JP2023178109A - Information processing device, authentication system, information processing method, and information processing program - Google Patents

Abstract

To provide an information processing device, information processing method, and information processing program for achieving a simple and reliable authentication system.SOLUTION: An information processing device 10 for authenticating users executing applications in user terminals, includes: an authentication information storage part 13 for storing identification information for identifying each of the users of the user terminals, user information associated with each of the applications, and an appropriate first authentication position of the user, as authentication information; and a user authentication part 14 for acquiring the identification information acquired from the user terminal, information on an application to be executed, and position information on the user terminal, collating the authentication information, and executing authentication of the user of the user terminal.SELECTED DRAWING: Figure 1

Description

Embodiments of the present invention relate to an information processing device, an information processing method, and an information processing program.

In recent years, various services such as electronic payment services have become widely available using mobile terminals such as smartphones, and the convenience of life is rapidly increasing. Additionally, with the spread of telecommuting, a work style in which employees use their own PCs and mobile terminals to conduct work from remote locations such as their homes or business trips via networks has become widespread.

On the other hand, in order to enable the use of various services such as electronic payments and in-house applications using a user's mobile terminal, personal information such as login information and passwords of the user who owns the terminal must be transferred to the applications within the terminal. It is often set and memorized. If a user's terminal is handed over to a third party and login information for the terminal is leaked, there is a risk that an application such as electronic payment may be executed by that third party. Security techniques for ensuring user authentication have been studied for some time.

Japanese Patent Application Publication No. 2019-125000

Although the accuracy of authentication increases by performing multiple authentications in multiple stages, there is a risk that operations related to user authentication may become complicated. There is a need for a method to reliably authenticate execution of an application by the correct holder of the terminal without reducing user convenience.

The present invention has been made in consideration of such circumstances, and an object of the present invention is to provide an information processing device, an information processing method, and an information processing program that realize a simple and reliable authentication system.

An information processing apparatus according to an embodiment of the present invention is an information processing apparatus that authenticates a user who executes an application on a user terminal, and includes identification information that identifies each user of the user terminal, and that is associated with each of the applications. an authentication information storage unit that stores user information and an appropriate first authentication location of the user as authentication information; and an authentication information storage unit that stores user information and an appropriate first authentication location of the user as authentication information; and a user authentication unit that acquires the authentication information and verifies the authentication information to authenticate the user of the user terminal.

Embodiments of the present invention provide an information processing device, an information processing method, and an information processing program that realize a simple and reliable authentication system.

FIG. 1 is a configuration diagram showing an example of the configuration of an authentication system using an information processing device according to the present embodiment. FIG. 2 is an explanatory diagram showing an example of authentication information set in an information processing device. An explanatory diagram showing an example of an authentication information setting screen. (A) An explanatory diagram showing an example of setting an approver group; (B) An explanatory diagram showing an example of setting the approver information. FIG. 3 is a diagram illustrating an example of an authentication flow in the information processing method according to the present embodiment.

Embodiments of the present invention will be described below based on the accompanying drawings. FIG. 1 is a diagram showing an example of the configuration of an authentication system 100 using an information processing device 10 according to the present embodiment.

First, the overall configuration will be explained.
The authentication system 100 is a system that authenticates the user of the user terminal 50 in the information processing apparatus 10.

The authentication system 100 includes a user terminal 50 and an information processing device 10. The information processing device 10 and the user terminal 50 are communicably connected via a network, and although one user terminal 50 that can communicate with the information processing device 10 is shown in FIG. A user terminal 50 may be communicably connected to the information processing device 10.

The user terminal 50 includes an identification information transmitting section 51, a position information transmitting section 52, and an application control section 53.

The identification information transmitting unit 51 transmits identification information for uniquely identifying each user of the user terminal 50, such as a user name, password, and e-mail address, to the information processing apparatus 10. In the case of a mobile terminal such as a smartphone, the identification information includes terminal information (for example, the terminal's Mac address, etc.), mobile number, and biometric information of the user of the user terminal 50 (for example, the user's fingerprint information, facial information data). There may be. When the user terminal 50 authenticates login to the terminal based on biometric information, the determination result may be transmitted to the information processing device 10 as identification information.

