JP2011170794A - Web authentication system, mobile terminal, web terminal, web server, web authentication method and program for them - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a Web authentication system for performing login authentication to a Web site on a network from a mobile terminal including an infrared communication function. <P>SOLUTION: In the Web authentication system 1, the mobile terminal 11 receives an authentication ticket imparted with URL information of the Web site to a ticket comprising an authenticating number generated by a random number, by an electronic mail from a Web server 13 via a cellphone network, separates the authentication ticket from the electronic mail, imparts a signature to the separated authentication ticket as the need arises, thereafter converts it into data for infrared communication, transmits contents of the authentication ticket to the Web server 13 through a Web terminal 12 by the infrared communication, performs ticket identification processing of confirming whether the authenticating number of the ticket transmitted in advance by the Web server 13 and an authenticating number in the contents of the authentication ticket are equal, and thereafter receives the effect indicating whether the ticket identification succeeds by an electronic mail via the cellphone network. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an authentication technique for login and access to a website on a network, and in particular, a web authentication system, a portable terminal, a web terminal, a web server, a web authentication method using the infrared communication function of a portable terminal, and these Regarding the program.

  Conventionally, a method of using a password is known as a method of authenticating to a Web site. In web authentication technology that uses passwords, it is necessary to periodically change passwords to ensure their safety, and it is necessary to consider character strings that cannot be easily guessed as passwords. If the user forgets, the system management of the service provider becomes complicated, such as taking time.

  In order to solve such a problem, an authentication method using a disposable one-time password that is generated according to a certain rule and can be used only once is known (for example, see Non-Patent Document 1). The one-time password authentication method provides a dedicated device for generating a password.

Yuichi Deguchi, “One Time Password”, April 19, 2006, Nikkei Business Publications, [online], [Search January 25, 2010], Internet http://itpro.nikkeibp.co.jp/article/ COLUMN / 20060414/235357 /

  As described above, conventionally, there is a method of using a password as a method of authenticating to a website. However, in order to ensure safety, it is necessary to change the password periodically, or the password is easily guessed. When there is a need to consider a character string that is not used, or when the user forgets the password, there is a drawback that the management becomes complicated, such as taking a long time to cope. A user who uses a one-time password needs to have a dedicated device for generating a password, which has the advantage of ensuring safety, but has the disadvantage of being costly.

  In addition, it may be difficult for a user who is unfamiliar with log authentication operations and password management by a personal computer to log in to a Web site connected to a network and jump to a necessary Web page.

  The object of the present invention has been made in view of the above-mentioned problems. When logging in to a Web site connected to a network, the user is securely authenticated and logged in, and easily required Web pages. It is to provide a web authentication system, a portable terminal, a web terminal, a web server, a web authentication method, and a program thereof using an infrared communication function of a portable terminal.

  In the Web authentication system of the present invention, a user can connect to a mobile terminal (for example, a mobile phone) having a function of transmitting / receiving an email with an attached file and a function of transmitting information of internal data by infrared communication, and a network. A Web terminal (for example, a digital TV terminal) having a function and a function of receiving information of internal data transmitted from the portable terminal by infrared communication of one-way communication but not having a bidirectional communication function or a mail function. Use it to log in to the website. On the other hand, a Web server that provides a Web site issues an authentication ticket for Web access that can be used only once, adds URL information that the user wants to use to the authentication ticket, and uses the authentication ticket with URL information as a mobile object. It is attached to an electronic mail via a communication network and transmitted to a user's portable terminal registered in advance. Next, the user transfers the authentication ticket attached to the e-mail received using the infrared communication function of the mobile terminal to the Web terminal, causes the Web terminal to transmit the authentication ticket to the Web server, and the Web server Access the website you provide. Next, the Web server uses the received authentication ticket to pre-issue itself and send it to the user's mobile terminal, and the authentication ticket sent by the user to the Web terminal using the mobile terminal By confirming the identity, the user is identified and login authentication is performed, and the login process is performed, and the Web page described in the URL information added to the authentication ticket is displayed on the Web terminal.

