JP2015099470A - System, method, and server for authentication, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication technology that can prevent, even when an information portable terminal carried by a user has been stolen, impersonation of the user by the stealer.SOLUTION: A character string creation unit 21 in a server 2 creates a character string. An information transmission unit 22 in the server 2 transmits information including the created character string and a unique ID to an information portable terminal carried by a user. A transmission unit 31 in the information portable terminal 3 transmits the speech sound for the character string read by the user to the server through the communication to the unique ID. An authentication unit 23 in the server 2 performs authentication of the user by using the speech sound for the character string received from the information portable terminal.

Description

  The present invention relates to a technique for authenticating a user in a network system. In particular, the present invention relates to two-path authentication technology.

  A technique of two-path authentication using a mobile phone as a security token is known (for example, see Patent Document 1).

JP 2001-350724 A

  However, in the technique of Patent Document 1, when a mobile phone is stolen, there is a possibility that the theft can impersonate the user.

  An object of the present invention is to provide an authentication system, method, server, and program capable of preventing spoofing by the theft even if the portable information terminal owned by the user is stolen.

  According to the authentication method according to one aspect of the present invention, a telephone network (including equivalent technology) is used for identity verification or intention verification on the Internet.

  According to the authentication system of another aspect of the present invention, a character string generation unit that generates a character string, and an information transmission unit that transmits information including a character string and a unique ID generated in an information portable terminal owned by the user And a server including an authentication unit that authenticates the user using the voice of the character string received from the portable information terminal, and a transmission unit that transmits the voice of the character string read by the user to the server through communication with the unique ID And a portable information terminal.

  According to the authentication system according to another aspect of the present invention, an information transmission unit that transmits information including a unique ID to an information portable terminal owned by the user, and a user using information about the user's face received from the information portable terminal And an information portable terminal including a transmitting unit that transmits information about the user's face to the server through video communication to the unique ID.

  According to the authentication system of another aspect of the present invention, the information transmission unit that transmits information including the server address to the information portable terminal owned by the user, and the information about the user's fingerprint received from the information portable terminal are used. A server including an authentication unit that performs user authentication, and an information portable terminal including a transmission unit that transmits information about the user's fingerprint to a server specified by an address.

  This is a case in which the information portable terminal owned by the user is stolen by performing authentication using information about the physical characteristics and behavioral characteristics of the user's voice, face, fingerprint, etc. entered on the information portable terminal. However, it is possible to prevent spoofing by the theft.

  In addition, when an oath is recorded, it is possible to prevent the denial of a legitimate user. In addition, when SMS and one-time phone numbers are used, it is used in (A) countries that do not take measures against caller ID counterfeiting, such as Japan, which was a problem with the method of calling a server (Japanese Patent No. 3497799). (B) It can solve the problem of impersonating a change of the transfer setting of a method in which a call is received from a server such as google. In addition, when an oath is sent from another route, a man-in-the-middle attack can be prevented. Also, if you change the oath every time, you can record the voice and reuse it to prevent impersonation. In addition, when a one-time URL is transmitted, it can also be used for authentication of a smartphone site. Also, if only basic functions are used, such as SMS and voice calls, it can be implemented on any mobile phone. Further, when a client certificate is used, it is possible to save time and effort.

The block diagram for demonstrating the example of the authentication system of 1st embodiment. The figure for demonstrating the example of the authentication phase of 1st embodiment. The figure for demonstrating the example of a registration phase. The block diagram for demonstrating the example of the authentication system of 2nd embodiment and 3rd embodiment. The figure for demonstrating the example of the authentication phase of 2nd embodiment. The figure for demonstrating the example of the authentication phase of 3rd embodiment.

[First embodiment]
As shown in FIG. 1, the authentication system according to the first embodiment includes, for example, a PC 1, a server 2, and an information portable terminal 3. The server 2 includes, for example, a character string generation unit 21, an information transmission unit 22, an authentication unit 23, a service providing unit 24, and an information storage unit 25. The authentication unit 23 includes a voiceprint generation unit 231, for example. The information portable terminal 3 includes a transmission unit 31, for example.

  The PC 1 is an information device that can access a website using a web browser such as a personal computer, a smartphone, or a tablet. The PC 1 may be the same as the information portable terminal 3.

  The authentication system executes the steps shown in FIG. 2, for example, thereby realizing the authentication method of the first embodiment. Note that the authentication system may perform each step of the registration phase illustrated in FIG. 3 as necessary. That is, the authentication method may include each step of the registration phase illustrated in FIG.

