JP3820477B2 - User authentication method by browser phone mail, user authentication server, user authentication method of authentication server, user authentication program of authentication server, and recording medium recording the program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a browser phone mail authentication method for performing user authentication by mail using a browser phone and an arbitrary terminal, an authentication server, an authentication method in the authentication server, an authentication server authentication program, and a program therefor The present invention relates to a recording medium that records
[0002]
[Prior art]
Conventionally, when a user purchases a product, ticket, etc. from a plurality of stores such as online shopping, (1) a method of authenticating with a member ID (IDentification) and a password issued by a server associated with each store has been adopted. As the number of stores increases, it becomes complicated for members to manage the member IDs and passwords of individual stores. For example, a method of performing authentication of a plurality of stores at once (for example, Microsoft's NET Passport), (2 ) On the other hand, methods using IC cards and biometric information (such as fingerprints and eye shine) to identify members have been proposed. (3) In addition, authentication methods using browser phones that have become extremely popular have also been proposed. (For example, refer nonpatent literature 1).
[0003]
[Non-Patent Document 1]
Haruhiko Fujii, 1 other, “Authentication using mobile phone”, IPSJ 64th National Convention, March 2002, Vol. 3, pp.429-430
[0004]
[Problems to be solved by the invention]
(1) Password authentication does not require a special device and is versatile. However, since a password is a simple character string, there is a risk of spoofing by a malicious third party such as sneaking or forgetting a user. . In addition, the ID and password must be stored for each site, and the password must be updated regularly. Recently, a service that collects user IDs and passwords and can log in to each store site with a single ID and password has appeared, but conversely, once that ID and password are leaked, This means logging in to the store site, and there was a security problem. In addition, although there is a one-time password as an applied technology, it is necessary to have a token for generating a one-time password, and it takes time to input a different password every time, and there is a problem in convenience.
(2) The IC card authentication is highly convenient because it is only necessary to insert the IC card into the reader, and the security level is also high due to the authentication by the physical medium. However, it is desirable that online shopping be available to as many users as possible, but IC card authentication requires an IC card reader on the user's terminal, and currently such PCs (Personal Computers) Very few. Therefore, there was a problem in terms of versatility. The same can be said for biometric authentication, but the biometric method has a problem of false authentication in addition to the above problems.
(3) Although the authentication method using a browser phone is a simple method that can perform user authentication safely, the URL that the authentication server identifies the user is always presented in the form of a session ID to any terminal. Therefore, impersonation by users who can directly handle HTTP may occur.
[0005]
[Means for Solving the Problems]
In order to solve the above problems, the present invention uses a mobile phone having an Internet access function to identify a user (browser phone: a mobile phone having a simple browser that can be connected to the web and browse a home page) The store can be accessed safely from a general-purpose terminal such as a PC. Like PCs, browser phones (mobile phone terminals) are widely used. The current mobile phone system has a high security level, and it is very difficult to forge a terminal. Moreover, since it is always carried and carried, it has the characteristic that a user is easily aware of loss or theft. The browser phone has an ID (individual identification number) that uniquely identifies the individual. When accessing the store server directly from the browser phone, it is possible to authenticate using this individual identification number, but the user can comfortably act such as selecting a product due to restrictions such as the screen size of the browser phone It is not always possible.
The present invention is a function that outputs an individual identification number of a browser phone by a browser phone carried by a user and a general PC that can access the Internet installed in a place such as a home, workplace or Internet coffee shop, E-mail reception function, access function to the WWW site on the Internet of existing PCs, and one-time URL, which is a temporary URL, can be used for simple and secure user authentication. it can.
[0006]
DETAILED DESCRIPTION OF THE INVENTION
Example 1
FIG. 1 is a diagram showing a schematic configuration / authentication procedure of an e-mail authentication system according to a first embodiment of the present invention.
The authentication system by mail is composed of a plurality of arbitrary terminals (PC) X: 2 and browser phones B: 5 used by the user 1, a plurality of store servers S: 3, and an authentication server A: 4. An arbitrary terminal X, a plurality of store servers S, and an authentication server A are connected via a communication line, and the browser phone B and the authentication server A are connected via a wireless line.
Hereinafter, user authentication procedures S1 to S11 of the authentication system by mail shown in FIG. 1 will be described. However, an arbitrary terminal is abbreviated as X, a store server as S, an authentication server as A, and a browser phone as B.
