JP2009043271A - Service providing system, terminal device, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a service providing system, etc., for enabling a user to easily register equipment. <P>SOLUTION: User authentication and equipment authentication of CE equipment are performed in the same session, and when authentication is successful, both authentications are connected. CE equipment 9 acquires information for user authentication from an IC card 7 and a portable memory 6, and transmits the information and information for equipment authentication to equipment registration server 5. The equipment registration server 5 transmits information for user authentication to a user authentication server 2 and transmits equipment authentication information to equipment authentication server 3. The user authentication server 2 performs user authentication, and transmits user information of the user to the equipment registration server 5 when the user authentication is successful. The equipment authentication server 3 performs equipment authentication, and transmits the equipment information of the equipment to the equipment registration server 5 when the equipment recognition is successful. The equipment registration server 5 receives the user information and the equipment information and connects them together. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a service providing system and the like, and for example, relates to a system that links a registered user and a registered device by authenticating the registered user and the registered device while maintaining a logical connection relationship.

In recent years, the spread of CE (Consumer Electronics) equipment has been spreading. A CE device is a device that has a built-in computer in an audio-visual device such as a video deck, stereo, or TV, a household appliance such as a rice cooker or a refrigerator, or other electronic devices, and can use services via a network. is there.
For this reason, device authentication information for device authentication is built into the CE device, and a service server that provides a service can provide a service to the CE device after performing device authentication.

In addition, by registering a user who uses a CE device in advance and associating (associating) the user with a CE device owned by the user in advance, a more advanced service corresponding to the user can be provided. Can be provided.
In addition, by managing the correspondence between the user and the CE device, unauthorized use of the CE device can be prevented, and the security of the system can be improved.
As described above, the association between the user and the CE device is an important operation in order to provide a service using the CE device.

Conventionally, this association is performed, for example, on a postcard (information specifying the CE device such as the serial number of the CE device is printed in advance) attached to the CE device when the user purchases the CE device. Have entered the user ID and mailed it to the registration center, or entered necessary information on a predetermined registration form at the store where the CE device was purchased.
In addition, as in the product information providing system and product information providing method proposed in the following document, there is also proposed a method for online registration of a user who has purchased a product such as a CE device via a network.

JP 2002-352059 A

  In the present invention, user information is stored in a storage medium such as an IC card, and when the user purchases a new product and performs user registration, the information stored in the IC card is used.

However, even if the operation for associating the user with the CE device is performed online, it is necessary for the user to input information related to the user and to input information related to the CE device. .
For example, when the CE device is a small audio device, the display capability of character information and the input unit for inputting information by the user may not always be suitable for inputting such information. .
In addition, when user information is registered in advance, the user must input user authentication information such as a password even when the information is read and registered, and the input method is realized by a software keyboard or the like. In some cases, a third party who is watching the input operation can guess the user authentication information.

  Accordingly, an object of the present invention is to provide a device registration system or the like that allows a user to easily perform device registration.

  A first aspect of the present invention relates to a device registration server that associates a registered user who has been registered using user identification information stored in an IC card with a terminal device that has been registered for device authentication using the stored device authentication information. A user authentication device that stores user information in association with a unique card ID stored in the contactless IC card, a terminal device that includes means for communicating with the contactless IC card, and a plurality of devices provided to the terminal device. In the service providing system comprising the service providing device that manages the service and provides the service to the terminal device, the terminal device uses the user identification information of the IC card, and the user is a registered user In the state where the logical connection relationship between the acquisition unit for acquiring the user confirmation information for confirming and the device registration server is maintained, An authentication information transmitting unit that transmits the acquired user confirmation information and the device authentication information to the device registration server; a receiving unit that receives the card ID from the contactless card via the communication unit; and The device registration server includes a transmission unit that transmits the received card ID to the user authentication device, and a service providing unit that provides the user with the service provided from the service providing device. Using the confirmation information, the user authentication server confirms that the user is a registered user, and further acquires the device authentication result of the terminal device from the device authentication server using the device authentication information received from the terminal device. The user can confirm that the user is a registered user and the device authentication result is a device authentication success The user-specific information and the terminal device-specific information are stored in association with each other, and the user authentication device stores the user information stored in association with the card ID received from the terminal device. Is transmitted to the service providing apparatus, the service providing apparatus receives the determination result and the user information, a management unit that manages the user information and the service in association with each other, and the determination A service providing system for providing the terminal device with the service associated with the user information among the plurality of services managed by the service providing apparatus based on the result of It is.

  In the first aspect of the present invention, the terminal device acquires user confirmation information for confirming that the user is a registered user, using the user identification information of the IC card, and the device registration server The acquired user confirmation information and the device authentication information are transmitted to the device registration server, the card ID is received from the contactless card, and the received card ID is maintained. Is transmitted to the user authentication device, and the service provided from the service providing device is provided to the user. Further, the device registration server confirms that the user is a registered user using the user confirmation information received from the terminal device, and further uses the device authentication information received from the terminal device. When the device authentication result of the terminal device is acquired from the device authentication server, it can be confirmed that the user is a registered user, and when the device authentication result is a device authentication successful, The unique information and the information unique to the terminal device are stored in association with each other. Also, user information stored in association with the card ID received from the terminal device is transmitted by the user authentication device to the service providing device, and the determination result and the user information are transmitted by the service providing device. The user information and the service are managed in association with each other, and the service associated with the user information is selected from the plurality of services managed by the service providing apparatus based on the determination result. Provided to the terminal device.

