JP2017062627A - Authentication processing system, authentication processing method and authentication processing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication processing system, method and program that transmit a proper system ID and system password to an authentication request destination.SOLUTION: In an authentication processing system 10, a reception unit 12 is configured to receive a user ID, authentication request destination information, location information on a client terminal and identification information on the client terminal, which are input to the client terminal. Then, a specification unit 14 is configured to: specify the authentication request destination on the basis of the authentication request destination information received by the reception unit 12; refer to a system category DB 22, an ID category DB 24 and transmission DB 26; and transmit the system ID and system password to be specified from the received user ID, location information on the terminal, and information on a category of the terminal based on the identification information on the terminal of the system ID and system password to be used for an authentication request with respect to the specified authentication request destination, to the authentication request destination (human resource salary system 60A) via a transmission unit 16.SELECTED DRAWING: Figure 3

Description

  The present invention relates to an authentication processing system, an authentication processing method, and an authentication processing program.

  Conventionally, in login processing, referring to a database in which a combination of a user ID (identifier) and a password is registered, if the specified combination of user ID and password is registered in the database, the login is permitted and registered. If not, login is rejected.

  Since the user needs to use a large number of user IDs and passwords according to the system to be used, the management of user IDs and passwords is complicated. For this reason, recently, a technique called Single Sign-On (SSO) that enables the use of a plurality of systems by a single authentication process is sometimes used (see, for example, Patent Document 1).

  Recently, the business environment within a company has been diversified, and it has become possible to access the internal system from outside the company and access the internal system from a mobile phone, a smartphone, a tablet terminal, or the like.

JP 2013-008140 A JP 2009-187183 A

  Since in-house systems handle important information, it is desirable to perform access control according to the user's situation. However, in the current in-house system, access control is performed according to the input user ID and password, and it is complicated for the user to properly use the ID.

  In recent years, there has been known an authentication system that uses location information for an approval process in a mobile terminal or a notebook PC, and permits login if the location information meets a predetermined condition (see Patent Document 2).

  In one aspect, an object of the present invention is to provide an authentication processing system, an authentication processing method, and an authentication processing program capable of transmitting an appropriate authentication ID and authentication password to an authentication request destination.

  In one aspect, the authentication processing system receives a user ID and authentication request destination information input to the terminal, the location information of the terminal and / or the terminal ID of the terminal, and the reception unit receives A first identification unit for identifying an authentication request destination based on the authentication request destination information, an authentication ID and an authentication password used for an authentication request to the authentication request destination, a user ID, terminal location information, and / or Or, a storage unit that is stored in association with a terminal ID, and the received user ID among the authentication ID and the authentication password that are stored in the storage unit and used for an authentication request to the specified authentication request destination, A second identification unit that identifies an authentication ID and an authentication password corresponding to the location information of the terminal and / or the terminal ID; and sends the identified authentication ID and authentication password to the authentication request destination. And it includes a transmission unit for, a.

  An appropriate authentication ID and authentication password can be transmitted to the authentication request destination.

It is a figure showing roughly the composition of the information processing system concerning one embodiment. FIG. 2A is a diagram illustrating a hardware configuration of the personnel salary system, and FIG. 2B is a diagram illustrating a hardware configuration of the authentication processing system. It is a functional block diagram of a personnel salary system and an authentication processing system. FIG. 4A is a diagram illustrating the data structure of the user DB, and FIG. 4B is a diagram illustrating the data structure of the authority DB. 5A is a diagram showing the data structure of the system type DB, FIG. 5B is a diagram showing the data structure of the ID type DB, and FIG. 5C is the data of the transmission information DB. It is a figure which shows a structure. It is a flowchart which shows the process (the 1) of a personnel salary system. It is a flowchart which shows the process of an authentication processing system. It is a flowchart which shows the process (the 2) of a HR salary system. It is a figure which shows an example of an authentication process.

  Hereinafter, an embodiment of an information processing system will be described in detail with reference to FIGS. FIG. 1 schematically shows a configuration of an information processing system 100 according to an embodiment.

  As illustrated in FIG. 1, the information processing system 100 includes a client terminal 40 as a terminal and a device, a usage system group 70, and an authentication processing system 10. The client terminal 40, the usage system group 70, and the authentication processing system 10 are connected to a network 80 such as the Internet.

