JP2009134503A - Telecommunication system, user authentication device, user authentication method, user authentication program, and server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To automatically conduct a user authentication at a Web server side at the logging in to the Web server with the use of an IP telephone terminal having a Web browser function. <P>SOLUTION: The telecommunication system includes plurality of user terminals having information browsing function part and a telephone function part; and a terminal information retention part for retaining the terminal information with terminal identification information and telephone number information of each user terminal in association with each other. The telecommunication system further includes a call control means for conducting a call control of the telephone function part of the user terminal; a user information managing means for associating and retaining the user authentication information related to the user authentication of each user terminal and the user individual information including the telephone number information of the telephone function part of the user terminal; and a user authentication means for conducting the user authentication by obtaining the telephone number information corresponding to the terminal identification information of the access source from the plurality of pieces of terminal information when accessed from information browsing function part and further retrieving the user authentication information corresponding to the telephone number information from the user information managing means. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a communication system, a user authentication apparatus, a user authentication method, a user authentication program, and a server. For example, when an IP telephone terminal having a Web browser function logs in a Web page, the user is automatically identified by the Web server. It can be applied to a system that performs

  For example, when logging in to a Web server on the network, the Web server requests the user to input user authentication information such as a user ID and a password for user authentication.

  However, there are technologies described in Patent Documents 1 and 2 from the viewpoint of reducing the user burden of having to remember user authentication information such as a user ID and password, and avoiding unauthorized access.

  Patent Documents 1 and 2 describe a technique for reading login data stored in an IC card and generating a login form using the login data when a login request is received from a Web server. By using a dedicated IC card in this way, authentication processing can be automatically performed without inputting a user ID or password.

JP 2003-208410 A JP 2003-196241 A

  By the way, with the development of network technology in recent years, for example, it is possible to access a network from a mobile terminal or the like, or for example, by installing an IP phone application (soft phone) in a personal computer (PC) or the like, Voice communication is possible from a PC.

  As described above, the rapid development of the fusion technology of the data communication technology and the voice communication technology demands diversification of access forms to the Web server.

  The techniques described in Patent Documents 1 and 2 described above need to have a dedicated device and application. For this reason, even when applied to an existing personal computer (PC), an IP telephone terminal with a Web browser function, etc., it is necessary to provide these dedicated devices.

  However, for example, in general corporate networks, etc., since these existing PCs and IP telephone terminals are introduced in large numbers, it is expensive to introduce dedicated devices etc. in these many PCs and IP telephone terminals. There were also problems such as complicated operation management.

  Accordingly, in view of the above problems, a communication system, a user authentication device, and a user authentication method capable of automatically performing user authentication on the Web server side when logging into the Web server using an IP telephone terminal having a Web browser function What is needed is a user authentication program and a server.

  In order to solve this problem, a communication system according to a first aspect of the present invention includes (1) a plurality of user terminals having at least an information browsing function unit and a telephone function unit, and (2) terminal identification information and a telephone of each user terminal. A call control means having a terminal information holding unit for holding a plurality of terminal information associated with number information and performing call control of a telephone function unit of a user terminal; and (3) a user related to user authentication of each user terminal When accessed from the authentication information, user information management means stored in association with at least user individual information including telephone number information of the telephone function part of the user terminal, and (4) when accessed from an information browsing function part of a certain user terminal, From the plurality of terminal information held by the terminal information holding unit of the control means, telephone number information corresponding to the terminal identification information of the access source is obtained, and further obtained from the user information management means Searching for user authentication information corresponding to the telephone number information, characterized in that it comprises a user authentication means for performing user authentication of the access source user.

