JP3750982B2 - User authentication system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention provides a user authentication system. To In particular, when various types of information processing devices such as personal computers, workstations, and servers connected to the Internet are used, specific information for identifying a user is input by the user himself / herself. User authentication system to prevent unauthorized access by authenticating To It is related.
[0002]
[Prior art]
As a conventional general user authentication method, a password is registered in advance for each ID number of an individual user on an authentication system such as a host computer or a server, and the user ID and password are used as a keyboard at the start of use. For example, a method is often used in which input is performed from an input device such as a collation with a regular user ID and password registered in advance, and permission is granted if they match.
[0003]
FIG. 19 is a diagram showing a configuration of a network system to which such a conventional user authentication system is connected. FIG. 19 shows an example of a network system represented by the Internet. In the figure, 100 is a user terminal using an arbitrary WWW (World Wide Web) browser and arbitrary software for sending and receiving e-mails, and 101 is the Internet. , 102a, 102b, and 102c are connected to the network 101, a plurality of servers that have opened individual home pages, and 103a, 103b, and 103c are databases connected to the servers 102a, 102b, and 102c. A password is stored in advance for each user ID.
[0004]
The operation will be described. A user who is a user of the user terminal 100 becomes a member of a homepage established by the server 102a via the network 101 using, for example, an arbitrary WWW browser, receives a user ID, and registers a predetermined password. Assume that you have already done so. At this time, when the user accesses the home page of the server 102a via the network 101, the server 102a requests the user to input a user ID and a password. In response to this request, when the user inputs a user ID and password, the regular user ID and password registered in advance in the database 103a are compared with the user ID and password input this time by the user. If they match, the user can obtain permission to use, and the server 102a transmits various data on the home page to the user terminal 100 via the network 101, and displays them.
[0005]
[Problems to be solved by the invention]
In the conventional user authentication method, as described above, the authentication is performed only with the user ID and the password. In consideration of the possibility that the password is leaked to a third party, if the user frequently changes the password, the safety can be improved. Although it takes a lot of time and effort for the user to change frequently, problems such as confusion of the user's memory and loss of password occur if the change is made too frequently, and the burden on the user is large. The current situation is that most users rarely change their passwords.
[0006]
The present invention has been made to solve such a problem, and by performing user authentication using a predetermined character string that is periodically changed by the authentication system and notified to the user, safety can be improved. Enhanced user authentication system to prevent unauthorized access by third parties The The purpose is to obtain.
[0007]
[Means for Solving the Problems]
The present invention provides input means for inputting unique identification information for identifying a registered user, user management storage means for managing the user based on the unique identification information, and for specifying the user Publish information, and use the information as authentication system designation specific information. Above Register in the user management storage means At the same time, when the expiration date of the information has passed, the information is stored in the user management storage means as the old authentication system designation specific information Authentication system designation specific information registration means, notification means for notifying the registered authentication system designation specific information to the user, and changing the registered authentication system designation specific information. Change In addition to outputting instructions to the authentication system designation specific information registration means at predetermined time intervals, the instructions There Change the validity period of the authentication system specification specific information Further finger Display information means and, when accessed by the user, the input of the unique identification information from the user is accepted, and the input unique identification information is registered in the user management storage means. Authentication system in which the authentication system designation specifying information is received from the user and the inputted authentication system designation specifying information is registered in the user management storage means Collation means for collating with the specified specific information and determining whether or not they match, and a use permission means for giving permission to the user when a match is confirmed in any of the collations by the collation means, The validity period of the authentication system designation specific information input to the verification unit is confirmed, and when the validity period has elapsed, the authentication system designation specific information and the authentication system designation specific information registration means that are input An update inquiry means that prompts the user to input a signal indicating whether or not to update the authentication system designation specific information when the match is confirmed by comparing with the old authentication system designation specific information, and updating. Updating means for issuing new authentication system designation specific information and registering it in the user management storage means when a signal indicating hope is input; Is a user authentication system.
[0008]
In addition, the information processing apparatus further includes user-specified identification information registration means for receiving input of information for identifying the user from the user and registering the information as user-specified identification information in the user management storage means. In addition, it accepts input of user-specified specific information from the user, compares the input user-specified specific information with the user-specified specific information registered in the user management storage means, and determines whether or not they match To do.
[0026]
DETAILED DESCRIPTION OF THE INVENTION
Embodiment 1 FIG.
FIG. 1 is a schematic configuration diagram showing a configuration of a user authentication system according to the present invention. In FIG. 1, 1 is a user terminal that uses an arbitrary WWW browser and arbitrary e-mail transmission / reception software, and 2 is a server that is connected to a network 101 such as the Internet and establishes a registration-based homepage. 3 is a database that is connected to the server 2 and manages and stores registered users based on user IDs (unique identification information), and stores user information including a password and a key character string to be described later for each user ID. ing. In the present embodiment, the server 2 and the database 3 constitute a user authentication system.