  The device registration server stores information unique to the user, information unique to the terminal device, and payment information set in advance for the user in association with each other. Payment can be made using the stored payment information.

  According to a second aspect of the present invention, there is provided a device registration server for associating a registered user registered as a user using user specifying information stored in an IC card and a terminal device registered as device authentication using the stored device authentication information. A user authentication device that stores user information in association with a unique card ID stored in the contactless IC card, a terminal device that includes means for communicating with the contactless IC card, and a plurality of devices provided to the terminal device. A terminal device of a service providing system comprising a service providing device that manages the service and provides the service to the terminal device, wherein the user is a registered user using user identification information of the IC card The acquisition means for acquiring the user confirmation information for checking the device and the device registration server while maintaining the logical connection relationship, the acquisition Authentication information transmitting means for transmitting the user confirmation information and the device authentication information to the device registration server, receiving means for receiving the card ID from the contactless card via the communication means, and receiving by the receiving means And a service providing means for providing the user with the service provided from the service providing apparatus. The transmitting apparatus transmits the card ID to the user authentication apparatus.

  According to a second aspect of the present invention, a computer associates a registered user who has been registered by using user specifying information stored in an IC card with a terminal device that has been registered for device authentication using the stored device authentication information. A device registration server, a user authentication device that stores user information in association with a unique card ID stored in the non-contact IC card, a terminal device that includes a communication means for the non-contact IC card, and the terminal device A program that manages a plurality of services to be provided and causes the terminal device to function as a terminal device of a service providing system that includes the service providing device that provides the service, using user identification information of the IC card, Acquisition means for acquiring user confirmation information for confirming that the user is a registered user, the device registration server, Authentication information transmitting means for transmitting the acquired user confirmation information and the device authentication information to the device registration server in a state in which a logical connection relationship is maintained, and the card ID from the contactless card via the communication means. Receiving means for receiving the terminal, transmitting means for transmitting the card ID received by the receiving means to the user authentication device, and service providing means for providing the user with the service provided from the service providing device. A program that functions as a device.

  In the second aspect of the present invention, user identification information for confirming that the user is a registered user is acquired using the user identification information of the IC card, and a logical connection relationship with the device registration server The acquired user confirmation information and the device authentication information are transmitted to the device registration server, the card ID is received from the contactless card, and the card ID received by the receiving unit is the The service transmitted to the user authentication device and provided from the service providing device is provided to the user.

  According to the present invention, a user can easily perform device registration for a service or the like.

DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments of the invention will be described in detail with reference to the drawings.
(1) Outline of Embodiment User authentication and CE device authentication are performed in the same session, and both are associated when authentication is successful.
It is assumed that the user and the CE device are registered in advance so that authentication is possible.

In FIG. 1, the CE device 9 acquires information necessary for user authentication from the IC card 7 and the portable memory 6.
The CE device 9 incorporates device authentication information, and transmits the device authentication information and user authentication information acquired from the IC card 7 and the memory 6 to the device registration server 5.

The device registration server 5 transmits information for user authentication to the user authentication server 2 and transmits device authentication information to the device authentication server 3.
The user authentication server 2 performs user authentication, and when the user authentication is successful, transmits user information regarding the user to the device registration server 5.
The device authentication server 3 performs device authentication, and when device authentication is successful, device information related to the device is transmitted to the device registration server 5.
The device registration server 5 receives the user information and the device information and associates them.

The device registration server 5 performs the above operation in the same session. For this reason, it can be ensured that both the user authentication information and the device authentication information are transmitted from the CE device 9, and the user and the CE device 9 can be associated with each other reliably.
In the present embodiment, all the processes are performed in the same session. However, if at least the process of receiving the user authentication information and the device authentication information from the CE device 9 is performed in the same session, the user and the CE The association with the device 9 can be performed appropriately.

(2) Details of Embodiment FIG. 1 is a diagram illustrating an example of a configuration of a device registration system 1 according to the present embodiment.
In the device registration system 1, a user authentication server 2, a device authentication server 3, a device registration server 5, and a CE device 9 are arranged to be able to communicate with each other via a network.
The CE device 9 is a terminal device having a function of performing communication via a network, and a unique device ID for identifying from other CE devices and device authentication information for performing device authentication are provided to a manufacturing factory or the like. Built in beforehand.
The device authentication information is generated by combining, for example, a device ID, a passphrase (a long password or a common key shared with a server) and device-specific secret key information.

Examples of the CE device 9 include various electric products such as a stereo, a television, a video, an air conditioner, a bath tub, a lighting fixture, a toilet bowl, and the like.
By using these devices as CE devices, for example, with regard to stereo, television, and video, it is possible to perform remote operations such as downloading contents and making remote recording reservations. Remote control such as on / off can be performed, and regarding the toilet, the user's stool can be sensed by a sensor, and data can be transmitted to the health management server to check the user's health status.

