JP4813273B2 - User authentication method, user authentication system, user authentication apparatus, and user authentication program - Google Patents

Description

  The present invention relates to a user authentication method, a user authentication system, a user authentication apparatus, and a user authentication program that use a unique ID, which is unique information of a communication device used by a user, for user authentication, and in particular, the number of operations of the communication device during authentication. The present invention relates to a user authentication method, a user authentication system, a user authentication device, and a user authentication program that can reduce the burden on the user.

  2. Description of the Related Art Conventionally, a technique for using a communication device unique ID such as a calling number of a mobile phone for user authentication has been developed. For example, in Patent Document 1, a service system that provides a service to a user stores a user ID and a calling number of a mobile phone in association with each other as a user ID correspondence list, acquires a user ID from a user terminal, and from a mobile phone A technique is disclosed in which when a call number is acquired, a combination of the acquired user ID and call number is in the user ID list and the user is determined to be a legitimate user.

Japanese Patent No. 3497799 Specification

  However, in such a conventional technique, it is necessary to input a telephone number for making a call to the service system every time the user uses the service system, which causes a problem that the burden on the user is large and erroneous input occurs. There is.

  The present invention has been made to solve the above-described problems caused by the prior art, and reduces the number of operations of the communication device during authentication, thereby reducing the burden on the user and user authentication. It is an object to provide a system, a user authentication device, and a user authentication program.

  Hereinafter, a configuration for achieving the object will be described. That is, as shown in FIG. 1, the terminal 8 is operated with respect to the service systems 4, 5, 6 connected to the terminal 8 operated by the user 1 through the network 3 and providing the service to the user 1. In the user authentication method for authenticating that the user 1 is a legitimate user, the service system side has a unique ID storage unit 11a for storing a unique ID indicating that it is a legitimate user so that it is difficult to rewrite by an unauthorized operation. When a call is received via a predetermined network 12 having an eavesdropping / tampering prevention function, the incoming unit 11b notifies the user 1 of the incoming call, and when the user 1 receives the incoming call, returns an incoming call response indicating that the incoming call has been received. A user-side communication device 11 is prepared, and the user-side communication device 11 is called between the network 12 and the service systems 4 to 6 and the user The system side communication devices 13, 14, and 15 that receive the incoming call response returned from the side communication device 11 and transfer it to the service systems 4 to 6 are arranged, and the user is specified in the service systems 4, 5, and 6. User ID correspondence lists 4b, 5b and 6b indicating the correspondence between user IDs and unique IDs are stored, and user 1 inputs a user ID to use a service system, for example, 4 from terminal 8. Then, the call unit 4d of the service system 4 retrieves the unique ID corresponding to the user ID from the user ID correspondence list 4b, and the system side communication device 13 via the network 12 determines the unique ID of the user side communication device 11 a predetermined number of times. The user-side communication device 11 that has received the call is connected to the system-side communication device 13 via the network 12 by the user 1. The service system 4 is notified of the incoming response from the system side communication device 13, and the user 1 who is operating the terminal 8 is an authorized user by the incoming response. A service is provided to the terminal 8. Note that the predetermined number of times when calling to the user side communication device 11 is smaller than the number of times the transfer to another user side communication device is started, and it is illegal to restrict the call to the predetermined number of times. Therefore, it is possible to prevent an unauthorized person who obtained a user ID illegally from transferring a call to the user side communication device 11 and illegally using the service.

  According to the above configuration, the unique ID is stored in the storage unit which is difficult to be rewritten by an unauthorized operation, and by adding an eavesdropping / falsification preventing function to the route, the unique ID can be prevented from being falsified. It is possible to prevent misuse of the system by impersonating the person with relative ease. In addition, since an incoming call response can be transmitted to a system side communication device corresponding to an arbitrary service system, if there is one user side communication device, it is possible to log in to a plurality of systems. Unlike a conventional authentication method using a physical medium, it is not necessary to prepare a physical medium and its reader for each system and each terminal. In addition, since the user side communication device only responds to incoming calls from the system side communication device, the user does not need to input a calling number. Further, since the number of calls is limited to a predetermined number, unauthorized transfer can be prevented.

