flowchart which shows the process of an incoming call server. The functional block diagram of an example of an authentication device. It is an example of a screen, and shows a screen (a) for inputting identification information and a screen (b) on which a telephone number is displayed. The flowchart which shows the process of an authentication apparatus. The functional block diagram which shows the example from which an authentication apparatus differs.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Internet, 2 Telephone network, 3 Base station 5 Registered user, 9 Mobile phone 10 PC (user terminal), 19 Authentication apparatus mounted on user terminal 30 Information providing server, 39 Authentication apparatus mounted on information providing server 50 Authentication server, 60 Incoming call Server (incoming call management device)
70 Authentication station

Claims (14)

A user terminal by which a registered user inputs first authentication information;
An incoming call management device that validates the second authentication information associated with the incoming call incoming number for a predetermined effective time from the incoming call time by an incoming call from a mobile phone;
Authentication for referring to the incoming call management device for second authentication information associated with the first authentication information obtained from the user terminal, and authenticating access by the user terminal if the second authentication information is valid And a system. The incoming call management device according to claim 1, wherein the incoming call management device includes an incoming call database including an incoming call time and an incoming call number;
Means for registering the authentication information and the incoming time associated with the incoming call number in the incoming call database when receiving an incoming call from a mobile phone;
And means for deleting authentication information whose valid time has elapsed from the incoming time registered in the incoming database. In claim 2, the authentication information registered in the incoming database is an incoming call number,
The incoming call management apparatus further includes means for validating authentication information of a registered user related to an incoming call number registered in the incoming call database.   3. The system according to claim 1, wherein the incoming call management device further includes means for identifying the authentication device that permits a response to the inquiry of the second authentication information.   5. The system according to claim 1, wherein the incoming call management device further includes means for charging for the inquiry of the second authentication information. An incoming call management device that validates the authentication information of a registered user associated with the incoming call incoming number for a predetermined effective time from the incoming call time by an incoming call from a mobile phone,
An incoming database containing the incoming time and number,
Means for registering the authentication information and the incoming time associated with the incoming call number in the incoming call database when receiving an incoming call from a mobile phone;
Means for deleting authentication information whose valid time has elapsed from the incoming time registered in the incoming database;
An incoming call management apparatus, comprising: means for responding to the inquiry of the authentication information from the authentication apparatus by valid / invalid of the inquired authentication information. The authentication information registered in the incoming call database according to claim 6 is an incoming call number,
And a means for validating registered user authentication information related to the incoming call number registered in the incoming call database.   8. The incoming call management device according to claim 6, further comprising means for identifying the authentication device that permits a response.   9. The incoming call management device according to claim 6, further comprising means for charging an inquiry for authentication information. The authentication device acquiring first authentication information input to the user terminal;
The incoming call management device validates the second authentication information associated with the incoming call incoming number for a predetermined effective time from the incoming call time when an incoming call is received from the mobile phone;
The authentication device queries the incoming call management device for second authentication information associated with the first authentication information obtained from the user terminal, and the user terminal determines that the second authentication information is valid. An authentication method comprising authenticating access. A program for providing, by a computer, an incoming call management function that enables authentication information of a registered user associated with the incoming call incoming number for a predetermined effective time from an incoming call time by an incoming call from a mobile phone,
Registering the authentication information and the incoming time associated with the incoming call number in the incoming call database when receiving an incoming call from a mobile phone;
Deleting the authentication information whose valid time has elapsed from the incoming time registered in the incoming database;
A program for executing, by a computer, responding to validity / invalidity of inquired authentication information in response to an inquiry of authentication information from an authentication device. The authentication information registered in the incoming call database according to claim 11 is an incoming call number,
Further, a program for further executing, by a computer, validating registered user authentication information related to the incoming call number registered in the incoming call database.   13. The program according to claim 11 or 12, further comprising: identifying the authentication device permitting a response by a computer.   14. The program according to claim 11, further comprising a computer for charging for the inquiry of the authentication information.

Images