The identification information transmitting unit 51 also provides web access information (information on access destination URL, etc.) when the user terminal 50 accesses an external web server, transmission/reception information of e-mails transmitted/received at the user terminal 50, When the user uses a chat system via a network, information such as text chat and web conference usage information may be sent to the information processing device 10.

The location information transmitting unit 52 transmits location information of the user terminal 50 to the information processing device 10. Note that the location information is information that allows the location of the user terminal 50 to be grasped, and may be, for example, location information of the user terminal 50 obtained from GPS. Further, the position information may be a specific position set in advance and a relative distance from this position. The location information transmitter 52 may periodically (for example, every hour) transmit location information to the information processing device 10.

The application control unit 53 transmits information about an application executed on the user terminal 50. The application information is identification information for identifying each application, and includes, for example, an application name and a hash value corresponding to the application. Note that the application information may be received from an application server with which the user terminal 50 communicates and transmitted to the identification information acquisition unit 11 of the information processing device 10 .

The application control unit 53 issues an authentication request to the information processing device 10 and receives an authentication result from the information processing device 10 . Based on the authentication result, permission/disapproval of execution of the application executed on the user terminal 50 is controlled. Here, an application is, for example, software that transmits information related to electronic money and personal information to an external network within a terminal, communicates with the outside, performs electronic payments, login authentication, etc., or software that is used within an organization such as a company. refers to software whose use is limited (for example, file sharing applications).

Specifically, when the information processing device 10 receives information with matching authentication results, the application control unit 53 determines that the user terminal 50 is being used by the correct user, and executes the application in the terminal. Allow. On the other hand, if the information processing device 10 receives information with inconsistent authentication results, it is determined that the user terminal 50 is not being used by the correct user, and execution of the application is not permitted. Note that a method for authenticating a terminal in the information processing device 10 will be described later.

Note that the execution control of the application is not limited to control by the user terminal 50, and the authentication result output from the information processing device 10 is transmitted to the server of the application executed by the user terminal 50 (reference numeral 70 in FIG. 1). Upon acceptance, the application may control permission/disapproval for execution of the application based on the authentication result.

A specific configuration of the information processing device 10 according to the embodiment will be described.
The information processing device 10 acquires identification information, application information, and location information from the user terminal 50, and compares this acquired information with the user's identification information and authentication location registered in advance. This is an authentication server that authenticates users.

The information processing device 10 includes an identification information acquisition section 11 , a position information acquisition section 12 , an authentication information storage section 13 , and an approver notification section 15 .

Note that the functions of each unit constituting the information processing device 10 may be realized by executing a predetermined program code using a processor, and are not limited to such software processing. It may be realized by a combination of hardware processing, or may be realized by a combination of software processing and hardware processing.

The identification information acquisition unit 11 acquires identification information for identifying each user of the user terminal 50 from the user terminal 50. The identification information acquisition unit 11 acquires from the user terminal 50 at least one piece of identification information (login ID, password, biometric information, etc.) necessary for authenticating the user. The identification information acquisition unit 11 may acquire a plurality of pieces of identification information, and the type and number of identification information to be acquired from the user terminal 50 are set by the administrator of the information processing device 10. Further, the type and number of identification information to be acquired may be automatically changed at regular intervals.

Further, the identification information acquisition unit 11 receives information about an application executed on the user terminal 50.

The position information acquisition unit 12 acquires the position information of the user terminal 50 transmitted from the user terminal 50. The location information acquisition unit 12 may acquire the location information transmitted from the user terminal 50 as well as time information at which the location information was acquired. The location information acquisition unit 12 acquires the location information of the user terminal 50 when receiving an authentication request from the application control unit 53 of the user terminal 50 .

