JP2023006478A - Information processing device, user terminal, user medium, authentication method, authenticated method, and computer program - Google Patents

Abstract

To provide an information processing device, a user terminal, a user medium, an authentication method, an authenticated method, and a computer program that maintain security in processing via a network.SOLUTION: In an information processing system in which a plurality of user terminals and an information processing device can communicate via a network, an information processing device 30 includes a control unit 33 that receives code information from a user terminal, obtains authentication information by decrypting the code information by using key data necessary for decrypting the code information, and authenticates the user terminal by using the obtained authentication information.SELECTED DRAWING: Figure 4

Description

The present invention relates to technology for maintaining security.

In recent years, opportunities to exchange money via networks are increasing. For example, goods are purchased via a network, and money is transferred from one account to another via a network. Maintaining security is one of the major issues in communication via such a network. As one technology for solving such problems, for example, authentication information is recorded in a USB (Universal Serial Bus) memory, distributed to users, and authentication processing is performed using the information recorded in the USB memory. Techniques for maintaining security have been proposed (see Patent Document 1, for example).

JP 2005-267045 A

However, such distribution of USB memory requires a large amount of cost. In addition, since the user must always use the USB memory, there is a possibility that management and processing will become complicated. Such problems are not limited to the exchange of money via networks, but are common to all processes performed via networks. For example, even when registering, changing, or outputting (for example, displaying) personal information such as a user's name and address, it was necessary to correctly determine whether or not it was requested by a person with legitimate authority, and to maintain security. .
In view of the above circumstances, an object of the present invention is to provide a technology capable of maintaining security in processing via a network.

In one aspect of the present invention, code information is received from a user terminal, authentication information is acquired by decoding the code information using key data necessary for decoding the code information, and the acquired authentication information is used. and a control unit that authenticates the user terminal.

An aspect of the present invention is the above information processing apparatus, wherein the control unit executes specific processing, which is predetermined processing requiring authentication, in response to a request from the authenticated user terminal.

One aspect of the present invention includes a reading unit that reads code information recorded on a user medium, and a control unit that receives authentication by transmitting the code information read by the reading unit to an information processing device, The code information is a user terminal that requires key data to decrypt and obtain authentication information.

An aspect of the present invention is the user terminal described above, wherein the code information includes additional information obtained by a predetermined decryption process and the authentication information obtained by decryption using the key data. , the control unit acquires the additional information by decoding the code information.

In one aspect of the present invention, a credit card number and code information including authentication information used for authentication of a specific process, which is a specific process related to the credit card number, are recorded, and the code information is It is a credit card user medium that requires key data to decrypt and obtain authentication information.

One aspect of the present invention includes a receiving step of receiving code information from a user terminal, an obtaining step of obtaining authentication information by decrypting the code information using key data necessary for decrypting the code information, and an obtaining step of obtaining and an authentication step of authenticating the user terminal using the obtained authentication information.

One aspect of the present invention includes a reading step of reading code information recorded on a user medium, and an authenticated step of receiving authentication by transmitting the code information read in the reading step to an information processing device. The code information is a method to be authenticated that requires key data in order to decrypt it and obtain the authentication information.

One aspect of the present invention is a computer program for causing a computer to function as the information processing apparatus.

One aspect of the present invention is a computer program for causing a computer to function as the above user terminal.

The present invention makes it possible to maintain security in processing via a network.

1 is a schematic block diagram showing the system configuration of an information processing system 100; FIG. FIG. 3 is a diagram showing a specific example of the appearance of the user medium 10; 2 is a schematic block diagram showing an outline of the functional configuration of a user terminal 20; FIG. 3 is a schematic block diagram showing a specific example of the functional configuration of the information processing device 30; FIG. 4 is a diagram showing a specific example of information stored in an authentication information storage unit 322; FIG. 4 is a sequence chart showing a specific example of the flow of basic processing of the information processing system 100; 4 is a sequence chart showing a specific example of the flow of processing of the information processing system 100; 4 is a sequence chart showing a specific example of the flow of processing of the information processing system 100;

Hereinafter, specific configuration examples of the present invention will be described with reference to the drawings.
FIG. 1 is a schematic block diagram showing the system configuration of an information processing system 100. As shown in FIG. The information processing system 100 includes a user terminal 20 and an information processing device 30 . A user terminal 20 is used by a user having a user medium 10 . The user terminal 20 and the information processing device 30 can communicate via the network 40 . The network 40 is, for example, a wide area network such as the Internet. The network 40 may be a network using wireless communication or a network using wired communication. Network 40 may be configured by combining a plurality of networks.