  That is, the Web authentication system of the present invention transmits a Web server that provides a Web site on a network, a Web terminal that communicates with the Web server via a Web protocol through the network, and transmits internal data to the Web terminal using an infrared communication function. And a Web authentication system that performs login authentication to a Web site on the network in a Web authentication system comprising a mobile terminal that communicates with the Web server via a mobile phone network, wherein the Web server Means for generating an authentication ticket in which URL information of a website is attached to a ticket comprising an authentication number generated by a random number; means for transmitting the electronic ticket by attaching the authentication ticket to an e-mail address of the portable terminal; The web terminal receives from the portable terminal by infrared communication. Means for performing ticket identification processing for receiving the contents of the authentication ticket from the Web terminal and confirming whether or not an authentication number in the contents of the authentication ticket is the same as the ticket transmitted in advance; When ticket identification is successful in the ticket identification process, the URL information is extracted from information representing the contents of the authentication ticket, a Web page of the extracted URL is selected from a predetermined content database, and the display of the Web terminal And a means for establishing web communication with the web terminal to be displayed on the apparatus.

  In the Web authentication system of the present invention, when the signature information of each portable terminal is given, the authentication number in the content of the authentication ticket is the same as the ticket transmitted in advance. It is characterized by having means for verifying the signature information before performing the ticket identification process for confirming whether or not.

  In the Web authentication system of the present invention, as the ticket identification process, the Web server confirms whether or not the authentication number in the content of the authentication ticket is the same as the ticket transmitted in advance. And a means for confirming whether or not the URL information given to the ticket transmitted in advance and the URL information included in the contents of the authentication ticket are the same.

  Furthermore, the present invention also has a unique feature of a mobile terminal used in a Web authentication system. The mobile terminal of the present invention includes a Web server that provides a Web site on a network, and the Web server and the network via a Web protocol. A web authentication system comprising a web terminal for communication and internal data is transmitted to the web terminal using an infrared communication function and communicates with the web server via a cellular phone network. In order to perform login authentication, an authentication ticket in which URL information of the Web site is added to a ticket including an authentication number generated by a random number is received from the Web server via an e-mail via a mobile phone network, Requires a means to separate the authentication ticket from the email and a separate authentication ticket In response, after signing, the data is converted into data for infrared communication, and the content of the authentication ticket is transmitted to the web server via the web terminal by infrared communication, and transmitted in advance by the web server. After the ticket identification process for confirming whether or not the authentication number in the contents of the authentication ticket and the authentication ticket is the same, the fact that the ticket identification is successful is received by e-mail via the mobile phone network And means.

  Furthermore, the present invention also has a unique feature in a Web terminal used in a Web authentication system. The Web terminal of the present invention includes a Web server that provides a Web site on a network, and the Web server and the network via a Web protocol. A web authentication system comprising a web terminal for communication and internal data is transmitted to the web terminal using an infrared communication function and communicates with the web server via a cellular phone network. A Web terminal that performs infrared communication with the portable terminal to perform login authentication, the means for receiving the contents of the authentication ticket from the portable terminal by infrared communication, and the authentication ticket received from the portable terminal by infrared communication Generating the contents of the file as transfer information in a predetermined format, and the Web After conducted the identification processing of the authentication ticket by over server, characterized in that it comprises a means for displaying a Web page on a predetermined display device of the corresponding URL in response to a request from the user of the portable terminal.

  Furthermore, the present invention also has a unique feature of a web server used in a web authentication system. The web server of the present invention includes a web server that provides a web site on a network, and the web server and the network via a web protocol. A web authentication system comprising a web terminal for communication and internal data is transmitted to the web terminal using an infrared communication function and communicates with the web server via a cellular phone network. A Web server that performs login authentication, a unit that generates an authentication ticket in which URL information of a predetermined Web site is attached to a ticket including an authentication number generated by a random number, and the authentication information Means for attaching a ticket and sending it by e-mail; and said Web terminal The content of the authentication ticket received from the mobile terminal by infrared communication is received from the Web terminal, and it is confirmed whether or not the authentication number in the content of the authentication ticket and the previously transmitted ticket are the same. The means for performing ticket identification processing, and when ticket identification is successful in the ticket identification processing, the URL information is extracted from information representing the contents of the authentication ticket, and the Web page of the extracted URL is extracted from a predetermined content database. Means for selecting and establishing web communication with the web terminal to be displayed on the display device of the web terminal.