  The user authentication device of the second aspect of the present invention holds a plurality of user terminals having at least an information browsing function unit and a telephone function unit, and a plurality of terminal information in which terminal identification information and telephone number information of each user terminal are associated with each other. (1) Each user terminal in a user authentication apparatus that performs user authentication of an access request source in a communication system including a terminal information holding unit that performs call control of a telephone function unit of a user terminal. The user authentication information relating to the user authentication, the user information management means stored in association with at least the user individual information including the telephone number information of the telephone function part of the user terminal, and (2) from the information browsing function part of a certain user terminal When accessed, telephone number information corresponding to the terminal identification information of the access source is acquired from the plurality of terminal information held by the terminal information holding unit of the call control means. Further from the user information management unit, searches the user authentication information corresponding to the acquired telephone number information, characterized in that it comprises a user authentication means for performing user authentication of the access source user.

  The user authentication method of the third aspect of the present invention holds a plurality of user terminals having at least an information browsing function unit and a telephone function unit, and a plurality of terminal information in which terminal identification information and telephone number information of each user terminal are associated with each other. In a user authentication method for performing user authentication of an access request source in a communication system including a terminal information holding unit for performing call control of a telephone function unit of a user terminal, a computer performs user information management And (1) the user information management means associates the user authentication information relating to the user authentication of each user terminal with the individual user information including at least the telephone number information of the telephone function unit of the user terminal. The user information management process to be held, and (2) when the user authentication means is accessed from the information browsing function section of a certain user terminal, the terminal information of the call control means Acquires telephone number information corresponding to the terminal identification information of the access source from a plurality of terminal information held by the holding unit, and further searches the user information management means for user authentication information corresponding to the acquired telephone number information. And a user authentication step of performing user authentication of the access source user.

  A user authentication program according to a fourth aspect of the present invention holds a plurality of user terminals having at least an information browsing function unit and a telephone function unit, and a plurality of terminal information in which terminal identification information and telephone number information of each user terminal are associated with each other. In a user authentication program of a user authentication device that performs user authentication of an access request source in a communication system including a call control unit that performs call control of a telephone function unit of a user terminal. (2) user information management means for holding the device in association with (1) user authentication information related to user authentication of each user terminal and individual user information including at least telephone number information of the telephone function unit of the user terminal; When accessed from the information browsing function unit of the user terminal, the access source is selected from the plurality of terminal information held by the terminal information holding unit of the call control means. Acquires telephone number information corresponding to terminal identification information, further searches user authentication information corresponding to the acquired telephone number information from user information management means, and functions as user authentication means for performing user authentication of the access source user It is characterized by making it.

  A server according to a fifth aspect of the present invention includes the user authentication device according to the second aspect of the present invention.

  According to the present invention, when an IP telephone terminal having a Web browser function is used to log in to a Web server, user authentication can be automatically performed on the Web server side.

(A) First Embodiment Hereinafter, a first embodiment of an authentication system of the present invention will be described in detail with reference to the drawings.

  The first embodiment is an embodiment in which, for example, a user accesses a Web server using a terminal equipped with a browser function unit and a telephone function unit, and displays a screen from the Web server on the terminal. A case where the invention is applied will be described as an example.

(A-1) Configuration of the First Embodiment FIG. 1 is a configuration diagram showing the overall configuration of the communication system of the first embodiment and the internal configuration of each component.

  In FIG. 1, a communication system 9 according to the first embodiment includes a Web server 1, a call processing server 2, and an IP telephone terminal 3.

  In FIG. 1, a Web server 1, a call processing server 2, and an IP telephone terminal 3 are connected through a network (not shown). As this network, a wired network, a wireless network, or a network obtained by combining them can be widely applied. Moreover, although the case where the public network represented by the internet is applied is illustrated as a network, for example, it is not limited to this, It can apply also to a private network. Further, the communication protocol of the network is not particularly limited. In the first embodiment, a case where TCP / IP is applied will be described as an example.

  The IP telephone terminal 3 is a terminal provided with a Web browser function unit 31 and an IP phone function unit 32. The IP telephone terminal 3 is, for example, a PC in which an IP telephone application function is mounted (so-called soft phone), an IP telephone terminal with a Web browser function (a concept including a fixed IP telephone terminal and a portable IP telephone terminal), etc. Can be applied.