X assumes a general PC and does not require any additional dedicated hardware such as an IC card reader. A only determines whether or not the user is the person (identity confirmation), and whether or not the user can log in to S is determined by S itself with reference to the member DB (Data Base) in S And S is a browser phone mail address as a user ID, and the browser phone DB in A contains a browser phone mail address and an individual identification number or an identification number of an IC card to be inserted or both (hereinafter simply referred to as individual identification). It is assumed that (numbered) is registered (stored) in advance. The member DB holds a list of member browser phone mail addresses (that is, user membership).
[0007]
S1: The user accesses S from X. S asks A for a session ID.
S2: A issues a session ID and sends it to S. S displays a mail address input screen (login screen) including a session ID as shown in FIG.
S3: The user inputs B's mail address in the form of FIG. 2, and presses the OK button.
S4: A session ID and a mail address are transmitted from X to A via S.
S5: S displays for X such as “Currently authentication of session ID: 12345 is in progress”.
S6: A sends a confirmation mail as shown in FIG. At this time, a set of the two one-time URLs generated by the session ID and the mail address is temporarily stored in the temporary DB.
S7: The user confirms whether the session ID displayed in X (FIG. 2: login screen) and the confirmation mail (FIG. 3) is the same, and clicks the confirmation mail link in FIG. B requests A to transmit the Web page indicated by the one-time URL.
S8: A derives the other one-time URL from the temporary DB based on the one-time URL, and includes a link to the URL and a request for transmitting an individual identification number triggered by the movement to the link (Fig. 4) is sent to B.
S9: The user clicks the other one-time URL (performs authentication) in FIG. 4, and B transmits B's individual identification number to A.
When S10: A receives the individual identification number, it knows the one-time URL that received it, and extracts the mail address corresponding to the one-time URL from the temporary DB. Further, the individual identification number corresponding to the mail address is extracted from the browser phone DB. If the individual identification information obtained in this way matches the individual identification information transmitted from B, it is assumed that the identity has been confirmed. For S, “session ID: 12345, mail address: (B mail address) A message including the meaning of “end identity verification” is transmitted. Thereafter, the used link and temporary DB (a set of session ID and mail address) are deleted.
S11: S checks whether the user has a membership by referring to the mail address from the member DB, and permits X to log in.
[0008]
FIG. 5 shows a configuration diagram of the authentication server A: 4 according to the first embodiment.
The authentication server A includes a session ID issuing unit 4-1, a mail address / session ID reception / confirmation mail transmission unit, two one-time URL generation units 4-2, an identity verification unit 4-3, a browser phone DB 4-5, a temporary Consists of DB4-4.
The session ID issuing unit 4-1 issues a session ID in response to a session ID request from the store server S. Mail address / session ID reception / confirmation mail transmission unit and one-time URL generation unit 4-2 receive a mail address / session ID from an arbitrary terminal X via the store server S and generate two one-time URLs. These are combined and stored in the temporary DB 4-4, and a confirmation mail is transmitted to the browser phone B. The browser phone DB 4-5 registers a set of the browser phone mail address and the individual identification number in advance. The identity verification unit 4-3 extracts the individual identification number received from the browser phone B and the mail address corresponding to the received one-time URL from the temporary DB, and further extracts the individual identification number corresponding to the mail address from the browser phone DB. If they match, the identity confirmation end message is transmitted to the store server S as the identity confirmation has been completed.
[0009]
(Example 2)
In the second embodiment, by using a temporary password as compared to the first embodiment, the security level can be improved because the temporary password is authenticated only between the authentication server A and the browser phone B.
FIG. 6 is a diagram showing a schematic configuration / authentication procedure of a mail authentication system according to the second embodiment of the present invention.
The authentication system is composed of an arbitrary terminal (PC) X: 2 and a browser phone B: 5 used by the user 1, a plurality of store servers S: 3, and an authentication server A: 4, and a plurality of arbitrary terminals X The plurality of store servers S and the authentication server A are connected via a communication line, and the browser phone B and the authentication server A are connected via a wireless line.
Hereinafter, authentication procedures S1 to S11 of the authentication system of FIG. 6 will be described. However, an arbitrary terminal is abbreviated as X, a store server as S, an authentication server as A, and a browser phone as B.