  Furthermore, the Web authentication method of the present invention includes a Web server that provides a Web site on a network, a Web terminal that communicates with the Web server via a Web protocol via the network, and transmits internal data to the Web terminal using an infrared communication function. And a Web authentication method for performing login authentication to a Web site on the network in a Web authentication system comprising a mobile terminal that communicates with the Web server via a mobile phone network, and the processing procedure of the Web server is as follows: A step of generating an authentication ticket in which URL information of a predetermined Web site is attached to a ticket made up of an authentication number generated by a random number, and transmitting the electronic ticket by attaching the authentication ticket to an e-mail address of the portable terminal And the web terminal is connected to the portable terminal by infrared communication. Receiving the contents of the authentication ticket received from the Web terminal, and performing a ticket identification process for confirming whether or not the authentication number in the contents of the authentication ticket and the previously transmitted ticket are the same And when the ticket identification process succeeds in ticket identification, the URL information is extracted from information representing the contents of the authentication ticket, the Web page of the extracted URL is selected from a predetermined content database, and the Web terminal And establishing web communication with the web terminal for display on the display device.

  Furthermore, the present invention has a feature as a program for realizing each function in a computer configured as a portable terminal, a computer configured as a Web terminal, and a computer configured as a Web server.

  According to the present invention, even if the user does not use a password, the Web server issues the authentication ticket that it issues in advance and sends it to the user's mobile terminal, and the user uses the mobile terminal to It is possible to identify a user by confirming the consistency of the transmitted authentication ticket, use an authentication ticket that can be used only once, and transmit the authentication ticket to a pre-registered mobile terminal Thus, it is possible to exclude logins from others who do not hold the mobile terminal. Furthermore, the user can immediately access a necessary Web page after logging in. It becomes possible to easily access a Web site requiring authentication using a Web terminal such as a TV phone terminal without adding a special instrument or device as in the case of a one-time password.

It is a figure which shows the typical example of the web authentication system of one Example by this invention. It is a functional block diagram of the portable terminal in the Web authentication system of one Example by this invention. It is a functional block diagram of the web terminal in the web authentication system of one Example by this invention. It is a functional block diagram of the Web server in the Web authentication system of one Example by this invention. It is a figure which shows the operation | movement flow of the web authentication system of one Example by this invention.

  Hereinafter, a web authentication system according to an embodiment of the present invention using an infrared communication function of a portable terminal will be described. The portable terminal, the Web terminal, the Web server, and the programs thereof according to the present invention, and the Web authentication method according to the present invention will become apparent from the description of the Web authentication system according to an embodiment of the present invention.

〔System configuration〕
FIG. 1 is a diagram showing a typical example of a Web authentication system according to an embodiment of the present invention. The web authentication system 1 according to the present embodiment realizes a method of securely authenticating to a website without using a special authentication tool. In the web authentication system 1 according to the present embodiment, a portable terminal 11 having a function capable of transmitting / receiving electronic mail (a mobile phone network communication unit described later) and a function of transmitting internal data using an infrared communication function (an infrared transmission unit described later) A Web terminal 12 having an information receiving function (infrared receiving unit described later) by infrared communication, a function of displaying a network Web service (Web communication unit described later), and a Web providing a web site service requiring authentication The server 13 is configured, and the Web terminal 12 and the Web server 13 are connected via a WAN such as the Internet.

  The function of sending and receiving e-mails with attached files and the function of transmitting internal data by infrared are equipped in many mobile terminals 11 (for example, mobile phones), and the function of receiving infrared for the remote control is as follows: Since it is installed in many Web terminals 12 such as TV phone terminals, the Web authentication system 1 of this embodiment can be realized only by changing the firmware without adding hardware. Further, in the Web authentication system 1 according to the present embodiment, when the URL jump is not provided, the login authentication alone can be used.