  Further, as shown in FIG. 2, the terminal 8 is operated with respect to service systems 24, 25, and 26 that are connected to the terminal 8 operated by the user 1 through the network 3 and provide services to the user 1. In the user authentication method for authenticating that the user 1 is a legitimate user, the service system side has a unique ID storage unit 11a for storing a unique ID indicating that it is a legitimate user so that it is difficult to rewrite by an unauthorized operation. When a call is received via a predetermined network 12 having an eavesdropping / tampering prevention function, the incoming unit 11b notifies the user 1 of the incoming call, and when the user 1 receives the incoming call, returns an incoming call response indicating that the incoming call has been received. Is a user-side communication device 11 having information, which is information for identifying the user himself / herself between the network 12 and the service systems 24-26. A user ID correspondence list 51b indicating the correspondence between D and the unique ID is stored, and the user side communication device 11 is called and transmitted from the user side communication device 11 based on the authentication request from the service systems 24-26. When an authentication device 51 having a call unit 51d that receives an incoming response and authenticates the user is arranged, and the user 1 inputs a user ID from the terminal 8 to use the service system, for example, 24, authentication of the service system 24 is performed. The unit 24b designates the user ID and requests the authentication device 51 to authenticate the user, and the call unit 51d of the authentication device 51 searches the user ID correspondence list 51b for a unique ID corresponding to the user ID and sends it through the network 12. The user side communication device 11 calls the unique ID of the user side communication device 11 a predetermined number of times, and the user side communication device 11 When the incoming call response indicating that 1 has received the call is returned, the call unit 51d notifies the authentication unit 24b of the service system 24 that the user 1 operating the terminal 8 is a legitimate user. And

  According to the above configuration, the unique ID is stored in the storage unit which is difficult to be rewritten by an unauthorized operation, and by adding an eavesdropping / falsification preventing function to the route, the unique ID can be prevented from being falsified. It is possible to prevent misuse of the system by impersonating the person with relative ease. In addition, since an incoming response can be transmitted to an authentication device compatible with an arbitrary service system, if there is one user side communication device, it is possible to log in to a plurality of systems. Unlike a conventional authentication method using a physical medium, it is not necessary to prepare a physical medium and its reader for each system and each terminal. Further, since the user side communication device only responds to an incoming call from the authentication device, it is not necessary for the user to input a calling number. Further, since the number of calls is limited to a predetermined number, unauthorized transfer can be prevented.

  According to this invention, since the user only responds to the call at the time of authentication, there is no need to input a transmission number, and the burden on the user in authentication can be reduced. In addition, since the number of calls is limited to a predetermined number, transfer can be prevented, and when a user ID is stolen, a call to a user can be prevented from being transferred to an unauthorized person and unauthorized use of the service can be prevented.

  Exemplary embodiments of a user authentication method, a user authentication system, a user authentication device, and a user authentication program according to the present invention will be described below in detail with reference to the accompanying drawings. In the first embodiment, the case where the service system itself authenticates the user will be described. In the second embodiment, the case where the service system requests the authentication apparatus to perform user authentication will be described.

  First, the configuration of the user authentication system according to the first embodiment will be described. FIG. 3 is a diagram illustrating the configuration of the user authentication system according to the first embodiment. In the figure, 61 is a user, 62 and 63 are personal computers (PC) as terminals, 64 is a UNIX (registered trademark) workstation (UNIX (registered trademark)) as a terminal, 65 is the Internet as a network, and 66 is a service. A file server 67 and 68 is a WEB service providing server as a service system.

  71 is a mobile phone as a user side communication device, 72 and 73 are a wireless network and a public telephone network as a predetermined network, and 74 and 75 are modems with a calling number receiving function as a system side communication device (however, The modem 75 is shared by the WEB service providing servers 67 and 68.)

  Here, it is assumed that the local station number storage unit 71a in the mobile phone 71 is used as the unique ID storage unit, that is, the telephone number (calling number) stored in the local station number storage unit 71a is used as the unique ID. The wireless network 72 and the public telephone network 73 have a function of preventing wiretapping / tampering of communication. It is assumed that the modems 74 and 75 with a calling number receiving function have a function of reading and transferring an incoming telephone number.