X assumes a general PC and does not require any additional dedicated hardware such as an IC card reader. A determines only whether or not the user is the person (identity confirmation), and determines whether or not the user can log in to S by referring to the member DB in S. Also, S is assumed that the browser phone mail address is a user ID, and the browser phone mail address and the individual identification number are registered in advance in the browser phone DB in A.
[0010]
S1: The user accesses S from X. S asks A for a session ID and password.
S2: A issues a session ID and a password for temporary use and sends it to S. S displays a mail address input screen (login screen) including a session ID and a temporary password as shown in FIG.
S3: The user inputs B's mail address in the form of FIG. 7 and presses the OK button.
S4: A mail address and a session ID are transmitted from X to A via S.
S5: S displays for X such as “Currently authentication of session ID: 12345 is in progress”.
S6: A transmits to B a confirmation mail including a session ID as shown in FIG. 8 and a link to the first (one) one-time URL. At this time, a pair of the generated one-time URL and the session ID, password, and mail address is temporarily stored in the temporary DB.
S7: The user confirms whether the session ID displayed in X (login screen) and the confirmation mail is the same, and logs in by clicking the confirmation mail link shown in FIG.
S8: A includes a session ID as shown in Fig. 9 in B, and when OK is clicked, a password entry screen is displayed in which the information entered in the second (other) one-time URL and the individual identification number are notified. .
S9: When the user inputs the password displayed on X (login screen) in the form of FIG. 9 and presses the OK button, B transmits the password and the individual identification number to A.
S10: A inquires the browser phone DB for the received individual identification number, retrieves the corresponding e-mail address, and inquires of the temporary DB whether the combination of this e-mail address, password and one-time URL is correct. A message including the meaning of “session ID: 12345, e-mail address: (B's e-mail address) end of identity verification” is sent to S as having been confirmed. After this, like the one-time URL, the used link and temporary DB (a set of a session ID, a password, an email address, and two one-time URLs) are deleted.
S11: S checks whether the user has a membership from the member DB, and permits login to X.
[0011]
FIG. 10 shows a configuration diagram of the authentication server A: 4 according to the second embodiment.
The authentication server A includes a session ID / temporary password issuing unit 4-11, a mail address / session ID reception / confirmation mail transmission unit, two one-time generation units 4-12, an identity verification unit 4-13, a temporary DB 4-14, It consists of browser phone DB4-15.
The session ID / temporary password issuing unit 4-11 issues a session ID and a temporary password in response to the session ID and password request of the store server S. A mail address / session ID reception / confirmation mail transmission unit and two one-time URL generation units 4-12 receive a mail address / session ID from an arbitrary terminal X via the store server S, and receive two one-time URLs. A URL is generated and stored in the temporary DB 4-14 as a set, and a confirmation mail is transmitted to the browser phone B. The browser phone DB 4-15 registers the mail address and individual identification number of the browser phone B in advance. The identity verification unit 4-13 transmits a password input screen to the browser phone B in response to the login of the browser phone B, receives the one-time URL, the individual identification number, and the password from the browser phone B, and receives the individual identification number from the browser phone. Inquire the DB to retrieve the corresponding e-mail address, and inquire to the temporary DB whether the combination of this e-mail address, one-time URL, and password is correct. Send a message.
[0012]
The store server and authentication server used in the mail authentication system of the present invention can be composed of a computer having a CPU, memory, etc., an operation terminal, and a recording medium. The recording medium is a machine-readable recording medium such as a CD-ROM, a magnetic disk device, or a semiconductor memory. The control program recorded on the recording medium is read by the computer, and each configuration in the above-described embodiment on the computer. Realize the element.
[0013]
【The invention's effect】
The present invention provides a browser phone carried by the user and a general-purpose PC that can access the Internet installed in a place such as a home, workplace or Internet coffee shop, a function for outputting an individual identification number possessed by the browser phone, mail User authentication and the access function to the WWW site on the Internet of an existing PC, it is a simple method, but it is safer, and it is possible to perform user authentication in a form that is more difficult to impersonate than the conventional one. it can.
[Brief description of the drawings]
FIG. 1 is a diagram showing a schematic configuration / authentication procedure of an authentication system according to a first embodiment.
FIG. 2 is a diagram illustrating an example of a login screen of a store server S displayed on an arbitrary terminal X according to the first embodiment.