  By the way, in the existing confidential mail service system, in order to ensure security, it is necessary to use a dedicated mail system that the user does not normally use. In order to inform the user that the confidential mail has arrived, A confidential incoming notification is sent to the user's mobile terminal e-mail, etc. If the Web authentication system 1 of this embodiment is used, the Web server 13 that provides the Web site can use the Web access ticket only once. URL information that the user wants to use is added to the URL, and the ticket with the URL information is attached as an authentication ticket to an e-mail via the mobile communication network (mobile phone network) and transmitted to the mobile terminal 11. You can immediately authenticate from the incoming mail information and access the corresponding Web page of the confidential mail service. , Thereby improving the convenience.

  Hereinafter, the configurations of the mobile terminal 11, the Web terminal 12, and the Web server 13 will be described more specifically.

  FIG. 2 is a functional block diagram of the mobile terminal 11 in the Web authentication system according to the embodiment of the present invention. The mobile terminal 11 includes a control unit 111, a mobile phone network communication unit 112 that configures an interface that receives an e-mail from the Web server 13, and an infrared transmission unit 113 that configures an interface that transmits internal data to the Web terminal 12. And a storage unit 114. The control unit 111 includes an infrared transmission control unit 1111, an e-mail transmission / reception unit 1112, a ticket separation unit 1113, and an infrared transmission data generation unit 1114. In addition, although each function of the control part 111 which concerns on this invention is demonstrated, it should be noted that it is not intended to exclude other functions provided in the mobile terminal 11. The portable terminal 11 can be configured as a computer, and stores a program describing processing contents for realizing each function of the control unit 111 in the storage unit 114 of the computer, and the central processing unit ( This program can be realized by reading and executing this program by a CPU.

  The infrared transmission control unit 1111 has a function of performing infrared communication with the Web terminal 12 in order to transmit the contents of the authentication ticket to the Web terminal 12.

  The e-mail transmission / reception unit 1112 has a function of receiving e-mail from the Web server 13. In particular, the e-mail transmission / reception unit 1112 succeeds in ticket identification after ticket identification processing for confirming whether or not the authentication number in the contents of the authentication ticket returned by the ticket sent in advance by the Web server 13 is the same. It has a function of receiving by e-mail via the mobile phone network to indicate whether or not it has been done.

  The ticket separation unit 1113 has a function of separating the authentication ticket attached to the e-mail received from the Web server 13.

  The infrared transmission data generation unit 1114 has a function of converting information that the user wants to transmit to the Web server 13 into data for infrared communication so as to be transmitted via the Web terminal 12. In addition, the infrared transmission data generation unit 1114 has a function of adding a signature as necessary when generating an authentication ticket by converting it into data for infrared communication.

  FIG. 3 is a functional block diagram of the Web terminal 12 in the Web authentication system according to the embodiment of the present invention. The Web terminal 12 includes a control unit 121, a Web communication unit 122 that configures an interface that performs Web communication with the Web server 13, and an infrared reception unit 123 that configures an interface that receives infrared communication data from the mobile terminal 11. And a display control unit 124 that constitutes an interface to the display device 12a, and a storage unit 125. The display device 12a may be incorporated in the Web terminal 12, or may be a device connected as an external device. The control unit 121 includes a web protocol processing unit 1211, an infrared reception control unit 1212, a ticket transfer processing unit 1213, and a web display control unit 1214. In addition, although each function of the control part 121 which concerns on this invention is demonstrated, it should be noted that it is not intended to exclude other functions provided in the Web terminal 12. The Web terminal 12 can be configured as a computer, and stores a program describing processing contents for realizing each function of the control unit 121 in the storage unit 125 of the computer, and the central processing unit ( This program can be realized by reading and executing this program by a CPU.

  The web protocol processing unit 1211 has a function of establishing web communication with the web server 13. In other words, the Web protocol processing unit 1211 operates as an access function to the Web server 13 and transfers the authentication ticket content received from the mobile terminal 11 via infrared communication in a predetermined format such as a URL argument information format. As a function of transmitting to the Web server 13.

  The infrared reception control unit 1212 has a function of receiving the contents of the authentication ticket from the portable terminal 11 via infrared communication.

  The ticket transfer processing unit 1213 has a function of converting the contents of the authentication ticket received from the portable terminal 11 by infrared communication into transfer information in a predetermined format such as a URL argument information format.

  The Web display control unit 1214 has a function of causing the display device 12a to display a Web page with the corresponding URL after the authentication ticket identification processing is performed by the Web server 13.