First, an outline of the information processing system 100 will be described. A code image is formed on the surface of the user medium 10 . The code image contains information obtained by encoding the authentication information. The authentication information can be obtained by decrypting the information indicated by the code image using specific key data. The key data is held by the information processing device 30 .

Information about a code image (hereinafter referred to as "code information") is transmitted from the user terminal 20 to the information processing apparatus 30 when executing a specific process that requires security maintenance (hereinafter referred to as "specific process"). demand that The user terminal 20 captures the code image formed on the user medium 10 and transmits data obtained by the capture to the information processing device 30 . The information processing device 30 decrypts the information of the code image using the key data held in its own device. The information processing device 30 performs authentication processing using the authentication information obtained by decryption, and executes specific processing when authentication is performed. In this way, security can be maintained by encoding code information using key data held in the information processing apparatus 30, obtaining authentication information, and performing authentication processing. Details of the user medium 10 and each device (the user terminal 20 and the information processing device 30) used in the information processing system 100 will be described below.

FIG. 2 is a diagram showing a specific example of the appearance of the user medium 10. As shown in FIG. The user medium 10 may be configured using any material on which a code image can be formed. For example, the user medium 10 may be configured using a card-like object made of paper, plastic, or metal. User medium 10 may be, for example, an article published by an institution, legal entity or natural person associated with a particular transaction. Specific examples of such user media 10 include financial institution cash cards, credit cards, My Number cards, driver's licenses, prepaid cards, membership cards, employee ID cards, and the like.

When the user medium 10 is a cash card of a financial institution, specific examples of specific processing include account transfer, account transfer, balance inquiry, registration information (personal information such as address and telephone number, and other information such as personal identification number). ) is changed. When the user medium 10 is a credit card, specific examples of specific processing include processing such as payment using a credit card, confirmation of current month or past payment amounts, and modification of registered information. When the user medium 10 is a My Number card, specific examples of specific processing include online applications and inquiries for various administrative procedures, various private online transactions, and the like. If the user medium 10 is a driver's license, a specific example of the specific processing is a procedure using the driver's license as an identification card. When the user medium 10 is a prepaid card, specific examples of the specific processing include payment using the prepaid card, charge to the prepaid card, balance inquiry of the prepaid card, change of registered information, and the like. When the user medium 10 is a membership card or an employee card, a specific example of the specific processing includes changing registered information.

Formation of the code image may be performed, for example, by printing, or may be performed by surface processing such as scraping a portion of the surface, crushing a portion of the surface, or chemically changing the surface with chemicals. However, it may be performed by adhering a sheet such as a sticker on which a code image is formed.

A code image may be configured using any image as long as it is an image representing encoded information. For example, the code image may be configured using a barcode, or may be configured using a two-dimensional barcode. The code image includes authentication information obtained by decryption processing using key data. The code image may contain information other than authentication information. For example, a code image contains information (hereinafter referred to as "additional information") that can be obtained by executing normal decryption processing (for example, decryption processing that is generally distributed in the world) without using key data. good too. Specific examples of the additional information include a URL (Uniform Resource Locator) used when accessing a specific website, activation signal information indicating activation of a specific application, and the like.

In the specific example of FIG. 2, a code image 11 is formed on the back of a credit card as a specific example of the user medium 10 .

FIG. 3 is a schematic block diagram showing an outline of the functional configuration of the user terminal 20. As shown in FIG. The user terminal 20 is configured using a portable information processing device such as a smart phone, a tablet terminal, a mobile phone, a smart watch, or a portable game machine. The user terminal 20 includes a communication section 21 , an input section 22 , an output section 23 , a reading section 24 , a storage section 25 and a control section 26 .

The communication unit 21 is a communication device. The communication unit 21 may be configured as a network interface, for example. The communication unit 21 performs data communication with other devices via the network 40 under the control of the control unit 26 . The communication unit 21 may be a device that performs wireless communication or a device that performs wired communication.

The input unit 22 is configured using existing input devices such as a keyboard, pointing device (mouse, tablet, etc.), buttons, touch panel, and the like. The input unit 22 is operated by the user when inputting user instructions to the user terminal 20 . The input unit 22 may be an interface for connecting an input device to the user terminal 20 . In this case, the input unit 22 inputs to the user terminal 20 an input signal generated according to the user's input in the input device.