Furthermore, when a user owns multiple terminals, the information processing device 10 may register the multiple terminals for the user and request location information from a user's terminal other than the terminal on which the application is executed. Then, input of location information may be received from the terminal.

The authentication information storage unit 13 stores identification information for identifying each user of the user terminal 50, user information associated with each application, and an appropriate authentication position of each user as authentication information.

The authentication information storage unit 13 stores information for authenticating each user of the user terminal 50, such as the user name and password of the user who owns the user terminal 50, the e-mail address of the user terminal 50, and the identifier of the user terminal 50. Register. The identification information is registered in the information processing device 10 by the user who owns the user terminal 50 or the administrator of the information processing device 10 . From the viewpoint of increasing the accuracy of authentication, it is desirable that multiple types of identification information be registered.

The authentication information storage unit 13 registers user information that permits execution of the application in association with each application executed on the user terminal 50 . The user information is information that identifies the user of the user terminal 50, and is, for example, information such as a user name and email address. Note that the user information may be set for a single user, or may be set for each group by setting a plurality of users as a group. User information associated with each application is registered by the user who owns the user terminal 50 and the administrator of the information processing device 10 .

The authentication information storage unit 13 is location information that is assumed (permitted) in advance that the user of the user terminal 50 who executes the application exists at that location, for example, location information such as a home or a company to which the user belongs. The authentication position may be specified by coordinates or by a certain position range (a certain area (for example, within a radius of 5 meters) centered on the specified position coordinates). The authentication position is registered in advance in the information processing device 10 by the user who owns the user terminal 50 or the administrator of the information processing device 10 .

Further, the authentication information storage unit 13 may set approver information that approves execution of the application in association with the user of the user terminal 50. At the time of authentication in the information processing device 10, the approver determines whether or not to approve the authentication. As the approver information, the approver's notification destination (email address, telephone number, etc.) is registered. Furthermore, location information about the approver whose presence is assumed (permitted) in advance may be stored as the approver's authentication position (second authentication position). The approver information is registered in advance in the information processing device 10 by the user who owns the user terminal 50 or the administrator of the information processing device 10 .

FIG. 2 is an explanatory diagram showing an example of authentication information set in the information processing device 10.

User information associated with each application executed on the user terminal 50 is set. A single user or a group in which multiple users are associated can be set in the user information. The authentication position (coordinate information in FIG. 2) of each user who executes the application is set in advance. Further, information on an approver who determines whether to approve execution of the application for each user is set, and an authentication position of the approver is set.

FIG. 3 is an explanatory diagram showing an example of a setting screen for authentication information registered in the information processing device 10. As shown in FIG. This is a setting screen configured by the user (or the administrator of the information processing device 10).

In Figure 3, the configuration is such that it is possible to select an application to perform authentication and select a user who is permitted to perform the authentication, including authentication based on identification information such as a login password, biometric authentication, location authentication based on the authentication location, and It is configured such that four authentication methods can be selected: approver authentication based on the approver. In FIG. 3, the method specified by a black circle is the authentication method when the user terminal 50 executes the application.

As shown in FIG. 3, in location authentication, the user's authentication location of the user terminal 50 can be set. The authentication position may be specified by coordinates or based on an address. Furthermore, in approver authentication, the approver (and the approver's notification destination) and the approver's authentication position can be set. Thereby, the strength of authentication can be changed by changing the authentication method depending on the importance of the application executed on the user terminal 50.

Returning to FIG. 1, the explanation will be continued.
The user authentication unit 14 acquires identification information acquired from the user terminal 50, information on the application to be executed, and location information of the user terminal 50, and verifies the authentication information to authenticate the user of the user terminal 50.