  The call processing server 2 is a device that performs call processing between the IP telephone terminals 3, and for example, a PBX server, a SIP server, or the like can be applied. The call processing server 2 includes at least an IP telephone terminal data management unit 21, an IP telephone terminal communication unit 22, and a Web server communication unit 23.

  The IP telephone terminal data management unit 21 manages terminal information of the IP telephone terminal 3. Here, as the terminal information of the IP telephone terminal 3, at least information in which the telephone number of the IP telephone terminal 3 is associated with the IP address can be applied.

  The IP telephone terminal communication unit 22 performs communication processing with the IP telephone terminal 3 when a call is connected to the IP telephone terminal 3, for example. Also, the IP telephone terminal communication unit 22 gives the telephone number and IP address acquired from the IP telephone terminal 3 to be controlled to the IP telephone terminal data management unit 21 as terminal information.

  The web server communication unit 23 performs communication processing with the web server 1. In response to a request from the Web server 1, the web server communication unit 23 provides the Web server 1 with terminal information of the corresponding IP phone terminal searched by the IP phone terminal data management unit 21.

  The Web server 1 is a device that provides various application services. The web server 1 includes at least a user data management unit 11, a web page display unit 12, a user authentication unit 13, an HTTP communication processing unit 14, and a call processing server communication processing unit 15.

  The user data management unit 11 uses user identification information (for example, user authentication information D1 of a user who has access authority to a web page provided by the web server 1) and user-specific data D2 to be operated or displayed on the web page. , A user name and a user ID used for login, and the like.

  Here, as the user authentication information D1, information necessary for user authentication processing can be widely applied. For example, a user name (user ID) and a password can be applied. In addition, as the individual user data D2, for example, a user name (user ID), a mail address, a telephone number, or the like, which is phone book data displayed as a Web page, can be applied.

  In the first embodiment, in order to make the explanation easy to understand, a case where phone book data is provided is taken as an example of the Web page provided to the user.

  Furthermore, various methods can be applied as the registration method of the user authentication information D1 and the individual user data D2. For example, the user authentication information D1 and the user individual data D2 may be registered in advance by a predetermined registration process from the IP telephone terminal 3. Good.

  The web page display unit 12 causes the browser function unit 31 of the IP telephone terminal 3 to transmit web page information via the HTTP communication processing unit 14. The web page display unit 12 receives the IP address of the communication source terminal from the HTTP communication processing unit 14 and gives this IP address to the user authentication unit 13 to request user authentication.

  At this time, according to the authentication result from the user authentication part 13, the presence or absence of the display of the login screen for inputting a user name and a password is switched.

  That is, when the login screen is displayed, the input user name and password are passed to the “user authentication unit” to request user authentication and receive the user authentication result.

  If the user authentication can be performed with or without the login screen displayed, the user-specific data D2 is acquired from the user data management unit 11 and, for example, the Web page of the user's personal phone book is displayed.

  The user authentication unit 13 performs user authentication processing in response to a request from the web page display unit 12. Upon receiving the IP address of the communication source terminal from the Web page display unit 12, the user authentication unit 13 gives the IP address of the communication source terminal to the call processing server 2 via the call processing server communication processing unit 15. It is.

  In addition, the user authentication unit 13 acquires terminal information corresponding to the IP address of the communication source terminal from the call processing server 2, and gives the telephone number included in the terminal information to the user data management unit 11 so as to set the telephone number. The corresponding user-specific data D2 is searched.

  When the user-specific data D2 can be searched, the user authentication unit 13 acquires user authentication information D1 corresponding to the user name of the user-specific data D2 from the user data management unit 11. The user authentication unit 13 performs user authentication based on the user identification information D1. Thereby, user authentication can be performed without acquiring user authentication information (that is, user name and password) related to user authentication.

  On the other hand, when the user-specific data D2 cannot be searched or when the user identification information D1 corresponding to the user-specific data D2 does not exist, the user authentication unit 13 performs the user authentication process for the user. Don't do it.