The CE device 9 has a built-in reader / writer that performs short-range wireless communication with a non-contact type IC card and can read / write data from / to the non-contact type IC card. Can communicate.
Further, the reader / writer may be externally disposed on the CE device 9.
The CE device 9 further includes a slot in which the portable memory 6 is detachably attached, and data can be read from and written to the attached portable memory 6.
Further, the CE device 9 includes a display device that displays character information and images.

The IC card 7 includes a communication unit that performs wireless communication with a reader / writer, a storage unit that stores data and a program, and a calculation unit that performs calculation processing according to the program. Note that power for driving the IC card 7 is wirelessly supplied from the reader / writer.
The IC card 7 stores a card ID, which is unique ID information, and transmits the card ID to the CE device 9 in response to a request from the CE device 9.
This card ID is associated with the user ID and password in the user authentication server 2 described later, and is used as information for specifying the user ID and password. Therefore, the card ID fulfills a function as user specifying information for specifying the user.

In the present embodiment, a non-contact type IC card is used as the IC card 7. However, the present invention is not limited to this, and unique information associated with a user ID such as a contact type IC card or a magnetic card is used. Anything can be stored and provided to the CE device 9.
In addition, for example, it is also possible to configure such that information unique to the user, such as the user's fingerprint or voiceprint, is associated with the user ID, and the CE device 9 acquires them.

The portable memory 6 is a small and portable semiconductor memory, and can store various data in a readable / writable manner.
The portable memory 6 can be attached to other computer products such as a personal computer in addition to the CE device 9, and is a non-volatile memory that retains data storage even when detached from these products.
The portable memory 6 stores in advance a memory ID, which is unique ID information, so that it cannot be erased and cannot be altered, and the portable memory 6 can be specified by the memory ID.
In the present embodiment, the portable memory 6 stores password information for specifying the user's password and can be read from the CE device 9.

The above-described card ID and password information are acquired by the CE device 9 (user confirmation information acquisition means), and are used as information for identifying information for authenticating the user by the user authentication server 2. It is information for.
In the present embodiment, the CE device 9 acquires the password information from the portable memory 6. However, the user can directly enter the password into the CE device 9.

  The CE device 9 stores connection information (such as URL (Uniform Resource Locators)) for connecting to the device registration server 5 in advance or connection information notified from another server, and is stored at the time of device registration. Connect to the device registration server 5 to transmit the user authentication information read from the IC card 7 and the portable memory 6 and the device ID and device authentication information embedded in the CE device 9 to the device registration server 5. (Information transmission means).

The user authentication server 2 is a server device that authenticates a user registered in advance. The user authentication server 2 receives user authentication information from the CE device 9, performs user authentication using the information, and sends a user authentication result to the CE device 9. Send to.
If the user authentication is successful, the user information is transmitted to the device registration server 5 together with the user authentication result.

FIG. 2A is a diagram showing an example of a user authentication table stored in the user authentication server 2.
As shown in FIG. 2A, in the user authentication table, the card ID of the IC card 7 owned by the user, the user ID and password information set by the user, and the user information input by the user at the time of user registration are stored. It is linked and memorized.
Of these, the user information is composed of basic personal information such as name, address, telephone number, and e-mail address, as well as other information such as date of birth, work place, and hobby.

The user authentication server 2 performs user authentication using information recorded in the user authentication table.
In the present embodiment, it is assumed that the user is registered in advance in the user authentication server 2.

Using the user authentication table configured as described above, the user authentication server 2 performs user authentication as follows.
First, the user authentication server 2 specifies password information uniquely corresponding to the user ID and the card ID based on the card ID received from the CE device 9.
Next, password information is received from the CE device 9, the password information is specified, and a match with the previously specified password information is determined. If the password information matches, the user authentication succeeds. If the password information does not match, the user authentication fails.

Note that the password information received from the portable memory 6 is, for example, a memory ID, and the user authentication server 2 may associate the memory ID with the password in advance, or an encrypted password. The user authentication server 2 may decrypt the data.
When the user directly inputs a password to the CE device 9 without using the portable memory 6, the user authentication server 2 compares the password input by the user with the password specified from the card ID.

Returning to FIG. 1, the device authentication server 3 is a server device that authenticates the CE device 9.
The device authentication server 3 receives device authentication information from the CE device 9 (reception unit), performs device authentication, and transmits a device authentication result to the device authentication server 3. When the device authentication is successful, the device information of the CE device 9 is transmitted to the CE device 9 together with the device authentication result.
The CE device 9 may be registered in advance with the CE device 9 so that the device can be authenticated before being sold in the market, or by a user operation so that the device can be authenticated alone before the service is registered. It may be changed to a state in which device authentication is possible.

FIG. 2B is a diagram showing an example of a device authentication table stored in the device authentication server 3.
The device authentication table is configured by associating a device ID that is ID information for identifying a device, device authentication information for performing device authentication, device information about the device, a registration number, and the like.
The device information includes information related to the CE device 9 such as a product code, serial number, date of manufacture, and factory information.
The registration number is a number assigned when uploading such information to the device authentication server 3.

