JP2011248448A - Automatic authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an automatic authentication system using information unique to an apparatus as a substitute for ID or password so as to prevent unauthorized authentication due to spoofing even when the apparatus is used by a third person.SOLUTION: Apparatus unique information of respective apparatuses 111 in a peripheral apparatus group 11 that is associated with a user terminal device 12 is stored in a service device 13. The service device 13 generates an authentication condition on the basis of the apparatus unique information that is associated with the user terminal device 12 for transmitting an authentication request to transmit it to the user terminal device 12. The user terminal device 12 obtains the apparatus unique information depending on the received authentication condition, and generates authentication information to transmit it to the service device 13. The service device 13 performs authentication processing on the basis of the received authentication information.

Description

  The present invention relates to an automatic authentication system.

  In recent years, services and applications provided on networks such as the Internet have rapidly developed, and the accompanying advances in information home appliances have increased opportunities to use services and applications from various terminals in various locations. is doing.

  In these services and applications, by identifying the user, it is possible to provide functions specialized for the user's hobbies and preferences, and to handle personal information. In such services and applications that require individual user identification, authentication processing is indispensable, and authentication methods using IDs and passwords by character input are widely used.

  However, depending on the terminal that intends to use the service or application, character input may be difficult or impossible. Furthermore, in order to use many services and applications, many IDs and passwords must be stored, which is complicated. For this reason, a method of performing authentication instead of an ID or password by passing unique information of a terminal itself or a specific device through an authentication device is also used.

  In the technique disclosed in Patent Document 1, by transmitting the card unique information stored in the IC card owned by the user, the password information stored in the portable memory, and the portable memory ID to the authentication server, Authenticate without requiring ID or password entry.

JP 2004-234632 A

  However, an authentication method that uses information specific to a specific device as an alternative to an ID or password makes it possible to perform authentication by impersonating the user when the device is in the hands of another person due to theft or the like. There was a problem.

  Therefore, an object of the present invention is to provide an automatic authentication system that makes it impossible to perform unauthorized authentication by impersonation even if the device reaches another person's hand even though it is an authentication system that uses device-specific information as an alternative to an ID or password. It is to be.

  In the automatic authentication system of the present invention, device specific information of each device in the peripheral device group related to the user terminal device is registered in the service device, and the service device transmits the device specific information related to the user terminal device that transmitted the authentication request. The authentication condition is generated based on the authentication condition and transmitted to the user terminal device. The user terminal device acquires the device specific information according to the received authentication condition, generates the authentication information, and transmits the authentication information to the service device. Performs authentication processing based on the received authentication information.

  That is, the automatic authentication system of the present invention is an automatic authentication system including a user terminal device and a service device that communicates with the user terminal device and performs authentication processing of the user device. A service device information storage unit that stores device-specific information of a device related to the device in association with identification information of the user device; and the device of the device related to the user terminal device in response to an authentication request from the user terminal device Authentication condition generating means for generating an authentication condition based on device-specific information, and an authentication processing means for performing an authentication process based on authentication information received from the user terminal device, wherein the user terminal device In response, the device includes authentication information generation means for acquiring the device specific information and generating the authentication information based on the acquired device specific information. It is characterized in.

  The authentication processing unit may permit authentication when all the device-specific information included in the authentication condition is included in the authentication information.

  The user terminal device may include a storage unit that stores the device specific information of the related device, and may acquire the device specific information from the storage unit.

  The user terminal device may acquire the device specific information from the device when the device specific information necessary for generating the authentication information is not in the user terminal device information storage unit.

  The service device may generate the authentication condition according to a level of the authentication process.

  The service device may further include other authentication means for causing the user terminal device to perform authentication using an ID and a password by character input when the authentication processing fails.

  The automatic authentication method of the present invention includes a step of transmitting an authentication request from a user terminal device to a service device, and device specific information associated with the user terminal device in response to the reception of the authentication request in the service device. Generating the authentication condition based on the step, transmitting the authentication condition from the service device to the user terminal device, and acquiring the device specific information in response to the reception of the authentication condition in the user terminal device And generating authentication information based on the acquired device specific information, transmitting the authentication information from the user terminal device to the service device, and based on the received authentication information in the service device. And a step of performing an authentication process.