  FIG. 4 is a functional block diagram of the Web server 13 in the Web authentication system according to the embodiment of the present invention. The Web server 13 includes a control unit 131, a Web communication unit 132 that configures an interface that performs Web communication with the Web terminal 12, and a mobile phone network communication unit that configures an interface that transmits an e-mail to the mobile terminal 11. 133, a content database 134 that holds information on the Web page of each URL, and a storage unit 135. The control unit 131 includes a web protocol processing unit 1311, an e-mail transmission / reception unit 1312, a transmission ticket generation unit 1313, a URL addition processing unit 1314, a reception ticket processing unit 1315, and a web page control unit 1316. In addition, although each function of the control part 131 which concerns on this invention is demonstrated, it should be noted that it is not intended to exclude other functions provided in the Web server 13. The Web server 13 can be configured as a computer, and stores a program describing processing contents for realizing each function of the control unit 131 in the storage unit 135 of the computer, so that the central processing unit ( This program can be realized by reading and executing this program by a CPU.

  The web protocol processing unit 1311 has a function of establishing web communication with the web terminal 12.

  The e-mail transmission / reception unit 1312 has a function of encoding and attaching an authentication ticket to the e-mail address of the user's portable terminal 11 registered in advance, and transmitting it by e-mail.

  The transmission ticket generation unit 1313 is a functional unit that generates a unique number (for example, an alphanumeric character having an arbitrary number of digits) from a sufficiently long random number and uses the authentication number as a ticket. The transmission ticket generation unit 1313 can also be configured to generate a ticket (authentication number) in association with the signature information when the signature information of each portable terminal is given.

  The URL addition processing unit 1314 has a function of generating an authentication ticket by adding URL information desired to be displayed to the user to the ticket (authentication number).

  The received ticket processing unit 1315 separates and extracts information representing the contents of the authentication ticket received via the Web protocol, and authenticates the ticket (authentication number) transmitted in advance and the contents of the authentication ticket received from the mobile terminal 11. The ticket identification process for confirming whether or not the numbers are the same is executed to perform ticket identification confirmation. When the ticket identification confirmation is successful, the URL information to be displayed is displayed as the received authentication ticket. The function to extract from. If the signature information of each portable terminal is given, the reception ticket processing unit 1315 performs the ticket identification processing after performing this verification. The received ticket processing unit 1315 confirms whether or not the authentication number in the contents of the authentication ticket is the same as the ticket transmitted in advance, and the URL given to the ticket transmitted in advance. The ticket identification process can be configured to check whether the information and the URL information included in the contents of the authentication ticket are the same.

  When the consistency of the ticket identification process is confirmed, the Web page control unit 1316 considers that the user authentication is successful, performs the login process, and selects the Web page with the extracted URL from the content database 134. It has the function to do.

  The operation of the Web authentication system according to an embodiment of the present invention will be described below.

[System operation]
FIG. 5 is a diagram showing an operation flow of the Web authentication system according to an embodiment of the present invention. Here, it is assumed that there is a confidential address for the user of the Web terminal 12 on the Web site provided by the Web server 13. For example, in such a confidential service, for example, the service provider may want to inform the user of the Web terminal 12 of service information. In the Web authentication system according to an embodiment of the present invention, the Web site provided by the Web server 13 carries the URL information of the page for confirming the confidentiality in a manner different from the existing confidential service while ensuring security. The terminal 11 can be notified.

  The Web server 13 uses a unique number (for example, an arbitrary number of alphanumeric characters) from a sufficiently long random number to notify the mobile terminal 11 of the URL information of the page for confirming the confidentiality while ensuring security. ) And this authentication number is used as a ticket (step S1). Subsequently, the Web server 13 adds the URL information to be displayed to the user by the URL addition processing unit 1314 to the ticket (authentication number) to generate an authentication ticket (step S2). Subsequently, the Web server 13 encodes and attaches the ticket to the email address of the user's portable terminal registered in advance by the email transmission / reception unit 1312, and transmits the email by email (step S3). Therefore, this authentication ticket is for Web access that can be used only once.

