JP2015176565A - Information processing system, information processing method and information processing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing system, an information processing method and an information processing program that allow for access to a server or execution of a function even when a user does not memorize an ID or password.SOLUTION: An information processing system having a server holding content data and an information terminal holding the content data comprises: log-in information registration means that conducts a registration of log-in information for use in user authentication; log-in information loading means that loads the log-in information registered by the log-in information registration means in the content data; reception means that conducts reception of the content data having the log-in information loaded; log-in information restoration means that restores the log-in information from the content data when the reception means receives the content data having the log-in information loaded; and authentication means that conducts user authentication according to the log-in information restored by the log-in information restoration means.

Description

  The present invention relates to an authentication technique in an information processing system.

  In order to limit access to the server and functions that can be used by the user, a technique for requesting authentication information such as an ID and a password from the user and performing user authentication is already known.

  For example, a technique is already known in which a password is given to content to be displayed to the user, and the user is requested to input authentication information when the content is erased (see, for example, Patent Document 1).

  The conventional technique that requires the user to input authentication information such as an ID and password is effective in restricting access and functions. However, the conventional technique has a problem that the user must store the authentication information accurately, and if the user forgets the authentication information, the server cannot be accessed or the function cannot be executed.

  The present invention has been proposed in view of the above-described conventional problems, and an object thereof is to provide an information processing system that allows a user to access a server and execute functions without storing an ID or password. An information processing method and an information processing program are provided.

  An information processing system having a server that holds content data and an information terminal that holds the content data, and is registered by a login information registration unit that registers login information used for user authentication, and the login information registration unit. Login information incorporating means for incorporating the login information into the content data, receiving means for receiving the content data in which the login information is incorporated, and the content data in which the login information is incorporated by the receiving means. When received, the information processing apparatus includes login information restoring means for restoring the login information from the content data, and authentication means for performing user authentication according to the login information restored by the login information restoring means.

  In the present invention, the user can access the server and execute the function without storing the authentication information.

It is a figure which shows an example of the system configuration | structure of the information processing system in this embodiment. It is a figure which shows an example of the hardware constitutions of the server in this embodiment. It is a figure which shows the function structural example of the server in this embodiment. It is a figure which shows an example of the data structure memorize | stored in the user data storage part in this embodiment. It is a figure which shows an example of conversion of the login information in this embodiment. It is a figure which shows an example of the designation | designated screen of the content incorporating the login information in this embodiment. It is a figure which shows an example of the login screen in this embodiment. It is a sequence diagram which shows the flow from registration of login information in this embodiment to acquisition of content data including login information. It is a sequence diagram which shows the flow of the user authentication using the content data containing the login information in this embodiment. It is a sequence diagram which shows the flow until a login content is changed from the login information change request in this embodiment.

  Reference will now be made to non-limiting exemplary embodiments of the invention with reference to the accompanying drawings.

<System configuration>
FIG. 1 is a diagram illustrating an example of a system configuration of an information processing system 1 in the present embodiment. The information processing system 1 in this embodiment includes a server 2 and an information terminal 3, and the server 2 and the information terminal 3 are connected via a network such as a LAN (Local Area Network).

  The server 2 performs user registration, change, deletion, and user authentication. In addition, the server 2 creates content data (hereinafter referred to as login content) including login information including a user ID and a password, and sends the content data to the information terminal 3. After completing the user authentication, the server 2 provides a service to the information terminal 3. The server 2 may be configured to distribute each function to one or more devices.

  The information terminal 3 sends to the server 2 content data (hereinafter referred to as login content) including login information including a user ID and a password. The information terminal 3 is an information processing terminal such as a PC (Personal Computer), a tablet, or a smartphone used by a user.

<Hardware configuration>
FIG. 2 is a diagram illustrating an example of a hardware configuration of the server 2 in the present embodiment. The server 2 in FIG. 2 includes an input device 201, an output device 202, a drive device 203, an interface device 205, an auxiliary storage device 206, a memory device 207, and a CPU 208, which are connected by a bus B. A storage medium 204 is connected to the drive device 203.