FIG. 3 is a view showing an example of a confirmation mail displayed on the browser phone B according to the first embodiment.
FIG. 4 is a diagram illustrating an example of a Web page displayed on the browser phone B according to the first embodiment.
FIG. 5 is a configuration diagram of an authentication server A according to the first embodiment.
FIG. 6 is a diagram showing a schematic configuration / authentication procedure of the authentication system according to the second embodiment.
7 is a diagram illustrating an example of a login screen of the store server S displayed on an arbitrary terminal X according to the second embodiment. FIG.
FIG. 8 is a view showing an example of a confirmation mail displayed on the browser phone B according to the second embodiment.
FIG. 9 is a diagram showing an example of a password input screen displayed on the browser phone B according to the second embodiment.
FIG. 10 is a configuration diagram of an authentication server A according to the second embodiment.
[Explanation of symbols]
1 User 2 Any terminal X
3 store server S
4 Authentication server A
4-1 ... Session ID issuing unit, 4-2, 4-12 ... E-mail address / session ID reception / confirmation E-mail transmission unit and two one-time URL generation units, 4-3, 4-13.・ Identity confirmation unit, 4-4, 4-14... Temporary DB, 4-5, 4-15 browser phone DB, 4-11... Session ID / temporary password issuing unit,
5 Browser phone B

Claims (12)

An arbitrary terminal used by the user, a browser phone, a store server, and an authentication server provided with a browser phone DB that holds a set of a mail address and an individual identification number of the browser phone in advance are connected via a communication line,
An arbitrary terminal establishes a session with the authentication server via the store server, receives a session ID, and transmits a session ID and a browser phone mail address;
The authentication server generates two one-time URLs, saves the session ID, browser phone email address, and two one-time URL pairs, and confirms that the browser phone includes the session ID and a link to one one-time URL. Sending an email;
The browser phone transmits a web page transmission request specified in one of the one-time URLs based on the user's match confirmation between the session ID received by any terminal and the session ID included in the confirmation email;
The authentication server derives the other one-time URL from the received one-time URL, and transmits a web page requesting transmission of the individual identification number to the other one-time URL to the browser phone;
The browser phone transmits an individual identification number to the other one-time URL triggered by the user clicking on the other URL;
The authentication server confirms that the received individual identification number matches the individual identification number of the combination of the browser phone mail address and the individual identification number held in the browser phone DB based on the one-time URL and browser phone mail address pair. A user authentication method using a browser phone mail, comprising: a step of transmitting an identity confirmation message to the store server as having been confirmed. In the user authentication method by mail of the browser phone according to claim 1,
A merchant server includes a step of receiving an identity confirmation message, checking a pre-registered membership, and permitting login to an arbitrary terminal. A browser phone DB that holds a set of the email address and individual identification number of the browser phone used by the user is provided,
A means for issuing and sending a session ID for access from any terminal, receiving the session ID and browser phone mail address from any terminal, generating two one-time URLs, and creating a session ID in the temporary DB And a means to store the browser phone email address and two one-time URL pairs,
Means for sending a confirmation email containing a session ID and a link to one of the one-time URLs to the browser phone;
A means for receiving a web page transmission request specified in one one-time URL based on a user's match confirmation between a session ID issued to an arbitrary terminal from a browser phone and a session ID included in a confirmation email;
Means for deriving the other one-time URL from the received one-time URL and sending a web page requesting transmission of the individual identification number to the other one-time URL to the browser phone;
Means for receiving an individual identification number addressed to the other one-time URL triggered by a click from the other one-time URL by the user from the browser phone;
Based on the received individual identification number, one-time URL, and browser phone mail address pair, if the individual identification number corresponding to the browser phone DB mail address matches, the identity confirmation message is assumed to have been confirmed. And a means for transmitting to the server. A browser phone mail user authentication server, characterized by comprising: Issuing and sending a session ID for access from any terminal; and
Receiving a session ID and browser phone mail address from an arbitrary terminal, generating two one-time URLs, and storing a set of the session ID, browser phone mail address and two one-time URLs in a temporary DB;
Sending a confirmation email containing a session ID and a link to one one-time URL to the browser phone;
A step of receiving a web page transmission request specified in one one-time URL based on a user's match confirmation between a session ID issued to an arbitrary terminal from a browser phone and a session ID included in a confirmation email;
Deriving the other one-time URL from the received one-time URL, sending a web page requesting transmission of the individual identification number to the other one-time URL to the browser phone,
Receiving an individual identification number addressed to the other one-time URL triggered by a click from the other one-time URL by the user from the browser phone;