  Further, the file server 66 and the WEB service providing servers 67 and 68 have a user ID correspondence list 66b, 67b, 68b indicating a correspondence relationship between a user ID and a unique ID (calling number in this case), a calling number reception function in the mobile phone 71, and the like. It is assumed that call units 66d, 67d, and 68d that make calls a predetermined number of times via the attached modems 74 and 75 are provided. Here, the predetermined number of times is a number of times smaller than the number of times that a call to the mobile phone 71 is transferred to another mobile phone.

  Here, the call units 66d, 67d, and 68d call the mobile phone 71 using a fixed call number possessed by each service system, but the call numbers are randomly selected from a plurality of call numbers possessed by each service system. It is also possible to select and call the mobile phone 71. By randomly selecting one from a plurality of outgoing numbers and calling from that number, it becomes difficult to specify the outgoing number that the service system has, and the possibility of the service system being attacked can be reduced.

  When the user 61 presses the call button and the call is established, the call units 66d, 67d, and 68d send “This is XX bank. If you want to log in, please dial 1 #” as a talkie. . Then, the call units 66d, 67d, and 68d determine whether or not “1 #” matches when a character is returned from the mobile phone 71. If they match, the call unit 66d, 67d, and 68d determines that the user 61 is a legitimate user. .

  Here, “1 #” is designated by the talk key, but other characters and character strings can also be designated. Here, “character” includes “symbol” and “number”.

  As a talkie, you can also say "This is XX bank. Since the call button has been pressed, login is allowed. Please hang up." In this case, when the call units 66d, 67d, and 68d receive an incoming call response indicating that the call button of the mobile phone 71 has been pressed, the call units 66d, 67d, and 68d determine the user 61 as a regular user. Further, the user 61 is permitted to log in only by pressing the call button.

  Or a character and a character string can be transmitted to the terminal which transmitted user ID, and the user 61 can be made to return the character and the character string displayed on the terminal. In this case, as a talkie, for example, “This is XX bank. If you want to log in, please dial the characters displayed on the screen.”

  When these call units 66d, 67d, 68d call the mobile phone 71 and authenticate using characters returned from the mobile phone 71, the user 61 performs authentication only by dialing the designated characters. Can do. In addition, when these call units 66d, 67d, and 68d authenticate using characters returned from the mobile phone 71, an attacker of the service system can illegally steal the user ID and forge the caller ID. However, since it is not possible to specify the character to be returned, the possibility that the service system is attacked can be eliminated.

  Next, a processing procedure of user authentication processing by the user authentication system according to the first embodiment will be described. FIG. 4 is a flowchart of the user authentication process performed by the user authentication system according to the first embodiment. Here, a case where the user 61 accesses the file server 66 on the Internet 65 using the PC 62 will be described as an example.

  As shown in the figure, in this user authentication process, when the user 61 inputs a user ID to the PC 62, the PC 62 transmits the user ID to the file server 66 through the Internet 65 (step S11).

  Then, the call unit 66d of the file server 66 searches for the mobile phone number corresponding to the user ID from the user ID correspondence list 66b (step S12), and uses the searched mobile phone number to add the caller ID reception function to the mobile phone 71. A predetermined number of calls are made through the modem 74 (step S13).

  When the user 61 presses the call button, the incoming call unit 71b of the mobile phone 71 returns an incoming call response indicating that the call button is pressed (step S14). When the call is established, the call unit 66d of the file server 66 presses the talk key. Transmit (step S15).

  Then, the receiving unit 71b of the mobile phone 71 plays a talkie, and when the character ("1 #" here) designated by the talkie is dialed by the user 61, "1 #" is returned (step S16). Then, the call unit 66d receives the character returned through the modem 74 with the calling number reception function and disconnects the call (step S17). Then, the call unit 66d determines whether or not the returned character matches “1 #”, and if it matches, gives the login permission to the PC 62 (step S18).