  The input device 201 is used for inputting various signals, and includes a keyboard, a mouse, and the like. The output device 202 includes a display device and is used to display various windows, data, and the like. The drive device 203 is used for reading or writing data from the storage medium 204. As the storage medium 204, various types of storage media such as a CD-ROM (Compact Disk-Read Only Memory), a magneto-optical disk, and a semiconductor memory such as a flash memory can be used. The interface device 205 is used to connect to a network, and includes a modem, a LAN card, and the like.

  The auxiliary storage device 206 is used to store programs, files, data, and the like necessary for execution of processing, and includes a hard disk drive device and the like. The memory device 207 is used for temporarily storing programs and information for executing arithmetic processing, and is configured by a semiconductor memory or the like. The CPU 208 is used for executing various processes in accordance with programs stored in the memory device 207.

  When the storage medium 204 storing the program is set in the drive device 203, the program is installed from the storage medium 204 to the auxiliary storage device 206 via the drive device 203. Installation of the program is not limited to being performed from the storage medium 204, and the program may be downloaded via the network and performed via the interface device 205.

  The memory device reads the program from the auxiliary storage device 206 in response to the activation request from the CPU 208 and stores it in the memory device 207. The CPU 208 executes various arithmetic processes according to programs stored in the memory device 207.

  The information terminal 3 in the present embodiment only needs to have the same hardware configuration as that of the server 2.

<Functional configuration>
Next, the functional configuration of the server 2 configuring the information processing system 1 will be described. FIG. 3 is a diagram showing a functional configuration example of the server 2 in the present embodiment. In FIG. 3, these units are realized by processing executed by the CPU 208 by one or more programs installed in the server 2.

  The server 2 includes a user data management unit 21, a user data storage unit 22, a login information conversion unit 23, a login information incorporation unit 24, a login content reception unit 25, a login information restoration unit 26, and a user authentication unit 27.

  The user data management unit 21 has a function of registering / updating / deleting user data including login information and transmitting login contents to the user.

  The user data management unit 21 registers login information including the user ID and password of the user. The registered login information may be input from the user, or the user data management unit 21 may automatically set the login information. Thereafter, the user data management unit 21 stores the login information as user data in the user data storage unit 22. After saving the login information, the user data management unit 21 requests that the login information be converted and divided into a format that can be incorporated into the content data. When the login information is not converted or divided, the user data management unit 21 requests the login information incorporation unit 24 to incorporate the login information into the content data. The user data management unit 21 receives content data uploaded from the user and stores it in the user data storage unit 22.

  The user data management unit 21 receives the content data in which the login information is incorporated from the login information incorporation unit 24, and transmits the content data in which the login information is incorporated (login content) to the user.

  The user data storage unit 22 has a function of storing user data including login information. User data is stored in file format or database format. The user data storage unit 22 can be realized using the auxiliary storage device 102. FIG. 4 is a diagram illustrating a configuration example of user data stored in the user data storage unit 22.

  “User ID” is information used to identify a user. The “user ID” is unique and includes letters, numbers, symbols, and combinations thereof. The user ID may be designated by the user or automatically assigned by the server 2.

  “Password” is information used in association with a user ID when performing authentication. The “password” may be designated by the user or automatically set by the server 2.

  “Conversion data” is information indicating the converted login information. When the converted login information is divided, it is stored for each divided element.

  “User content” is information indicating content data held for each user. “User content” includes images, moving images, files, and the like. “User content” can be used as content data into which login information is incorporated, if the user instructs.

  Returning to FIG. 3, the login information conversion unit 23 has a function of converting / dividing login information from the user data management unit 21.

  FIG. 5 is a diagram illustrating an example in which login information is converted and divided into two pieces of data. In the example illustrated in FIG. 5, the login information conversion unit 23 converts the login information by inserting the password value “123456789123” before the even-numbered value of the user ID “Administrator” of the login information. The login information conversion unit 23 divides the converted login information “A1d2m3i4n5i6s7t8r9a1t2o3r” into two pieces of conversion data “A1d2m3i4n5i” and “6s7t8r9a1t2o3r”. The method for converting / dividing the login information is not limited to the method described in FIG. 5, and other methods may be used. Further, the number of divisions is not limited to two, and an arbitrary number may be set. When login information is not divided, the user data management unit 21 does not request login information conversion, and may request the login information incorporation unit 24 to incorporate unconverted login information into content data. Good.

