JP5404485B2 - Display method of identity information card in terminal, terminal and program - Google Patents

Description

  The present invention relates to a technique for displaying an identity information card on a terminal. An identity information card is an information unit that represents a user's digital identity (identity identification, user attribute) in the form of a “card”.

  FIG. 1 is a display screen of a terminal representing login to a Web site in the prior art.

(S11) The terminal 1 accepts an input of an address of a website to be accessed in response to a user operation. The address is, for example, a website URL (Uniform Resource Locator). The terminal 1 accesses the Web server 2 that manages the Web site of the input address destination.
(S12) The terminal 1 receives a Web page requesting a login ID (IDentifier) and a password from the Web server 2. The web page is displayed on the display of the terminal 1.
(S13) The terminal 1 accepts input of a login ID and a password in response to a user operation. The login ID and password input by the user are transmitted from the terminal 1 to the Web server 2.
(S14) The Web server 2 determines whether or not the user is a valid user by authenticating the login ID and the password. If the authentication is successful, the service screen of the website is transmitted to the terminal 1. The terminal 1 can receive the service.

  Conventionally, a user has to use a complicated password for each Web site. However, at present, a simple password that is easy to remember is often used on a plurality of different websites. In this case, it is necessary to assume a risk that if one website is cracked and a password is leaked, the other websites are also cracked.

  On the other hand, there is a technique that uses an identity information card instead of inputting a login ID and a password (see, for example, Patent Document 1, Non-Patent Documents 1 and 2). There is an “Information Card” standardized by the Information Card Foundation as an identity information card. An “Information Card” is a component for the ID metasystem. The ID metasystem is a general-purpose framework related to end user identification (identification).

  For example, assume that the user wants to purchase beer at a liquor store. Here, the liquor requests the user to present a certification card for age confirmation. The user presents one of the appropriate cards in the wallet, such as a driver's license, health insurance card, passport, etc., to the liquor store. Here, even if a point card for shopping is presented, the age cannot be confirmed. After confirming the date of birth written on the card, the liquor store sells beer to the user. At this time, it is not necessary to confirm the name and address of the user when selling beer. In this example, the card presented by the user corresponds to an identity information card.

  FIG. 2 is a configuration diagram of the ID metasystem. FIG. 3 is a display screen of the terminal based on the sequence of FIG.

According to FIG. 2, the ID meta system requires the following three parties.
(1) Identity Provider: IP
It corresponds to the National Police Agency that issued the driver's license for the above example, and is an authentication token server that authenticates user attribute information.
(2) Principal
It corresponds to a user who purchases beer in the above example, and is a terminal operated by the user.
(3) Relying Parties: RP
The above example corresponds to a liquor store that sells beer, and is a Web server that provides a service.

According to FIG. 2, a terminal 1 operated by a user communicates with a Web server 2 as an RP and an authentication token server 3 as an IP via a network. The terminal 1 stores a plurality of identity information cards in advance.
(S21) The terminal 1 accepts an input of an address of a website to be accessed in response to a user operation (see S21 in FIG. 3). As a Web client, the terminal 1 transmits, for example, an HTTP GET for a login request to the Web server 2.
(S22) On the other hand, the Web server 2 requests the terminal 1 for user attribute information to be confirmed in order to provide the service. For example, it may be “birth date” for age confirmation.
(S23) The terminal 1 activates, for example, a card selector in “Information Card” (see S23 in FIG. 3). Then, the terminal 1 causes the user to select one identity information card to be presented to the Web server 2 from among a plurality of identity information cards. At this time, the identity information card including the user attribute information requested from the Web server 2 is highlighted. The user can select one of the highlighted identity information cards while looking at the display of the terminal 1.
(S24) The terminal 1 transmits the selected identity information card to the authentication token server 3.
(S25) The authentication token server 3 returns an authentication token for authenticating the user attribute information of the identity information card to the terminal 1.
(S26) The terminal 1 transmits the authentication token received from the authentication token server 3 to the Web server 2.
(S27) When the Web server 2 determines that the authentication token received from the terminal 1 is valid, the Web server 2 provides a service to the terminal 1 (see S27 in FIG. 3).