[0027]
Next, the internal configuration of the server 2 will be described. 2a is a user interface means for controlling the input / output of data to / from the user terminal 1, and 2b receives an input of a password for specifying the user from the user, and uses the password as user-specified specifying information in the database 3 User-specified specific information registering means 2c for registering in the authentication system, 2c issues a key character string for specifying the user, and uses the key character string as authentication system-specified specific information for registration in the database 3 2d is a notification means for notifying the user of the registered key character string, and 2e is an authentication system designation specific information registration means 2c so as to perform re-registration for changing or invalidating the registered key character string. Change / invalid instruction output means for outputting an instruction at a predetermined time interval. Also, 2f accepts input of a user ID from the user when access is made by the user, compares the input user ID with the user ID registered in the database, and determines whether or not they match. The first verification unit 2g receives the input of the password from the user when the match is confirmed by the first verification unit 2f, and verifies the input password with the password registered in the database 3. The second collating means 2h for judging whether or not they match, when the coincidence is confirmed by the second collating means 2g, accepts the input of the key character string from the user, and the inputted key character string Is a third collating unit that collates the key character string registered in the database 3 and determines whether or not they match. Further, 2j is a main program storage means for storing a main program for the operation of a homepage or the like, 2i is a control means for controlling the internal operation of the server 2 by the main program, and the above third When the matching is confirmed by the collating means 2h, an operation of giving a use permission to the user is also performed. Reference numeral 2k denotes database interface means for controlling input / output of data to / from the database 3.
[0028]
The operation will be described. FIG. 2 is a flowchart showing a flow of processing for registering a user on the home page of the server 2, and FIG. 3 is an explanatory diagram for explaining the operation. In FIG. 3, 10 is a display screen on the user terminal 1 for performing user registration, and 11 is a display screen of the user terminal 1 after user registration. As shown in the figure, the display screen 10 is provided with input fields 10a to 10d for inputting user information such as a user ID, password, card number, and address. FIG. 3 shows an example of the database 3 connected to the server 2. The database 3 includes a user ID, a password, an old key character string, and an effective period of the old key character string as shown in the figure. The new key character string, the validity period of the new key character string, the registration date, the card number, and the like are stored.
[0029]
As shown in the flowchart of FIG. 2, first, in step S1, a user who wants to register as a user on the home page established by the server 2 accesses the home page via the network 101 using an arbitrary WWW browser, Input items such as a user ID, a password, a card number, and an address are input to the input fields 10a to 10d of the display screen 10 by input means (not shown) such as a keyboard and a mouse provided in the user terminal 1. . When the input is completed, the user clicks the “Send” button 10 f on the display screen 10 to give the user terminal 1 an instruction to send data to the server 2. In accordance with the instruction, the input data is transmitted to the server 2 via the network 101. When the server 2 receives the data by the user interface means 2a, the control means 2i causes the necessary items to be determined in step S2. It is determined whether or not all the data has been input. If the data has been input, it is determined in step S3 whether or not the input data is an invalid value. If not, the authentication system is determined in step S4. A key character string is created by the designated specific information registration means 2c. Here, the key character string is a character string that the server 2 changes at a predetermined time interval, and is composed of, for example, a character string consisting of numerals, alphabets or symbols, or a combination thereof, and a user ID. Along with the password, it is one of the specific information used for user authentication. As a creation method, it may be generated randomly using random numbers or the like, or may be composed of a predetermined character string appropriately determined by an operator on the server side. The length of the character string is about 4 to 8 digits, which is appropriate for practical use and safety. Next, in step S5, the authentication system designation specific information registration unit 2c registers the key character string (in the example of FIG. 3 "AAA"), user ID, password, and the like created in step S4 in the database 3. Next, in step S6, the notifying means 2d transmits the key character string to the user terminal 1 via the network 101. As shown in FIG. “Keyword is AAA” and a key character string is displayed and posted to the user. Since the user registration is completed as described above, the process proceeds to a desired main process in step S7. If it is determined in step S2 or S3 that the data input by the user is not appropriate, a registration failure message is displayed on the display screen of the user terminal 1 in step S8.
[0030]
Here, as described above, the key character string is changed by the server 2 at a predetermined time interval. Therefore, the key character string is valid within a predetermined time limit, and becomes invalid when the time limit elapses. . In principle, this deadline is a predetermined period predetermined on the server side. However, a plurality of deadline candidates are prepared, that is, one month, two months, three months, and the like. The user may be able to select. Further, the user side may be able to specify the update time of the key character string. When the user selects or designates, the update time of the key character string may be input using the input field 10e of the display screen 10 shown in FIG.
[0031]
FIG. 4 is a flowchart showing the flow of processing when the user logs in within the expiration date of the key character string. FIG. 5 is an explanatory diagram for explaining the operation. In FIG. 5, 12 is a display screen on the user terminal 1 for login, and 13 is a display screen of the user terminal 1 after login.