Specifically, the user authentication unit 14 compares the identification information acquired from the user terminal 50 with the identification information registered in the user terminal 50 corresponding to the user, and determines whether or not they match. . If they match, it is determined whether this user is a user who is permitted to execute the application. If the identification information matches and the user is the authorized user of the application, the location information of the terminal is compared with the authentication location registered for the user of the user terminal 50 to determine the location of the terminal. It is determined whether the information matches the authentication position (if the authentication position is set as a certain range, whether the position information of the terminal falls within that range). If the identification information matches, the user is the authorized user of the application, and the location information matches the authentication location, the user of the user terminal 50 determines that the authentication matches.

On the other hand, if the user is not the authorized person of the application and the identification information or location information does not match the registered information, the user of the user terminal 50 determines that the authentication is inconsistent.

Further, when the identification information, the user who executes the application, and the location information of the user terminal 50 match the authentication information, the user authentication unit 14 notifies the approver terminal 60 corresponding to the approver information, and Authentication may be performed based on information regarding approval/disapproval received from 60.

Specifically, the approver notification unit 15 notifies the approver's notification destination information when the identification information matches, the person is the authorized person of the application, and the location information matches the authentication position. Notify approvers that the user is about to run the application. At this time, the user's location information, user's contact information, etc. may be notified. The approver notification unit 15 receives an approval result indicating whether to approve the authentication from the approver terminal 60. When the user authentication unit 14 receives approval information for approving the authentication from the notified approver terminal 60, the user authentication unit 14 determines that the authentication is consistent.

Further, the approver notification unit 15 may acquire the location information of the approver terminal 60 of the approver at the time of authentication. The authentication information storage unit 13 sets in advance an appropriate authentication position of the approver in association with the approver information, and the identification information, the user who executes the application, and the location information of the user terminal 50 match the authentication information. And only when the approver's location information matches the authentication position (the approver's authentication position), the approver terminal 60 corresponding to the approver information is notified, and based on the information on approval/disapproval received from the approver terminal 60. May be authenticated. If either the location information of the user or the approver of the user terminal 50 does not match the authentication location, it may be considered an authentication mismatch. Furthermore, if the location information of the user and the approver on the user terminal 50 does not match the authentication location, the information that does not match (such as the difference between the location information and the authentication location) is added to the approver terminal 60 of the approver. You may notify. As a result, authentication is not performed unless the location information of the user and the approver of the user terminal 50 are both in the authentication position, so unauthorized use can be prevented and stronger authentication can be achieved.

Further, the authentication information storage unit 13 may set a group in which a plurality of users are associated as approvers. In this case, all members of the group may be designated as approvers, or any user in the group may be automatically selected as the approver.

FIG. 4(A) is an explanatory diagram showing an example of setting a group of approvers. Here, the group that manages authentication and users in higher positions are classified as groups. For example, two users, suzuki and tokkyo, are set in the authentication management group.

FIG. 4(B) is an explanatory diagram showing an example of setting approver information, and allows selection of approvers in groups by users. For example, an authentication management group is set as an approver group for the user yamada who is permitted to execute application1. Further, the coordinates (x2, y2, z2) are set as the authentication position of the authorized user of the authentication management group.

Further, the user authentication unit 14 sets in advance a predetermined execution permission time during which the user terminal 50 can execute an application, and when an authentication request is received from the user terminal 50, the user authentication unit 14 determines that this time is within the execution permission time. The configuration may be such that the authentication operation is executed only when the authentication is performed. The execution permission time refers to the time during which the application is allowed to be executed (for example, every Wednesday or from 9:00 a.m. to 6:00 p.m.), and is set by the user or administrator of the user terminal 50. .

Further, in the authentication information storage unit 13, an authentication keyword is registered in advance for each user of the user terminal 50, and the user authentication unit 14 requests the user terminal 50 to input the keyword at the time of authentication operation. . Then, authentication may be further performed based on a comparison between the input keyword and the authentication keyword.
Specifically, when acquiring identification information, application information, and location information of the user terminal 50 acquired from the user terminal 50 and matching the authentication information, the user terminal 50 is requested to input a keyword. , if this keyword matches the authentication keyword, authentication matching is determined. If they do not match, it is considered inconsistent.