Special table 2009-520272

Information Card Foundation, “InformationCard”, [online], [Search March 13, 2010] Internet <URL: http://informationcard.net/> Microsoft, “Windows Card Space”, [online], [Search on March 13, 1992], Internet <URL: http: //windows.microsoft.com/en-US/windows-vista/Windows-CardSpace>

  However, according to the card selector of “Information Card” based on the above-described prior art, the presence of a large number of identity information cards having user attribute information requested from the Web site means that the options for the user increase. The operation of selecting one card from a large number of cards is troublesome for the user, and the number of cards to be selected is often wrong.

  In particular, in the case of a mobile phone, unlike a personal computer, the display screen of the display is small. Therefore, the number of cards that can be displayed on the display at a time is also limited. When the user selects one card from a large number of cards, it is necessary to scroll the screen many times, and an incorrect card may be selected.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide an identification information card display method, a terminal, and a program that can reduce an operation burden required when a user selects an identity information card using a card selector.

According to the present invention, in a system having a terminal operated by a user, a Web server that provides a service in response to a request from the terminal, and an authentication token server that issues an authentication token in response to a request from the terminal , A method for displaying an identity card on a terminal,
The identity information card includes a plurality of user attribute information,
For each user attribute information, one or more usage categories are specified in advance,
The terminal has a card storage unit that stores a plurality of identity information cards and stores one or more usage categories including all specified user attribute information in association with each identity information card,
A first step in which a terminal accesses a web server page using a browser;
A second step in which the Web server requests user attribute information from the terminal;
A third step in which the terminal detects a usage category from the information on the page of the Web server;
A fourth step in which the terminal retrieves an identity information card belonging to the detected use category from the card storage unit, and displays the identity information card on the display for allowing the user to select the identity information card;
A fifth step in which the terminal transmits one identity information card selected by the user and necessary user attribute information to the authentication token server ;
It is characterized by having.

According to another embodiment of the identification information card display method of the present invention,
For each identity information card, the number of uses is further correlated and stored in the card storage unit,
About a 4th step, it is also preferable to display on a display in an order from the identity information card | curd with many use frequency in a use category.

According to another embodiment of the identification information card display method of the present invention,
The identity information card further includes security level label information as user attribute information.
About a 4th step, it is also preferable to display an identity information card more than label information in a use category in an order from an identity information card with a low security level.

According to another embodiment of the identification information card display method of the present invention, in the fourth step, an identification information card including at least only user attribute information requested from the Web server is displayed on the display in the usage category. It is also preferable to do.

According to the present invention, a Web server that provides a service in response to a request from a terminal, an authentication token server that issues an authentication token in response to a request from the terminal, and a terminal that communicates via a network, the user A terminal that displays an identity card to be selected by
The identity information card includes a plurality of user attribute information,
For each usage category, one or more user attribute information is specified in advance,
Card storage means for storing a plurality of identity information cards and storing one or more usage categories including all specified user attribute information in association with each identity information card;
Web client means functioning as a client for the Web server;
Attribute request receiving means for receiving requested user attribute information from a Web server using Web client means;
Usage category detection means for detecting usage categories from page information of a Web server;
A card display control means for retrieving an identity information card belonging to the detected use category from the card storage means and displaying the identity information card on a display for allowing the user to select the identity information card;
A card transmitting means for transmitting one identity information card selected by the user and necessary user attribute information to the authentication token server ;
It is characterized by having .

According to another embodiment of the terminal of the present invention,
The card storage means further stores the number of uses for each identity information card,
It is also preferable that the card display control means displays on the display in order from the identity information card having the highest number of uses in the usage category.

According to another embodiment of the terminal of the present invention,
The identity information card further includes security level label information as user attribute information.
It is also preferable that the card display control means displays, on the display, an identity information card that is equal to or higher than the label information in order of use from the identity information card having the lowest security level.

According to another embodiment of the terminal of the present invention, the card display control means, in applications category, it is also preferable to display the identity information card containing at least only the user attribute information requested by the Web server to display.