  The client terminal 40 includes a terminal used by the user, for example, a mobile terminal such as a smartphone, a PC (Personal Computer), and the like, and is used by the user when using each system included in the use system group 70.

  The utilization system group 70 includes a personnel salary system 60A, a sales system 60B, an F company SNS system 60C, and the like. Each of these systems is a system that requests authentication from the authentication processing system 10 and is an authentication request destination for the authentication processing system 10. FIG. 2A schematically shows a hardware configuration of the personnel salary system 60A. The personnel salary system 60A includes a CPU (Central Processing Unit) 190, a ROM (Read Only Memory) 192, a RAM (Random Access Memory) 194, a storage unit (here, HDD (Hard Disk Drive)) 196, a network interface 197, and A portable storage medium drive 199 and the like are provided. Each component of the personnel salary system 60A is connected to a bus 198. When the CPU 190 executes a program stored in the ROM 192 or the HDD 196 or a program read from the portable storage medium 191 by the portable storage medium drive 199, the personnel salary system 60A functions as each unit shown in FIG. To do.

  Specifically, as shown in FIG. 3, the personnel salary system 60 </ b> A functions as a first receiving unit 61, a first transmitting unit 62, an authenticating unit 63, a second transmitting unit 64, and a second receiving unit 65. In FIG. 3, only the function (authentication function) related to the authentication of the personnel salary system 60A is shown. That is, in FIG. 3, illustrations of functions other than authentication (for example, functions for managing personnel information and salary information, etc.) of the personnel salary system 60A are omitted.

  The first receiving unit 61 receives the user ID and user password transmitted from the client terminal 40 and the identification information and position information of the client terminal 40 and inputs them to the authentication unit 63.

  Here, it is assumed that the identification information of the client terminal 40 is a MAC (Media Access Control) address, a terminal-specific number, or the like. The identification information of the client terminal 40 may be information indicating whether or not the personal terminal is obtained from an electronic certificate, installation software, or the like. Further, as the position information of the client terminal 40, position information obtained from a position detection device (for example, a GPS (Global Positioning System) sensor or the like) of the client terminal 40, a global IP address assigned to the client terminal 40, or the like Is included.

  The authentication unit 63 executes authentication processing using the user ID and user password received from the first reception unit 61. In this authentication process, the authentication unit 63 refers to the user DB 68 (FIG. 4A). In the user DB 68, as shown in FIG. 4A, a login ID and a login password are stored in association with each other. The login ID and login password stored in the user DB 68 are used for authenticating the system ID and system password input from the authentication processing system 10 in addition to the user ID and user password received from the client terminal 40. It is.

  Further, when the authentication is successful, the authentication unit 63, via the second transmission unit 64, the user ID and the user password, the identification information and the position information of the client terminal 40, and the system information (self (HR salary system 60A )) Is transmitted to the authentication processing system 10. The system information is, for example, a system IP address, a system identifier, or the like. On the other hand, if the authentication fails, the authentication unit 63 notifies the client terminal 40 that the authentication has failed via the first transmission unit 62.

  When the authentication processing system 10 receives the user ID and user password and the identification information and position of the client terminal 40 from the personnel salary system 60A, the authentication processing system 10 acquires the system ID and system password corresponding to these, and Send back to system 60A.

  The second receiving unit 65 receives the system ID and system password from the authentication processing system 10 and inputs them to the authentication unit 63. In this case, the authentication unit 63 performs an authentication process using the system ID and system password received from the second reception unit 65. The authentication unit 63 performs authentication using the user DB 68. If the authentication is successful, the authentication unit 63 permits the use of the personnel salary system 60A from the client terminal 40, and notifies the client terminal via the first transmission unit 62 to that effect. 40 is notified. The authentication unit 63 permits use within the authority range defined in the authority DB 69 (FIG. 4B). Here, the authority DB 69 is a database that manages the presence / absence of the use authority (such as authority 1 and authority 2) for each system ID, and has a data structure as shown in FIG. On the other hand, when the authentication cannot be performed, the authentication unit 63 notifies the client terminal 40 of the fact via the first transmission unit 62.

  Returning to FIG. 1, other systems included in the utilization system group 70 (sales system 60B, F company SNS system 60C, etc.) have the same authentication function as the personnel salary system 60A shown in FIG.