[0032]
As shown in FIG. 4, first, in step S11, a user who wants to log in uses an input means (not shown) such as a keyboard and a mouse provided in the user terminal 1 to input fields 10g on the display screen 12. The user ID is input. The input user ID is transmitted to the server 2 via the network 101. When the server 2 receives the data, in step S12, the first collating means 2f searches the data in the database 3 to determine whether or not the input user ID is registered. If so, it is determined in step S13 whether or not the input user ID is usable. If it is usable, the user is prompted to input a password in the input field 10h of the display screen 12 in step S14. When the user follows the password and enters the password, the server 2 receives it. Next, in step S15, the second verification unit 2g compares the input password with a regular password registered in advance in the database 3, and if the passwords match, In step S16, the user is prompted to input a key character string in the input field 10i of the display screen 12. When the user inputs the key character string accordingly, the server 2 receives the key character string. Next, in step S17, the third matching means 2h registers the input key character string and the database 3 in advance. When the key character string matches, the user is given permission to use and a login success message is displayed as shown in the display screen 13 of FIG. Is done. Since the login process is thus completed, the process proceeds to the main process in step S18. If it is determined in step S12, S13, S15, or S17 that the user ID, password, or key character string input by the user is not appropriate, a login failure message is displayed in step S19. It is displayed on the display screen of the user terminal 1.
[0033]
Next, update processing when the expiration date of the key character string has elapsed will be described. As a precondition, in this embodiment, the expiration date of the key character string is from the first day to the last day of every month regardless of the date of user registration. At the present time, the expiration date of the previous key character string has already passed, and the change / invalid instruction output means 2e of the server 2 gives an instruction to the authentication system designation specific information registration means 2c. It shall be invalid. As an operation of invalidating the key character string of the authentication system designation specific information registration means 2c, the key character string stored in the data area of the new key character string in the database 3 is changed to the old key character string in the database 3. It is possible to move to the data area and issue “NULL” as a new key character string and register it in the data area of the new key character string in the database 3.
[0034]
FIG. 6 is a flowchart showing the flow of the process of updating the key character string when the user first logs in after the old key character string becomes invalid. FIG. 7 is a flowchart for explaining the operation. It is explanatory drawing. As shown in FIG. 6, first, in step S21, the user who wants to log in uses an input means (not shown) such as a keyboard and a mouse provided in the user terminal 1 to input fields on the display screen 12 in FIG. A user ID, a password, and a key character string are input to 10g to 10i (in this case, the key character string is an invalid old key character string). These input data are transmitted to the server 2 via the network. When the server 2 receives the data, it searches the data in the database 3 in step S22 to check the expiration date of the key character string. If the expiration date has passed, the server 2 stores the old data in the database 3. It is determined whether or not the data is registered in the key character string. If the data is registered, in step S23, the input fields 10j (Yes) and 10k (No) on the display screen 14 in FIG. Prompts the user to enter a request for renewal of the contract. If the user selects “Update (Yes)” accordingly, the server 2 receives it, and then creates a key character string in step S24. Since the key character string creation method and the like are the same as described above, description thereof is omitted here. Next, in step S25, the key character string newly created in step S24 (“ZZZ” in the example of FIG. 7) is registered in the data area of the new key character string in the database 3. Next, in step S26, the key character string is transmitted to the user terminal 1 via the network. As shown in FIG. 7, for example, “Your keyword for this month is ZZZ” on the display screen 15 of the user terminal 1. The key character string is displayed and posted to the user. Since the key character string update process is completed, the process proceeds to the desired main process in step S27. When it is determined in step S22 that the user ID input by the user is not registered, and when the user selects “No update contract (No)” in step S23. In step S28, an unsuccessful update message is displayed on the display screen of the user terminal 1.
[0035]
As described above, in the present embodiment, in addition to the user ID and password registered by the user side, these three key strings are periodically changed by the server side and notified to the user. Since user authentication is performed by combining various types of information, safety is improved. In addition, even if the user neglects to change the password frequently, the key character string is forcibly changed by the server side, so that all of the user ID, password, and key character string are Even if one leaks, since the leaked specific information becomes invalid when the next key character string is issued, unauthorized access by a third party can be minimized.
[0036]
In the above-described example, the example in which the expiration date of the key character string is from the first day to the last day of every month regardless of the date of user registration has been described. Since the server 2 is forcibly changed, for example, one month from the date of user registration may be used as the date of user registration, and each day instead of one month may be used. Or you may make it change in about one week.
[0037]
In the above example, an example in which a new key character string is issued in response to a contract renewal instruction from the user has been described. However, the present invention is not limited to this. A new key character string may be issued in accordance with an instruction from the instruction output unit 2e, registered in the database 3, and notified to the user.
[0038]
Embodiment 2. FIG.