  The information portable terminal 3 is an information portable terminal to which a unique ID that is a telephone number, for example, such as a cellular phone, a PHS, or a smartphone is assigned. The unique ID is a unique identifier for identifying the terminal. Hereinafter, a case where the unique ID is a telephone number will be described as an example.

  Hereinafter, authentication when using a service such as transfer in online banking will be described as an example. The authentication for receiving a predetermined service described below will be referred to as <authentication phase>.

<Authentication phase>
An example of data exchange in the authentication phase is shown in FIG.

  The user starts up a web browser of the PC 1, accesses an online banking web page, and logs in to the online banking by inputting an ID and a password. Then, in order to transfer a predetermined transfer amount to a predetermined transfer destination, the user inputs information about the transfer destination and the transfer amount. This information may include the user ID. The input information is transmitted from the PC 1 to the server 2. The transmission of information from the PC 1 to the server 2 is a trigger for user authentication by the server 2.

  The character string generation unit 21 of the server 2 generates a character string (step S1). The generated character string is transmitted to the information transmission unit 22.

  For example, when the online banking name is B-Bank, the user's name is Alice, the transfer destination account number is X, and the transfer amount is Y, the character string generation unit 21 reads “I , Alice transfers Y Yen into account number X. Session number is 4958 ".

  Thus, the character string may include the content as an oath. Further, as in this example, the session number may be included. The session number is a different number each time generated by a predetermined one-way function.

  The information transmission part 22 transmits the information containing the character string and telephone number which were produced | generated by the information portable terminal 3 which a user owns (step S2). The information transmission part 22 transmits the information containing the produced | generated character string and telephone number to an information portable terminal, for example by SMS (short message service). Of course, the information transmission unit 22 may transmit information including a generated character string and a telephone number to the information portable terminal 3 by a service such as ESM (enhanced messaging service) or MMS (multimedia messaging service). .

  In the case of the above example, the information including the generated character string and telephone number is, for example, “This is B-Bank. The following oath is processed. If you agree, (1) 60 seconds Within, call 050-1111-1111 and read (2) the following oath: “I, Alice transfers Y yen to account number X. Session number is 4958.” .

  The telephone number transmitted to the information portable terminal 3 may be a fixed telephone number or a one-time telephone number. A one-time telephone number is a telephone number that is valid only once or only within a predetermined time.

  When the information portable terminal 3 receives information including the generated character string and telephone number, the user calls the telephone number and reads the character string. Thereby, the voice of the character string read out by the user is transmitted to the server 2 through a call to the telephone number. In other words, the transmitting unit 31 of the portable information terminal 3 transmits the voice of the character string read out by the user to the server 2 through a call to the telephone number (step S3).

  The authentication unit 23 of the server 2 authenticates the user using the voice of the character string received from the information portable terminal 3 (step S4). The authentication result is transmitted to the PC 1 and the service providing unit 24.

  For example, the authentication unit 23 performs user authentication based on the received voice of the character string and information on the user's voice stored in advance in the information storage unit 25. That is, the authentication unit 23 generates a voice voice print of the received character string, and the generated voice print and the voice print of the user voice obtained from the information about the user voice stored in the information storage unit 25 in advance. Based on the above, it is determined whether both voices belong to the same person. If it is determined that both voices belong to the same person, the user can be determined to be a legitimate user, so that the authentication is successful. On the other hand, if it is not determined that both voices belong to the same person, the user cannot be determined to be a legitimate user, and authentication fails.

  The generation of the voiceprint in the authentication unit 23 is performed by the voiceprint generation unit 231 of the authentication unit 23.

  The information about the user's voice stored in advance may be the user's voice itself or information about the voice print of the user's voice. When the information about the user's voice stored in advance is the user's voice itself, the voiceprint generator 231 generates a voiceprint from the voice. When the information about the voice of the user stored in advance is information about the voice print of the user's voice, the above determination is performed based on the information about the voice print of the user.

  Note that the authentication unit 23 further determines whether the session number obtained by recognizing the voice of the received character string and the session number included in the character string generated by the character string generation unit 21 are the same. May be. In this case, if it is determined that both voices belong to the same person and that both session numbers are the same, the authentication is successful. If it is determined that both voices do not belong to the same person and / or that both session numbers are not the same, the authentication fails.

  If the authentication is successful, the service providing unit 24 provides a service to the user (step S5).

  In the case of the above example, the service providing unit 24 executes a service of transferring Y yen to the account number X.

  In this way, by performing authentication using the user's voice input at the information portable terminal, even if the information portable terminal owned by the user is stolen, impersonation by the theft can be prevented. it can.

  Note that information about the user's voice stored in advance may be registered by the <registration phase> described below.