  In this way, when the call unit 66d of the file server 66 calls the mobile phone 71 via the modem 74 with the calling number reception function, the user 61 can perform authentication only by returning the character designated by the talkie. This can reduce the burden on the user 61 in user authentication.

  As described above, in the first embodiment, the call units 66d, 67d, and 68d use the user ID correspondence lists 66b, 67b, and 68b to acquire the mobile phone numbers corresponding to the user IDs, and the acquired mobile phone numbers. Is used to call the cellular phone 71 corresponding to the user ID via the modems 74 and 75 with a calling number receiving function to cause the talkie to flow, and the receiving unit 71b of the cellular phone 71 is designated by the talkie based on the instruction of the user 61. Since the call units 66d, 67d, 68d perform user authentication based on the characters received via the calling number receiving function-equipped modems 74, 75 and the characters designated by the talk key, the user 61 Authentication can be performed simply by returning a character, and the burden on the user can be reduced.

  Further, in the first embodiment, when a call is made to the mobile phone 71, the call is limited to a predetermined number of times to prevent transfer to an unauthorized mobile phone, and an unauthorized person who has illegally obtained a user ID obtains the mobile phone 71. It is possible to prevent unauthorized use of the service by transferring a call to.

  In the first embodiment, the case where each service system performs user authentication has been described. However, user authentication can also be performed using an authentication device that receives a user authentication request from the service system and performs user authentication. Therefore, in the second embodiment, a case will be described in which an authentication apparatus that receives a user authentication request from a service system and performs user authentication is used.

  First, the configuration of the user authentication system according to the second embodiment will be described. FIG. 5 is a diagram illustrating the configuration of the user authentication system according to the second embodiment. Here, for convenience of explanation, functional units that play the same functions as the respective units shown in FIG.

  As shown in FIG. 5, this user authentication system includes a file server 86 instead of the file server 66 serving as a service system, and a WEB service providing server 87 instead of the WEB service providing servers 67 and 68 serving as the service system. 88. In addition, this user authentication system includes an authentication server 76 that receives a user authentication request from each service system and performs user authentication. Each service system and the authentication server 76 are connected by a highly secure network such as VPN.

  The file server 86 and the WEB service providing servers 87 and 88 have character transmission units 86c, 87c and 88c and authentication units 86b, 87b and 88b, respectively, and when the character transmission units 86c, 87c and 88c receive user IDs, The characters are randomly selected from the characters and transmitted to the terminal that has transmitted the user ID. The authentication units 86b, 87b, and 88b specify the user ID and the characters and request the authentication server 76 for user authentication. It is determined whether to provide a service to the user based on the authentication result.

  The authentication server 76 includes a user ID correspondence list 76b and a call unit 76d. When receiving the authentication request from the service system, the call unit 76d searches the user ID correspondence list 76b for a mobile phone number corresponding to the user ID, and calls the mobile phone 71 using the searched mobile phone number. When a character is returned from the mobile phone 71, user authentication is performed based on whether the returned character matches the character specified in the authentication request, and the authentication result is sent to the authentication request source service system. Notice.

  In this example, a character is randomly selected from a plurality of characters and transmitted to the terminal. However, a predetermined character string or character such as “1 #” can always be transmitted to the terminal. In this example, characters are transmitted to the terminal that has transmitted the user ID, and the user 61 returns the characters displayed on the terminal. Can also be specified. For example, as a talkie, you can say "This is XX bank. If you want to log in, please dial 1 #."

  Or, as a talkie, “This is XX bank. Since the call button was pressed, login is allowed. Please hang up.” In this case, when an incoming call response indicating that the call button of the mobile phone 71 is pressed is returned, the call unit 76d determines that the user 61 is an authorized user. Further, the user 61 is permitted to log in only by disconnecting the call after pressing the call button.

  Next, a processing procedure of user authentication processing by the user authentication system according to the second embodiment will be described. FIG. 6 is a flowchart of a user authentication process performed by the user authentication system according to the second embodiment. Here, a case where the user 61 accesses the file server 86 on the Internet 65 using the PC 62 will be described as an example.

  As shown in the figure, in this user authentication process, when the user 61 inputs a user ID to the PC 62, the PC 62 transmits the user ID to the file server 86 through the Internet 65 (step S21).