Furthermore, authentication keywords for each user and approver may be registered in the authentication information storage unit 13. In this case, the user authentication unit 14 requests the user terminal 50 and approver terminal 60 to input a keyword. Then, authentication is further performed based on a comparison between the input keywords of the user and the approver and the authentication keyword.
Specifically, when acquiring identification information, application information, and location information of the user terminal 50 acquired from the user terminal 50 and collating and matching authentication information, two of the user terminal 50 and the approver terminal 60 prompt for keywords on one device. If the keywords input from both sides match the authentication keyword, authentication matching is determined. If they do not match, it is considered inconsistent. In this case, the authentication based on the comparison with the authentication keyword is performed only when the keyword is input from each of the user terminal 50 and the approver terminal 60 within a predetermined time (for example, within 5 minutes) after the input of the keyword is requested. It may also be configured to execute.

Further, the user authentication unit 14 may additionally execute an authentication method that uses past location information of the user terminal 50 when performing authentication. Specifically, the user authentication unit 14 generates questions for authenticating whether the user of the user terminal 50 is legitimate based on past location information, and receives answers to the questions from the user terminal 50. For example, a question that only the user himself/herself can know, such as "Where were you at between 12 o'clock and 13 o'clock yesterday?" is generated and sent to the user terminal 50, and an answer is received from the user terminal 50. If the answer received from the user terminal 50 indicates the correct position of the user at the relevant time, the user authentication is determined to be consistent. Authentication questions based on location information to be asked of the user of the user terminal 50 are automatically generated by setting a question pattern in advance.

Furthermore, as a method for authenticating using past location information, the user authentication unit 14 uses a method for authenticating the user of the user terminal 50 when past location information (for example, location information from 24 hours ago) matches the authentication location. It may be determined that it is consistent. Furthermore, when the current location information of the user terminal 50 matches the authentication location and the past location information (for example, location information 24 hours ago) matches the authentication location, the user authentication unit 14 users may be determined to be authenticated.

Further, the user authentication unit 14 may perform authentication using past web access information on the user terminal 50, email transmission/reception information, and past usage information when using a chat tool. A question as to whether the user of the user terminal 50 is legitimate is generated based on the web access information, etc., and an answer to the question is received from the user terminal 50. For example, questions that only the user himself/herself can know, such as "Which website did you access between 12:00 and 1:00 pm yesterday?" or "Who was the other party in the web conference yesterday?" are generated in a multiple-choice format. The information is transmitted to the terminal 50, and a reply is received from the user terminal 50. If the answer from the user terminal 50 is a correct answer, the user authentication is determined to be consistent. Authentication questions asked to the user of the user terminal 50 based on the web access information etc. are automatically generated by setting a question pattern in advance. Note that the user authentication unit 14 may generate a plurality of questions based on location information, web access information, etc., and ask the user of the user terminal 50 the questions.

Furthermore, as a method of authenticating using web access information, the user authentication unit 14 registers in advance information related to web access assumed by the user terminal 50 (URL to be accessed, etc.), and stores past web access information. If the information (for example, the Web access information of the user terminal 50 within 24 hours) matches the registered information, the user of the user terminal 50 may determine that the authentication matches.

As mentioned above, the user of the user terminal 50 or the administrator of the information processing device 10 can arbitrarily set various authentication methods such as authentication based on answers to questions based on past location information, and by combining the authentication methods, the strength of authentication can be increased. can be increased.

The user authentication unit 14 outputs information indicating whether or not the authentication in the information processing device 10 is consistent to the user terminal 50. The application control unit 53 of the user terminal 50 receives the authentication result from the information processing device 10 and controls the application based on the authentication result. Note that the authentication result of the information processing device 10 may be directly received by an application within the terminal, or may be directly received by the application server 70 in which an application executed by the user terminal 50 is stored.

FIG. 5 is a diagram illustrating an example of an authentication flow in the information processing method according to the present embodiment (see FIG. 1 as appropriate).