  Returning to FIG. 3, after the login information is converted / divided, the login information conversion unit 23 duplicates the converted data of the converted / divided login information with the converted data of other users' converted / divided login information. It is determined by referring to the user data stored in the user data storage unit 22. If it overlaps with another user, the login information conversion unit 23 converts and divides the login information again. When there is no duplication with other users, the login information conversion unit 23 requests the login information incorporation unit 24 to incorporate the converted data into the content data.

  The login information incorporation unit 24 is a function for incorporating conversion data, which is an element as a result of conversion and division of login information by the login information conversion unit 23, into content data. The login information incorporation unit 24 incorporates the conversion data into the content data stored in the auxiliary storage device 206 to generate login content. The login information incorporation unit 24 transmits the generated login content to the user data management unit 21.

  Note that the content data into which the login information is incorporated may be content data that the user holds in the user data storage unit 22. When the user designates content data into which login information is to be incorporated, as shown in FIG. 6, content data is designated by displaying a list of content data G2 on the content selection screen G1 and a check box G3 for each content data. This may be done by allowing the user to select content data that incorporates login information.

  The content data is not limited to image data, but is an icon, a text file, or the like. The login information incorporation unit 24 can embed login information by combining different types of content data.

  The login content receiving unit 25 has a function of receiving input of login content from the user. For example, the login information is displayed by displaying a login screen G4 as shown in FIG. 7 to the user, and receiving input of content data including the login information from the user. As shown in FIG. 7, the content data is input by preparing a drop area G5 and allowing the user to drag the content data to the drop area, or preparing a file designation area G6 and storing the content data. This may be done by specifying the destination.

  After receiving the login content from the user, the login content receiving unit 25 requests the login information restoring unit 26 to restore the login information.

  The login information restoration unit 26 has a function of extracting conversion data and restoring login information from the content data received by the login content reception unit 25 from the user. When the login information is divided into a plurality of pieces of conversion data, the login information restoration unit 26 combines the converted data and converts it into login information.

  The user authentication unit 27 is a function for authenticating login information. The user authentication unit 27 receives the restored login information from the login information restoration unit 26, and authenticates the user by referring to the login information stored in the user data storage unit 22.

<Processing operation>
FIG. 8 is a sequence diagram showing a flow from registration of login information to acquisition of content data including login information in the present embodiment.

  The user data management unit 21 receives registration of user data including login information from the user (step S1). The user data management unit 21 registers the received login information in the user data storage unit 22 (step S2). After the login information is registered, the user data management unit 21 requests the login information conversion unit 23 to convert the login information (step S3). When the login information conversion request is received from the user data management unit 21, the login information conversion unit 23 converts and divides the login information (step S4). After executing the conversion / division of the login information, the login information conversion unit 23 refers to the conversion data of other users stored in the user data storage unit 22 and determines whether there is overlapping conversion data. The login information conversion unit 23 transmits conversion data as a result of the converted / divided login information to the login information incorporation unit 24, and requests execution of a process of incorporating the conversion data into the content data (step S5). The login information incorporation unit 24 incorporates the conversion data received from the login information conversion unit 23 into the content data (step S6). The content data into which the conversion data is incorporated may be set in advance. Alternatively, content data for incorporating login information may be determined at random. Further, as described above, the login information incorporation unit 24 may embed the conversion data in the content data held by the user.

  The login information incorporation unit 24 transmits the login content to the user data management unit 21 (step S7). The user data management unit 21 transmits the login content received from the login information incorporation unit 24 to the user (step S8).

  By executing the above-described processing, the user can acquire content data in which converted data as a result of converting and dividing login information is incorporated. Thereby, the user can log in to the server 2 using the login content without storing the login information.

  FIG. 9 is a sequence diagram showing a flow of user authentication using content data including login information in the present embodiment.

  The login content receiving unit 25 receives a login request from the user together with the login content (step S11). The login content receiving unit 25 requests the login information restoring unit 26 to restore the received login content (step S12). The login information restoration unit 26 extracts and restores login information from the login content received from the login content reception unit 25 (step S13). The login information restoration unit 26 transmits the restored login information to the user authentication unit 27 (step S14).

  The user authentication unit 27 collates the login information received from the login information restoration unit 26 with the user data stored in the user data storage unit 22 and executes user authentication (step S15). User authentication is performed by checking whether there is a user ID corresponding to the user data storage unit 22 and a password associated with the user ID.