The output unit 23 is configured using an output device, and outputs data to the user of the user terminal 20 . The output device may be configured using, for example, a device that outputs images and characters to a screen. For example, the output device can be configured using a CRT (Cathode Ray Tube), a liquid crystal display, an organic EL (Electro-Luminescent) display, or the like. Also, the output device may be configured using a device that converts characters into voice and outputs the voice. In this case, the output device can be configured using a speech synthesizer and a speech output device (speaker). The output unit 23 may be an interface for connecting an output device to the user terminal 20 .

The reading unit 24 is configured using a device that reads a code image. The reading unit 24 may be configured using, for example, a barcode scanner. The reading unit 24 may be configured using, for example, an imaging device that captures an image. The reading unit 24 reads the code image formed on the surface of the user medium 10 . The reading unit 24 outputs image data of the code image or code information obtained by reading the code image to the control unit 26 .

The storage unit 25 is configured using a storage device such as a magnetic hard disk device or a semiconductor storage device. The storage unit 25 stores data used by the processing of the control unit 26 and data generated by the processing of the control unit 26 . The storage unit 25 functions as a user information storage unit 251, for example.

The user information storage unit 251 stores information about users of the user terminals 20 . The user information storage unit 251 stores at least user identification information assigned to the user. The user identification information may include, for example, the bank account number of the user's bank account, the credit card number and issue date of the user's credit card, or other information previously assigned to the user ( information that is not used for other purposes). The user information storage unit 251 may also store the user's name and user attribute information (information such as address, age, and gender).

The control unit 26 is configured using a processor such as a CPU (Central Processing Unit) and a memory. The control unit 26 functions as a service control unit 261 and a code information control unit 262 as the processor executes programs. All or part of each function of the control unit 26 may be realized using hardware such as an ASIC (Application Specific Integrated Circuit), a PLD (Programmable Logic Device), or an FPGA (Field Programmable Gate Array). The above program may be recorded on a computer-readable recording medium. Computer-readable recording media include portable media such as flexible disks, magneto-optical disks, ROMs, CD-ROMs, semiconductor storage devices (such as SSD: Solid State Drives), hard disks and semiconductor storage built into computer systems. It is a storage device such as a device. The above program may be transmitted via telecommunication lines.

The service control unit 261 performs processing related to a predetermined service requested by the user. The service control unit 261 performs at least processing related to specific processing. For example, when a user requests to inquire about registration information, the service control unit 261 requests the information processing device 30 to inquire about this user's registration information, and as a result of the request, the information processing device 30 provides output to the user the information that is For example, when the user requests payment using a credit card, the service control unit 261 requests the information processing device 30 to execute payment processing using the user's credit card, and the result of the request is When information indicating that the payment has been completed is notified from the information processing device 30, the notified information is output to the user. The service control unit 261 transmits the code information output by the code information control unit 262 to the information processing device 30 when the code information is necessary for executing the specific process. Further, when part of the user information (for example, user identification information) is required in executing the specific process, the service control unit 261 reads the necessary information from the user information storage unit 251 and stores the read information. It transmits to the information processing device 30 .

The code information control unit 262 performs processing related to code images. For example, when image data of a code image is output from the reading unit 24, the code information control unit 262 generates code information by performing specific decoding processing on the image data. However, code information cannot be completely decrypted without key data. Therefore, the decryption process executed by the code information control unit 262 is limited to the decryption process that can be executed without the key data. For example, the code information control section 262 may perform processing for converting the code image into data (code information) in a predetermined format. The code information control section 262 outputs the generated code information to the service control section 261 .

Further, when the code image contains data (additional information data) that can be completely decrypted without key data, the code information control unit 262 performs decryption processing on the code image to add additional information. Get information. In this case, the code information control section 262 may output the acquired additional information data to the service control section 261 .

FIG. 4 is a schematic block diagram showing a specific example of the functional configuration of the information processing device 30. As shown in FIG. The information processing device 30 is configured using, for example, an information processing device such as a personal computer or a server device. The information processing device 30 includes a communication section 31 , a storage section 32 and a control section 33 .

The communication unit 31 is a communication device. The communication unit 31 may be configured as a network interface, for example. The communication unit 31 performs data communication with other devices via the network 40 under the control of the control unit 33 . The communication unit 31 may be a device that performs wireless communication, or may be a device that performs wired communication.