The identification information acquisition unit 11 acquires identification information for identifying each user of the user terminal 50, application information, and current position information of the user terminal 50 from the user terminal 50 (S10).

The user authentication unit 14 determines whether the identification information matches registered information (S11). If they do not match, a result of authentication mismatch is output to the user terminal 50 (S11: NO, S17).

The user authentication unit 14 determines whether the user is capable of executing the application (S12). If they do not match, a result of authentication mismatch is output to the user terminal 50 (S12: NO, S17).

The user authentication unit 14 compares the acquired location information with a pre-registered authentication location and determines whether they match (S13). If they do not match, a result of authentication mismatch is output to the user terminal 50 (S13: NO, S17).

If the location information matches the authentication location, the approver notification unit 15 notifies the notification destination corresponding to the approver information (S13: YES, S14).

When the user authentication unit 14 receives approval information from the approver terminal 60, the user authentication unit 14 determines that the authentication is consistent (S15: YES, S16). The application control unit 53 of the user terminal 50 that has received the notification of authentication matching permits execution of the application within the terminal.

Note that if the approval information is not received within a certain period of time, a result indicating that the authentication is inconsistent is output to the user terminal 50 (S15: NO, S17). The application control unit 53 of the user terminal 50 that receives the notification of the authentication mismatch disallows the execution of the application within the terminal.

In this way, the information processing device 10 of the present embodiment acquires identification information, application information, and location information from the user terminal 50, and compares this acquired information with pre-registered authentication information to enable the user to It is possible to easily and reliably authenticate whether the user using the terminal 50 is a legitimate user.

Note that the program executed by the information processing device 10 is provided by being pre-installed in a storage circuit such as a ROM. Alternatively, this program may be provided as an installable or executable file stored on a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD, or flexible disk. It's okay. Further, the program executed by the information processing device 10 may be stored on a computer connected to a network such as the Internet, and may be provided by being downloaded via the network.

Although several embodiments of the invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, substitutions, and changes can be made without departing from the gist of the invention. These embodiments and their modifications are included within the scope and gist of the invention, as well as within the scope of the invention described in the claims and its equivalents.

10... Information processing device, 11... Identification information acquisition unit, 12... Location information acquisition unit, 13... Authentication information storage unit, 14... User authentication unit, 15... Approver notification unit, 50 (50a, 50b)... User terminal, 51 (51a, 51b)...Identification information transmitting unit, 52 (52a, 52b)...Position information transmitting unit, 53 (53a, 53b)...Application control unit, 54 (54a, 54b)...Access authority setting unit, 70...Application Server, 100...Authentication system.

An information processing apparatus according to an embodiment of the present invention is an information processing apparatus that authenticates a user who executes an application on a user terminal, and is configured to associate identification information for identifying each user of the user terminal with each of the applications. an authentication information storage section that stores user information indicating the user who is permitted to execute the application and an appropriate first authentication position of the user as authentication information; a user authentication unit that acquires information on an application to be used for a plurality of users, and a user authentication unit that acquires location information of the user terminal and authenticates the user of the user terminal by comparing it with the authentication information; can be set as a group, the authentication information storage unit further registers approver information that approves execution of the application in association with the user, and the user authentication unit executes the application using the identification information. When the user, the location information of the user terminal matches the authentication information, a message indicating that the user is about to execute the application on the approver terminal corresponding to the approver information, the user's location information, and the user's The contact information is notified, and authentication is performed based on the information regarding approval/disapproval received from the approver terminal.