  Upon receiving the user ID, the character transmission unit 86c of the file server 86 selects a character from a plurality of characters at random and transmits it to the PC 62 (step S22). The authentication unit 86b sends the user ID and the character to the authentication server 76. The user authentication request is transmitted by designating the character transmitted by the transmitter 86c (step S23). When the call part 76d of the authentication server 76 receives the authentication request, the mobile phone number corresponding to the user ID is searched from the user ID correspondence list 76b (step S24).

  Then, the call unit 76d calls the mobile phone 71 a predetermined number of times using the searched mobile phone number (step S25), and when the user 61 presses the call button, the call receiving unit 71b of the mobile phone 71 displays the call button. An incoming call response indicating the pressing is returned (step S26), and when the call is established, the call unit 76d of the authentication server 76 transmits a talkie (step S27).

  Then, the receiving unit 71b of the mobile phone 71 plays a talk key, and when the character transmitted to the terminal is dialed by the user 61, the dialed character is returned (step S28). Then, the call unit 76d receives the returned character and disconnects the call (step S29).

  Then, the call unit 76d determines whether or not the returned character matches the character designated by the file server 86, and if it matches, notifies the file server 86 that the user is a legitimate user (step). S30). Then, the authentication unit 86b of the file server 86 gives login permission to the PC 62 (step S31).

  In this way, when the call unit 76d of the authentication server 76 receives the user authentication request, the user 61 can authenticate only by returning the character by calling the mobile phone 71 and requesting the reply of the character, The burden on the user 61 in user authentication can be reduced.

  As described above, in the second embodiment, since the authentication server 76 receives a user authentication request from the service system and performs user authentication, there is no need to provide a user authentication function for each service system. Can be constructed efficiently.

  In the first and second embodiments, the user authentication function of the service providing server and the authentication server has been described, but the user authentication function is realized by a user authentication program executed on the service providing server and the authentication server. Therefore, the hardware configuration of the service providing server that executes the user authentication program and the authentication server will be described.

  FIG. 7 is a block diagram illustrating a hardware configuration of a computer that executes the user authentication program according to the first and second embodiments, that is, a service providing server and an authentication server. As shown in the figure, the computer 100 includes a RAM 110, a CPU 120, an HDD 130, a LAN interface 140, an input / output interface 150, and a DVD drive 160.

  The RAM 110 is a memory that stores a program, a program execution result, and the like. The CPU 120 is a central processing unit that reads a program from the RAM 110 and executes the program.

  The HDD 130 is a disk device that stores programs and data, and the LAN interface 140 is an interface for connecting the computer 100 to another computer via the LAN or the Internet 65.

  The input / output interface 150 is an interface for connecting an input device such as a mouse or a keyboard and a display device, and the DVD drive 160 is a device for reading / writing a DVD.

  The user authentication program 111 executed in the computer 100 is stored in the DVD, read from the DVD by the DVD drive 160, and installed in the computer 100.

  Alternatively, the user authentication program 111 is stored in a database or the like of another computer system connected via the LAN interface 140, read from these databases, and installed in the computer 100.

  The installed user authentication program 111 is stored in the HDD 130, read into the RAM 110, and executed by the CPU 120 as the user authentication process 121.

  In the first and second embodiments, the case where the user who uses the service system is authenticated via the Internet has been described. However, the present invention is not limited to this. For example, in ATM (Automatic Teller Machine) The present invention can be similarly applied to other user authentication such as user authentication.

  As described above, the user authentication method, the user authentication system, the user authentication device, and the user authentication program according to the present invention are useful when it is desired to specify whether or not the user authentication, that is, whether the user is a legitimate user. This is suitable when it is important to reduce the burden on the user.

It is a figure which shows the structure of the user authentication system which concerns on this invention. It is a figure which shows the other structure of the user authentication system which concerns on this invention. 1 is a diagram illustrating a configuration of a user authentication system according to a first embodiment. 6 is a flowchart illustrating a processing procedure of user authentication processing by the user authentication system according to the first embodiment. It is a figure which shows the structure of the user authentication system which concerns on the present Example 2. FIG. It is a flowchart which shows the process sequence of the user authentication process by the user authentication system which concerns on the present Example 2. FIG. FIG. 3 is a block diagram illustrating a hardware configuration of a computer that executes a user authentication program according to the first and second embodiments.