In the first embodiment described above, the method of posting the key character string created by the server 2 to the user using the WWW browser has been described. In the present embodiment, the user is notified by e-mail. An example will be described. FIG. 8 is an explanatory diagram for explaining the flow of processing of the user registration operation in the present embodiment, and FIG. 9 is an explanatory diagram for explaining the flow of processing of the update operation after the expiration of the key character string. is there. In these figures, 4 is a mail server that is connected to the server 2 and transmits / receives mail, and 10m and 10n in FIG. 8 are input fields for inputting a mail address and a provider name with which the user contracts. 8 and 41 in FIG. 9 are both e-mails distributed to the user by the mail server 4. Since other configurations are the same as those of the first embodiment, the same reference numerals are given. Note that the login operation within the validity period in the present embodiment is the same as that in the above-described first embodiment (see FIGS. 4 and 5), and thus the description thereof is omitted here.
[0039]
The operation will be described. First, the user registration operation will be described. The flow of processing is basically the same as the flowchart of FIG. 2 and will be described with reference to this. First, in step S1, in addition to the items such as the user ID shown in the first embodiment, in this embodiment, an e-mail address and the name of the provider with whom the user has a contract are input. The processing from step S2 to S5 is exactly the same. In step S6, in the present embodiment, an e-mail is distributed to a user who has registered as a user through a predetermined contracted provider, and as shown in FIG. Is the AAA. ", The key character string is notified. In the present embodiment, the user registration is completed (there is no main processing step in step S7 in FIG. 2). If it is determined in step S2 or S3 in FIG. 2 that the data input by the user is not appropriate, a registration failure message is displayed on the display screen of the user terminal 1 in step S8.
[0040]
Next, the update operation after expiration of the key character string will be described. This process is basically the same as the flowchart of FIG. 6, and will be described with reference to this. The processing from step S21 to S25 is exactly the same. In step S26, in the present embodiment, an e-mail is distributed to a user who has renewed a contract through a predetermined provider who has contracted. The key character string is notified as follows. In the present embodiment, the key character string update process is completed (there is no main process step in step S27). If it is determined in step S22 of FIG. 6 that the user ID or the like input by the user is not registered, and the user selects “No update contract (No)” in step S23. If so, in step S28, an unsuccessful update message is displayed on the display screen of the user terminal 1.
[0041]
As described above, in the present embodiment, the same effect as in the first embodiment described above can be obtained, and the key character string created by the server 2 is notified to the user via e-mail. Therefore, since the user is notified by a route (e-mail) different from the route (network) for accessing the server 2 from the user terminal 1, the risk of the key character string being stolen by a third party is further reduced. There is an effect that can be done.
[0042]
In the present embodiment, an example in which an e-mail is used as a medium for notifying a user of a key character string has been described. However, the present invention is not limited to this. For example, notification is made by FAX or mail. The same effect can be obtained. In this specification, the postal items include all postal items such as postcards, letters, and other postal items, telegrams, and deliveries by courier.
[0043]
Embodiment 3 FIG.
In the first embodiment described above, the key character string created by the server is transmitted via the network, and the user ID, password, and key character string are transmitted from the user terminal 1 to the server 2 when the user logs in. At this time, since both are transmitted via the network, there is a risk that such information is stolen by a third party. For this reason, in the present embodiment, an example will be described in which these pieces of information are encrypted and transmitted. Encryption algorithms can be broadly divided into two types: common key cryptography and public key cryptography.
[0044]
Briefly describing the case of the common key encryption method, since the key to be encrypted and the key to be decrypted are the same key in this method, the user terminal 1 and the server 2 hold a common key with each other. When transmitting, the information is encrypted with the common key and transmitted, and when the other party receives it, it is decrypted with the common key held by itself.
[0045]
If the public key cryptosystem is briefly described, the RSA scheme is a representative one, and the encryption key and the decryption key are different, so two types of keys need to be created. One is a key held by the sender and is called a secret key, and the other is a key handed over to the other party and called a public key. Assume that the user terminal 1 and the server 2 hold each other's public key. Therefore, the user terminal 1 holds its own private key A and the public key B of the server 2, and the server 2 holds its own private key B and the public key A of the user terminal 1. The user terminal 1 can send it encrypted with the private key A or send it encrypted with the public key B. If it is encrypted with the public key B and sent, it can be decrypted only with the private key B of the server 2, so that security against a third party can be ensured. Further, if the encrypted data is transmitted with the secret key A, in addition to ensuring the safety, only the user terminal 1 holds the secret key A, so that the information sender is the user terminal 1 Can be performed simultaneously. The same applies to the server 2.
[0046]
As described above, in the present embodiment, in addition to the effects of the first embodiment described above, the third party knows the password or key character string between the user terminal 1 and the server 2. Since information that is not desired to be sent is encrypted, it can be secured more securely.
[0047]
Embodiment 4 FIG.