According to the present invention, a Web server that provides a service in response to a request from a terminal, an authentication token server that issues an authentication token in response to a request from the terminal, and a terminal that communicates via a network, the user A program for causing a computer mounted on a terminal to display an identity card to be selected by
The identity information card includes a plurality of user attribute information,
For each usage category, one or more user attribute information is specified in advance,
Card storage means for storing a plurality of identity information cards and storing one or more usage categories including all specified user attribute information in association with each identity information card;
Web client means functioning as a client for the Web server;
Attribute request receiving means for receiving requested user attribute information from a Web server using Web client means;
Usage category detection means for detecting usage categories from page information of a Web server;
A card display control means for retrieving an identity information card belonging to the detected use category from the card storage means and displaying the identity information card on a display for allowing the user to select the identity information card;
A card transmitting means for transmitting one identity information card selected by the user and necessary user attribute information to the authentication token server ;
And wherein the benzalkonium cause the computer to function with.

  According to the identification information card display method, terminal, and program of the present invention, when a user selects an identity information card with a card selector, the operation burden required for the selection can be reduced. That is, an identity information card that is highly likely to be selected by the user can be displayed at a position where it can be easily selected as much as possible.

It is the display screen of the terminal showing the login to the Web site in a prior art. It is a block diagram of ID metasystem. It is a display screen of the terminal based on the sequence of FIG. It is a sequence diagram of a system in the present invention. It is explanatory drawing showing the use category of the identity information card | curd in this invention. It is a function block diagram of the terminal in this invention.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 4 is a sequence diagram of the system according to the present invention.

  According to FIG. 4, in the same system as in FIG. 2, the terminal 1 communicates via a network with a Web server 2 that provides a service and an authentication token server 3 that issues an authentication token. The terminal 1 is not limited to a mobile phone, and may of course be a personal computer or a smartphone.

  S21 to S27 in FIG. 4 are the same sequence as S21 to S27 in FIG. In particular, the feature of the present invention is in step S23.

(S21) The terminal 1 transmits HTTP GET to the Web server 2 as a Web client.
(S22) On the other hand, the Web server 2 requests the terminal 1 for user attribute information to be confirmed in order to provide the service.

(S231) When the user attribute information is requested from the Web server 2, the terminal 1 activates a card selector application from the Web browser. For example, it may be when the user presses the authentication button of the Information Card on the website. The card selector specifies a plurality of identity information cards on the display of the terminal 1 and causes the user to select one identity information card to be presented to the Web server 2.

(S232) The terminal 1 detects the usage category from the information on the page of the Web server. For example, a usage category may be selected from a URL that is an address of a Web page. Of course, a usage category may be registered in advance for each URL. Examples of usage categories include the following types.
・ Mail magazine site ・ Community site ・ Credit settlement site ・ Auction EC site

  The usage category may be estimated from text in the page information. In this case, a keyword is registered in advance for each use category, and the use category is estimated based on the detected keyword.

  FIG. 5 is an explanatory diagram showing usage categories of the identity information card in the present invention.

  According to FIG. 5, usage categories are registered in advance for each user attribute information (claim). For example, “Email Address” is used in e-mail magazine sites and auction EC sites. “Nickname” is used only on community sites.

Card 1 has user attribute information “Email Address” to “Primary or Home Telephone Number”. The usage categories in the card 1 are an auction EC site, a community site, a mail magazine site, and a credit settlement site. However, for example, the only user attribute information necessary for a mail magazine site is “Email Address”.
Card 2 has user attribute information “Email Address” to “Gender”. The usage categories in the card 2 are a community site, a mail magazine site, and a credit settlement site.
The card 17 has user attribute information “Email Address”. The usage category in the card 17 is only e-mail magazine.
The card 18 has user attribute information “nickname” “Gender”. The usage category in the card 18 is only the community site.

(S233) The card storage unit is searched for an identity information card including all user attribute information requested from the Web server from the detected use categories. In addition, when a use category cannot be estimated by S232, an identity information card including all requested user attribute information is searched from the card storage unit.

(S234) Here, for example, the display order of the identity information card is changed as follows. Any one of these conditions may be applied, or some may be applied in combination.
(1) The card display control unit 114 displays on the display in order from an identity information card including at least user attribute information requested from the Web server in the usage category.
(2) The card display control unit 114 displays on the display in order from the identity information card having the highest use count in the usage category. The use count is the number of times the identity information card is presented to the Web server. The number of uses is recorded for each identity information card.
(3) The card display control unit 114 displays the identity information cards that are equal to or higher than the label information in the usage category in order from the identity information card having the lowest security level. In other words, it is based on the idea that the minimum required security level should be ensured.