  The portable terminal 11 receives an email from the Web server 13 by the email transmission / reception unit 1112 (step S4), and automatically separates the authentication ticket attached to the email by the ticket separation unit 1113 (step S5). ). Here, the user can confirm whether or not the authentication ticket has been obtained and proceed to the next process. Subsequently, the mobile terminal 11 converts the authentication ticket into data for infrared communication by the infrared transmission data generation unit 1114 and generates the data, and transmits the authentication ticket to the Web terminal 12 by infrared communication by the infrared transmission control unit 1111. (Step S6). The portable terminal 11 can add a signature as necessary when the infrared transmission data generating unit 1114 converts and generates an authentication ticket into data for infrared communication.

  The Web terminal 12 receives the authentication ticket information transmitted from the portable terminal 11 by infrared communication using the infrared reception control unit 1212 (step S7), and the Web protocol processing unit 1211 converts the content of the received authentication ticket into the URL. It is transmitted to the Web server 13 in a format such as argument information (step S8).

  The Web server 13 receives information indicating the contents of the authentication ticket transmitted via the Web protocol by the Web protocol processing unit 1311 and also indicates the contents of the authentication ticket received via the Web protocol by the reception ticket processing unit 1315. The information is separated and extracted (step S9), and the ticket identification is confirmed by confirming whether the previously transmitted ticket (authentication number) is the same as the authentication number in the contents of the received authentication ticket. It performs (step S10). The e-mail transmission / reception unit 1312 can be configured to notify the user of the e-mail address of the mobile terminal 11 of the failure or success of the ticket identification process. If the ticket identification is successful, the Web server 13 causes the reception ticket processing unit 1315 to extract URL information to be displayed from information representing the contents of the authentication ticket received via the Web protocol (step S11). Subsequently, the Web server 13 considers that the user authentication is successful by the Web page control unit 1316, selects the Web page with the extracted URL from the content database 134 in the user session, and the Web terminal 12 Web communication with the Web terminal 12 is established by the Web protocol processing unit 1311 so as to be displayed on the display device 12a (step S12).

  As a result, the user can access the Web requiring login authentication without using a password, and can refer to the Web page of the corresponding URL through the display device 12a of the Web terminal 12 (step S13).

  In general, the Web authentication system 1 according to the present embodiment is a Web authentication system that performs login authentication from a mobile terminal 11 having an infrared communication function to a Web site on a network via the Web terminal 12. The web server 13 that provides the above website, the web terminal 12 that communicates with the web server 13 via the web protocol via the network, and the internal data is transmitted to the web terminal 12 by the infrared communication function, and the web server 13 and the mobile phone And a mobile terminal 11 that communicates via a network.

  In this Web authentication system 1, the mobile terminal 11 sends an authentication ticket in which URL information of the Web site is added to a ticket consisting of an authentication number generated by a random number by e-mail from the Web server 13 via the mobile phone network. A means for receiving and separating the authentication ticket from the e-mail, and applying a signature to the separated authentication ticket as necessary, and then converting the data into data for infrared communication, and authenticating via the Web terminal 12 using infrared communication After the ticket identification process for confirming whether the ticket number transmitted to the Web server 13 is the same as the ticket transmitted in advance by the Web server 13 and the authentication number in the content of the authentication ticket, the ticket identification is performed. Means for receiving by e-mail via the mobile phone network indicating whether or not That.

  In the Web authentication system 1, the Web terminal 12 includes means for receiving the contents of the authentication ticket from the portable terminal 11 by infrared communication, and the contents of the authentication ticket received from the portable terminal 11 by infrared communication in a predetermined format. Means for generating as transfer information, and means for displaying a Web page of the corresponding URL on a predetermined display device in response to a request from the user of the portable terminal 11 after the ticket identification processing by the Web server 13 is performed. Configured.

  In the Web authentication system 1, the Web server 13 includes a unit that generates an authentication ticket in which URL information of a predetermined Web site is attached to a ticket including an authentication number generated by a random number, and an e-mail address of the mobile terminal 11. A means for sending an e-mail with an authentication ticket attached thereto, a ticket that the Web terminal 12 receives from the Web terminal 12 the contents of the authentication ticket received from the portable terminal 11 by infrared communication, and A means for performing ticket identification processing for confirming whether or not the authentication numbers in the contents of the authentication ticket are the same, and URL information is extracted from information representing the contents of the authentication ticket when the ticket identification processing is successful. The selected Web page of the corresponding URL is selected from the predetermined content database 134, and the Web Configured to have a means for establishing a Web communication with the Web terminal 12 to be displayed on the display device 12a of the end 12.