  According to the present invention, when using a service or application provided on a network such as the Internet and accompanied by an authentication process, the unique information of the device can be replaced with the input of an ID or a password. Even if it reaches the hand, the possibility of unauthorized authentication can be greatly reduced.

It is a schematic block diagram which shows an example of a structure of the automatic authentication system by this invention. It is a block diagram which shows an example of a structure of an apparatus. It is a block diagram which shows an example of a structure of a user terminal device. It is a block diagram which shows an example of a structure of a service apparatus. It is a sequence diagram which shows an example of the authentication process of the automatic authentication system by this invention. It is a flowchart explaining operation | movement of each component of a user terminal device in the process of an authentication request. It is a flowchart explaining operation | movement of each component of the service apparatus in the process of authentication condition production | generation / transmission request. It is a flowchart explaining operation | movement of each component of a user terminal device in the process of collection of the apparatus information which satisfy | fills conditions, the search in a database, and the transmission of apparatus specific information. It is a flowchart explaining operation | movement of each component of each apparatus contained in the peripheral apparatus group in the process of apparatus specific information collection / transmission. It is a flowchart explaining operation | movement of each component of the service apparatus in the process of condition conformity evaluation and authentication. It is a flowchart explaining operation | movement of each component of the service apparatus in the addition process of apparatus specific information. It is a flowchart explaining operation | movement of each component of a user terminal device in the addition process of apparatus specific information. It is a flowchart explaining operation | movement of each component of each apparatus contained in the peripheral device group in the addition process of apparatus specific information.

Hereinafter, an embodiment of an automatic authentication system according to the present invention will be described with reference to the drawings.
FIG. 1 is a schematic block diagram showing an example of the configuration of an automatic authentication system according to the present invention. The automatic authentication system 1 of the present invention includes a peripheral device group 11 including a plurality of devices 111, a user terminal device 12, and a service device 13. The peripheral device group 11 is a device used around the user terminal device 12 and communicates with the user terminal device 12 by wire such as a USB cable or wirelessly such as infrared or Bluetooth. The service device 13 communicates with the user terminal device 12 via a network such as the Internet, for example, and performs authentication processing of the user terminal device 12.

  FIG. 2 is a block diagram illustrating an example of the configuration of the device 111 in FIG. The device 111 includes an information transmission / reception unit 111 a for communicating with the user terminal device 12 and an information storage unit 111 b in which device specific information that is unique information for identifying the device 111 is stored. In response to the device specific information search request received from the user terminal device 12, the information transmission / reception unit 111 a reads the device specific information from the information storage unit 111 b and transmits it to the user terminal device 12.

  FIG. 3 is a block diagram showing an example of the configuration of the user terminal device 12 of FIG. The user terminal device 12 includes an information transmission / reception unit 121 for communicating with external elements, a transmission / reception information processing unit 122 for processing signals acquired or transmitted by communication, and an authentication information processing unit 123 for processing authentication information. An information storage unit 124 in which device specific information of each device 111 of the peripheral device group 11 is stored, a peripheral device specific information processing unit 125 that processes the device specific information, and an individual of each device 111 of the peripheral device group 11 And a level determination unit 126 that performs an identification level determination process.

  FIG. 4 is a block diagram showing an example of the configuration of the service device 13 of FIG. The service device 13 includes an information transmission / reception unit 131 for communicating with other components, a transmission / reception information processing unit 132 for processing a signal acquired or transmitted by communication, an authentication information processing unit 133 for processing authentication information, , A level determination unit 134 that performs determination processing of a personal identification level of authentication device specific information necessary for a service provided by the service device 13, and registration processing of device specific information of a device owned by a user attempting to authenticate the service device 13. A user information registration processing unit 135 that performs authentication, an authentication processing unit 136 that performs authentication processing, and an information storage unit 137 that stores a combination of a user count and device specific information. The authentication processing unit 136 is also connected to an authentication system (not shown) using a conventional user ID and password.

