JP5432735B2 - Information processing system - Google Patents

Description

  The present invention relates to a technique for detecting use of a service by an unintended third party.

  When a service provided by the server is used from an information processing terminal such as a personal computer or a mobile phone, the server is pre-registered with authentication information such as a user ID and a password input by the user and the user in advance. In some cases, an authentication method is used in which it is determined whether or not the user has the right to use the service by checking the contents of the authentication information. In this authentication method, a third party who does not have the right to use the service inputs the authentication information obtained illegally to the information processing terminal and authenticates it, so-called impersonation. There is a problem that occurs. Thus, for example, Patent Documents 1 and 2 disclose a technique for preventing the use of an unauthorized service by impersonation.

  For example, Patent Literature 1 discloses a technique for reserving an access date and time for a server device and rejecting the access when the actual access to the server device is significantly different from the reserved date and time. Further, in Patent Document 2, the identification code of the client and the previous access date and time are stored in the management table, and if there is a client whose predetermined period has passed since the previous access date and time, the identification code of the client is stored. Is deleted from the management table and the registration of the corresponding client is deleted.

JP 2009-164748 A Japanese Patent Laying-Open No. 2005-092388

  In the conventional technology as described above, for example, a burden related to the work of reserving the access date and time for the server device is imposed on the user. Also, if authentication information obtained illegally by a third party who does not have the right to use the service is continuously used, the registration of the client will not be deleted, so the service can be received through the client. . Moreover, even if the information processing terminal is using the service by a third party who does not have the right to use the service, the information processing terminal cannot detect the fraud.

  An object of the present invention is to prevent unauthorized use of a service by a third party who is not authorized to receive the service.

The present invention includes an information processing terminal and a server device that performs a process requested by the information processing terminal. The information processing terminal includes a first communication unit that communicates with the server device; First storage means for storing a terminal-side communication history including the date and time when communication with the server device is included; and the terminal-side communication history stored by the first storage means is determined by the first communication means. First transmission means for transmitting to the server device, the server device including second communication means for communicating with the information processing terminal, and date and time when the own device communicated with the information processing terminal. Second storage means for storing the server side communication history, the date and time included in the terminal side communication history received by the second communication means, and the server side stored by the second storage means in communication history Based on the degree of coincidence including the difference between Murrell date, comprising determination means for determining the presence or absence of unauthorized communication, and processing means for performing processing according to the result of determination by the determination means for its own device, the determination And means for illegal communication if the difference exceeds a determined value and the date and time when the information processing terminal communicates with the server device is earlier than the date and time when the information processing terminal is activated. An information processing system for confirming whether or not the communication is valid for a user of the information processing terminal and / or a user of the server device without determining that there is I will provide a.

  Also, in a preferred aspect of the present invention, the determination means communicates with the server device within a determined period based on the terminal side communication history received by the second communication means. The number of times of performing is specified, and the number of times that the server device has communicated with the information processing terminal within a predetermined period is specified based on the server-side communication history stored in the second storage unit. When the difference between the specified times exceeds a predetermined value, it may be determined that there has been an unauthorized communication.

  In a preferred aspect of the present invention, the determination unit may determine whether there is an unauthorized communication only when the information processing terminal requests a predetermined process from the server device.

  Also, in a preferred aspect of the present invention, the processing means, when the determination means determines that there has been an unauthorized communication, to the information processing terminal and / or the server device, You may make it alert | report that there existed.

  Also, in a preferred aspect of the present invention, the processing means issues new authentication information to the information processing terminal when the determination means determines that there has been unauthorized communication, and the first storage The means and the second storage means may store a communication history including the new authentication information.

The present invention includes an information processing terminal and a server device that performs a process requested by the information processing terminal. The server device includes a second communication unit that communicates with the information processing terminal; A second storage unit that stores a server-side communication history including a date and time of communication with the information processing terminal; and the server communication history stored in the second storage unit by the second communication unit. A second transmission means for transmitting to the information processing terminal, wherein the information processing terminal includes a first communication means for communicating with the server device, and a date and time when the own terminal communicated with the server device. first storage means, the time and date contained in the server-side communication history received by the first communication unit, wherein the terminals stored by the first storage means for storing the terminal side communication histories Side communication Based on the degree of coincidence including the difference between the date and time included in the gravel, comprising determination means for determining the presence or absence of unauthorized communication, and processing means for performing processing according to the result of determination by the determination means to said server device In the case where the difference exceeds the determined value, and the date and time when the information processing terminal communicates with the server device is earlier than the date and time when the information processing terminal is activated, Checking whether the communication is legitimate with the user of the information processing terminal and / or the user of the server device without determining that there has been unauthorized communication. An information processing system is provided.