<Registration phase>
An example of data exchange in the registration phase is shown in FIG.

  The user fills in the application form with information such as the ID and telephone number of his / her information portable terminal, and mails it to the server operator of the server 2 (B-Bank in the above example) after signing or stamping his / her own letter. . For example, this mail is a trigger, and the following processing is performed.

  The character string generation unit 21 of the server 2 generates a registered character string (step R1). The generated registered character string is transmitted to the information transmission unit 22.

  The character string generation unit 21 generates, for example, a registered character string “I, Alice registers a voiceprint in B-Bank. Today's date is OO”.

  As in this example, the character string may include the content as an oath.

  The information transmission part 22 transmits the information containing the registration character string and telephone number which were produced | generated by the information portable terminal 3 which a user owns (step R2). The information transmission part 22 transmits the information containing the produced | generated character string and telephone number to an information portable terminal, for example by SMS (short message service). Of course, information including the generated registration character string and the telephone number may be transmitted to the information portable terminal 3 by a service such as ESM (enhanced messaging service) or MMS (multimedia messaging service).

  In the case of the above example, the information including the registered character string and the telephone number generated is, for example, “This is B-Bank. The following oath is processed. If you agree, (1) 60 Within seconds, call 050-1111-1111 and (2) read the following oath: “I, Alice will register a voiceprint with B-Bank. Today ’s date is ○○.” Is. This information may be displayed on a WEB screen, for example, or may be displayed by an application.

  The telephone number transmitted to the information portable terminal 3 may be a fixed telephone number or a one-time telephone number. A one-time telephone number is a telephone number that is valid only once or only within a predetermined time.

  Information about the portable information terminal 3 owned by the user, which is a transmission destination of information including a registered character string and a telephone number, is specified by an application form mailed by the user to the server operator.

  When the information portable terminal 3 receives information including the generated registered character string and telephone number, the user calls the telephone number and reads the registered character string. Thereby, the voice of the registered character string read out by the user is transmitted to the server 2 through a call to the telephone number. In other words, the transmission unit 31 of the portable information terminal 3 transmits the voice of the registered character string read out by the user to the server 2 through a call to the telephone number (step R3).

  The authentication unit 23 of the server 2 authenticates the user using the voice of the registered character string received from the information portable terminal 3 (step R4).

  For example, the authentication unit 23 determines whether the character string obtained by voice recognition of the received voice of the registered character string matches the registered character string transmitted to the information portable terminal 3. If it is determined that they match, the user can be determined to be a legitimate user, and thus the authentication is successful. On the other hand, if it is not determined that they match, the user cannot be determined to be a legitimate user, and authentication fails.

  If the authentication is successful, the authentication unit 23 registers the user (step R5). Specifically, information about the user's voice is stored in the information storage unit 25. The information about the user's voice may be the voice itself of the registered character string of the user or the information about the voice print of the registered character string of the user. The user ID and the telephone number of the information portable terminal 3 may be stored together.

[Second Embodiment]
In the first embodiment, authentication is performed using the user's voice input from the information portable terminal. On the other hand, in 2nd embodiment, it authenticates using the information about the user's face input with the information portable terminal.

  The following description will focus on the parts that are different from the first embodiment, and the description of the same parts as in the first embodiment will be omitted.

  Unlike the first embodiment, the server 2 of the second embodiment does not include the character string generation unit 21. That is, the server 2 of the second embodiment includes an information transmission unit 22, an authentication unit 23, a service providing unit 24, and an information storage unit 25 as illustrated in FIG. Further, unlike the first embodiment, the authentication unit 23 of the second embodiment does not include the voiceprint generation unit 231.

  An example of data exchange in the authentication phase in the second embodiment is shown in FIG.

  The server 2 of the second embodiment transmits information including a telephone number to the information portable terminal 3 owned by the user (step S2). Unlike the first embodiment, the character string is not transmitted to the information portable terminal 3.

  When the information portable terminal 3 receives information including a telephone number, the user makes a video call to the telephone number. Thereby, information about the user's face is transmitted to the server 2 through a video call to the telephone number. In other words, the transmitting unit 31 of the portable information terminal 3 transmits information about the user's face to the server 2 through a video call to the telephone number (step S3).

  The authentication unit 23 of the server 2 authenticates the user using information about the user's face received from the information portable terminal 3 (step S4).

  The authentication unit 23 reads, for example, information about the user's face stored in advance in the information storage unit 25, and uses the read information and information about the user's face received from the information portable terminal 3, It is determined whether both pieces of information belong to the same person. If it is determined that both pieces of information belong to the same person, the user can be determined to be a legitimate user, and thus the authentication is successful. On the other hand, if it is not determined that both pieces of information belong to the same person, the user cannot be determined to be a legitimate user, and authentication fails.