  The authentication processing system 10 is a system for transmitting an appropriate system ID and system password to systems (authentication request destinations) included in the use system group 70, and has a hardware configuration as shown in FIG. Have As shown in FIG. 2B, the authentication processing system 10 includes a CPU 90, a ROM 92, a RAM 94, a storage unit (HDD) 96, a network interface 97, a portable storage medium drive 99, and the like. Each component of the authentication processing system 10 is connected to the bus 98. The CPU 90 executes a program (including an authentication processing program) stored in the ROM 92 or the HDD 96 or a program (including an authentication processing program) read from the portable storage medium 91 by the portable storage medium drive 99. The authentication processing system 10 functions as each unit shown in FIG.

  More specifically, the authentication processing system 10 functions as a reception unit 12, an identification unit 14, and a transmission unit 16 as an acquisition unit. 3 also shows a system type DB 22 stored in the HDD 96 or the like, an ID type DB 24 as a storage unit, and a transmission information DB 26.

  The receiving unit 12 acquires the user ID, user password, identification information and position information of the client terminal 40, and system information transmitted from the personnel salary system 60A and the like, and transmits them to the specifying unit 14.

  The specifying unit 14 specifies a system ID and a system password used for authentication in the personnel salary system 60A and the like based on the received user ID, user password, identification information and position information of the client terminal 40. The specifying unit 14 refers to the system type DB 22 (FIG. 5A), the ID type DB 24 (FIG. 5B), and the transmission information DB 26 (FIG. 5C) when specifying the system ID and system password. To do.

  Here, the system type DB 22, the ID type DB 24, and the transmission information DB 26 will be described in detail.

  The system type DB 22 is a database that defines the type of each system included in the use system group 70, and includes fields of “system identifier” and “system type” as shown in FIG. The name of the system is stored in the “system identifier” field. In the “system type” field, a character string indicating the type (category) of the system is stored. For example, the personnel salary system 60A and the sales system 60B are classified into the system type “basic”, and the F company SNS system 60C is classified into the system type “SNS”.

  As shown in FIG. 5B, the ID type DB 24 is a database that defines the type of system ID in association with the user ID, user password, system type, terminal type and location (internal, home, away from home). is there. For example, when the user ID is “000001”, the user password is “pw1234”, the type of the system to be used is “basic”, the client terminal 40 is “portable terminal”, and the position is “going out” In FIG. 5B, the ID type “MKO” is specified from FIG.

  As shown in FIG. 5C, the transmission information DB 26 is associated with “action”, “system ID”, and “system password” for each “ID type”. In the “action” field, “login” or “selection” is stored. When “Login” is stored in the “Action” field, the ID and password used for authentication in the system are stored in the “System ID” and “System Password” fields. On the other hand, when “selection” is stored in the “action” field, information indicating that one of the other ID types should be selected (for example, “select CSI or CSO1”) is stored. Note that the case where “selection” is stored in the action field is a case where the ID type cannot be specified because the acquired information alone is insufficient, and it is appropriate among a plurality of possible ID types. This means a case where the user selects a different ID type.

  Next, the processing of the personnel salary system 60A and the authentication processing system 10 will be described in detail along the flowcharts of FIGS. As a premise for the explanation of the subsequent processing, the user designates a system to be used from the client terminal 40 (here, the personnel salary system 60A) and corresponds to the personnel salary system 60A with respect to the personnel salary system 60A. It is assumed that the user ID and user password to be input are input from the client terminal 40.

(Processing of personnel salary system 60A (Part 1: Fig. 6))
In the process of FIG. 6, first, in step S10, the first receiving unit 61 waits until a user ID and a user password are input. When receiving the user ID and the user password from the client terminal 40, the first receiving unit 61 transmits the user ID and the user password to the authentication unit 63. Thereafter, the process proceeds to step S12.

  In step S12, the authentication unit 63 executes an authentication process. In this case, the authentication unit 63 determines whether or not the received user ID and user password are included in the login ID and login password stored in the user DB 68 (FIG. 4A).

  Next, in step S14, the authentication unit 63 determines whether or not the authentication is successful (whether the authentication is successful). That is, if the received user ID and user password are included in the login ID and login password stored in the user DB 68, the determination in step S14 is affirmed, and the authentication unit 63 proceeds to step S16. Transition. On the other hand, if the determination in step S14 is negative, the authentication unit 63 proceeds to step S18.