Explanation of symbols

1,61 user 2,7,8 terminal 3,12 network 4-6, 24-26 service system 4b-6b user ID correspondence list 4d-6d call unit 11 user side communication device 11a unique ID storage unit 11b receiving unit 13- 15 System side communication device 24b-26b Authentication part 51 Authentication apparatus 51b User ID corresponding list 51d Call part 62, 63 PC (personal computer)
64 UNIX (registered trademark) (UNIX (registered trademark) workstation)
65 Internet 66 File server 66b-68b User ID correspondence list 66d-68d Call unit 67, 68 WEB service providing server 71 Mobile phone 71a Own station number storage unit 71b Incoming unit 72 Wireless network 73 Public telephone network 74, 75 Transmission number reception function Attached modem 76 Authentication server 76b User ID correspondence list 76d Call part 86 File server 86b-88b Authentication part 86c-88c Character transmission part 87,88 WEB service providing server 100 Computer 110 RAM
111 User authentication program 120 CPU
121 User authentication process 130 HDD
140 LAN interface 150 I / O interface 160 DVD drive

Claims (10)

A user authentication method by a user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for authentication,
A user ID acquisition step of acquiring a user ID which is information for identifying a user;
A unique ID search step of searching for a unique ID corresponding to the user ID acquired by the user ID acquisition step from a user ID list indicating a correspondence relationship between the user ID and the unique ID;
A call step of calling the communication device having the unique ID searched by the unique ID search step a number of times smaller than the number of times the transfer to another communication device different from the communication device having the unique ID is started ;
A user determination step of determining that a user whose user ID has been acquired by the user ID acquisition step is a legitimate user when an incoming call response indicating that the user has received a call made by the call step is received from a communication device; ,
A user authentication method comprising:   When the user determination step receives from the communication device an incoming call response indicating that the user has received the call made by the call step, the user determination step transmits a talkie requesting the user to reply a predetermined character to the communication device. When a character input by a user who has heard a talkie sent from is received from a communication device, it is determined whether or not the received character matches the predetermined character. The user authentication method according to claim 1, wherein the user whose user ID is acquired is determined to be a regular user.   The user authentication method according to claim 1, wherein the communication device is a telephone, and the unique ID is a telephone number. A user authentication method by a user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for user authentication,
A user authentication request receiving step for receiving a user authentication request from a device that requires user authentication together with a user ID that is information for identifying the user;
A unique ID search step of searching for a unique ID corresponding to the user ID received by the user authentication request receiving step from a user ID list indicating a correspondence relationship between the user ID and the unique ID;
A call step of calling the communication device having the unique ID searched by the unique ID search step a number of times smaller than the number of times the transfer to another communication device different from the communication device having the unique ID is started ;
When an incoming response indicating that the user has received a call made in the call step is received from a communication device, the user authentication that the user whose user ID is received in the user authentication request receiving step is a legitimate user. A user determination step for notifying a device that requires
A user authentication method comprising: A user authentication system comprising a communication device used by a user and a service system that uses a unique ID, which is unique information of the communication device, for authentication,
The service system includes:
User ID list storage means for storing a user ID list indicating a correspondence between a user ID and a unique ID, which is information for identifying a user;
User ID acquisition means for acquiring a user ID;
Unique ID search means for searching for a unique ID corresponding to the user ID acquired by the user ID acquisition means from the user ID list storage means;
Call means for calling the communication device having the unique ID searched by the unique ID search device a number of times smaller than the number of times transfer to another communication device different from the communication device having the unique ID is started ;
User determination means for determining that a user whose user ID has been acquired by the user ID acquisition means is a legitimate user when an incoming call response indicating that the user has received a call made by the call means is received from a communication device; ,
With
The communication device is
A user authentication system comprising: an incoming call means for receiving a call made by the call means and returning an incoming call response indicating that the user has received the call when the user receives the received call. A communication device used by a user, a service system that provides a service to the user, and an authentication device that performs user authentication using a unique ID that is unique information of the communication device based on a user authentication request from the service system. A user authentication system,
The authentication device
User ID list storage means for storing a user ID list indicating a correspondence between a user ID and a unique ID, which is information for identifying a user;