  In a preferred aspect of the present invention, the information processing terminal converts all or part of the terminal side communication history stored in the first storage means into a predetermined type of image by a predetermined process. Means and display means for displaying the image converted by the converting means.

  According to the present invention, unauthorized use of a service by a third party who does not have the authority to receive the service can be suppressed.

1 is a diagram illustrating an overall configuration of an information processing system. It is a block diagram which shows the hardware constitutions of an information processing terminal. It is a figure which shows the content memorize | stored in the IC card. It is a figure which illustrates the content described in the terminal side log | history information table. It is a block diagram which shows the hardware constitutions of a server apparatus. It is a figure which illustrates the content described in the contractor information table. It is a figure which illustrates the content described in the server side log | history information table. It is a flowchart which shows the operation | movement of the initial setting of an information processing terminal. It is a sequence diagram which shows the operation | movement of the authentication of a server apparatus. It is a sequence diagram which shows the operation | movement of the authentication of a server apparatus.

(1) First Embodiment (1-1) Configuration FIG. 1 is a diagram illustrating an overall configuration of an information processing system 1.
The information processing system 1 includes an information processing terminal 10 and a server device 20. The information processing terminal 10 receives information via a communication network 30 such as a mobile phone, a smartphone, a wireless local area network (LAN) terminal, a personal digital assistant (PDA), a portable music player, a portable game machine, or a personal computer. Any device that performs transmission and reception may be used, but FIG. 1 shows an example of a mobile phone. The information processing terminal 10 and the server device 20 are connected via a communication network 30. The communication network 30 is a mobile phone network including a radio base station and an exchange station (not shown), and the information processing terminal 10 and the server device 20 communicate via the communication network 30. The server device 20 provides a service such as distributing contents such as music and images to the information terminal device via the communication network 30. At this time, the server device 20 provides the service only to those who have a contract for using the service with the service provider. In the following description, a person who tries to use the service of the server device 20 is a user, a person who has a contract for using the service is a contractor, and a contract for using the service among the above-mentioned users. Those who do not conclude are referred to as non-contractors.

FIG. 2 is a block diagram illustrating a hardware configuration of the information processing terminal 10.
The information processing terminal 10 includes a control unit 110, a storage unit 120, a communication unit 130, an operation unit 140, a display unit 150, a voice input / output unit 160, and a contractor information acquisition unit 170. The control unit 110 includes a processing unit such as a CPU (Central Processing Unit), various memories such as a ROM (Read Only Memory) and a RAM (Random Access Memory), and a timer as a time measuring means. The CPU of the control unit 110 is an example of a processing unit. The computer program stored in the ROM or the storage unit 120 is read into the RAM and executed to control each unit of the information processing terminal 10. I / O function, call function, communication function, display function, etc. are realized. The RAM of the control unit 110 is a volatile storage unit composed of semiconductor elements, and serves as a work area when the CPU performs processing. The communication unit 130 includes a communication antenna and a communication circuit, and is a first communication unit that transmits and receives data via the communication network 30. The operation unit 140 is an operation unit that receives a user's operation and includes a plurality of operators such as a numeric keypad, a speech key, an end key, a clear key, a cursor key, and a power key. An operation signal corresponding to the operation is received and supplied to the control unit 110. The control unit 110 determines the content of the operation based on the operation signal, and performs processing according to the content of the operation. By operating the keys of the operation unit 140, the user can instruct the information processing terminal 10 to perform various processes such as a call instruction, character input, menu selection, or various settings. . The display unit 150 includes a liquid crystal display and a video random access memory (VRAM), and displays an image corresponding to the image data supplied from the control unit 110. The sound input / output unit 160 includes sound collection means such as a microphone, sound emission means such as a speaker, and sound processing circuits such as a DSP (Digital Signal Processor).

  The contractor information acquisition unit 170 includes a memory controller having a structure in which an IC (Integrated Circuit) card 171 called a SIM (Subscriber Identity Module Card) or a UIM (User Identity Module Card) can be attached to and detached from the IC card 171. Read the stored information. This IC card 171 incorporates an integrated circuit for storing and calculating information. For example, as shown in FIG. 3, the user of the information processing terminal 10 called IMSI (International Mobile Subscriber Identity) is used. UIM identification number for uniquely identifying the service provider, for example, the contractor number for uniquely identifying the service contractor, and the date and time when the information processing terminal 10 was most recently activated (hereinafter referred to as the activation date and time) Is remembered. In the example shown in the figure, the IC card 171 stores “0009” as the UIM identification number, “USER09” as the contractor number, and “20091128000000” meaning midnight on November 28, 2009 as the activation date and time. ing. The contractor number and the activation date and time stored in the IC card 171 can be rewritten according to the instruction from the control unit 110, but the UIM identification number cannot be rewritten according to the instruction from the control unit 110. In addition, the IC card 171 stores a contractor number when a user enters a contract for using the service. Note that the storage unit 120 instead of the IC card 171 may store the contractor number and the activation date and time.