  At this time, the user authentication unit 13 notifies the Web page display unit 12 that user authentication has failed. Then, the Web page display unit 12 displays a login screen on the user's IP telephone terminal 3 and acquires user authentication information from the IP telephone terminal 3. The user authentication unit 13 performs user authentication based on the match / mismatch of the acquired user authentication information and the user authentication information D1 held in the user data management unit 11.

  The HTTP communication processing unit 14 is a communication processing unit that performs communication processing using, for example, HTTP as a communication protocol. For example, the HTTP communication processing unit 14 receives an HTTP access from the Web browser function unit 31 of the IP telephone terminal 3 and responds to the Web browser function unit 31 of the IP telephone terminal 3 with image information transmitted from the Web page display unit 12. Is.

  The call processing server communication processing unit 15 gives the IP address given by the user authentication unit 13 to the call processing server 2 in accordance with an instruction from the user authentication unit 13. The call processing server communication processing unit 15 gives the terminal information received from the call processing server 2 to the user authentication unit 13. Here, the communication method of the call processing server communication processing unit 15 can be arbitrarily defined with the call processing server 2, and can be realized by defining original parameters based on conventional technologies such as SIP and SOAP, for example. It is.

(A-2) Operation of the First Embodiment Next, an operation of user authentication processing in the communication system 9 of the first embodiment will be described with reference to the drawings.

  First, the user of the IP telephone terminal 3 performs registration processing of the terminal information D3 in which the IP address and telephone number of the IP telephone terminal 3 are associated with the call processing server 2.

  Various procedures can be applied to the registration processing of the terminal information D3. For example, it can be realized by the REGISTER function of the call processing server 2. That is, by exchanging a call control signal (REGISTER) between the call processing server 2 and the IP telephone terminal 3, the telephone number and IP address of the IP telephone terminal 3 can be notified to the call processing server 2. The terminal information D3 can be registered in the IP telephone terminal data management unit 21.

  Next, user authentication processing when the user of the IP telephone terminal 3 accesses the Web server 1 by operating the Web browser function unit 31 will be described with reference to FIG.

  FIG. 2 is a sequence showing an operation of user authentication processing in the communication system 9 according to the first embodiment.

  In FIG. 2, when a user who owns the IP telephone terminal 3 tries to access the Web server 1, the Web browser function unit 31 of the IP telephone terminal 3 receives the user's operation and An HTTP access signal is transmitted (step S1).

  When an HTTP access signal from the IP telephone terminal 3 is given to the Web server 1, in the Web server 1, the HTTP communication processing unit 14 notifies the received Web page display unit 12 of the received HTTP access signal (Step S2). ).

  When the Web page display unit 12 receives the HTTP access signal from the HTTP communication processing unit 14, the Web page display unit 12 extracts the IP address of the access source terminal (that is, the IP telephone terminal 3) included in the HTTP access signal, and uses this IP address. It gives to the user authentication part 13 and requests | requires user authentication (step S3).

  Upon receiving the user authentication request from the Web page display unit 12, the user authentication unit 13 gives the received IP address of the IP telephone terminal 3 to the call processing server communication processing unit 15, and the IP telephone terminal 3 IP The address is transmitted to the call processing server 2 (steps S4 and S5).

  When the IP address of the IP telephone terminal 3 is given to the call processing server 2 from the call processing server communication processing unit 15 of the Web server 1, the call processing server 2 has terminal information corresponding to the IP address of the IP telephone terminal 3. D3 is searched, and the telephone number corresponding to this IP address is given to the call processing server communication processing unit 15 (step S6).

  In the first embodiment, a case where a telephone number corresponding to an IP address is returned is illustrated, but terminal information D3 itself may be returned.

  Here, processing in the call processing server 2 will be described.

  First, when the IP address of the IP telephone terminal 3 from the counter call processing server communication processing unit 15 of the Web server 1 is received by the Web server communication unit 23 of the call processing server 2, the IP address of the IP telephone terminal 3 is To the IP telephone terminal data management unit 21 from the web server communication unit 23.