Based on the received individual identification number, one-time URL, and browser phone mail address pair, the individual identification number corresponding to the browser phone DB mail address that holds the browser phone mail address and individual identification number in advance. A user authentication method using browser phone mail in an authentication server, comprising: a step of transmitting an identity confirmation message to the store server as confirming that the identity has been confirmed. Processing to issue and send a session ID for access from any terminal,
Receiving a session ID and browser phone mail address from an arbitrary terminal, generating two one-time URLs, and storing a set of the session ID, browser phone mail address and two one-time URLs in a temporary DB;
A process of sending a confirmation email containing a session ID and a link to one-time URL to the browser phone;
A process of receiving a web page transmission request specified in one one-time URL based on the user's match confirmation between the session ID issued to any terminal from the browser phone and the session ID included in the confirmation email;
The process of deriving the other one-time URL from the received one-time URL and sending a web page requesting transmission of the individual identification number to the other one-time URL to the browser phone,
A process of receiving an individual identification number addressed to the other one-time URL triggered by a click from the other one-time URL by the user from the browser phone;
Based on the received individual identification number, one-time URL, and browser phone mail address pair, the individual identification number corresponding to the browser phone DB mail address that holds the browser phone mail address and individual identification number in advance. If the two match, the user authentication program by the browser phone mail in the authentication server that causes the computer to execute the process of transmitting the identity confirmation message to the store server as having been confirmed. Processing to issue and send a session ID for access from any terminal,
Receiving a session ID and browser phone mail address from an arbitrary terminal, generating two one-time URLs, and storing a set of the session ID, browser phone mail address and two one-time URLs in a temporary DB;
A process of sending a confirmation email containing a session ID and a link to one-time URL to the browser phone;
A process of receiving a web page transmission request specified in one one-time URL based on the user's match confirmation between the session ID issued to any terminal from the browser phone and the session ID included in the confirmation email;
The process of deriving the other one-time URL from the received one-time URL and sending a web page requesting transmission of the individual identification number to the other one-time URL to the browser phone,
A process of receiving an individual identification number addressed to the other one-time URL triggered by a click from the other one-time URL by the user from the browser phone;
Based on the received individual identification number, one-time URL, and browser phone mail address pair, the individual identification number corresponding to the browser phone DB mail address that holds the browser phone mail address and individual identification number in advance. Is a recording medium on which a user authentication program by a browser phone mail is recorded in an authentication server that causes a computer to execute a process of transmitting an identity confirmation message to a store server as having been confirmed. An arbitrary terminal used by the user, a browser phone, a store server, and an authentication server provided with a browser phone DB that holds a set of a mail address and an individual identification number of the browser phone in advance are connected via a communication line,
An arbitrary terminal establishes a session with the authentication server via the store server, receives a session ID and a password, and transmits a session ID and a browser phone mail address;
The authentication server generates two one-time URLs, stores the session ID, password, email address, and two one-time URLs in a temporary database, and stores the session ID and a link to one one-time URL on the browser phone. Sending a confirmation email including the browser phone;
The browser phone transmits a web page transmission request specified in one one-time URL based on the user's match confirmation between the session ID issued to an arbitrary terminal and the session ID included in the confirmation email;
The authentication server derives the other one-time URL from the received one-time URL, and transmits a web page requesting input of the individual identification number and password to the other one-time URL to the browser phone;
The browser phone transmits the individual identification number to the other one-time URL triggered by the input of the password by the user;
The authentication server queries the browser phone DB for the email address based on the received individual identification number, and queries the temporary DB from the acquired email address to determine whether the email address / password / one-time URL pair is correct. A user authentication method using a browser phone e-mail, comprising: a step of transmitting an identity confirmation message to the store server as having been confirmed. In the user authentication method by the mail of the browser phone of Claim 7,
The store server includes a step of checking whether the user has a membership using the member DB and permitting login to an arbitrary terminal. A browser phone DB that holds a set of the email address and individual identification number of the browser phone used by the user is provided,
A means for issuing and sending a session ID and password for access from any terminal,
Means for receiving a browser phone mail address and a session ID from an arbitrary terminal, generating two one-time URLs, and storing a set of the session ID, password, mail address, and two one-time URLs in a temporary DB; ,