  When the determination in step S14 is affirmed and the process proceeds to step S16, the authentication unit 63 acquires the identification information and the position information of the client terminal 40 via the first reception unit 61, and stores the information together with the user ID, the user password, and the system information. 2 Transmit to the authentication processing system 10 via the transmitter 64 (see arrow A in FIG. 9).

  On the other hand, if the determination in step S <b> 14 is negative and the process proceeds to step S <b> 18, the authentication unit 63 transmits information indicating that login is not possible to the client terminal 40 via the first transmission unit 62. In the client terminal 40, information indicating that login is impossible is displayed on the display unit.

  As described above, when the process of step S16 or step S18 is performed, the process returns to step S10, and the above-described process is repeatedly executed.

(Processing of the authentication processing system 10 (FIG. 7))
Next, the processing of the authentication processing system 10 will be described in detail based on FIG.

  In the process of FIG. 7, first, in step S110, the receiving unit 12 waits until receiving information from the personnel salary system 60A or the like, and at the stage of receiving the information (step S16 of FIG. 6 is executed) The process proceeds to S112.

  If transfering it to step S112, the specific | specification part 14 will perform a system classification discrimination | determination process. In this case, the specifying unit 14 refers to the system type DB 22 (FIG. 5A) and determines the system type based on the information (system identifier) received in step S110. When the system identifier is “HR salary system”, the system type is determined to be “basic”.

  Next, in step S114, the specifying unit 14 executes an ID type determination process. Specifically, the specifying unit 14 refers to the ID type DB 24 (FIG. 5B), and determines the ID type based on the user ID, the user password, the system type, the identification information of the client terminal 40, and the position. Determine. The specifying unit 14 determines the type of the client terminal 40 (mobile terminal or PC) based on the identification information of the client terminal 40 in advance. In this case, the specifying unit 14 refers to a database (not shown) that stores the terminal information and the terminal type in association with each other. In addition, the specifying unit 14 determines in advance whether the client terminal 40 exists in the office, at home, or on the go based on the position information of the client terminal 40. Also in this case, the specifying unit 14 refers to a database (not shown) in which the company and the user's home are recorded.

  For example, as indicated by an arrow B in FIG. 9, the user ID is “000001”, the user password is “pw1234”, the system type is “basic”, the type of the client terminal 40 is “PC”, and the position is “ Suppose it was “in-house” In this case, the specifying unit 14 refers to the ID type DB 24 in FIG. 5B and specifies “PKI” as the ID type (see arrow C in FIG. 9).

  Next, in step S116, the specifying unit 14 executes transmission information determination processing. For example, when the ID type determined in step S114 is “PKI”, the specifying unit 14 refers to the transmission information DB 26 as indicated by an arrow D in FIG. 9, and performs an action “login”, a system ID “PKI001”, a system The password “pwpki001” is acquired (see arrow E in FIG. 9). And the specific | specification part 14 transmits the acquired information to 60 A of personnel salary systems via the transmission part 16 (arrow F of FIG. 9). When the action is “select”, the specifying unit 14 transmits a system ID and a system password corresponding to each of the plurality of ID types to be selected to the personnel salary system 60A.

  After step S116, the process returns to step S110, and the above process is repeated.

(Processing of personnel salary system 60A (part 2: FIG. 8))
Next, the process of FIG. 8 will be described. The process of FIG. 8 is a process executed in parallel with the process of FIG. 6 in the personnel salary system 60A.

  In the process of FIG. 8, first, in step S30, the second receiving unit 65 stands by until information is received from the authentication processing system 10 (transmitting unit 16). When the second receiving unit 65 receives the information (when step S116 in FIG. 7 is executed), the process proceeds to step S32.

  In step S32, the authentication unit 63 determines whether or not the action is “login”. If the determination in step S32 is affirmed, the authentication unit 63 proceeds to step S34, but if denied, the process proceeds to step S38.

  When the determination in step S32 is affirmed and the process proceeds to step S34, the authentication unit 63 executes a login process. In this case, the authentication unit 63 determines whether or not the system ID and system password received from the authentication processing system 10 are included in the login ID and login password stored in the user DB 68. Execute the login process.