  FIG. 5 is a sequence chart showing an operation example of the automatic authentication system of FIG. The figure shows a sequence among the peripheral device group 11, the user terminal device 12, and the service device 13.

  When the user terminal device 12 issues a login request (step A1), the service device 13 receives the login request, determines the number of device specific information for each individual identification level necessary for authentication, and generates an authentication condition.

  When the service device 13 generates an authentication condition (step A2), the service device 13 transmits the authentication condition to the user terminal device 12, and requests transmission of authentication information that satisfies the authentication condition.

  The user terminal device 12 starts collecting device-specific information that satisfies the conditions from the received authentication conditions (step A3), and executes an inquiry to the database in the user terminal device 12 (step A4). When there is no device specific information that satisfies the requested condition in the database, a request for acquiring peripheral device specific information is transmitted to the peripheral device group 11, and the result is received (step A5).

  The user terminal device 12 generates authentication information from the collected device specific information and transmits it to the service device 13 (step A6).

  The service device 13 evaluates whether the received authentication information satisfies the authentication condition, and makes an authentication determination (step A7). Automatic authentication is performed when successful, and the result is notified to the user terminal device 12 when failed. At this time, the user terminal device 12 may be requested to register device-specific information not registered in the service device 13 and perform authentication again, or to authenticate using an ID and password.

  Processing of individual components in the operation of such an automatic authentication system will be described in more detail with reference to a flowchart.

  FIG. 6 is a flowchart for explaining the operation of each component of the user terminal device 12 in the process of step A1 (authentication request) in FIG.

  In step S101, when the user terminal device 12 is to be authenticated by the service device 13, for example, when an authentication request operation is performed by the user in the operation unit (not shown) of the user terminal device 12, the user terminal device 12 is external or user terminal. An authentication request signal generation request is transmitted from the other components in the apparatus 12 to the information transmission / reception unit 121, and the information transmission / reception unit 121 transmits the received authentication request signal generation request to the transmission / reception information processing unit 122.

  In step S <b> 102, the transmission / reception information processing unit 122 transmits the received authentication request generation request to the authentication information processing unit 123.

  In step S <b> 103, upon receiving the authentication request generation request, the authentication information processing unit 123 transmits the user ID read from the information storage unit 124 to the transmission / reception information processing unit 122 as an authentication request.

  In step S104, the transmission / reception information processing unit 122 transmits the received authentication request to the information transmission / reception unit 121 with the service device 13 as a destination.

  In step S <b> 105, the information transmitting / receiving unit 121 transmits the received authentication request to the service device 13.

  FIG. 7 is a flowchart for explaining the operation of each component of the service device 13 in the process of step A2 (authentication condition generation / transmission request) in FIG.

  In step S <b> 201, the information transmission / reception unit 131 transmits the authentication request received from the user terminal device 12 to the transmission / reception information processing unit 132.

  In step S <b> 202, the transmission / reception information processing unit 132 transmits the received authentication request to the authentication information processing unit 133.

  Upon receiving the authentication request, the authentication information processing unit 133 transmits a service identification level determination request to the level determination unit 134 in step S203, and simultaneously transmits a user inquiry request to the authentication processing unit 136 in step S204.

  In step S <b> 205, when receiving the service identification level determination request, the level determination unit 134 performs a personal identification level determination process, and transmits the service identification level value to the authentication information processing unit 133.

  In step S <b> 206, upon receiving the user inquiry request, the authentication processing unit 136 reads a device specific information list associated with the user ID included in the user introduction request from the information storage unit 137, and the authentication information processing unit 133. Send to.

  In step S207, when the authentication information processing unit 133 receives the service identification level value and the device unique information list, the authentication information processing unit 133 determines the number of device unique information for each individual identification level according to the service identification level value, and transmits and receives information as an authentication condition. The information is transmitted to the device 132, and the number of device specific information for each individual identification level is stored.