(S235) Then, a plurality of identity information cards to be selected by the user are displayed on the display.

(S236) The terminal 1 causes the user to select one identity information card to be presented to the Web server 2 from among a plurality of identity information cards.

(S24) The terminal 1 transmits the selected identity information card and necessary user attribute information to the authentication token server 3.
(S25) The authentication token server 3 returns an authentication token for authenticating the user attribute information of the identity information card to the terminal 1.
(S26) The terminal 1 transmits the authentication token received from the authentication token server 3 to the Web server 2.
(S27) When the Web server 2 determines that the authentication token received from the terminal 1 is valid, the Web server 2 provides a service to the terminal 1. For example, it may operate to redirect to a service page.

  FIG. 6 is a functional configuration diagram of a terminal according to the present invention.

  According to FIG. 6, the terminal 1 includes a communication interface 101 and a user interface 102. When the terminal 1 is a mobile phone, for example, the communication interface 101 is a mobile communication interface, and the user interface 102 includes a numeric keypad and a display of about 3 inches.

  Further, according to FIG. 6, the terminal 1 includes a card storage unit 110, a Web client unit 111, an attribute request reception unit 112, a usage category detection unit 113, a card display control unit 114, and a card transmission unit 115. , A token receiver 116 and a token transmitter 117. These functional components are realized by executing a program that causes a computer installed in the terminal to function.

  The card storage unit 110 stores a plurality of identity information cards and stores one or more usage categories including all specified user attribute information in association with each identity information card. Moreover, it is preferable that the card | curd memory | storage part 110 further matches and memorize | stores the use frequency for every identity information card. The priority of the display order of the identity information card can be changed according to the number of uses. Further, the card storage unit 110 preferably further includes security level label information as user attribute information in the identity information card. By displaying only the identity information card that clears the security level required from the Web server, the user can easily select the identity information card to be presented.

  The web client unit 111 functions as a client for the web server 2.

  The attribute request receiving unit 112 uses the Web client unit 111 to receive requested user attribute information from the Web server. When the Web client unit 111 requests HTTP GET from the Web server, user attribute information is requested as a response. The user attribute information is output to the usage category detection unit 113.

  When the user attribute information requested from the Web server is input, the usage category detection unit 113 detects the usage category from the page information (similar to S232 in FIG. 4). For example, it may be the URL of the accessed web page. A usage category is detected from the URL. The requested user attribute information and the detected use category are output to the card display control unit 114.

  The card display control unit 114 searches the card storage unit 110 for an identity information card belonging to the detected use category, and displays the identity information card on the display so that the user can select the identity information card (S233 to S235 in FIG. 4). The same). At this time, the display order of the identity information cards can be changed using the number of uses or the security level stored in the card storage unit 110.

  The card display control unit 114 also preferably enlarges or reduces the size of the card according to the display size of the terminal. For example, when the display is vertically long, the horizontal size of the card is enlarged or reduced by fixing the aspect ratio so as to be the same as the horizontal size of the display. When the display is horizontally long, the card is enlarged or reduced with a fixed aspect ratio so that the vertical size of the card becomes the same as the vertical size of the display.

  The card transmission unit 115 transmits one identity information card selected by the user and necessary user attribute information to the authentication token server (similar to S24 in FIG. 4).

  The token receiving unit 116 receives an authentication token based on the user attribute information from the authentication token server (similar to S25 in FIG. 4).

  The token transmission unit 117 transmits an authentication token to the Web server (similar to S26 in FIG. 4).

  As described above in detail, according to the identification information card display method, terminal, and program of the present invention, when a user selects an identity information card with a card selector, the operation burden required for the selection can be reduced. Can do. That is, an identity information card that is highly likely to be selected by the user can be displayed at a position where it can be easily selected as much as possible.

  Various changes, modifications, and omissions of the above-described various embodiments of the present invention can be easily made by those skilled in the art. The above description is merely an example, and is not intended to be restrictive. The invention is limited only as defined in the following claims and the equivalents thereto.