  Next, in step S36, the authentication unit 63 executes authority determination processing. Specifically, the authentication unit 63 acquires the authority granted to the authenticated system ID from the authority DB 69 in FIG. Then, the usage authority of the logged-in user is limited to the acquired authority. In the example of FIG. 9 (system ID: PKI001), all of authority 1 to authority 4 are given to the user from the authority DB 69 of FIG. Thereafter, the process returns to step S30.

  On the other hand, if the determination in step S32 is negative, that is, if the “action” is “select”, the process proceeds to step S38, and the authentication unit 63 transmits an ID selection screen to the client terminal 40. For example, if the ID type is “CSO2” shown in FIG. 5C, the authentication unit 63 transmits a screen that can select either the ID type “CSI” or “CS02” to the client terminal 40. The client terminal 40 displays the received screen on a display unit or the like, and accepts a user selection.

  Next, in step S <b> 40, the authentication unit 63 waits until the user selects an ID type on the client terminal 40. When the ID type is selected by the user, the authentication unit 63 proceeds to step S42.

  In step S42, the authentication unit 63 executes a login process. In this case, the process similar to step S34 is performed using the system ID and system password corresponding to the ID type selected by the user. In step S36, after the authority determination process is executed in the same manner as described above, the process returns to step S30 and the above-described process is repeated.

  6 and 8 described above are also executed in a system other than the personnel salary system 60A.

  As can be seen from the above description, in the present embodiment, the identifying unit 14 identifies the first identifying unit that identifies the authentication request destination system and the second system ID and system password that are transmitted to the authentication request destination system. Functions as a specific part. Further, the specifying unit 14 functions as a processing unit that specifies authentication information corresponding to a set of a terminal type and a terminal position.

  As described above in detail, according to the authentication processing system 10 of the present embodiment, the receiving unit 12 receives the user ID input to the client terminal 40 and the authentication request destination information (for example, the system of the personnel salary system 60A). Information), information on the position of the client terminal 40, and identification information (MAC address or terminal-specific number) of the client terminal 40 are accepted. Then, the specifying unit 14 specifies the authentication request destination system based on the system information received by the receiving unit 12, and refers to the system type DB 22, the ID type DB 24, and the transmission information DB 26, and the received user ID and The system ID and the system password specified from the terminal position information and the terminal type information based on the terminal identification information are transmitted to the authentication request destination system via the transmitter 16. As a result, an appropriate system ID and system password corresponding to the user and the type and location of the client terminal 40 can be transmitted from the authentication processing system 10 to the authentication request destination system. For this reason, in the authentication request destination system, the access control according to the type and position of the user or the client terminal 40 can be performed by changing the authority for each system ID and system password.

  In the present embodiment, since the ID type is assigned to each system type by using the system type DB 22, the amount of data to be managed can be reduced compared to the case where the ID type is assigned to each system. .

  Further, according to the authentication processing system 10 of this embodiment, the reception unit 12 receives terminal identification information (such as a MAC address) acquired from the client terminal 40 that requests access to a specific system (for example, the personnel salary system 60A). ), Address information (global IP address, etc.), and authentication information (user ID and user password). Then, the specifying unit 14 refers to the system type DB 22, the ID type DB 24, and the transmission information DB 26, is associated with the set of the acquired authentication information and the system type of the specific system, and corresponds to the acquired terminal identification information. A system ID and a system password corresponding to a set of a type to be performed and a position (in-house, home, away from home) corresponding to the acquired address information are specified. Then, the transmission unit 16 transmits the specified system ID and system password to the specific system that performs the authentication process. Thus, an appropriate system ID and system password corresponding to the type and position of the user and client terminal 40 can be transmitted to a system such as the personnel salary system 60A. Therefore, in the system that has received the system ID and the system password, access control according to the type and position of the user and the client terminal 40 can be realized by giving authority to the system ID and the system password.

  In the present embodiment, when a user uses one system, the user is automatically given authority according to the type and position of the client terminal 40 by using only one set of user ID and user password. . This eliminates the need for the user to manage a plurality of user IDs in order to change the authority. Moreover, since authority not suitable for the user's situation (the type and position of the client terminal 40 used by the user) is not given to the user, information leakage or the like can be suppressed. Furthermore, in this embodiment, only one set of user ID and user password is used for each of a plurality of systems, and an appropriate system ID and system password corresponding to the type of system and the type and position of the client terminal are assigned to each system. Therefore, user convenience can be improved.