  In step S208, the transmission / reception information processing device 132 transmits the received authentication condition to the information transmission / reception unit 131 with the user terminal device as a destination.

  In step S <b> 209, the information transmitting / receiving unit 131 transmits the received authentication condition to the user terminal device 12.

  If the authentication processing unit 136 cannot acquire the device-specific information list in step S206, it is determined that the user terminal device that transmitted the authentication request is not registered, and a request for prompting new user registration is transmitted to the user terminal device 12. May be.

  FIG. 8 shows the operation of each component of the user terminal device 12 in the processing of step A3 (collection of device information satisfying conditions), step A4 (search in the database) and step A6 (transmission of device specific information) in FIG. It is a flowchart to explain.

  In step S <b> 301, the information transmission / reception unit 121 transmits the authentication condition received from the service device 13 to the transmission / reception information processing unit 122.

  In step S <b> 302, when the transmission / reception information processing unit 122 receives the authentication condition, the transmission / reception information processing unit 122 transmits an authentication information generation request corresponding to the authentication condition to the authentication information processing unit 123.

  In step S <b> 303, upon receiving the authentication information generation request, the authentication information processing unit 123 obtains from the information storage unit 124 the combination data of the device identification information and the individual identification level for each number of individual identification levels indicated by the authentication condition. Try.

  In step S304, if the number of device identification information and personal identification level data obtained for each individual identification level is less than the number of device specific information for each individual identification level indicated in the authentication condition, that is, the search condition is not satisfied. In this case, the process proceeds to step S305, and the number of pieces of acquired device unique information and personal identification level combination data for each individual identification level is equal to or greater than the number of pieces of device unique information for each individual identification level indicated by the authentication condition, that is, the search condition is If satisfied, the process proceeds to step S306.

  In step S <b> 305, the authentication information processing unit 123 transmits a device specific information update request to the transmission / reception information processing unit 122.

  In step S307, when the transmission / reception information processing unit 122 receives the device specific information update request, the transmission / reception information processing unit 122 transmits a device specific information registration request to the peripheral device specific information processing unit 125.

  In step S <b> 308, when the peripheral device specific information processing unit 125 receives the device specific information registration request, the peripheral device specific information processing unit 125 transmits a device specific information search request to the transmission / reception information processing unit 122.

  In step S309, the transmission / reception information processing unit 122 transmits the received device specific information search request to the information transmission / reception unit 121 with the peripheral device group 11 as a destination.

  In step S <b> 310, the information transmitting / receiving unit 121 transmits the received device specific information search request to the peripheral device group 11.

  In step S311, the information transmitting / receiving unit 121 receives the device specific information transmitted by the processing of step A5 (device specific information collection / transmission) in FIG. The processing of step A5 (device specific information collection / transmission) in FIG. 5 by the peripheral device group 11 will be described in detail later.

  In step S <b> 312, the information transmitting / receiving unit 121 transmits the received device specific information to the transmission / reception information processing unit 122.

  In step S313, the transmission / reception information processing unit 122 transmits the received device specific information to the peripheral device specific information processing unit 125.

  In step S314, when the peripheral device specific information processing unit 125 receives the device specific information, the peripheral device specific information processing unit 125 transmits a level determination request including the device specific information to the level determination unit 126.

  In step S315, when the level determination unit 126 receives the level determination request, the level determination unit 126 acquires the device type from the device specific information included in the level determination request, determines the personal identification level value, and determines the peripheral device specific information processing unit 125. Send the personal identification level value to.

  In step S316, the peripheral device specific information processing unit 125 transmits the device specific information and the personal identification level value to the information storage unit 124 as set data. At the same time, in step S317, the peripheral device specific information processing unit 125 transmits a device specific information update completion notification to the transmission / reception information processing unit 122.

  In step S318, the information storage unit 124 stores the received combination data of the device unique information and the personal identification level value.

  In step S319, the transmission / reception information processing unit 122 transmits the received device specific information update completion notification to the authentication information processing unit 123.