  If the user authentication is successful, the user authentication unit 27 notifies the user that the login has been completed (step S16).

  FIG. 10 is a sequence diagram showing a flow from the login information change request to the change of login content in the present embodiment.

  The user data management unit 21 receives a login information change request such as a password change request from the user (step S21). The user data management unit 21 changes the password of the user stored in the user data storage unit 22 (step S22). After the password change, the user data management unit 21 requests the login information conversion unit 23 to convert and divide the login information (step S23). The login information conversion unit 23 receives the login information conversion / division request from the user data management unit 21 and executes conversion / division of the login information (step S25). The conversion data obtained by converting / dividing the login information is converted / divided so as not to overlap with the conversion data of other users (step S24). The login information conversion unit 23 transmits the converted / divided login information to the login information incorporation unit 24, and requests incorporation of the converted data into the content data (step S25). The login information incorporation unit 24 incorporates the received conversion data into the content data (step S26). The content data into which the conversion data is incorporated may be the same content data as before the password is changed, or content data different from the content data into which the conversion data before the password is changed may be selected. The login information incorporation unit 24 transmits the login content reflecting the change of the password to the user data management unit 21 (step S27). The user data management unit 21 transmits new login content to the user (step S28).

  All or part of the above-described embodiments can be implemented by a program. This program can be stored in a portable recording medium. A portable recording medium refers to a non-transitory storage medium. Examples of the portable recording medium include a magnetic recording medium, an optical disk, a magneto-optical recording medium, and a nonvolatile memory. All or a part of the embodiments of the present invention can be implemented by reading a program stored in a portable recording medium and executing it by a processor.

<Summary>
As described above, the form described in the preferred embodiment of the present invention does not limit the scope of the present invention. You may provide a part of function performed in the server 2, such as incorporation to content data. Also, although the invention has been described herein with reference to specific embodiments, various modifications and changes may be made to these embodiments without departing from the broad spirit and scope of the invention as defined in the claims. Obviously it can be added. In other words, the present invention should not be construed as being limited by the details of the specific examples and the accompanying drawings.

DESCRIPTION OF SYMBOLS 1 Information processing system 2 Server 21 User data management part 22 User data storage part 23 Login information recombination part 24 Login information incorporation part 25 Login content reception part 26 Login information restoration part 27 User authentication part 201 Input device 202 Output device 203 Drive Device 204 Storage medium 205 Interface device 206 Auxiliary storage device 207 Memory device 208 CPU
3 Information terminals

JP 2009-140318 A

Claims (5)

An information processing system having a server for holding content data and an information terminal for holding the content data,
Login information registration means for registering login information used for user authentication;
Login information incorporation means for incorporating the login information registered by the login information registration means into the content data;
Receiving means for receiving the content data in which the login information is embedded;
Login information restoring means for restoring the login information from the content data when the content data in which the login information is incorporated by the receiving means is received;
An information processing system comprising: authentication means for performing user authentication according to the login information restored by the login information restoration means. The information processing system according to claim 1,
Login information conversion means for converting and dividing the login information;
The login information incorporation means incorporates the login information converted and divided by the login information conversion means into one or a plurality of content data,
The information processing system characterized in that the login information restoring means restores the login information by combining and converting the login information. The information processing system according to claim 1 or 2,
Storage means for storing the content data uploaded from the information terminal;
The information processing system characterized in that the login information incorporation means incorporates the login information into the content data stored by the storage means. An information processing method capable of communicating via a network,
Login information registration procedure for registering login information used for user authentication,
Login information incorporation procedure for incorporating the login information registered by the login information registration procedure into content data;
A receiving procedure for receiving the content data in which the login information is embedded;
A login information restoration procedure for restoring the login information from the content data when receiving the content data in which the login information is incorporated by the reception procedure;
And an authentication procedure for performing user authentication according to the login information restored by the login information restoration procedure. An information processing program capable of communicating via a network,
On the computer,
Login information registration procedure for registering login information used for user authentication,
Login information incorporation procedure for incorporating the login information registered by the login information registration procedure into content data,
A receiving procedure for receiving the content data in which the login information is embedded;
A login information restoration procedure for restoring the login information from the content data when the content data in which the login information is incorporated by the reception procedure is received;
An information processing program for executing an authentication procedure for performing user authentication according to the login information restored by the login information restoration procedure.

Images