  Information about the user's face stored in advance in the information storage unit 25 may be registered in the same manner as in the registration phase described in the first embodiment.

  In this way, by performing authentication using information about the user's face input on the information portable terminal, even if the information portable terminal owned by the user is stolen, the spoofing by the theft is prevented. can do.

[Third embodiment]
In the first embodiment, authentication is performed using the user's voice input from the information portable terminal. On the other hand, in the third embodiment, authentication is performed using information about the user's fingerprint input from the information portable terminal.

  The following description will focus on the parts that are different from the first embodiment, and the description of the same parts as in the first embodiment will be omitted.

  Unlike the first embodiment, the server 2 of the third embodiment does not include the character string generation unit 21. That is, the server 2 of the third embodiment includes an information transmission unit 22, an authentication unit 23, a service providing unit 24, and an information storage unit 25 as illustrated in FIG. Further, unlike the first embodiment, the authentication unit 23 of the third embodiment does not include the voiceprint generation unit 231.

  An example of data exchange in the authentication phase in the third embodiment is shown in FIG.

  The server 2 of the third embodiment transmits information including the address of the server 2 to the information portable terminal 3 owned by the user (step S2). Unlike the first embodiment, the character string is not transmitted to the information portable terminal 3.

  The address transmitted to the information portable terminal 3 may be a fixed address or a one-time address. A one-time address is an address that is valid only once or only within a predetermined time.

  When the information including the address of the server 2 is received by the information portable terminal 3, the user accesses the server specified by the address using the information portable terminal 3 and transmits information about the user's fingerprint to the access destination server. To do. As a result, information about the user's fingerprint is transmitted to the server 2. In other words, the transmission unit 31 of the portable information terminal 3 transmits information about the user's fingerprint to the server 2 (step S3).

  The authentication unit 23 of the server 2 authenticates the user using the information about the user's fingerprint received from the information portable terminal 3 (step S4).

  For example, the authentication unit 23 reads the information about the user's fingerprint stored in advance in the information storage unit 25, and uses the read information and the information about the user's fingerprint received from the information portable terminal 3, It is determined whether both pieces of information belong to the same person. If it is determined that both pieces of information belong to the same person, the user can be determined to be a legitimate user, and thus the authentication is successful. On the other hand, if it is not determined that both pieces of information belong to the same person, the user cannot be determined to be a legitimate user, and authentication fails.

  The information about the user's fingerprint stored in advance in the information storage unit 25 may be registered in the same manner as the registration phase described in the first embodiment.

  In this way, by performing authentication using information about the user's fingerprint input on the information portable terminal, even if the information portable terminal owned by the user is stolen, the spoofing by the theft is prevented. can do.

  The present invention can be summarized as follows, for example. The present invention can be said to be an authentication method, a server, and a program that use a telephone network (including equivalent technology) for identity verification or intention verification on the Internet. Here, the telephone network may be SMS, voice call, or (mobile) Internet (such as an authentication application). In addition, as a method of identity verification, there are voiceprint determination, face determination, or fingerprint determination via a telephone network. In addition, as a method for confirming intention, the contents of the transaction may be read out and confirmed or recorded. As a transaction content notification method, WEB screen display, voice call, SMS, or application may be used. Further, the communication direction of the telephone network may be from the server to the telephone terminal or from the telephone network to the server. Further, in the case of SMS and when the communication direction is from the server to the telephone terminal, the server telephone number may also be transmitted. Furthermore, the incoming number authentication may be made possible by transmitting the one-time telephone number, and the property confirmation may be made more strict. In addition, by attaching a one-time URL, it may be applicable to authentication of a site in a smartphone.

[Modifications, etc.]
The various processes described above are not only executed in time series according to the description, but may also be executed in parallel or individually as required by the processing capability of the apparatus that executes the processes. Needless to say, other modifications are possible without departing from the spirit of the present invention.

  In the above embodiment, the “call” may be “communication” including a call.

  When the above configuration is realized by a computer, the processing contents of the functions that each device should have are described by a program. By executing this program on a computer, the above processing functions are realized on the computer. The program describing the processing contents can be recorded on a computer-readable recording medium. An example of a computer-readable recording medium is a non-transitory recording medium. Examples of such a recording medium are a magnetic recording device, an optical disk, a magneto-optical recording medium, a semiconductor memory, and the like.

  This program is distributed, for example, by selling, transferring, or lending a portable recording medium such as a DVD or CD-ROM in which the program is recorded. Furthermore, the program may be distributed by storing the program in a storage device of the server computer and transferring the program from the server computer to another computer via a network.