The storage unit 32 is configured using a storage device such as a magnetic hard disk device or a semiconductor storage device. The storage unit 32 stores data used by the processing of the control unit 33 and data generated by the processing of the control unit 33 . The storage unit 32 functions as a user information storage unit 321, an authentication information storage unit 322, and a key data storage unit 323, for example.

The user information storage unit 321 stores information about each user. The user information storage unit 321 may store the user's name and user attribute information (information such as address, age, and gender).

The authentication information storage unit 322 stores authentication information used for user authentication processing. The authentication information storage unit 322 may store user identification information and authentication information in association with each other, for example. The authentication information storage unit 322 may store specific information (eg, account number, credit card number, etc.), user identification information, and authentication information in association with each other, for example. FIG. 5 is a diagram showing a specific example of information stored in the authentication information storage unit 322 configured as described above.

The key data storage unit 323 stores key data. The key data is data necessary for decoding the authentication information from the code information indicated by the code image formed on the user medium 10 .

The control unit 33 is configured using a processor such as a CPU and a memory. The control unit 33 functions as a service providing unit 331 and an authentication unit 332 by the processor executing programs. All or part of each function of the control unit 33 may be realized using hardware such as ASIC, PLD, FPGA, or the like. The above program may be recorded on a computer-readable recording medium. Computer-readable recording media include portable media such as flexible disks, magneto-optical disks, ROMs, CD-ROMs, semiconductor storage devices (such as SSD), and storage devices such as hard disks and semiconductor storage devices built into computer systems. It is a device. The above program may be transmitted via telecommunication lines.

The service providing unit 331 performs processing for providing the user with a predetermined service requested by the user. The service providing unit 331 executes specific processing as one of predetermined services, for example. The service providing unit 331 executes specific processing only for users who have been authenticated by the authentication unit 332 .

The authentication unit 332 executes authentication processing based on code information transmitted from the user terminal 20 . For example, when user identification information and code information are received from the user terminal 20 , the authentication unit 332 uses key data stored in the key data storage unit 323 to decrypt the received code information. Authentication unit 332 determines whether the combination of the authentication information obtained by decryption and the received user identification information matches the combination of authentication information and user identification information registered in authentication information storage unit 322 . The authentication unit 332 authenticates that the user of the user terminal 20 is an authorized user when the two match. On the other hand, if they do not match, it is determined that the user of the user terminal 20 is an unauthorized user. The authentication unit 332 outputs the authentication result to the service providing unit 331 .

FIG. 6 is a sequence chart showing a specific example of the basic processing flow of the information processing system 100. As shown in FIG. First, the user operates the code information on the user terminal 20 . A code information operation is an operation for reading information of a code image formed on the user medium 10 using the reading unit 24 of the user terminal 20 . When the user terminal 20 receives a code information operation from the user (step S101), the user terminal 20 acquires code information (step S102). The code information control unit 262 of the user terminal 20 transmits authentication request information including the acquired code information to the information processing device 30 (step S103).

The authentication unit 332 of the information processing device 30 acquires code information from the received authentication request information. The authentication unit 332 decrypts the code information using the key data and acquires the authentication information. The authentication unit 332 executes authentication processing using the acquired authentication information (step S104). The authentication unit 332 transmits the authentication result to the user terminal 20, which is the source of the authentication request information (step S105). The output unit 23 of the user terminal 20 outputs the received authentication result (step S106). For example, the authentication result may be output by being displayed.

FIG. 7 is a sequence chart showing a specific example of the processing flow of the information processing system 100. As shown in FIG. First, the user operates the user terminal 20 to start an application. By starting the application, the control unit 26 functions as the service control unit 261 . The service control unit 261 displays on the output unit 23 as options a plurality of processes that can be provided to the user.

When the user operates the input unit 22 to select a process from the options, the service control unit 261 determines whether the selected process is a specific process. When the selected process is the specific process, that is, when an operation indicating a request to execute the specific process is received (step S201), the service control unit 261 instructs the user to acquire code information (step S202). For example, the service control unit 261 may give the above instruction by displaying a character string or an image such as "Take an image of the code image on the user medium" on the screen of the output unit 23. FIG.