The device authentication server 3 configured as described above receives the device ID and device authentication information from the CE device 9 and collates them with information on the device authentication table, or from the device authentication information instead of the device authentication information itself. CE authentication of the CE device 9 by receiving and verifying the generated digest value, or receiving an electronic signature encrypted with a public key encryption private key and decrypting and verifying it with the corresponding public key To do.
That is, when the device ID and device authentication information received from the CE device 9 are searched on the device authentication table and the searched device ID and device authentication information are associated with each other, or the searched device ID is Device authentication succeeds when the verification of the digest value generated from the associated device authentication information matches, or when the device authentication information associated with the device ID, that is, the signature information received by the key information is successful. It becomes.
Further, if at least one of the device ID and the device authentication information is not on the device authentication table, or if it is not linked, the device authentication fails.

Returning to FIG. 1, the device registration server 5 is a server device that associates and associates a user with a CE device 9.
The device registration server 5 receives from the CE device 9 user authentication information (card ID and password information and user confirmation information) and device authentication information (device ID and device authentication information) by the receiving means. .
Then, user authentication information is transmitted to the user authentication server 2 to request user authentication (user authentication request means), and the user authentication result and user information of the user are received from the user authentication server 2 (user confirmation means). .
Also, information for device authentication is transmitted to the device authentication server 3 to request device authentication, and a device authentication result and device information of the CE device 9 are received from the device authentication server 3 (device authentication result acquisition means).
The user information and device information are stored in association with each other (association storage means).

FIG. 2C is a diagram showing an example of a device user association table generated by the device registration server 5.
The device user association table includes user information and device information, and device information is associated with user information.
When the user has a plurality of CE devices, a plurality of device information is associated with this user information.
Further, every time a user newly purchases and registers a CE device (or every time the registration is canceled), the device registration server 5 updates the device user association table.

The device registration server 5 performs processing from the reception of the device registration request from the CE device 9 to the end of the association between the user and the CE device 9 in the same session.
Here, a session refers to a continuous logical connection relationship in communication via a network.
In addition, even if the communication line is temporarily disconnected due to a failure, etc., when the line is restored, for example, the session can be revived using a one-time password or the information to be transmitted to the device once. It is possible to complete the exchange of data via a series of networks asynchronously with user operations when the line is restored.

  In other words, when establishing a session, the device registration server 5 issues a one-time password to the CE device 9. When the communication line is interrupted and revived, the CE device 9 transmits the one-time password to the device registration server 5 so that the device registration server 5 can recognize the CE device 9 and You can resume the session from where it left off.

  In this way, the device registration server 5 receives the user authentication information and the device authentication information from the CE device 9 in the same session, so that the user authentication information is surely read from the CE device 9. You can confirm that it was sent.

For this reason, by associating the user authenticated by the user authentication information sent within the same session with the CE device 9 authenticated by the device authentication information, the user and the CE device 9 are appropriately matched. It can be tied, and impersonation of a third party can be prevented.
Therefore, the user and the CE device 9 can be associated with each other if at least the process for receiving the user authentication information and the device authentication information from the CE device 9 is performed in the same session.
In the present embodiment, if the session is interrupted for some reason, the process is restarted from the beginning.

FIG. 3 is a flowchart for explaining the procedure for device registration.
First, the user connects the CE device 9 to the network, sets the IC card 7 in the reader / writer of the CE device 9, and requests device registration from the device registration server 5 (step 2).
On the other hand, the device registration server 5 requests user authentication from the CE device 9 (step 10).

The CE device 9 acquires the card ID from the IC card 7, further acquires password information from the portable memory 6, and transmits it to the device registration server 5 (step 4).
Note that the user may directly input a password to the CE device 9 without using the portable memory 6.
The device registration server 5 receives the card ID and password information from the CE device 9 and transmits them to the user authentication server 2 (step 12).

The user authentication server 2 receives the card ID and password information from the CE device 9 and performs user authentication (step 30). Here, it is assumed that the user authentication is successful.
Then, the user authentication server 2 transmits an authentication result indicating that the user authentication has been successful and the user information of the user to the device registration server 5 (step 32).

The device registration server 5 temporarily stores the user information transmitted from the user authentication server 2 and makes a device authentication request to the CE device 9 (step 14).
On the other hand, the CE device 9 reads out the device ID and device authentication information stored in advance in the CE device 9 and transmits them to the device registration server 5 (step 6).
The CE device 9 stores device authentication information encrypted in order to enhance security, and decrypts the device authentication information during transmission.

The device registration server 5 receives the device ID and device authentication information from the CE device 9 and transmits them to the device authentication server 3 (step 16).
The device authentication server 3 receives the device ID and the device authentication information from the device registration server 5 and authenticates the CE device 9 (step 40).
Here, it is assumed that the device authentication is successful.
The device authentication server 3 transmits a notification that the device authentication is successful and device information of the CE device 9 to the device registration server 5 (step 42).

The device registration server 5 stores the device information received from the device authentication server 3 and the previously stored user information in association with each other, and updates the device user association table (step 18).
Then, the device registration server 5 transmits a registration completion notification to the CE device 9 (step 20).

The CE device 9 receives the registration completion notification from the device registration server 5 and presents it to the user (step 8).
The device registration process is terminated by the above procedure.

If user authentication or device authentication fails, the device registration server 5 transmits a notification to this effect to the CE device 9.
Further, the device registration server 5 can also be configured to present user information associated with the CE device 9 and information related to the device information before the device user association table is updated, thereby obtaining user confirmation.