In the present embodiment, an example in which billing processing means is further added to the configuration of the above-described first to third embodiments will be described. FIG. 10 shows an example in which charging processing means is added to the example of FIG. In FIG. 10, 30 is billing information data added in the database 3 connected to the server 2, and 5 is billing processing means provided in the server 2 for performing billing / billing processing. The billing information data 30 stores information such as the billing period, usage fee, billing destination of usage fee, debit account, etc., as shown in the figure.
[0048]
The operation will be described. The flow of the user registration process is basically the same as the flowchart of FIG. 2, and will be described with reference to this. First, in step S1, in addition to the items such as the user ID shown in the first embodiment, in this embodiment, a usage fee billing destination and a debit account required for billing processing are input. The processing from step S2 to S4 is exactly the same. In step S5, when data is registered in the database, in the present embodiment, a process for storing information necessary for the accounting process in the database 3 is added. However, the initial value of the usage fee item is automatically set to “0”. The subsequent steps S6 to S8 are the same as those in FIG. 2 and thus will not be described. However, in the main process in step S7, the usage fee is charged according to the usage amount each time. The value is added to the value.
[0049]
The login operation and the key string update operation within the validity period are basically the same as those in the first embodiment, but the usage fee is charged according to the amount used in the main processing, respectively, as described above. Is added.
[0050]
The billing processing means 5 always checks the expiration date in the billing table 30, and when the expiration date has passed, reads the total value of the usage fee up to the expiration date from the billing table 30 and performs the debit processing from the account. The bank specified by the user is notified or an invoice for mailing to the user's address is created.
[0051]
As described above, in the present embodiment, since the accounting processing means 5 is added, in addition to the effects of the first to third embodiments described above, the user is automatically charged for the usage fee. Can improve convenience.
[0052]
Embodiment 5. FIG.
In the above-described first to fourth embodiments, an example in which the key character string is used simply for enhancing the security of user authentication has been described. However, in the following embodiments, the key character string is added for the purpose of user authentication. Additional purpose of use will be described. In the present embodiment, an example in which a key character string is used to conclude a contract with a provider on a monthly basis will be described. 11 is a user registration, FIG. 12 is a login within the contract period, and FIG. 13 is an explanatory diagram for explaining the contract update operation.
[0053]
The operation will be described. As shown in FIG. 11, when user registration is performed, when the user ID and password are input and the “contract” button 16a is pressed, the server 2 receives a month (for example, January 1, 2000 to 2000). A key string valid only on January 31) is provided. The user can log in as shown in FIG. 12 using the key character string until January 31st, but cannot log in from February 1st.
[0054]
If you try to log in after February 1st, the server 2 detects that the expiration date has expired from the key string, and as shown in the display screen 17 of FIG. 13, "The key string has expired. "Do you want to renew the contract?" In response to this, the user selects whether to renew the contract (Yes) or not (No). When contract update is selected, the server 2 creates a new key character string and notifies the user.
[0055]
As described above, in this embodiment, the user is authenticated by using the user ID, the password, and the key character string, and the use permission is given to the user. In addition, it is possible to prevent unauthorized access by a third party, and by changing the key string in units of a predetermined number of days, such as monthly units, a contract in units of a predetermined number of days can be made manually. Therefore, the contract renewal work efficiency on the provider side can be improved.
[0056]
Embodiment 6 FIG.
In the present embodiment, an example in which charging / billing processing is performed for the valid period of the key character string will be described. The operations for user registration, login within the validity period of the key character string, and update of the key character string are the same as those in the above-described first embodiment, and thus description thereof is omitted.
[0057]
The operation will be described. As described in the first embodiment, when user registration is performed, the server 2 issues a key character string that is valid for a predetermined validity period. In the present embodiment, charging / billing processing is performed for the validity period of the key character string, that is, charging / billing processing is performed for each issued key character string. Billing / billing processing methods can be broadly divided into a prepaid method and a postpaid method.
[0058]
The case of prepaid will be described. At the time of issuing the key character string (step S4 in FIG. 2 or step S24 in FIG. 6), an invoice is issued. When the expiration date of the key string has passed or the usage fee exceeds the prepaid amount, login is not allowed. The method as shown in FIG. 7 is used to inquire about whether contract renewal is desired. When the user desires contract renewal, a new key character string is issued and a bill is issued. Thus, in the case of prepayment, an invoice is issued when each key character string is issued.
[0059]
Next, the case of postpay will be described. After the expiration date, the usage fee is added, and when the expiration date has passed, an invoice is issued and you cannot log in with that key string. Publish the column. Similarly, for a new key string, an invoice is issued when the expiration date has passed.
[0060]
As described above, in this embodiment, the user is authenticated by using the user ID, the password, and the key character string, and the use permission is given to the user. It is possible to prevent unauthorized access by unauthorized third parties, and charge / billing processing is performed for each key character string, making it easy for billing / billing management and for users who do not pay On the other hand, the issuance of a new key character string can be stopped, and the fee collection rate can be increased.
[0061]
Embodiment 7 FIG.