The user performs an operation for acquiring code information according to the instructions displayed on the output unit 23 . For example, the reader 24 is operated to read the code information of the user medium 10 . For example, when the reading unit 24 is configured using a camera, the user puts the code image within the angle of view of the reading unit 24 and adjusts the distance between the reading unit 24 and the code image to a position in which the code image is in focus. . Upon receiving an operation by the user (step S203), the reading unit 24 captures a code image according to the operation. The code information control unit 262 acquires code information by performing a predetermined decoding process on the captured code image (step S204). The code information control section 262 outputs the acquired code information to the service control section 261 . The service control unit 261 generates specific processing request information including code information and user identification information stored in the user information storage unit 251 . The specific process request information is information indicating a request to execute a specific process selected by the user. The service control unit 261 transmits the generated specific processing request information to the information processing device 30 (step S205).

Upon receiving the specific processing request information, the service providing unit 331 of the information processing device 30 stores the user identification information included in the received specific processing request information. The service providing unit 331 outputs the user identification information and code information included in the received specific processing request information to the authentication unit 332 . The authentication unit 332 decrypts the code information using the key data and acquires the authentication information. The authentication unit 332 executes authentication processing using the acquired authentication information and user identification information (step S206). Authentication unit 332 outputs the authentication result to service providing unit 331 . When an authentication result indicating that the user has been authenticated is obtained, the service providing unit 331 sends screen information (hereinafter referred to as “specific processing screen information”) for executing the requested specific processing to the user terminal. 20 (step S207). The specific process screen information may be, for example, information of an input screen for inputting information necessary for execution of the specific process. Note that if the user is not authenticated, the service providing unit 331 may transmit information indicating an error to the user terminal 20 .

Upon receiving the specific processing screen information, the service control unit 261 of the user terminal 20 causes the output unit 23 to display the specific processing screen based on the received specific processing screen information (step S208). For example, when the specific process is to change the registered information, a screen provided with an input field for inputting new registered information after the change may be configured as the specific process screen.

When the user operates the input unit 22 to perform an operation for executing a specific process, the service control unit 261 accepts the operation (step S209). The service control unit 261 transmits information input for execution of a specific process (hereinafter referred to as "specific process information") to the information processing device 30 in response to an operation (step S210). Upon receiving the specific processing information, the service providing unit 331 of the information processing device 30 executes the specific processing according to the received specific processing information (step S211).

FIG. 8 is a sequence chart showing a specific example of the processing flow of the information processing system 100. As shown in FIG. First, the user performs an operation for acquiring code information. For example, the user operates the reading unit 24 to read the code information on the user medium 10 . For example, when the reading unit 24 is configured using a camera, the user puts the code image within the angle of view of the reading unit 24 and adjusts the distance between the reading unit 24 and the code image to a position in which the code image is in focus. . Upon receiving an operation by the user (step S301), the reading unit 24 captures a code image according to the operation.

The code information control unit 262 acquires additional information and code information by performing predetermined decoding processing on the captured code image (step S302). The additional information includes activation signal information indicating activation of a predetermined application, for example. In this case, the code information control unit 262 activates a predetermined application according to the acquired additional information (step S303). The predetermined application started here is an application capable of requesting the information processing device 30 to execute a specific process.

The control unit 26 functions as a service control unit 261 in response to activation of a predetermined application. The service control section 261 acquires code information from the code information control section 262 . Service control unit 261 generates authentication request information including code information and user identification information stored in user information storage unit 251 . The service control unit 261 transmits the generated authentication request information to the information processing device 30 (step S304).

Upon receiving the authentication request information, the service providing unit 331 of the information processing device 30 outputs the user identification information and code information included in the received authentication request information to the authentication unit 332 . The authentication unit 332 decrypts the code information using the key data and acquires the authentication information. The authentication unit 332 executes authentication processing using the acquired authentication information and user identification information (step S305). Authentication unit 332 outputs the authentication result to service providing unit 331 . The service providing unit 331 associates and records the user identifier and the authentication result, and notifies the user terminal 20 of the authentication result (step S306).

Upon receiving the notification of the authentication result, the service control unit 261 of the user terminal 20 outputs the notified authentication result from the output unit 23 to notify the user. When the user operates the input unit 22 to perform an operation indicating a request to execute a specific process, the service control unit 261 accepts the operation (step S307). The service control unit 261 transmits information (specific processing information) input for execution of the specific processing to the information processing device 30 according to the operation (step S308). In this case, the specific processing information includes user identification information.