  In the present embodiment, the device registration server 5 requests the device authentication information from the CE device 9 after completing the user authentication. However, the present invention is not limited to this. It can be configured to receive authentication information and device authentication information, and then perform user authentication and device authentication, or request user authentication after device authentication first. It can also be configured to.

FIG. 4 is a diagram showing an example of a series of screens displayed on the display device of the CE device 9 during device registration.
First, after purchasing the CE device 9, the user selects a device registration mode from a setup menu displayed on the CE device 9.
Then, a screen as shown in FIG. 4A is displayed and prompts the user to set the IC card 7 and the portable memory 6.

  When the user sets the IC card 7 in the reader / writer unit of the CE device 9 and sets the portable memory 6 in the portable memory slot, user authentication and device authentication are started, and authentication is performed as shown in FIG. A screen display indicating that it is in progress is made.

After the user authentication and the device authentication are completed, the device registration server 5 can also transmit confirmation information for confirming the contents to be registered to the CE device 9.
In this case, as shown in FIG. 4C, the user to be linked and the CE device 9 are displayed on the CE device 9, and when the user approves, the user selects “Yes” and does not approve. If this is the case, select “No”.
When the device registration is completed, a registration completion notification as shown in FIG. 4D is displayed on the CE device 9.

FIG. 5 is a diagram illustrating an example of a hardware configuration of the CE device 9.
A CPU (Central Processing Unit) 121 is a central processing unit that executes various processes according to programs stored in a ROM (Read Only Memory) 122 and programs loaded from a storage unit 128 to a RAM (Random Access Memory) 123. It is.

The ROM 122 stores basic programs and parameters necessary for the functioning of the CE device 9.
The RAM 123 provides a working area necessary for the CPU 121 to execute various processes.

The storage unit 128 stores programs and data necessary for the CE device 9 to function, and includes a storage device such as a hard disk or a semiconductor memory, for example.
The device ID and device authentication information used for device authentication are stored in the storage unit 128.
A program for connecting to the device registration server 5 and performing device registration processing at the time of device registration is also stored.
Other programs stored in the storage unit 128 include an OS (Operating System) for implementing basic functions such as file input / output and control of each unit of the CE device 9. .

The CPU 121, ROM 122, and RAM 123 are connected to each other via a bus 124. An input / output interface 125 is also connected to the bus 124.
The input / output interface 125 includes an input unit 126 including a keyboard and a mouse, a display including a CRT (Cathode-Ray Tube) and an LCD (Liquid Crystal Display), an output unit 127 including a speaker, and a hard disk. A communication unit 129 including a storage unit 128, a modem, a terminal adapter, and the like is connected.
Further, a reader / writer for the IC card 7 and a slot for mounting the portable memory 6 are also connected.
The communication unit 129 is a functional unit that performs communication processing via a network. For example, the communication unit 129 is connected to the device registration server 5 and mediates communication between the CE device 9 and the device registration server 5.

A drive 130 is connected to the input / output interface 125 as necessary, and a magnetic disk 141, an optical disk 142, a magneto-optical disk 143, a memory card 144, or the like is appropriately mounted, and a computer program read therefrom is It is installed in the storage unit 128 as necessary.
Note that the configurations of the user authentication server 2 and the device authentication server 3 are basically the same as those of the CE device 9, and the description thereof will be omitted.

The device registration server 5 of the present embodiment associates the user information and the device information in the device user association table, but the present invention is not limited to this, and the information specifying the user and the CE device 9 It is only necessary to associate information specifying the.
FIG. 6 is a diagram illustrating an example of a device user association table in which a user ID and device ID are associated.
Thus, by associating the device ID with the user ID, the user and the CE device 9 can be associated with each other.

  Further, in the present embodiment, as an example, the user authentication server 2, the device authentication server 3, and the device registration server 5 are used in the device registration system 1. Alternatively, the functions of these three server devices may be realized by the same server device.

As described above, according to the present embodiment, the customer information and payment information are specified by personal authentication using an IC card, and device authentication is performed in the same session, whereby the user is the owner of the CE device 9. In addition, it is possible to register a device used in a specific service without newly performing a very intuitive operation and character input.
Both the CE device 9 and the input device to be registered can be of a jog dial or a slide switch, and the output device can be displayed with a low capability of about one line.
The device registration can also be performed from other than the device main body by inputting an encoded character string for identifying the individual product using a numeric key such as a remote controller.

In the present embodiment, the password information is input from the portable memory 6 to the CE device 9. However, for example, only the IC card 7 or the IC card 7 and about four digits are used. A user authentication method using a personal identification number can also be adopted.
When user authentication is performed using only the IC card 7, the CE device 9 can be registered as a device by setting the IC card 7 in the reader / writer unit of the CE device 9 and connecting the device registration server 5 and the CE device 9. .

In the embodiment described above, the following effects can be obtained.
(1) Since the device registration server 5 receives the device registration information and the user registration information from the CE device 9 while maintaining the session, the user and the CE device 9 can be associated with each other reliably.
(2) The user can register the association between the user and the CE device 9 only by setting the IC card 7 and the portable memory 6 in the CE device 9.