  In FIG. 2, the storage unit 120 is a nonvolatile first storage unit that stores information such as an EEPROM (Electrically Erasable Programmable Read Only Memory) and a flash memory, and stores music, images, and the like acquired from the server device 20. In addition to the contents, a terminal-side history information table 121 in which information on the history of services requested to the server device 20 (hereinafter referred to as terminal-side history information) is described is stored. In the terminal side history information table 121, as shown in FIG. 4, the UIM identification number read from the memory of the control unit 110 when requesting the service to the server device 20, the contractor number, and the requested service are identified. The service number that is identification information to be transmitted, the request transmission date and time that is the date and time when the message requesting the service is transmitted, and the activation date and time are described in association with each other.

Next, FIG. 5 is a block diagram illustrating a hardware configuration of the server device 20.
The server device 20 includes a control unit 210, a storage unit 220, and a communication unit 230. The control unit 210 is an example of a processing unit, and includes a processing unit such as a CPU (Central Processing Unit), various memories such as a ROM (Read Only Memory) and a RAM (Random Access Memory), and a timer as a timing unit. It has. The CPU reads out a computer program stored in the ROM or the storage unit 220, loads it into the RAM, and executes it to control each unit of the server device 20 to realize various services such as content distribution, for example. It is determined whether or not the user who requested the service is a contractor (hereinafter referred to as authentication). The RAM of the control unit 210 is a volatile storage unit composed of semiconductor elements, and serves as a work area when the CPU performs processing. The communication unit 230 is an example of a second communication unit, includes a communication circuit that performs communication, and transmits and receives information via the communication network 30.

  The storage unit 220 is an example of a second storage unit, and is a non-volatile storage unit that stores information such as a hard disk, and stores content such as music and images. Further, the storage unit 220 includes a contractor information table 222 in which information about contractors for authenticating users (hereinafter referred to as contractor information) is described, and a history of services requested in the past (hereinafter referred to as contractor information). , Referred to as server-side history information) is stored. In the contractor information table 222, as shown in FIG. 6, a contractor number for uniquely identifying a contractor as contractor information and a password corresponding to the contractor number are described in association with each other. . As shown in FIG. 7, the server-side history information table 221 includes, as server-side history information, a contractor number transmitted from the information processing terminal 10 at the time of a service request, a service number of the requested service, a service The request reception date and time, which is the date and time when the message requesting the request is received, and the start date and time are described in association with each other.

(1-2) Operation First, with reference to FIG. 8, an initial setting process at the time of power-on in the information processing terminal 10 will be described.
When the power is turned on (step S901; YES), the control unit 110 of the information processing terminal 10 acquires the current date and time from its own timer and stores it as the startup date and time in the IC card 171 of the contractor information acquisition unit 170 ( Step S902). For example, as illustrated in FIG. 3, the control unit 110 stores the date and time “2009128000000” acquired from the timer in the IC card 171 as the activation date and time. Next, the control unit 110 reads the UIM identification number, the contractor number, and the activation date and time stored in the IC card 171 and stores them in its own memory (step S903). For example, as shown in FIG. 3, the control unit 110 receives the UIM identification number “0009” read from the IC card 171, the contractor number “USER09”, and the activation date and time “200911128000000” acquired from the timer. Store in memory. Thereafter, the control unit 110 continues to store the UIM identification number, the contractor number, and the activation date and time until the power is turned off.

Next, processing when the user uses the service provided by the server device 20 using the information processing terminal 10 will be described with reference to the sequence shown in FIG.
The user operates the operation unit 140 of the information processing terminal 10 to cause the control unit 110 of the information processing terminal 10 to execute a computer program for requesting a service to the server device 20. The control unit 110 executes the computer program and causes the display unit 150 to display a screen for requesting a service from the server device 20. This screen includes a menu including guidance for various services, and the user inputs a password corresponding to the contractor number and designates the service number of the desired service according to the guidance of this menu ( Step S1101). For example, it is assumed that the contractor inputs “PASS09” as the password and designates “service 2” as the service number. In the case where the contractor inputs a contractor number and a password when using the service and performs authentication, the IC card 171 and the control unit 110 may not store the contractor number and the password. Good. When the service is designated, the control unit 110 obtains the current date and time (that is, the request transmission date and time) from the timer and stores it in the memory (step S1102). Here, for example, it is assumed that the control unit 110 acquires and stores in the memory, for example, “2009129129530” as the request transmission date and time.