Upon receiving the specific processing information, the service providing unit 331 of the information processing device 30 determines whether or not an authentication result indicating that the user is an authorized user is stored for the user identification information included in the received specific processing information. do. If the authentication result indicating that the user is valid is stored, the service providing unit 331 executes specific processing according to the received specific processing information (step S309).

The information processing system 100 configured in this way can authenticate the user of the user terminal 20 via the network 40 . At that time, the code information indicated by the code image formed on the user medium 10 owned by the user is required for authentication. Therefore, an unauthorized user who does not have the user medium 10 on which the code image is formed cannot be authenticated even if he knows the user identification information and password used by the authorized user. Also, without key data, the code information indicated by the code image cannot be completely decrypted, and the authentication information cannot be acquired. Therefore, even if there is a malicious user who obtains the combination of authentication information and code image (or code information) for a particular user, he cannot obtain the usable authentication information for other users. Therefore, it is possible to maintain security in processing via a network.

(Modification)
In the sequence chart shown in FIG. 7, the processes of steps S207 to S210 may not be executed. For example, if there is no need to acquire information from the user when executing the specific process, the specific process (step S211) may be executed as soon as the user is determined to be an authorized user in the authentication process (step S206). . For example, when payment is made using a credit card as a specific process, it may be configured in this way. That is, at the time of step S201, there may be cases in which the user has already selected the goods or services for which he wishes to pay, and the necessary information has already been entered. In this case, the fact that an operation indicating execution of payment using a credit card has been performed may be accepted as a request for execution of the specific processing request. In this case, the processing of steps S202 to S206 is executed, and if it is determined that the user is valid by the authentication processing, the payment processing is executed by the service providing unit 331, and the purchase of the goods or services is completed. good too.

The code information may be formed on the user medium 10 in other manners instead of being formed as a code image. For example, the user medium 10 may be provided with a contactless IC chip capable of executing NFC (Near Field Communication). In this case, the contactless IC chip stores code information and transmits the code information to the user terminal 20 by NFC. In this case, the reading unit 24 of the user terminal 20 is configured using a device capable of receiving data by NFC. The same applies to technology using RFID (Radio Frequency IDentification).

Although the embodiment of the present invention has been described in detail with reference to the drawings, the specific configuration is not limited to this embodiment, and design and the like are included within the scope of the gist of the present invention.

DESCRIPTION OF SYMBOLS 100... Information processing system 10... User medium 11... Code image 20... User terminal 21... Communication part 22... Input part 23... Output part 24... Reading part 25... Storage part 251... User information Memory unit 26 Control unit 261 Service control unit 262 Code information control unit 30 Information processing device 31 Communication unit 32 Storage unit 321 User information storage unit 322 Authentication information storage unit , 323... Key data storage unit, 33... Control unit, 331... Service providing unit, 332... Authentication unit

Claims (9)

receiving code information from a user terminal, obtaining authentication information by decrypting the code information using key data necessary for decrypting the code information, and authenticating the user terminal using the obtained authentication information control unit,
Information processing device. 2. The information processing apparatus according to claim 1, wherein said control unit executes specific processing, which is predetermined processing requiring authentication, in response to a request from said authenticated user terminal. a reading unit that reads code information recorded on a user medium;
a control unit that receives authentication by transmitting code information read by the reading unit to an information processing device;
The user terminal, wherein the code information requires key data in order to decrypt it and obtain the authentication information. The code information includes additional information obtained by a predetermined decryption process and the authentication information obtained by decryption using the key data,
The user terminal according to claim 3, wherein the control unit acquires the additional information by decoding the code information. A credit card number and code information including authentication information used for authentication of a specific process, which is a specific process related to the credit card number, are recorded,
A user medium of a credit card, wherein the code information requires key data in order to decrypt the code information and obtain the authentication information. a receiving step of receiving code information from a user terminal;
an acquisition step of acquiring authentication information by decrypting the code information using key data necessary for decrypting the code information;
an authentication step of authenticating the user terminal using the obtained authentication information;
Authentication method with a reading step of reading code information recorded on a user medium;
an authenticated step of receiving authentication by transmitting the code information read in the reading step to an information processing device;
The method to be authenticated, wherein the code information requires key data in order to be decrypted to obtain the authentication information. A computer program for causing a computer to function as the information processing apparatus according to claim 1 or 2. A computer program for causing a computer to function as the user terminal according to claim 3 or 4.

Images