(3) When the portable memory 6 is not used, the association between the user and the CE device 9 can be registered simply by setting the IC card 7 in the CE device 9 and inputting the password into the CE device 9.
(4) Since the user does not need to input information or only needs to input a password, even if the display capability of the display device of the CE device 9 is low, the user can easily register. .

(5) Since the user does not need to input information or only needs to input a password, the user can easily register even when the character input function of the CE device 9 is low.
(6) Since the association between the user and the CE device 9 is automatically performed via the network, there is no need for manual intervention, and registration can be performed at high speed and at low cost.

(Modification 1)
In the first modification, the user and the CE device 9 are linked without passing user authentication information to the device registration server 5.
This is because the device registration server 5 may be a server device that provides a commercial service operated by a third party. Therefore, it is preferable not to pass user authentication information to the device registration server 5 from the viewpoint of improving security. This is because it may be desirable.
In this way, the device registration server 5 can be configured to be a service providing server that provides services to the CE device 9 simply by associating the user with the CE device 9.
Since the network configuration of the present modification is the same as that of the device registration system 1, the same components are described with the same reference numerals.

FIG. 7 is a flowchart for explaining the first modification.
First, a device registration request is made from the CE device 9 to the device registration server 5 (step 52).
In response to this, the device registration server 5 makes a user authentication request to the CE device 9 (step 70).
In response to this, the CE device 9 acquires a card ID from the IC card 7, further acquires password information from the portable memory 6, and transmits the information for user authentication to the user authentication server 2 (step 54). .

The user authentication server 2 receives the user authentication information from the CE device 9 and performs user authentication, and transmits the user authentication result to the CE device 9 (step 90). Here, it is assumed that user authentication is successful.
The CE device 9 receives the user authentication result from the user authentication server 2 (user authentication result acquisition means), and transmits (that is, redirects) this to the device registration server 5 (step 56).
The device registration server 5 receives the user authentication result from the CE device 9, and requests the user authentication server 2 to confirm whether or not this user authentication result is indeed performed by the user authentication server 2 (step). 72).

This confirmation operation can be performed using, for example, a one-time token. A one-time token and a sufficiently long random value that can be used once after issuance. That is, the user authentication server 2 transmits a one-time token together with the user authentication result to the CE device 9. At this time, the user authentication server 2 stores the combination of the user authentication result and the one-time token.
Then, the CE device 9 transmits a one-time token together with the user authentication result to the device registration server 5, and the device registration server 5 inquires of the user authentication server 2 about the user authentication result using the one-time token.

  The user authentication server 2 confirms the user authentication result received by the device registration server 5 by comparing the one-time token received from the device registration server 5 with the previously stored user authentication result and the combination of the one-time token. You can confirm that it is what you went to.

In this way, after confirming the user authentication result, the user authentication server 2 transmits the confirmation result and user information to the device registration server 5 (step 92).
The device registration server 5 receives these pieces of information from the user authentication server 2 and confirms that the user authentication result received from the CE device 9 is correct, and then stores the user information.

Next, the device registration server 5 makes a device authentication request to the CE device 9 (step 74).
On the other hand, the CE device 9 transmits a device ID and device authentication information to the device registration server 5 (step 58).
The device registration server 5 receives the device ID and device authentication information from the CE device 9 and transmits them to the device authentication server 3 (step 76).

The device authentication server 3 receives the device ID and device authentication information from the device registration server 5, performs device authentication, and transmits a device authentication result to the device registration server 5 (step 100). Here, it is assumed that the device authentication is successful.
The device registration server 5 redirects and transmits the device authentication result received from the device authentication server 3 to the user authentication server 2 (step 78). At this time, information that can identify the CE device 9 such as a device ID is also transmitted to the user authentication server 2.

The user authentication server 2 stores information related to the user (such as a user ID), device ID, and device information in association with each other, and transmits device information of the CE device 9 that has been device-authenticated to the device registration server 5 (step 94) ).
The device registration server 5 receives the device information and stores it in association with the previously stored user information (step 80).

Then, the device registration server 5 transmits a registration completion notification to the CE device 9 (step 82).
The CE device 9 receives the registration completion notification from the device registration server 5 and presents it to the user (step 60).
The device registration process is terminated by the above procedure.

  In this modification, the user authentication server 2 stores the device information, and the user authentication server 2 provides the device information to the device registration server 5. However, as in the embodiment, the device authentication server 3 includes the device information. Information can be stored, and the device authentication server 3 can also be configured to provide device information to the device registration server 5.

  According to the first modification described above, it is possible to link the user and the CE device 9 in the device registration server 5 without passing information for user authentication to the device registration server 5.

(Modification 2)
In the second modification, the user and CE device 9 are further associated with the user's prepaid information.
Note that the prepaid is one of settlement means, and is a system in which a user deposits money in advance in a prepaid account and settles by subtracting a charged service charge from the deposited money.
As a usage form of this prepaid system, it is conceivable to present information (such as a prepaid ID) for specifying a prepaid account when receiving a paid service.
Specifically, the user inputs a prepaid ID to the CE device 9 when using the service, or causes the reader / writer of the CE device 9 to read a non-contact type IC card storing the prepaid ID.