  In step S320, when the authentication information processing unit 123 receives the device unique information update completion notification, the authentication information processing unit 123 again transmits the device unique information of each number of personal identification levels and the combination data of the personal identification levels indicated by the authentication condition from the information storage unit 124. Try to get.

  When the search condition is satisfied in step S304, or after step S320, in step S306, the authentication information processing unit 123 transmits / receives the transmission / reception information processing unit 122 using the acquired combination data of the device specific information and the personal identification level as authentication information. Send to. Even if the number of pieces of device unique information and personal identification level combination data acquired in step S320 is less than the number of individual identification levels indicated in the authentication condition, the acquired device unique information and personal identification level set data are transmitted. To do.

  In step S321, the transmission / reception information processing unit 122 transmits the received authentication information to the information transmission / reception unit 121 with the service device 13 as a destination.

  In step S322, the information transmitting / receiving unit 121 transmits the received authentication information to the service device 13.

  FIG. 9 is a flowchart for explaining the operation of each component of each device 111 included in the peripheral device group 11 in the process of step A5 (device specific information collection / transmission) in FIG.

  In step S <b> 401, the information transmitting / receiving unit 111 a of each device 111 of the peripheral device group 11 receives a device specific information search request from the user terminal device 12.

  In step S402, the information transmission / reception unit 111a acquires device specific information from the information storage unit 111b.

  In step S403, the information transmission / reception unit 111a transmits the acquired device specific information to the user terminal device 12.

  FIG. 10 is a flowchart for explaining the operation of each component of the service device 13 in the process of step A7 (conditional compliance evaluation / authentication) in FIG.

  In step S <b> 501, the information transmitting / receiving unit 131 receives authentication information from the user terminal device 12.

  In step S <b> 502, the information transmission / reception unit 131 transmits the received authentication information to the transmission / reception information processing unit 132.

  In step S <b> 503, the transmission / reception information processing unit 132 transmits the received authentication information to the authentication information processing unit 133.

  In step S504, when the authentication information processing unit 133 receives the authentication information, the authentication information processing unit 133 stores, for each personal identification level, the number of sets of device specific information and personal identification level data included in the authentication information. Compare with the number of device-specific information. That is, it is determined whether or not the search condition is satisfied. If the number of group data for each individual identification level included in the authentication information is equal to or greater than the number of device-specific information for each individual identification level stored, the process proceeds to step S505, and the group data for each individual identification level included in the authentication information If the number is less than the number of device-specific information for each stored personal identification level, the process proceeds to step S506.

  In step S <b> 505, the authentication information processing unit 133 transmits authentication information to the authentication processing unit 136.

  In step S506, the authentication processing unit 136 inquires of the information storage unit 137 whether or not the user ID and the device specific information are associated with each device specific information included in the received authentication information.

  In step S507, the authentication processing unit 136 transmits the inquiry result to the authentication information processing unit 133.

  In step S508, if all device specific information is associated with the user ID in the inquiry result, the authentication information processing unit 133 proceeds to step S509, and there is device specific information that is not associated with the user ID. If YES, go to step S510.

  In step S509, the authentication information processing unit 133 transmits an authentication result indicating the authentication success to the transmission / reception information processing unit 132.

  If the search condition is not satisfied in step S504, or if there is device-specific information that is not associated with the user ID in step S508, the authentication information processing unit 133 determines that authentication has failed in step S510. Is transmitted to the transmission / reception information processing unit 132.

  In step S511, the transmission / reception information processing unit 132 transmits the received authentication result to the information transmission / reception unit 131 with the user terminal device 12 as a destination.

  In step S <b> 512, the information transmitting / receiving unit 131 transmits the received authentication result to the user terminal device 12.

  If authentication fails, conventional authentication may be performed. In this case, along with step S510, the authentication information processing unit 133 transmits a conventional method authentication request to the authentication processing unit 136. When the authentication processing unit 136 receives the conventional method authentication request, the authentication using the conventional user ID and password is performed. A conventional authentication process is performed by a system (not shown).