  In the above-described embodiment, the specification unit 14 has described the case where the login ID and the login password are specified based on the type and position information of the client terminal 40, but the present invention is not limited to this. For example, the specifying unit 14 may specify a login ID and a login password based on one of the type and position of the client terminal 40.

  In the above embodiment, the ID type DB 24 stores the system ID and the system password in association with the system type. However, the present invention is not limited to this. For example, the ID type DB 24 may store a system ID and a system password in association with each system.

  In the above embodiment, the case where information such as a user ID is input to the authentication processing system 10 via an authentication request destination such as the personnel salary system 60A has been described. However, the present invention is not limited to this. For example, information such as a user ID may be input directly from the client terminal 40 to the authentication processing system 10. In this case, the system information of the authentication request destination specified by the user at the client terminal 40 may be transmitted to the authentication processing system 10 together with the information such as the user ID.

  In the above embodiment, the type of the client terminal 40 is specified based on the identification information of the client terminal 40, and the ID type is specified based on the type. However, the present invention is not limited to this. For example, when the ID type is managed in the ID type DB 24 in association with the identification information of the client terminal used by the user, the specifying unit 14 specifies the ID type based on the identification information of the client terminal. It may be.

  In the above embodiment, the case where the specifying unit 14 specifies the system ID and the like based on the position of the client terminal 40 has been described, but the present invention is not limited to this. The specifying unit 14 may specify a system ID or the like based on other usage environment type, for example, a network environment to which the client terminal 40 is connected.

  The above processing functions can be realized by a computer. In that case, a program describing the processing contents of the functions that the processing apparatus should have is provided. By executing the program on a computer, the above processing functions are realized on the computer. The program describing the processing contents can be recorded on a computer-readable recording medium (except for a carrier wave).

  When the program is distributed, for example, it is sold in the form of a portable recording medium such as a DVD (Digital Versatile Disc) or a CD-ROM (Compact Disc Read Only Memory) on which the program is recorded. It is also possible to store the program in a storage device of a server computer and transfer the program from the server computer to another computer via a network.

  The computer that executes the program stores, for example, the program recorded on the portable recording medium or the program transferred from the server computer in its own storage device. Then, the computer reads the program from its own storage device and executes processing according to the program. The computer can also read the program directly from the portable recording medium and execute processing according to the program. Further, each time the program is transferred from the server computer, the computer can sequentially execute processing according to the received program.

  The above-described embodiment is an example of a preferred embodiment of the present invention. However, the present invention is not limited to this, and various modifications can be made without departing from the scope of the present invention.