  In the second modification, after the user's prepaid information is linked to the user information and the device information and the device authentication of the CE device 9 is performed, the paid service can be used without inputting the prepaid ID (service provision means).

FIG. 8 is a diagram illustrating an example of the configuration of the device registration system 1a according to the second modification.
In addition, the same code | symbol is attached | subjected to the same component as embodiment, and description is abbreviate | omitted.
The procedure in which the service providing server 5a associates the user information with the device information is the same as in the embodiment.
Similar to the device registration server 5 of the embodiment, the service providing server 5a has a function of associating a user with the CE device 9, and also has a function of providing various services to the CE device 9.

The service providing server 5a associates the user with the CE device 9 in the same manner as the device registration server 5, but further acquires and associates prepaid information together with the user information from the user authentication server 2a (payment information acquisition means). .
The prepaid information is information for specifying a user's prepaid account established in the prepaid information management server 4.
When providing the paid service to the CE device 9, the service providing server 5 a transmits the usage fee and the prepaid information to the prepaid information management server 4, and charges the usage fee.

When the prepaid information management server 4 receives a charge for a service usage fee from the service providing server 5a, the prepaid information management server 4 identifies the user's prepaid account based on the prepaid information and subtracts the usage fee.
Thus, the user can make a payment using the prepaid information. For this reason, in this modification, the prepaid information constitutes the payment information.

FIG. 9A shows an example of a user authentication table stored in the user authentication server 2a.
The user authentication table shown in the embodiment is further associated with user prepaid information.
When the user authentication server 2a transmits user information to the service providing server 5a after user authentication, the user authentication server 2a also transmits this user's prepaid information.

FIG. 9B is a diagram showing an example of a logical configuration of the prepaid information database managed by the prepaid information management server 4.
As shown in the figure, the prepaid information database is configured by associating prepaid information, log data, and the like, and a prepaid account is opened for each user.

The prepaid information includes information necessary for managing the user's prepaid account, and the prepaid account can be specified by the prepaid information.
The log data is log data that records deposits and withdrawals to a prepaid account.
The current balance of the prepaid account can be known from the log data, and payment can be made by adding the amount, and settlement can be made by subtracting.

FIG. 9C is a diagram showing an example of the configuration of a service use user table stored in the service providing server 5a.
As shown in the figure, in this table, user information, prepaid information, device information, and a registration service are associated with each other, which includes user information received from the user authentication server 2a by the service providing server 5a, And the prepaid information and the device information received from the device authentication server 3 are stored in association with each other.

Furthermore, in the second modification, a service that can be used can be set for each CE device 9.
For example, the CE device 9 specified by the device information 1 can receive service A and service B.
The user can select a service to be used when registering the CE device 9, and after registration, the CE device 9 displays the user information, prepaid information, and the selected service, and the user confirms. It can be done.

  As described above, in the second modification, the user can set a service used by the CE device 9 and can register a prepaid account for settlement of the usage fee.

(Modification 3)
FIG. 10 is a diagram illustrating a configuration of a device registration system 1b according to the third modification.
In this modification, the service providing server 5b associates the user with the CE device 9 and further payment information. The settlement information is information necessary for the settlement of a charge charged to the user, such as a credit card number or an account number of a bank account from which a settlement price is deducted.
Also, the payment information of this modification can be the prepaid information described in Modification 2.

Constituent elements similar to those of the embodiment are denoted by the same reference numerals and description thereof is omitted.
Further, the procedure in which the service providing server 5b associates the user information with the device information is the same as in the embodiment.
The user authentication server 2b stores user payment information, and transmits the payment information together with the user information to the service providing server 5b.
The service providing server 5b stores the user information and payment information received from the user authentication server 2b in association with the device information received from the device authentication server 3 (payment information acquisition means).

  When the user requests a paid service from the CE device 9 to the service providing server 5b, the service providing server 5b provides the service (service providing means) and uses the settlement information associated with the CE device 9. To settle the usage fee.

FIG. 11A shows an example of a user authentication table stored in the user authentication server 2a.
As shown in the figure, the payment information of the user is further associated with the user authentication table shown in the embodiment.
When the user authentication server 2b transmits user information to the service providing server 5b after user authentication, the user authentication server 2b also transmits this settlement information.

FIG. 11B is a diagram showing an example of a service use user table stored in the service providing server 5b.
As shown in the figure, in this table, user information, payment information, device information, and a registration service are associated with each other.
The service providing server 5b stores the user information and payment information received from the user authentication server 2a in association with the device information received from the device authentication server 3.
Furthermore, in the third modification, a service that can be used can be set for each CE device 9.

  In the third modification described above, when the user uses the paid service of the service providing server 5b from the CE device 9, the user can automatically make a payment according to the payment conditions associated with the CE device 9.

(Modification 4)
In this modification, a device having a communication function with the CE device 9 such as a remote control device of the CE device 9 is registered via the CE device 9.
In this way, by registering a device via the CE device 9, the device itself can be registered even if it does not have a function of connecting to the service providing server 5.