User authentication request receiving means for receiving a user authentication request together with a user ID from the service system;
Unique ID search means for searching for a unique ID corresponding to the user ID received by the user authentication request receiving means from the user ID list storage means;
Call means for calling the communication device having the unique ID searched by the unique ID search device a number of times smaller than the number of times transfer to another communication device different from the communication device having the unique ID is started ;
When an incoming response indicating that the user has received a call made by the call means is received from a communication device, the service system indicates that the user whose user ID has been received by the user authentication request receiving means is a legitimate user. User determination means for notifying;
With
The communication device is
A user authentication system comprising: an incoming call means for receiving a call made by the call means and returning an incoming call response indicating that the user has received the call when the user receives the received call. A user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for authentication,
User ID list storage means for storing a user ID list indicating a correspondence between a user ID and a unique ID, which is information for identifying a user;
User ID acquisition means for acquiring a user ID;
Unique ID search means for searching for a unique ID corresponding to the user ID acquired by the user ID acquisition means from the user ID list storage means;
Call means for calling the communication device having the unique ID searched by the unique ID search device a number of times smaller than the number of times transfer to another communication device different from the communication device having the unique ID is started ;
User determination means for determining that a user whose user ID has been acquired by the user ID acquisition means is a legitimate user when an incoming call response indicating that the user has received a call made by the call means is received from a communication device; ,
A user authentication device comprising: A user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for user authentication,
User ID list storage means for storing a user ID list indicating a correspondence between a user ID and a unique ID, which is information for identifying a user;
User authentication request receiving means for receiving a user authentication request together with a user ID from an apparatus that requires user authentication;
Unique ID search means for searching for a unique ID corresponding to the user ID received by the user authentication request receiving means from the user ID list storage means;
Call means for calling the communication device having the unique ID searched by the unique ID search device a number of times smaller than the number of times transfer to another communication device different from the communication device having the unique ID is started ;
When an incoming call response indicating that the user has received a call made by the call means is received from a communication device, the user authentication is confirmed that the user whose user ID is received by the user authentication request receiving means is a legitimate user. User determination means for notifying a required device;
A user authentication device comprising: A user authentication program that uses a unique ID, which is unique information of a communication device used by a user, for authentication,
A user ID acquisition procedure for acquiring a user ID which is information for identifying a user;
A unique ID search procedure for searching for a unique ID corresponding to the user ID acquired by the user ID acquisition procedure from a user ID list indicating a correspondence relationship between the user ID and the unique ID;
A call procedure for making a call to the communication device having the unique ID searched by the unique ID search procedure a number of times smaller than the number of times transfer to another communication device different from the communication device having the unique ID is started ;
A user determination procedure for determining that a user whose user ID has been acquired by the user ID acquisition procedure is a legitimate user when an incoming call response indicating that the user has received a call made by the call procedure is received from a communication device; ,
A user authentication program that causes a computer to execute. A user authentication program that uses a unique ID, which is unique information of a communication device used by a user, for user authentication,
A user authentication request receiving procedure for receiving a user authentication request from a device that requires user authentication together with a user ID that is information for identifying the user;
A unique ID search procedure for searching for a unique ID corresponding to the user ID received by the user authentication request receiving procedure from a user ID list indicating a correspondence relationship between the user ID and the unique ID;
A call procedure for making a call to the communication device having the unique ID searched by the unique ID search procedure a number of times smaller than the number of times transfer to another communication device different from the communication device having the unique ID is started ;
When an incoming call response indicating that the user has received a call made by the call procedure is received from a communication device, the user authentication that the user whose user ID is received by the user authentication request receiving procedure is a legitimate user is confirmed. A user determination procedure for notifying a required device;
A user authentication program that causes a computer to execute.

Images