  When the portable terminal 11, the web terminal 12, and the web server 13 according to the present invention are configured by a computer, a program describing processing contents for realizing each function is stored in an internal or external storage unit of the computer. It can be realized by reading and executing this program by the central processing unit (CPU) of the computer. In addition, such a program can be distributed by selling, transferring, or lending a portable recording medium such as a DVD or a CD-ROM, and such a program is stored in a storage unit of a server on a network, for example. And the program can be distributed by transferring the program from the server to another computer via the network. In addition, a computer that executes such a program can temporarily store, for example, a program recorded on a portable recording medium or a program transferred from a server in its own storage unit. As another embodiment of the program, the computer may directly read the program from a portable recording medium and execute processing according to the program, and each time the program is transferred from the server to the computer. In addition, the processing according to the received program may be executed sequentially. Therefore, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  According to the present invention, even when a user who is unfamiliar with log authentication operations and password management by a personal computer logs in to a website connected to a network, the user can securely log in and authenticate the user. It is possible to jump to a simple Web page, which is useful for a service method that requires login authentication.

DESCRIPTION OF SYMBOLS 1 Web authentication system 11 Mobile terminal 12 Web terminal 12a Display apparatus 13 Web server 111 Control part 112 Mobile telephone network communication part 113 Infrared transmission part 114 Storage part 121 Control part 122 Web communication part 123 Infrared receiving part 124 Display control part 125 Storage part 131 Control Unit 132 Web Communication Unit 133 Mobile Phone Network Communication Unit 134 Content Database 135 Storage Unit 1111 Infrared Transmission Control Unit 1112 E-mail Transmission / Reception Unit 1113 Ticket Separation Unit 1114 Infrared Transmission Data Generation Unit 1211 Web Protocol Processing Unit 1212 Infrared Reception Control Unit 1213 Ticket transfer processing unit 1214 Web display control unit 1311 Web protocol processing unit 1312 E-mail transmission / reception unit 1313 Transmission ticket generation unit 1314 URL addition processing unit 1 15 reception ticket processing unit 1316 Web page control unit

Claims (10)