  Then, the IP telephone terminal data management unit 21 retrieves the terminal information D3 corresponding to the received IP address from the held terminal information D3, and determines the telephone number g function corresponding to the IP address to the Web server communication. This is given to the unit 23 and sent back to the Web server 1. If the terminal information corresponding to the IP address cannot be retrieved, a message to that effect is returned to the Web server 1.

  Thus, when a telephone number corresponding to the IP address of the access source terminal (IP telephone terminal 3) that has accessed the Web server 1 is given from the call processing server 2 to the Web server 1, the received telephone number is The call processing server communication processing unit 15 gives the user authentication unit 13 (step S7).

  The user authentication unit 13 gives the telephone number acquired from the call processing server 2 to the user data management unit 11 (step S8).

  The user data management unit 11 searches for the corresponding data from the stored individual user data D2 using the telephone number as key information. When the user data management unit 11 searches for user-specific data D2 corresponding to the telephone number, user authentication information D1 corresponding to the searched user-specific data D2 is given to the user authentication unit 13. (Step S9).

  At this time, if there is no user-specific data D2 corresponding to the telephone number, the user data management unit 11 responds to the user authentication unit 13 to that effect.

  When the user authentication information D1 is given from the user data management unit 11, the user authentication unit 13 gives the user authentication information D1 to the web page display unit 12 (step S10).

  When the telephone number corresponding to the IP address cannot be acquired from the call processing server 2 or the telephone number is acquired from the call processing server 2, the user authentication information D1 corresponding to the acquired telephone number cannot be specified. When the user authentication information D1 cannot be acquired finally, such as when the user authentication is completed, the user authentication unit 13 notifies the Web page display unit 12 of that fact.

  When receiving the user identification information from the user authentication unit 13, the Web page display unit 12 omits the display of the login screen that allows the user to input the user name and password. Then, the Web page display unit 12 inquires the user data management unit 11 about data to be displayed after login (for example, personal phone book information of the user) (step S11), and the screen data to be displayed after login is Obtained from the data management unit 11 (step S12).

  Then, the web page display unit 12 transmits the display screen data acquired from the user data management unit 11 to the web browser function unit 31 of the IP telephone terminal 3 via the HTTP communication processing unit 14 (steps S13 and S14). .

  As described above, the Web server 1 obtains the terminal data of the IP telephone terminal with the Web browser function from the IP address of the HTTP access source (the telephone number is acquired from the call processing server, and the user who uses the telephone number is assigned to the own device) By specifying from the user data held in the (user data management unit), the display of the login screen can be omitted.

  If the access source user authentication information cannot be acquired in step S10, the Web page display unit 12 notified by the user authentication unit 13 notifies the IP telephone terminal 3 that is the access source to the IP phone terminal 3 that is the access source. Send login screen data for entering user name and password.

  When the user name and password input information is returned to the Web server 1, the Web page display unit 12 gives the returned user name and password to the user authentication unit 13, and the user acquired from the user side this time User authentication is performed using name and password.

(A-3) Effect of First Embodiment As described above, according to the first embodiment, when a user of an IP telephone terminal with a Web browser function accesses a Web server, the user name and password It is possible to save the trouble of performing the input operation.

(B) Other Embodiments (B-1) In a company or community, a Web page such as a common phone book or personal phone book whose data is held and managed on the server side is attached to a PC or IP browser on which an IP phone application operates. When using from an IP mobile phone, the method of the present invention can be applied to omit the user name and password input operation on the login screen.

(B-2) Various functions provided in each of the Web server and the call control server described in the first embodiment do not need to be provided in the physically same call control server. As long as the processing described in the first embodiment can be realized, various functions may be installed in different apparatuses and distributedly arranged on a network.

(B-3) The various functions of the Web server, call control server, and IP telephone terminal described in the first embodiment are realized as software processing. That is, for example, the call control server and the information terminal include a CPU, a ROM, a RAM, an EEPROM, and the like, and the CPU executes various processing functions by executing processing programs stored in the ROM using data necessary for processing. Can be realized. Of course, if possible, it may be realized by hardware processing.