DESCRIPTION OF SYMBOLS 1 Terminal, mobile telephone 101 Communication interface 102 User interface 110 Card memory | storage part 111 Web client part 112 Attribute request | requirement reception part 113 Use category detection part 114 Card display control part 115 Card transmission part 116 Token reception part 117 Token transmission part 2 Web server 3 Authentication token server

Claims (9)

Identity in the terminal in a system including a terminal operated by a user, a Web server that provides a service in response to a request from the terminal, and an authentication token server that issues an authentication token in response to a request from the terminal An information card display method,
The identity information card includes a plurality of user attribute information,
For each user attribute information, one or more usage categories are specified in advance,
The terminal has a card storage unit that stores a plurality of identity information cards and stores one or more application categories including all specified user attribute information in association with each identity information card,
A first step in which the terminal accesses a page of the Web server using a browser;
A second step in which the Web server requests user attribute information from the terminal;
A third step in which the terminal detects a usage category from information on a page of the Web server;
A fourth step in which the terminal retrieves an identity information card belonging to the detected use category from the card storage unit and displays the identity information card on a display for allowing the user to select the identity information card;
A fifth step in which the terminal transmits one identity information card selected by a user and the required user attribute information to the authentication token server ;
Display method of identity cards in the terminal, characterized in that it comprises a. For each of the identity information cards, the number of uses is further correlated and stored in the card storage unit,
The method of displaying an identity information card in a terminal according to claim 1, wherein the fourth step is to display the identity information card in order from the most frequently used identity information card in the usage category. The identity information card further includes security level label information as the user attribute information,
About a 4th step, the said identity information card | curd which becomes more than the said label information in the said use category is displayed on a display in an order from an identity information card | curd with a low security level of Claim 1 or 2 characterized by the above-mentioned. How to display an identity card on a terminal. 4. The fourth step according to claim 1, wherein an identity information card including at least only user attribute information requested from the Web server is displayed on the display in the usage category. The display method of the identity information card in the terminal described in 1. A Web server that provides a service in response to a request from a terminal, an authentication token server that issues an authentication token in response to a request from the terminal, and a terminal that communicates via a network and should be selected by a user A device that displays an identity card,
The identity information card includes a plurality of user attribute information,
For each user attribute information, one or more usage categories are specified in advance,
Card storage means for storing a plurality of identity information cards and storing one or more usage categories including all specified user attribute information in association with each identity information card;
Web client means functioning as a client for the Web server;
Attribute request receiving means for receiving requested user attribute information from the Web server using the Web client means;
Usage category detection means for detecting usage categories from page information of the Web server;
A card display control means for searching for an identity information card belonging to the detected use category from the card storage unit and displaying the identity information card on a display for allowing the user to select the identity information card;
A card transmitting means for transmitting one identity information card selected by the user and the required user attribute information to the authentication token server ;
Terminal for displaying the identity information card, characterized in that it comprises a. The card storage means further stores the number of uses in association with each identity information card,
6. The terminal for displaying an identity information card according to claim 5, wherein the card display control means displays the identity information card in order from the most frequently used identity information card in the usage category. The identity information card further includes security level label information as the user attribute information,
The said card display control means displays the identity information card more than the said label information in the said use category on a display in an order from an identity information card with a low security level. A terminal that displays your identity card. The card display control means, in the application category, any one of claim 5 and displaying the identity information card containing at least only the user attribute information requested from the Web server to display 7 of 1 A terminal that displays the identity information card described in the item. A Web server that provides a service in response to a request from a terminal, an authentication token server that issues an authentication token in response to a request from the terminal, and a terminal that communicates via a network and should be selected by a user A program that allows a computer mounted on a terminal that displays an identity information card to function.
The identity information card includes a plurality of user attribute information,
For each user attribute information, one or more usage categories are specified in advance,
Card storage means for storing a plurality of identity information cards and storing one or more usage categories including all specified user attribute information in association with each identity information card;
Web client means functioning as a client for the Web server;
Attribute request receiving means for receiving requested user attribute information from the Web server using the Web client means;
Usage category detection means for detecting usage categories from page information of the Web server;
A card display control means for searching for an identity information card belonging to the detected use category from the card storage unit and displaying the identity information card on a display for allowing the user to select the identity information card;
A card transmitting means for transmitting one identity information card selected by the user and the required user attribute information to the authentication token server ;
Terminal identity information card display program of characterized by the Turkey cause the computer to function with.

Images