Means for sending a confirmation email containing a session ID and a link to one of the one-time URLs to the browser phone;
Means for receiving a web page transmission request specified in one one-time URL based on the user's match confirmation between the session ID issued to any terminal from the browser phone and the session ID included in the confirmation email;
Means for deriving the other one-time URL from the received one-time URL, sending a web page requesting the input of the individual identification number and password to the other one-time URL to the browser phone,
Means for receiving the individual identification number in the other one-time URL triggered by the user's password input from the browser phone;
The browser phone DB is inquired of the e-mail address based on the received individual identification number, and the temporary DB is inquired from the acquired e-mail address whether the combination of the e-mail address, password and one-time URL is correct. A user authentication server using a browser phone mail, comprising: means for transmitting an identity confirmation message to a store server. A browser phone DB that holds a set of the email address and individual identification number of the browser phone used by the user is provided,
Issuing and sending a session ID and password for access from any terminal;
Receiving a browser phone mail address and a session ID from an arbitrary terminal, generating two one-time URLs, and storing a set of the session ID, password, mail address, and two one-time URLs in a temporary DB; ,
Sending a confirmation email containing a session ID and a link to one one-time URL to the browser phone;
Receiving a web page transmission request specified in one one-time URL based on the user's match confirmation between the session ID issued to any terminal from the browser phone and the session ID included in the confirmation email;
Deriving the other one-time URL from the received one-time URL, sending a web page requesting input of the individual identification number and password to the other one-time URL to the browser phone,
Receiving the individual identification number in the other one-time URL triggered by the user's password input from the browser phone;
The browser phone DB is inquired of the e-mail address based on the received individual identification number, and the temporary DB is inquired from the acquired e-mail address whether the combination of the e-mail address, password and one-time URL is correct. A user authentication method using a browser phone mail in an authentication server, comprising: a step of transmitting an identity confirmation message to a store server. Processing to issue and send a session ID and password for access from any terminal,
A process of receiving a browser phone mail address and a session ID from an arbitrary terminal, generating two one-time URLs, and storing a set of the session ID, password, mail address, and two one-time URLs in a temporary DB. ,
A process of sending a confirmation email containing a session ID and a link to one-time URL to the browser phone;
Processing to receive a web page transmission request specified in one one-time URL based on the user's match confirmation of the session ID issued to any terminal from the browser phone and the session ID included in the confirmation email;
A process of deriving the other one-time URL from the received one-time URL, sending the individual identification number to the other one-time URL, and sending a web page requesting the password to the browser phone,
Processing to receive the individual identification number in the other one-time URL triggered by the user's password input from the browser phone;
Based on the received individual identification number, the browser phone DB that holds the set of the browser phone's email address and individual identification number used by the user is inquired about the email address, and the email address, password, and one-time URL are obtained from the acquired email address. A browser phone in an authentication server for causing a computer to execute a process of sending an identity confirmation message to a store server as a result of inquiring the temporary DB whether the set is correct and confirming the identity if it is correct User authentication program by email. Processing to issue and send a session ID and password for access from any terminal,
A process of receiving a browser phone mail address and a session ID from an arbitrary terminal, generating two one-time URLs, and storing a set of the session ID, password, mail address, and two one-time URLs in a temporary DB. ,
A process of sending a confirmation email containing a session ID and a link to one-time URL to the browser phone;
Processing to receive a web page transmission request specified in one one-time URL based on the user's match confirmation of the session ID issued to any terminal from the browser phone and the session ID included in the confirmation email;
A process of deriving the other one-time URL from the received one-time URL, sending the individual identification number to the other one-time URL, and sending a web page requesting the password to the browser phone,
Processing to receive the individual identification number in the other one-time URL triggered by the user's password input from the browser phone;
Based on the received individual identification number, the browser phone DB that holds the set of the browser phone's email address and individual identification number used by the user is inquired about the email address, and the email address, password, and one-time URL are obtained from the acquired email address. A browser phone in an authentication server for causing a computer to execute a process of sending an identity confirmation message to a store server as a result of inquiring the temporary DB whether the set is correct and confirming the identity if it is correct Recording medium that records user authentication programs by email.

Images