It is a block diagram which shows the structure of the communication system of 1st Embodiment, and the structure of a web server. It is a sequence which shows the authentication method of 1st Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Web server, 11 ... User data management part, 12 ... Web page display part, 13 ... User authentication part, 14 ... HTTP communication processing part, 15 ... Anti-call processing server communication processing part, 2 ... Call processing server, 21 ... IP phone terminal data management unit, 22 ... IP phone terminal communication unit, 23 ... Web server communication unit, 3 ... IP phone terminal, 31 ... Web browser function unit, 32 ... IP phone function unit

Claims (6)

A plurality of user terminals having at least an information browsing function section and a telephone function section;
A call control means for carrying out call control of the telephone function unit of the user terminal, comprising a terminal information holding unit for holding a plurality of terminal information in which terminal identification information and telephone number information of each user terminal are associated;
User information management means for holding user authentication information related to user authentication of each user terminal and user individual information including at least telephone number information of the telephone function unit of the user terminal;
When accessed from an information browsing function unit of a user terminal, telephone number information corresponding to the terminal identification information of the access source is selected from the plurality of terminal information held by the terminal information holding unit of the call control unit. A user authentication unit that acquires the user authentication information corresponding to the acquired telephone number information from the user information management unit and performs user authentication of the access source user.   The communication system according to claim 1, further comprising an information providing unit that transmits predetermined information to the access source user terminal according to a user authentication result by the user authentication unit. A plurality of user terminals having at least an information browsing function unit and a telephone function unit, and a terminal information holding unit for holding a plurality of terminal information in which terminal identification information and telephone number information of each user terminal are associated with each other, In a user authentication apparatus that performs user authentication of an access request source in a communication system including call control means for performing call control of the telephone function unit of the user terminal,
User information management means for holding user authentication information related to user authentication of each user terminal and user individual information including at least telephone number information of the telephone function unit of the user terminal;
When accessed from an information browsing function unit of a user terminal, telephone number information corresponding to the terminal identification information of the access source is selected from the plurality of terminal information held by the terminal information holding unit of the call control unit. User authentication means, further comprising: user authentication means for retrieving user authentication information corresponding to the acquired telephone number information from the user information management means and performing user authentication of the access source user. apparatus. A plurality of user terminals having at least an information browsing function unit and a telephone function unit, and a terminal information holding unit for holding a plurality of terminal information in which terminal identification information and telephone number information of each user terminal are associated with each other, In a user authentication method for performing user authentication of an access request source in a communication system including call control means for performing call control of the telephone function unit of the user terminal,
The computer comprises user information management means and user authentication means,
A user information management step in which the user information management means holds user authentication information related to user authentication of each user terminal in association with at least user individual information including telephone number information of the telephone function unit of the user terminal; ,
When the user authentication unit is accessed from an information browsing function unit of a user terminal, the access source terminal identification information is selected from the plurality of terminal information held by the terminal information holding unit of the call control unit. A user authentication step of acquiring corresponding phone number information, further searching the user information management means for user authentication information corresponding to the acquired phone number information, and performing user authentication of the access source user. A user authentication method characterized by the above. A plurality of user terminals having at least an information browsing function unit and a telephone function unit, and a terminal information holding unit for holding a plurality of terminal information in which terminal identification information and telephone number information of each user terminal are associated with each other, In a user authentication program of a user authentication device that performs user authentication of an access request source in a communication system including call control means for performing call control of the telephone function unit of the user terminal,
The user authentication device is
User information management means for holding user authentication information related to user authentication of each user terminal and user individual information including at least telephone number information of the telephone function unit of the user terminal;
When accessed from an information browsing function unit of a user terminal, telephone number information corresponding to the terminal identification information of the access source is selected from the plurality of terminal information held by the terminal information holding unit of the call control unit. User authentication characterized in that the user authentication is performed by searching for user authentication information corresponding to the acquired telephone number information from the user information management means and functioning as user authentication means for performing user authentication of the access source user. program.   A server comprising the user authentication device according to claim 3.

Images