An information processing apparatus according to an embodiment of the present invention is an information processing apparatus that authenticates a user who executes an application on a user terminal, and includes identification information that identifies each user of the user terminal, and that is associated with each of the applications. , an authentication information storage unit that stores user information indicating the user who is permitted to execute the application, and an appropriate first authentication position of the user as authentication information; and the identification information acquired from the user terminal, the application is executed. a user authentication unit that acquires application information and location information of the user terminal and authenticates the user of the user terminal by comparing the information with the authentication information; The authentication information storage unit further registers approver information that approves execution of the application in association with the user, and the approver information can be set as a group by a single user or multiple users. An associated authorization group can be set, and the user authentication unit identifies a single user or the authorization group when the identification information, the user executing the application, and the location information of the user terminal match the authentication information. Select any user from among them as an approver, and notify the selected approver's approver terminal that the user is about to execute the application, the user's location information, and the user's contact information, Authentication is performed based on information regarding approval/disapproval received from the approver terminal.

Claims (11)

An information processing device that authenticates a user who executes an application on a user terminal,
an authentication information storage unit that stores identification information for identifying each user of the user terminal, user information associated with each of the applications, and an appropriate first authentication position of the user as authentication information;
a user authentication unit that acquires the identification information acquired from the user terminal, information on an application to be executed, and location information of the user terminal, and collates the authentication information to authenticate the user of the user terminal;
An information processing device comprising: The authentication information storage unit further registers approver information that approves execution of the application in association with the user,
The user authentication unit notifies the approver terminal corresponding to the approver information when the identification information, the user executing the application, and the location information of the user terminal match the authentication information, and Authenticate based on the received approval/disapproval information,
The information processing device according to claim 1, further comprising: The authentication information storage unit presets an appropriate second authentication position of the approver in association with the approver information,
When the identification information, the user who executes the application, and the location information of the user terminal match the authentication information, and the location information of the approver matches the second authentication location, the user authentication unit Notifying the approver terminal corresponding to the approver information, and performing authentication based on the approval/disapproval information received from the approver terminal;
The information processing device according to claim 2, further comprising: The authentication information storage unit is capable of setting a group associated with a plurality of users as the approver.
The information processing device according to claim 2, characterized in that: Setting in advance a predetermined execution permission time during which the application can be executed,
The user authentication unit executes the authentication operation only during the execution permission time.
The information processing device according to claim 1, characterized in that: The authentication information storage unit registers authentication keywords corresponding to each user,
The user authentication unit requests the user terminal to input a keyword, and further performs authentication based on comparison with the authentication keyword.
The information processing device according to claim 1, characterized in that: The authentication information storage unit registers authentication keywords for each of the user and the approver,
The user authentication unit requests the user terminal and the approver terminal to input a keyword, and further performs authentication based on comparison with the authentication keyword.
The information processing device according to claim 2, characterized in that: The user authentication unit performs authentication based on comparison with the authentication keyword only when the keyword is input from each of the user terminal and the approver terminal within a predetermined time after requesting input of the keyword. execute,
The information processing device according to claim 7, characterized in that: An authentication system that authenticates a user who executes an application on a user terminal,
an authentication information storage unit that stores identification information for identifying each user of the user terminal, user information associated with each of the applications, and an appropriate first authentication position of the user as authentication information;
a user authentication unit that acquires the identification information acquired from the user terminal, information on an application to be executed, and location information of the user terminal, and collates the authentication information to authenticate the user of the user terminal; Equipped with
The authentication result output from the user authentication unit is received by a server of an application executed by the user terminal, and the application controls permission or disapproval of execution of the application based on the authentication result.
An authentication system characterized by: An information processing method for authenticating a user who executes an application on a user terminal, the method comprising:
storing identification information for identifying each user of the user terminal, user information associated with each of the applications, and an appropriate first authentication position of the user as authentication information;
acquiring the identification information acquired from the user terminal, information on the application to be executed, and location information of the user terminal, and verifying the authentication information to authenticate the user of the user terminal;
An information processing method characterized by comprising: computer,
a function of storing identification information for identifying each user of a user terminal, user information associated with each application, and an appropriate first authentication position of the user as authentication information;
A function of acquiring the identification information acquired from the user terminal, information on the application to be executed, and location information of the user terminal, and collating the authentication information to authenticate the user of the user terminal;
An information processing program characterized by functioning as an information processing program.

Images