  If it is determined in step S504 that the authentication condition is not satisfied and the authentication fails, the user may be prompted to additionally register device specific information not included in the authentication information. The processing at this time will be described with reference to FIGS. FIG. 11 is a flowchart for explaining the operation of each component of the service device 13 in the device specific information addition process, and FIG. 12 is a flowchart for explaining the operation of each component of the user terminal device 12. These are flowcharts explaining the operation of each component of each device 111 included in the peripheral device group 11.

  At the same time as step S510 in FIG. 10, in step S601 in FIG. 11, the authentication information processing unit 133 of the service device 13 transmits a device specific information new registration request to the transmission / reception information processing unit 132.

  In step S602, the transmission / reception information processing unit 132 transmits the received device unique information new registration request to the user information registration processing unit 135.

  In step S <b> 603, when the user information registration processing unit 135 receives the device-specific information new registration request, the user information registration processing unit 135 transmits a conventional method authentication request to the authentication processing unit 136.

  In step S604, when the authentication processing unit 136 receives the conventional authentication request, the authentication processing unit 136 performs conventional authentication processing using an authentication system (not shown) using a conventional user ID and password.

  If the conventional authentication process is successful, the user information registration processing unit 135 transmits a device-specific information acquisition request to the transmission / reception information processing unit 132 in step S605.

  In step S606, the transmission / reception information processing unit 132 transmits the received device specific information acquisition request to the information transmission / reception unit 131 with the user terminal device 12 as a destination.

  In step S <b> 607, the information transmitting / receiving unit 131 transmits the received device specific information acquisition request to the user terminal device 12.

  In step S <b> 701 of FIG. 12, the information transmission / reception unit 121 of the user terminal device 12 transmits the device-specific information acquisition request received from the service device 13 to the transmission / reception information processing unit 122.

  In step S <b> 702, when the transmission / reception information processing unit 122 receives the device specific information acquisition request, the transmission / reception information processing unit 122 transmits a device specific information registration request to the peripheral device specific information processing unit 125. At this time, the display unit (not shown) may prompt the user to connect the device to the user terminal device 12 by displaying a device name that requires additional registration of the device specific information. Then, after receiving a user operation notifying that the device is connected to the user terminal device 12, the process may proceed to the next step.

  In step S <b> 703, when the peripheral device specific information processing unit 125 receives the device specific information registration request, the peripheral device specific information processing unit 125 transmits a device specific information search request to the transmission / reception information processing unit 122.

  In step S704, the transmission / reception information processing unit 122 transmits the received device specific information search request to the information transmission / reception unit 121 with the peripheral device group 11 as a destination.

  In step S <b> 705, the information transmitting / receiving unit 121 transmits the received device specific information search request to the peripheral device group 11.

  In step S <b> 801 of FIG. 13, the information transmitting / receiving unit 111 a of each device 111 of the peripheral device group 11 receives a device specific information search request from the user terminal device 12.

  In step S802, the information transmission / reception unit 111a acquires device specific information from the information storage unit 111b.

  In step S803, the information transmission / reception unit 111a transmits the acquired device specific information to the user terminal device 12.

  In step S <b> 706 of FIG. 12, the information transmission / reception unit 121 of the user terminal device 12 receives device specific information from each device 111 of the peripheral device group 11.

  In step S <b> 707, the information transmission / reception unit 121 transmits the received device specific information to the transmission / reception information processing unit 122.

  In step S708, the transmission / reception information processing unit 122 transmits the received device specific information to the peripheral device specific information processing unit 125.

  In step S <b> 709, when the peripheral device specific information processing unit 125 receives the device specific information, the peripheral device specific information processing unit 125 transmits a level determination request including the device specific information of the device that needs additional registration to the level determination unit 126. If there is no device specific information of a device that needs additional registration, a message indicating that registration of the device specific information has failed may be transmitted to the service device 13 via the transmission / reception information processing unit 122 and the information transmission / reception unit 121. Good.