In the present embodiment, an example will be described in which a key character string that can receive a limited-time service is provided when a questionnaire is answered on the Internet. FIG. 14 is a diagram for explaining the operation of the present embodiment. It is assumed that the user answers a predetermined questionnaire as shown on the display screen 60 in FIG. Upon receiving the questionnaire result, the server 2 checks the input items, and if there is no problem, registers it in the database, creates a key character string, and transmits it to the user. On the user terminal 1, as shown in the display screen 61 of FIG. 14, the expiration date is displayed together with the transmitted key character string. As shown in the display screen 62 of FIG. 14, the user can purchase at a special price for a limited time only. Enter the key string and press the send button. When a key character string is entered in accordance with the message “”, a predetermined “special price” page is displayed on the screen.
[0062]
As described above, in this embodiment, a key character string is given to the person who answered the questionnaire, and the user is authenticated by three of the user ID, password, and key character string, and the “special price” Since the permission to access the page is given, the security of the information is high, and it is not illegally accessed by a third party who does not answer the questionnaire, and the security of information can be protected. In addition, by responding to the questionnaire, special services can be received and the service provision deadline management is performed using the key character string, so the response rate to the questionnaire is improved and the deadline management process It is possible to improve the efficiency of both sides.
[0063]
Embodiment 8 FIG.
In the present embodiment, an example will be described in which the content of a predetermined page (qualified area) in a home page is displayed only to a user registered in a specific home page (or a specific group member of the home page). FIG. 15 shows an example of a homepage in the present embodiment. In the figure, 70 is a display screen displaying the homepage, 71 is a free area that can be referred to by ordinary people, and 72 is a user. This is a qualified area that only registered users can refer to. When a general person accesses, only the free area 71 is displayed on the display screen 70. On the other hand, when the registered user accesses using the user ID, password, and key character string, both the free area 71 and the qualified area 72 are displayed on the display screen 70 as shown in FIG.
[0064]
The user registration operation follows the processing shown in the flowchart of FIG. 2 described in the first embodiment, the login operation follows FIG. 4, and the key character string update operation follows FIG.
[0065]
In the above description, an example in which a registered user logs in using a user ID, a password, and a key character string has been described. However, the present invention is not limited to this, and login is performed using a user ID and a password. In this case, first, as shown in FIG. 16, only the free area 71 portion is displayed, a button 73 “Bulletin Board” is displayed below it, and the user presses the “Bulletin Board” button 73. 15 is displayed. When the user inputs the key character string into the input field 74 and presses the send button 75, the qualification shown in FIG. A page corresponding to the area 72 is displayed on the display screen 70.
[0066]
As described above, also in this embodiment, the user is authenticated by using the user ID, the password, and the key character string, and the use permission is given to the user. Therefore, the qualified area is not registered. Information can be protected without being illegally accessed by a third party.
[0067]
Embodiment 9 FIG.
In the present embodiment, an example will be described in which a key character string is used for a subscription contract assuming a home page where various documents such as magazines and books can be subscribed. FIG. 17 shows a display screen for performing user registration and subscription contract on the homepage. The user information is input in the same procedure as in the above-described first embodiment. Next, after clicking on an arbitrary button in which a document name is described to designate a document to be subscribed to, a send button 82 is set. By pressing, the document information to be subscribed to is transmitted to the server 2. In response to this, the server 2 issues a key character string and notifies the user. That is, the difference from the above-described processing of FIG. 2 is that in step S1, not only user information but also a document name to be subscribed is input. The other processes are the same as those in FIG. Thus, the user who has made the user registration and subscription contract can refer to or download the contents of the contracted document on the screen by logging in as shown in FIG. 4 within the expiration date of the key character string. . The key character string is updated in the same manner as in the first embodiment.
[0068]
The number of documents to be subscribed to is not limited to one, and a plurality of books may be designated. In that case, a separate key character string is given to each document, and the billing / billing process is performed for each validity period for each key character string as shown in the sixth embodiment. Billing / billing process.
[0069]
FIG. 18 shows an example of the database 3 in the present embodiment. If the data relating to the contract of each document is stored as shown in FIG. 18, the contract validity period and billing of each document can be easily managed. In the figure, 85 is a contract management data set consisting of data relating to the contract of each document, 85a is the name of the subscribed document, 85b is the date of the contract, 85c is the subscription valid period of the document, 85d is the total number of subscription valid periods, 85e is a subscription fee, and 85f is a key character string issued for each document. The total number of days 85d is for daily calculation of a subscription fee that is less than one month, and data of “1M”, “2M”,. Here, the subscription validity period 85c is the same as the validity period of the key character string. Therefore, when there is an access from the user during the validity period of the key character string, the server 2 refers to the contents of the contract management data set 85 for each document to determine whether or not the user can access. To search for. In the present embodiment, the 3X portion in the database 3 in FIG. 18 is unnecessary and may be deleted (an example using 3X will be described in a tenth embodiment described later).