As an example, a case where the remote control device of the CE device 9 is registered using the device registration system 1 will be described.
Here, it is assumed that the remote control device has a function of communicating with the IC card 7.
First, the CE device 9 issues a device registration request to the device registration server 5.
Next, the IC card 7 is set in the remote control device, a password is further input from the remote control device, and the card ID and password are transmitted to the CE device 9.
The subsequent processing can be performed in the same manner as when the CE device 9 is registered, and the remote control device is registered in the device registration server 5.

  As described above, even a device that does not have a communication function via the network can be registered through the CE device 9.

  Although the embodiment and each modification described above have mainly described the case where device registration is performed, the present invention can also be applied to registration update of the CE device 9, for example. For this reason, for example, when registering a device in a public place, a third party can see the input of personal information and user authentication information in a short time (the model of a communication device used for a service such as a mobile phone). Device registration and update (such as replacement) is possible.

It is the figure which showed an example of the structure of the apparatus registration system of this Embodiment. It is the figure which showed an example of the various tables used with an apparatus registration system. It is a flowchart for demonstrating the procedure which performs apparatus registration. It is the figure which showed an example of the screen during apparatus registration. It is the figure which showed an example of the hardware constitutions of CE apparatus. It is the figure which showed the modification of the apparatus user correlation table. 10 is a flowchart for explaining a first modification. It is the figure which showed an example of the structure of the apparatus registration system which concerns on the modification 2. It is the figure which showed an example of the various tables used by the modification 2. It is the figure which showed the structure of the apparatus registration system which concerns on the modification 3. It is the figure which showed an example of the various tables used by the modification 3.

Explanation of symbols

1 Device Registration System 2 User Authentication Server 3 Device Authentication Server 4 Prepaid Information Management Server 5 Device Registration Server 6 Mobile Memory 7 IC Card

Claims (4)

A device registration server that associates a registered user registered using the user identification information stored in the IC card with a terminal device that has been registered for device authentication using the stored device authentication information, and is stored in the non-contact IC card. A user authentication device that stores user information in association with a unique card ID,
A terminal device comprising means for communicating with a non-contact IC card;
In a service providing system comprising a service providing device that manages a plurality of services provided to the terminal device and provides the service to the terminal device,
The terminal device
Obtaining means for obtaining user confirmation information for confirming that the user is a registered user, using the user identification information of the IC card;
Authentication information transmitting means for transmitting the acquired user confirmation information and the device authentication information to the device registration server while maintaining a logical connection relationship with the device registration server;
Receiving means for receiving the card ID from the contactless card via the communication means;
Transmitting means for transmitting the card ID received by the receiving means to the user authentication device;
Service providing means for providing the user with the service provided from the service providing device;
The device registration server
Using the user confirmation information received from the terminal device, the user authentication server confirms that the user is a registered user,
Furthermore, using the device authentication information received from the terminal device, obtain the device authentication result of the terminal device from the device authentication server,
When it is possible to confirm that the user is a registered user and the device authentication result is a device authentication success, information unique to the user and information unique to the terminal device are stored in association with each other. And
The user authentication device
Means for transmitting user information stored in association with the card ID received from the terminal device to the service providing device;
The service providing apparatus includes:
Means for receiving the determination result and the user information;
Management means for managing the user information and the service in association with each other;
Service providing means for providing the terminal device with the service associated with the user information among the plurality of services managed by the service providing device based on the determination result. Offer system. The device registration server stores information unique to the user, information unique to the terminal device, and payment information set in advance for the user in association with each other,
The service providing system according to claim 1, wherein the service usage fee provided is settled using the stored settlement information. A device registration server that associates a registered user registered using the user identification information stored in the IC card with a terminal device that has been registered for device authentication using the stored device authentication information, and is stored in the non-contact IC card. In addition to managing a plurality of services provided to the terminal device, a user authentication device that stores user information in association with a unique card ID, a terminal device that includes a communication unit with a contactless IC card, and the terminal device A service providing system terminal device comprising a service providing device for providing the service to the device,
Obtaining means for obtaining user confirmation information for confirming that the user is a registered user, using the user identification information of the IC card;
Authentication information transmitting means for transmitting the acquired user confirmation information and the device authentication information to the device registration server while maintaining a logical connection relationship with the device registration server;
Receiving means for receiving the card ID from the contactless card via the communication means;
Transmitting means for transmitting the card ID received by the receiving means to the user authentication device;
A terminal device comprising: service providing means for providing the user with the service provided from the service providing device. Computer
A device registration server that associates a registered user registered using the user identification information stored in the IC card with a terminal device that has been registered for device authentication using the stored device authentication information, and is stored in the non-contact IC card. In addition to managing a plurality of services provided to the terminal device, a user authentication device that stores user information in association with a unique card ID, a terminal device that includes a communication unit with a contactless IC card, and the terminal device A program for causing a device to function as a terminal device of a service providing system comprising a service providing device that provides the service,
Obtaining means for obtaining user confirmation information for confirming that the user is a registered user, using the user identification information of the IC card;
Authentication information transmitting means for transmitting the acquired user confirmation information and the device authentication information to the device registration server while maintaining a logical connection relationship with the device registration server;
Receiving means for receiving the card ID from the contactless card via the communication means;
Transmitting means for transmitting the card ID received by the receiving means to the user authentication device;
A program that functions as a terminal device including service providing means for providing the user with the service provided from the service providing device.

Images