A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network A web authentication system that performs login authentication to a web site on a network in a web authentication system including a mobile terminal that communicates via,
The web server
Means for generating an authentication ticket in which URL information of a predetermined website is attached to a ticket comprising an authentication number generated by a random number;
Means for sending an e-mail with the authentication ticket attached to the e-mail address of the portable terminal;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Means for performing ticket identification processing to confirm
If the ticket identification process succeeds in ticket identification, the URL information is extracted from information representing the contents of the authentication ticket, the Web page of the extracted URL is selected from a predetermined content database, and the Web terminal Means for establishing web communication with the web terminal for display on a display device;
A Web authentication system characterized by the above.   When the signature information of each portable terminal is given, the Web server confirms whether the ticket transmitted in advance and the authentication number in the contents of the authentication ticket are the same or not The Web authentication system according to claim 1, further comprising means for verifying the signature information before processing.   The Web server, as the ticket identification process, checks whether or not the authentication number in the content of the authentication ticket is the same as the ticket that has been transmitted in advance and has transmitted in advance The Web authentication system according to claim 1, further comprising means for confirming whether the URL information given to the ticket and the URL information included in the content of the authentication ticket are the same. A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network A mobile terminal that performs infrared communication with the Web terminal in order to perform login authentication to a Web site on a network in a Web authentication system including a mobile terminal that communicates via
An authentication ticket in which URL information of the Web site is added to a ticket consisting of an authentication number generated by a random number by e-mail from the Web server via a mobile phone network, and the authentication ticket is received from the e-mail. Means for separating;
Means for applying a signature to the separated authentication ticket as needed, converting the data into data for external communication, and transmitting the contents of the authentication ticket to the Web server via the Web terminal by infrared communication;
A message indicating whether or not the ticket identification is successful after the ticket identification process for confirming whether the ticket transmitted in advance by the Web server and the authentication number in the contents of the authentication ticket are the same. Means for receiving by e-mail via the telephone network;
A portable terminal comprising: A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network A web terminal that performs infrared communication with the mobile terminal in order to perform login authentication to a web site on the network in a web authentication system including a mobile terminal that communicates via
Means for receiving the contents of the authentication ticket from the portable terminal by infrared communication;
Means for generating the contents of the authentication ticket received from the portable terminal by infrared communication as transfer information in a predetermined format;
Means for displaying a Web page of a corresponding URL on a predetermined display device in response to a request from a user of the portable terminal after the ticket identification processing is performed by the Web server;
A Web terminal comprising: A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network A web server that performs login authentication to a web site on a network in a web authentication system including a mobile terminal that communicates via
Means for generating an authentication ticket in which URL information of a predetermined website is attached to a ticket comprising an authentication number generated by a random number;
Means for sending an e-mail with the authentication ticket attached to the e-mail address of the portable terminal;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Means for performing ticket identification processing to confirm
If the ticket identification process succeeds in ticket identification, the URL information is extracted from information representing the contents of the authentication ticket, the Web page of the extracted URL is selected from a predetermined content database, and the Web terminal Means for establishing web communication with the web terminal for display on a display device;
A web server comprising: A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network A web authentication method for performing login authentication to a website on a network in a web authentication system comprising a mobile terminal that communicates via
The processing procedure of the web server is as follows:
Generating an authentication ticket in which URL information of a predetermined website is attached to a ticket composed of an authentication number generated by a random number;
Attaching the authentication ticket to the e-mail address of the mobile terminal and sending it by e-mail;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Performing a ticket identification process to confirm
If the ticket identification process succeeds in ticket identification, the URL information is extracted from information representing the contents of the authentication ticket, the Web page of the extracted URL is selected from a predetermined content database, and the Web terminal Establishing web communication with the web terminal for display on a display device.
A Web authentication method characterized by the above. A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network A computer configured as a mobile terminal that performs infrared communication with the Web terminal in order to perform login authentication to a Web site on a network in a Web authentication system including a mobile terminal that communicates via
An authentication ticket in which URL information of the Web site is added to a ticket consisting of an authentication number generated by a random number by e-mail from the Web server via a mobile phone network, and the authentication ticket is received from the e-mail. Separating, and
A step of applying a signature to the separated authentication ticket as necessary, converting the data into data for infrared communication, and transmitting the content of the authentication ticket to the web server via the web terminal by infrared communication;
A message indicating whether or not the ticket identification is successful after the ticket identification process for confirming whether the ticket transmitted in advance by the Web server and the authentication number in the contents of the authentication ticket are the same. Receiving via email via the telephone network;
A program for running A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network A computer configured as a Web terminal that performs infrared communication with the mobile terminal in order to perform login authentication to a Web site on a network in a Web authentication system including a mobile terminal that communicates via
Receiving the contents of the authentication ticket from the portable terminal by infrared communication;
Generating the contents of the authentication ticket received from the portable terminal by infrared communication as transfer information in a predetermined format;
A program for executing a step of displaying a Web page of a corresponding URL on a predetermined display device in response to a request from a user of the portable terminal after the authentication ticket is identified by the Web server. A Web server that provides a Web site on a network; a Web terminal that communicates with the Web server via a Web protocol; and transmitting internal data to the Web terminal using an infrared communication function; and the Web server and a mobile phone network In a computer configured as a Web server for performing login authentication to a Web site on a network in a Web authentication system including a mobile terminal that communicates via
Generating an authentication ticket in which URL information of a predetermined website is attached to a ticket composed of an authentication number generated by a random number;
Attaching the authentication ticket to the e-mail address of the mobile terminal and sending it by e-mail;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Performing a ticket identification process to confirm
If the ticket identification process succeeds in ticket identification, the URL information is extracted from information representing the contents of the authentication ticket, the Web page of the extracted URL is selected from a predetermined content database, and the Web terminal Establishing web communication with the web terminal for display on a display device;
A program for running

Images