In addition, the following additional remarks are disclosed regarding description of the above embodiment.
(Supplementary Note 1) A reception unit that receives the user ID and authentication request destination information input to the terminal, the location information of the terminal, and / or the terminal ID of the terminal;
A first identification unit that identifies an authentication request destination based on the authentication request destination information received by the reception unit;
A storage unit that stores an authentication ID and an authentication password used for an authentication request to the authentication request destination in association with a user ID and terminal location information and / or a terminal ID;
Corresponding to the received user ID and the location information of the terminal and / or the terminal ID among the authentication ID and the authentication password used for the authentication request to the specified authentication request destination stored in the storage unit A second identification unit for identifying an authentication ID and an authentication password
A transmitting unit that transmits the identified authentication ID and authentication password to the authentication request destination;
An authentication processing system comprising:
(Supplementary Note 2) The storage unit stores the authentication ID and the authentication password in association with the category of the authentication request destination,
The second specifying unit stores the received user ID, the location information of the terminal, and / or the authentication password and the authentication password corresponding to the specified authentication request destination category stored in the storage unit. The authentication processing system according to appendix 1, wherein an authentication ID and an authentication password corresponding to the terminal ID are specified.
(Additional remark 3) The said authentication request destination restrict | limits the access from the said terminal based on the said authentication ID and the said authentication password transmitted from the said transmission part, The authentication process of Additional remark 1 or 2 characterized by the above-mentioned. system.
(Supplementary Note 4) An acquisition unit that acquires device identification information, address information, and predetermined authentication information acquired from a device that requests access to a specific system;
A storage unit that stores authentication information corresponding to a combination of a device type and a usage environment type in association with a pair of authentication information and a system category;
Referring to the storage unit, the device is associated with a set of the acquired authentication information and the category of the specific system, and a device type corresponding to the acquired identification information of the device and a use corresponding to the acquired address information A processing unit for identifying authentication information corresponding to a pair with an environment type;
A transmitting unit that transmits the specified authentication information to the specific system that performs authentication processing of the device;
An authentication processing system comprising:
(Additional remark 5) The said specific system restrict | limits the access from the said device based on the said authentication information transmitted from the said transmission part, The authentication processing system of Additional remark 4 characterized by the above-mentioned.
(Appendix 6) Accepting the user ID and authentication request destination information input to the terminal, the location information of the terminal and / or the terminal ID of the terminal,
Based on the received authentication request destination information, the authentication request destination is specified,
Of the plurality of sets of authentication IDs and authentication passwords stored in the storage unit used for the authentication request to the specified authentication request destination, the received user ID, the location information of the terminal, and / or the terminal ID Transmitting an authentication ID and an authentication password specified based on the authentication request destination,
An authentication processing method, wherein a computer executes the processing.
(Supplementary Note 7) In the storage unit, the authentication ID and the authentication password are stored in association with the authentication request destination category.
In the transmission process, the received user ID, the location information of the terminal and / or the terminal among the authentication ID and authentication password corresponding to the specified authentication request destination category stored in the storage unit The authentication processing method according to appendix 6, wherein an authentication ID and an authentication password corresponding to the ID are specified.
(Supplementary note 8) The authentication processing method according to supplementary note 6 or 7, wherein the authentication request destination restricts access from the terminal based on the transmitted authentication ID and the authentication password.
(Appendix 9) Acquiring device identification information, address information, and predetermined authentication information acquired from a device requesting access to a specific system,
The authentication information and the specific system category obtained by referring to the storage unit that stores the authentication information corresponding to the combination of the device type and the usage environment type in association with the pair of the authentication information and the system category Identifying authentication information corresponding to a set of a device type corresponding to the acquired identification information of the device and a use environment type corresponding to the acquired address information,
Transmitting the specified authentication information to the specific system that performs authentication processing of the device;
An authentication processing method, wherein a computer executes the processing.
(Supplementary note 10) The authentication processing method according to supplementary note 9, wherein the specific system restricts access from the device based on the transmitted authentication information.
(Supplementary Note 11) Accepting the user ID and authentication request destination information input to the terminal, the location information of the terminal and / or the terminal ID of the terminal,
Based on the received authentication request destination information, the authentication request destination is specified,
Of the plurality of sets of authentication IDs and authentication passwords stored in the storage unit used for the authentication request to the specified authentication request destination, the received user ID, the location information of the terminal, and / or the terminal ID Transmitting an authentication ID and an authentication password specified based on the authentication request destination,
An authentication processing program for causing a computer to execute processing.
(Supplementary Note 12) The storage unit stores the authentication ID and the authentication password in association with the category of the authentication request destination.
In the transmission process, the received user ID, the location information of the terminal and / or the terminal among the authentication ID and authentication password corresponding to the specified authentication request destination category stored in the storage unit The authentication processing program according to appendix 11, wherein an authentication ID and an authentication password corresponding to the ID are specified.
(Additional remark 13) The said authentication request destination restrict | limits the access from the said terminal based on the transmitted said authentication ID and the said authentication password, The authentication processing program of Additional remark 11 or 12 characterized by the above-mentioned.
(Supplementary Note 14) Acquiring device identification information, address information, and predetermined authentication information acquired from a device requesting access to a specific system,
The authentication information and the specific system category obtained by referring to the storage unit that stores the authentication information corresponding to the combination of the device type and the usage environment type in association with the pair of the authentication information and the system category Identifying authentication information corresponding to a set of a device type corresponding to the acquired identification information of the device and a use environment type corresponding to the acquired address information,
Transmitting the specified authentication information to the specific system that performs authentication processing of the device;
An authentication processing program for causing a computer to execute processing.
(Supplementary note 15) The authentication processing program according to supplementary note 14, wherein the specific system restricts access from the device based on the transmitted authentication information.