  A computer that executes such a program first stores, for example, a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. When executing the process, this computer reads a program stored in its own recording device and executes a process according to the read program. As another execution form of the program, the computer may read the program directly from the portable recording medium and execute processing according to the program, and each time the program is transferred from the server computer to the computer. The processing according to the received program may be executed sequentially. The above-described processing may be executed by a so-called ASP (Application Service Provider) type service that realizes a processing function only by an execution instruction and result acquisition without transferring a program from the server computer to the computer. Good.

  In the above embodiment, the processing functions of the apparatus are realized by executing a predetermined program on a computer. However, at least a part of these processing functions may be realized by hardware.

2 Server 21 Character string generation unit 22 Information transmission unit 23 Authentication unit 231 Voiceprint generation unit 24 Service provision unit 25 Information storage unit 3 Information portable terminal 31 Transmission unit

Claims (19)

  An authentication method that uses a telephone network (including equivalent technologies) for identity verification or intention confirmation on the Internet. The authentication method according to claim 1, comprising:
An authentication method in which the telephone network is SMS, voice call, or (mobile) Internet (such as an authentication application). The authentication method according to claim 1, comprising:
An authentication method that is voice print determination, face determination, or fingerprint determination via the telephone network as the method of identity verification. The authentication method according to claim 1, comprising:
As a method for confirming the intention, an authentication method for reading out the transaction contents and confirming or recording the voice. The authentication method according to claim 1, comprising:
Authentication method using WEB screen display, voice call, SMS or application as a notification method of transaction details. The authentication method according to claim 5, comprising:
An authentication method in which the communication direction of the telephone network is a server to a telephone terminal or a telephone network to a server. The authentication method according to claim 5, comprising:
In the case of the above-mentioned SMS and when the direction of communication is from a server to a telephone terminal, an authentication method that conveys the server's telephone number as well. The authentication method according to claim 7, comprising:
In addition, an authentication method that makes it possible to authenticate the incoming call number by transmitting a one-time telephone number and to make the property confirmation more strict. The authentication method according to claim 7, comprising:
An authentication method that can also be applied to authentication on smartphone sites by adding a one-time URL.   An authentication server that uses a telephone network (including equivalent technologies) for identity verification or intention confirmation on the Internet.   An authentication program that uses the telephone network (including equivalent technologies) for identity verification or intention confirmation on the Internet. A character string generation unit that generates a character string; an information transmission unit that transmits information including the generated character string and a unique ID to an information portable terminal owned by a user; and the character string received from the information portable terminal A server including an authentication unit that authenticates the user using the voice of
The information portable terminal including a transmitter that transmits the voice of the character string read out by the user to the server through communication with the unique ID;
Including authentication system. The authentication system of claim 12,
The unique ID is a one-time telephone number.
Authentication system. The authentication system according to claim 12 or 13,
The authentication unit authenticates the user based on the received voice of the character string and information about the user's voice stored in advance.
Authentication system. 15. The authentication system of claim 14, comprising:
The character string generation unit generates a registered character string,
The information transmission unit transmits information including the generated registered character string and a unique ID to the information portable terminal,
The transmitter transmits the voice of the registered character string read out by the user to the server through communication with the unique ID,
The authentication unit authenticates the user using the voice of the registered character string received from the information portable terminal, and stores the information about the voice of the registered character string in advance when the authentication is successful. Stored as information about the user's voice,
Authentication system. A server including an information transmission unit that transmits information including a unique ID to an information portable terminal owned by a user, and an authentication unit that authenticates the user using information about the user's face received from the information portable terminal When,
The information portable terminal including a transmitting unit that transmits information about the user's face to the server through video communication to the unique ID;
Including authentication system. An information transmission unit that transmits information including a server address to an information portable terminal owned by the user, and an authentication unit that authenticates the user using information about the user's fingerprint received from the information portable terminal The server,
The information portable terminal including a transmitting unit that transmits information about the fingerprint of the user to a server specified by the address;
Including authentication system. A character string generation step in which a character string generation unit of the server generates a character string;
An information transmission step in which the information transmission unit of the server transmits information including the generated character string and the unique ID to the information portable terminal owned by the user;
A transmitting step in which the transmitting unit of the information portable terminal transmits the voice of the character string read out by the user to the server through communication with the unique ID;
An authentication step in which the authentication unit of the server authenticates the user using the voice of the character string received from the information portable terminal;
An authentication method that includes:   The program for functioning a computer as each part of the server of the authentication system in any one of Claim 12 to 17.

Images