[0070]
As described above, also in this embodiment, the user is authenticated by the user ID, the password, and the key character string, and the user is given permission to access the contract document. It is possible to protect the security of information without being illegally accessed by unauthorized third parties.
[0071]
Embodiment 10 FIG.
In the above-described embodiment, an example in which a different key character string is issued for each document has been described. However, in the present embodiment, for the convenience of the user, a document that is contracted using a common key character string. An example where all can be accessed will be described.
[0072]
For example, when a contract is made for a predetermined document first and then a contract for another predetermined document is made on another day, the key character string issued when the contract is made for the second time is used. Also make it possible to access the documents for the contract. In other words, using the key character string issued at the time of the latest contract makes it possible for the user to remember multiple key character strings if all the documents contracted in the past can be referred to. Can be reduced.
[0073]
The common key character string is stored in the 3X portion in the database 3. At this time, for the case where the server 2 manages the subscription valid period for each document and the management of the billing / billing process, a key character string for each document is issued as shown in the ninth embodiment. Then, it may be stored in the key character string 85f in the data set 85. Users access using a common key character string, and the server 2 uses a common key character string for user authentication, and manages the subscription validity period for each document and manages the billing / billing process. The key character string 85f is used.
[0074]
Here, the subscription validity period 85c is independent of the validity period of the common key character string. Therefore, a means (not shown) for managing the subscription validity period 85c is provided in the server 2, and by this means, data for the documents whose subscription validity period has passed is deleted from the database 3, and the subscription fee 85e. A bill is created based on the data and the user is charged. At this time, invoices may be issued for each individual document. However, for convenience, the invoice is issued once a month, and multiple documents are requested in one invoice. Also good.
[0075]
As described above, since the document whose subscription valid period has passed is deleted from the database 3, if there is an access from the user within the valid period of the common key character string, the server 2 will have the database 3 The user can search for documents accessible by the user with reference to the contents of.
[0076]
In this way, by managing the contract documents using individual key character strings on the server side, even in a complicated case where a contract is made for a plurality of magazines with different publication dates, the user has 1 Two common key strings allow them to subscribe.
[0077]
In the above-described first to tenth embodiments, the example in which the user authentication is performed by combining the three information of the user ID, the password, and the key character string has been described. However, the present invention is not limited to this, and the object of the present invention is Since the user often does not change the password frequently, the server side forcibly changes the information for user authentication periodically to improve the security, so the user ID and the key character string The user authentication may be performed using only.
[0078]
Further, in the above-described first to tenth embodiments, the example in which the collation order for user authentication is performed in the order of the user ID, the password, and the key character string has been described. The order may be the key character string and the password, or the key character string, the user ID, and the password. When only the user ID and the key character string are used for user authentication, the key character string may be collated first.
[0079]
In the first to tenth embodiments described above, the user authentication system configured by a server connected to the network has been described. However, the present invention is not limited thereto, and various information processing including a personal computer, a workstation, and the like. It can be applied to the device.
[0080]
【The invention's effect】
The present invention provides input means for inputting unique identification information for identifying a registered user, user management storage means for managing the user based on the unique identification information, and for specifying the user Publish information, and use the information as authentication system designation specific information. Above Register in the user management storage means At the same time, when the expiration date of the information has passed, the information is stored in the user management storage means as the old authentication system designation specific information Authentication system designation specific information registration means, notification means for notifying the registered authentication system designation specific information to the user, and changing the registered authentication system designation specific information. Change In addition to outputting instructions to the authentication system designation specific information registration means at predetermined time intervals, the instructions There Change the validity period of the authentication system specification specific information Further finger Display information means and, when accessed by the user, the input of the unique identification information from the user is accepted, and the input unique identification information is registered in the user management storage means. Authentication system in which the authentication system designation specifying information is received from the user and the inputted authentication system designation specifying information is registered in the user management storage means Collation means for collating with the specified specific information and determining whether or not they match, and a use permission means for giving permission to the user when a match is confirmed in any of the collations by the collation means, The validity period of the authentication system designation specific information input to the verification unit is confirmed, and when the validity period has elapsed, the authentication system designation specific information and the authentication system designation specific information registration means that are input An update inquiry means that prompts the user to input a signal indicating whether or not to update the authentication system designation specific information when the match is confirmed by comparing with the old authentication system designation specific information, and updating. Updating means for issuing new authentication system designation specific information and registering it in the user management storage means when a signal indicating hope is input; Because it is a user authentication system equipped with authentication, user authentication is performed using authentication system designation specific information that is changed at predetermined time intervals by the authentication system, thereby improving safety and preventing unauthorized access by third parties. can do.