10 Authentication processing system 12 Reception part (acquisition part)
14 identification unit (first identification unit, second identification unit, processing unit)
16 Transmission unit 24 ID type DB (storage unit)
26 Transmission information DB (storage unit)
40 Client terminal (terminal, device)
60A, 60B ... Personnel salary system, etc. (authentication request destination, specific system)

Claims (8)

A reception unit that receives the user ID and authentication request destination information input to the terminal, the location information of the terminal, and / or the terminal ID of the terminal;
A first identification unit that identifies an authentication request destination based on the authentication request destination information received by the reception unit;
A storage unit that stores an authentication ID and an authentication password used for an authentication request to the authentication request destination in association with a user ID and terminal location information and / or a terminal ID;
Corresponding to the received user ID and the location information of the terminal and / or the terminal ID among the authentication ID and the authentication password used for the authentication request to the specified authentication request destination stored in the storage unit A second identification unit for identifying an authentication ID and an authentication password to be performed;
A transmitting unit that transmits the identified authentication ID and authentication password to the authentication request destination;
An authentication processing system comprising: The storage unit stores the authentication ID and the authentication password in association with the authentication request destination category,
The second specifying unit stores the received user ID, the location information of the terminal, and / or the authentication password and the authentication password corresponding to the specified authentication request destination category stored in the storage unit. The authentication processing system according to claim 1, wherein an authentication ID and an authentication password corresponding to the terminal ID are specified.   The authentication processing system according to claim 1, wherein the authentication request destination restricts access from the terminal based on the authentication ID and the authentication password transmitted from the transmission unit. An acquisition unit that acquires device identification information, address information, and predetermined authentication information acquired from a device that requests access to a specific system;
A storage unit that stores authentication information corresponding to a combination of a device type and a usage environment type in association with a pair of authentication information and a system category;
Referring to the storage unit, the device is associated with a set of the acquired authentication information and the category of the specific system, and a device type corresponding to the acquired identification information of the device and a use corresponding to the acquired address information A processing unit for identifying authentication information corresponding to a pair with an environment type;
A transmitting unit that transmits the specified authentication information to the specific system that performs authentication processing of the device;
An authentication processing system comprising: Accepting the user ID and authentication request destination information input to the terminal, the terminal location information and / or the terminal ID of the terminal,
Based on the received authentication request destination information, the authentication request destination is specified,
Of the plurality of sets of authentication IDs and authentication passwords stored in the storage unit used for the authentication request to the specified authentication request destination, the received user ID, the location information of the terminal, and / or the terminal ID Transmitting an authentication ID and an authentication password specified based on the authentication request destination,
An authentication processing method, wherein a computer executes the processing. Obtain device identification information, address information, and predetermined authentication information obtained from a device requesting access to a specific system,
The authentication information and the specific system category obtained by referring to the storage unit that stores the authentication information corresponding to the combination of the device type and the usage environment type in association with the pair of the authentication information and the system category Identifying authentication information corresponding to a set of a device type corresponding to the acquired identification information of the device and a use environment type corresponding to the acquired address information,
Transmitting the specified authentication information to the specific system that performs authentication processing of the device;
An authentication processing method, wherein a computer executes the processing. Accepting the user ID and authentication request destination information input to the terminal, the terminal location information and / or the terminal ID of the terminal,
Based on the received authentication request destination information, the authentication request destination is specified,
Of the plurality of sets of authentication IDs and authentication passwords stored in the storage unit used for the authentication request to the specified authentication request destination, the received user ID, the location information of the terminal, and / or the terminal ID Transmitting an authentication ID and an authentication password specified based on the authentication request destination,
An authentication processing program for causing a computer to execute processing. Obtain device identification information, address information, and predetermined authentication information obtained from a device requesting access to a specific system,
The authentication information and the specific system category obtained by referring to the storage unit that stores the authentication information corresponding to the combination of the device type and the usage environment type in association with the pair of the authentication information and the system category Identifying authentication information corresponding to a set of a device type corresponding to the acquired identification information of the device and a use environment type corresponding to the acquired address information,
Transmitting the specified authentication information to the specific system that performs authentication processing of the device;
An authentication processing program for causing a computer to execute processing.

Images