  In step S710, when the level determination unit 126 receives the level determination request, the level determination unit 126 acquires a device type from the device specific information included in the level determination request, determines a personal identification level value, and determines the peripheral device specific information processing unit 125. Send the personal identification level value to.

  In step S711, the peripheral device specific information processing unit 125 transmits the device specific information and the personal identification level value to the information storage unit 124 as set data. At the same time, the peripheral device specific information processing unit 125 transmits a device specific information update completion notification to the transmission / reception information processing unit 122 in step S712.

  In step S713, the information storage unit 124 stores the received device unique information and personal identification level value set data.

  In step S714, the transmission / reception information processing unit 122 transmits the received device specific information registration completion notification to the information transmission / reception unit 121 with the service device 13 as a destination.

  In step S <b> 715, the information transmission / reception unit 121 transmits the received device specific information registration completion notification to the service device 13.

  In step S <b> 608 of FIG. 11, the information transmitting / receiving unit 131 of the service device 13 receives a device specific information registration completion notification from the user terminal device 12.

  In step S <b> 609, the information transmission / reception unit 131 transmits the received device specific information registration completion notification to the transmission / reception information processing unit 132.

  In step S <b> 610, the transmission / reception information processing unit 132 transmits the received device specific information registration completion notification to the authentication information processing unit 133.

  In step S611, the authentication information processing unit 133 receives the device unique information registration completion notification, and the device unique information addition processing ends.

  If it is determined in step S508 that there is device-specific information not associated with the user ID and authentication fails, new addition registration of the device may be performed in the same manner as the device-specific information addition process.

  The present invention can be used for an automatic authentication system.

DESCRIPTION OF SYMBOLS 1 Automatic authentication system 11 Peripheral device group 12 User terminal device 13 Service device 111 Device 111a Information transmission / reception part 111b Information storage part 121 Information transmission / reception part 122 Transmission / reception information processing part 123 Authentication information processing part 124 Information storage part 125 Peripheral apparatus specific information processing part 126 Level determination unit 131 Information transmission / reception unit 132 Transmission / reception information processing unit 133 Authentication information processing unit 134 Level determination unit 135 User information registration processing unit 136 Authentication processing unit 137 Information storage unit

Claims (7)

A user terminal device;
An automatic authentication system including a service device that communicates with the user terminal device and performs authentication processing of the user device,
The service device includes a service device information storage unit that stores device-specific information of a device related to the user device in association with identification information of the user device, and the user terminal device in response to an authentication request from the user terminal device An authentication condition generating unit that generates an authentication condition based on the device specific information of the device related to the, and an authentication processing unit that performs an authentication process based on the authentication information received from the user terminal device,
The automatic authentication system, wherein the user terminal device includes an authentication information generation unit that acquires the device specific information according to the authentication condition and generates the authentication information based on the acquired device specific information.   The automatic authentication system according to claim 1, wherein the authentication processing unit permits authentication when the device-specific information included in the authentication condition is all included in the authentication information.   3. The automatic authentication system according to claim 1, wherein the user terminal device includes a storage unit that stores the device specific information of the related device, and acquires the device specific information from the storage unit. .   The said user terminal device acquires the said device specific information from the said device, when the said device specific information required for the production | generation of the said authentication information does not exist in the said user terminal device information storage part. Automatic authentication system.   The automatic authentication system according to claim 1, wherein the service device generates the authentication condition according to a level of the authentication process.   The said service apparatus is further provided with the other authentication means to perform the authentication which uses ID and a password by a character input with respect to the said user terminal device, when the said authentication process fails. The automatic authentication system according to any one of claims. Transmitting an authentication request from the user terminal device to the service device;
In the service device, in response to receiving the authentication request, generating an authentication condition based on device-specific information associated with the user terminal device;
Transmitting the authentication condition from the service device to the user terminal device;
In the user terminal device, in response to receiving the authentication condition, acquiring the device specific information, and generating authentication information based on the acquired device specific information;
Transmitting the authentication information from the user terminal device to the service device;
An automatic authentication method comprising: performing authentication processing based on the received authentication information in the service device.

Images