[0081]
In addition, the information processing apparatus further includes user-specified identification information registration means for receiving input of information for identifying the user from the user and registering the information as user-specified identification information in the user management storage means. In addition, it accepts input of user-specified specific information from the user, compares the input user-specified specific information with the user-specified specific information registered in the user management storage means, and determines whether or not they match Since the user authentication is performed by combining the unique identification information, the authentication system designation specific information that is changed at a predetermined time interval by the authentication system side, and the user designation specific information, the user authentication is further improved. And unauthorized access by a third party can be prevented.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a user authentication system in Embodiment 1 of the present invention.
FIG. 2 is a flowchart showing a processing flow when user registration is performed in the user authentication system according to the first embodiment of the present invention.
FIG. 3 is an explanatory diagram for explaining the operation of FIG. 2;
FIG. 4 is a flowchart showing a processing flow when login is performed within the validity period of a key character string in the user authentication system according to the first embodiment of the present invention.
5 is an explanatory diagram for explaining the operation of FIG. 4;
FIG. 6 is a flowchart showing a processing flow when updating a key character string in the user authentication system according to the first embodiment of the present invention.
7 is an explanatory diagram for explaining the operation of FIG. 6;
FIG. 8 is an explanatory diagram for explaining a flow of processing when user registration is performed in the user authentication system according to the second embodiment of the present invention;
FIG. 9 is an explanatory diagram for explaining a flow of processing when a key character string is updated in the user authentication system according to the second embodiment of the present invention.
FIG. 10 is an explanatory diagram for explaining a flow of processing when user registration is performed in a user authentication system to which charging processing means is added according to Embodiment 4 of the present invention;
FIG. 11 is an explanatory diagram for explaining a flow of processing when user registration is performed in the user authentication system according to the fifth embodiment of the present invention;
FIG. 12 is an explanatory diagram for explaining a processing flow when logging in for the first month in the user authentication system according to the fifth embodiment of the present invention;
FIG. 13 is an explanatory diagram for explaining a flow of processing when updating a key character string in the user authentication system according to the fifth embodiment of the present invention;
FIG. 14 is an explanatory diagram for explaining a flow of processing when answering a questionnaire and accessing a special service in the user authentication system according to the sixth embodiment of the present invention.
FIG. 15 is a diagram showing a display screen displaying an example of a homepage by the user authentication system in Embodiment 7 of the present invention.
FIG. 16 is a diagram showing a display screen displaying another example of a homepage by the user authentication system in the seventh embodiment of the present invention.
FIG. 17 is a diagram showing a display screen displaying an example of a homepage by the user authentication system in Embodiment 8 of the present invention.
FIG. 18 is a diagram showing an example of a database to which data for managing documents for which a subscription contract has been made is added in the user authentication system according to the eighth embodiment of the present invention.
FIG. 19 is a schematic configuration diagram showing an entire network system provided with a conventional user authentication system.
[Explanation of symbols]
1 user terminal, 2 server, 2a user interface means, 2b user designation specific information registration means, 2c authentication system designation specific information registration means, 2d notification means, 2e change / invalid instruction output means, 2f first verification means, 2g first Second collating means, 2h Third collating means, 2i control means, 2j main program storage means, 2k database interface means, 3 database, 4 mail server, 5 billing processing means.

Claims (2)

An input means for inputting unique identification information for identifying a registered user;
User management storage means for managing the user based on the unique identification information;
Issue the information for specifying the user, and registers the upper SL user management storage means the information and the authenticator specified identification information, the old authentication system specify the information when the expiration date of the information has elapsed Authentication system designation specific information registration means for storing in the user management storage means as specific information ;
Notification means for notifying the user of the registered authentication system designation specific information;
Outputs the instruction at a predetermined time interval varying puff the authentication system specifying certain information registration means so that the authentication system specified specific information registered, the authentication system specified particular if the instruction there was Tsu and the strange Sarayubi示出force means for performing the specified validity period of the information,
When an access is made by the user, the input of the unique identification information from the user is accepted, and the entered unique identification information is collated with the unique identification information registered in the user management storage means. And accepting the input of the authentication system designation specific information from the user, and collating the input authentication system designation specific information with the authentication system designation specific information registered in the user management storage means Checking means for determining whether or not they match,
A use permission unit that gives a use permission to the user when a match is confirmed in any of the verifications by the verification unit;
The validity period of the authentication system designation specific information input to the verification unit is confirmed, and when the validity period has elapsed, the authentication system designation specific information and the authentication system designation specific information registration means that are input An update inquiry means for checking the old authentication system designation specific information and prompting to input a signal indicating whether or not to update the authentication system designation specific information when a match is confirmed;
A user authentication system comprising: update means for issuing new authentication system designation specifying information and registering it in the user management storage means when a signal indicating a desire to update is input . A user-specified identification information registration unit that receives input of information for identifying the user from the user and registers the information as user-specified identification information in the user management storage unit;
In addition to the above collation, the collation unit further accepts input of user designation specific information from the user, and the input user designation specific information is registered with the user designation specific information registered in the user management storage unit. The user authentication system according to claim 1, wherein collation is performed and whether or not they match is determined.

Images