  Next, the control unit 110 reads terminal-side history information corresponding to the latest request transmission date and time from the terminal-side history information table 121 and temporarily stores it in the memory (step S1103). For example, it is assumed that the control unit 11 stores the terminal-side history information corresponding to the row 42 in FIG. 4 that is the latest request transmission date and time at the time of the processing in step S1103. Then, the control unit 110 transmits the UIM identification number, the contractor number, the password, the service number, and the terminal side history information stored in its own memory from the communication unit 130 to the server device 20 as a service request message. Transmit (step S1104). Thereafter, the control unit 110 stores the service number of the service designated by the user, the UIM identification number stored in the memory when the power is turned on, the contractor number, the activation date and time, and the memory in step S1102. The requested transmission date and time is described in the terminal side history information table 121 (step S1105). As a result, the contents of the terminal side history information table 121 are as shown in FIG. 4 (line 43 in FIG. 4).

  On the other hand, when receiving the service request message (step S1106), the control unit 210 of the server device 20 acquires the current date and time (request received date and time) from its own timer and stores it in its own memory (step S1107). Here, it is assumed that the control unit 210 obtains, for example, “2009129129530” as the request reception date and stores it in its own memory. Next, the control unit 210 reads the contractor information from the contractor information table 222 and temporarily stores it in its own memory (step S1108), and the contract received from the information processing terminal 10 in the contractor information. It is determined whether there is a record corresponding to the user number “USER09” and the password “PASS09” (step S1109). Thereby, the control part 210 can confirm whether the contractor who concluded the contract for using a service is requesting the service. This confirmation is referred to as first authentication.

  Here, when the control unit 210 determines that the information corresponding to the contractor number and password received from the information processing terminal 10 is not described in the contractor information described in the contractor information table 222. (Step S1109; NO), information indicating that the first authentication has failed is transmitted to the information processing terminal 10. In response to this, the control unit 110 of the information processing terminal 10 displays that the service cannot be received (step S1115).

  On the other hand, when the control unit 210 determines that the contractor information described in the contractor information table 222 includes a record corresponding to the contractor number and password received from the information processing terminal 10. (Step S1109; YES), it is determined that the first authentication is successful. Then, the control unit 210 reads server-side history information corresponding to the contractor number from the server-side history information table 221 and temporarily stores it in its own memory (step S1110). In the example illustrated in FIG. 7, the control unit 210 reads server-side history information describing the latest request reception date and stores it in its own memory (at this time, the row 73 is the latest).

  The control unit 210 is an example of a determination unit, and compares the contents of the terminal-side history information received in the process of step S1106 with the contents of the server-side history information read out in the process of step S1110. Is authenticated (step S1111). Here, the control unit 210 of the server device 20 determines that there is no difference only when the contractor number, the service number, and the activation date and time are completely the same, but allows a difference between the request transmission date and the request reception date and time. A range is determined in advance, and it is determined that there is a difference only when the difference is larger than the range. This is because the time required for transmission / reception changes depending on the volume of various information transmitted / received between the information processing terminal 10 and the server device 20 and the volume of traffic on the communication network 30, so that the change is allowed.

  When the control unit 210 determines that there is no difference between the terminal-side history information and the server-side history information (step S1111; YES), the service number requested by the service request message received in step S1106, and the service request The request reception date and time, which is the date and time when the message is received, and the contractor number and activation date and time included in the service request message are described as server side history information in the server side history information table 221 (step S1112). As a result, the contents of the server side history information table 221 are as shown in FIG. 7 (row 74 in FIG. 7). The control unit 210 does not describe the UIM identification number described in the service request message in the server-side history information table 221 in order to prevent leakage of the UIM identification number that is the personal information of the user. Then, the control unit 210 provides a service in response to a request for content distribution or the like. As an example of providing a service in response to a request, the control unit 210 transmits a music data file to the information processing terminal 10 via the communication unit 230 (step S1113). When receiving the result of the service request (step S1114), the control unit 110 of the information processing terminal 10 displays the result on the display unit 150 (step S1115).

  On the other hand, when the control unit 210 of the server device 20 determines that there is a difference between the terminal-side history information and the server-side history information (step S1111; NO), the second authentication for the information processing terminal 10 fails. Send information to the effect. In response to this, the control unit 110 of the information processing terminal 10 displays that the service cannot be received (step S1115).

  Here, a case where there is a difference between the terminal-side history information and the server-side history information will be described. A possible cause of the difference between the terminal-side history information and the server-side history information is that a non-contractor impersonates a contractor and tries to use a service provided by the server device 20 from the information processing terminal 10. In this case, for example, it is assumed that the non-contractor can steal the contractor's contractor number and password by a method such as stealing when entering the contractor number. Then, it is assumed that the non-contractor attempts to use the service provided by the server device 20 from the information processing terminal 10 owned by the non-contractor. In this case, the non-contractor can easily bypass the first authentication if he / she has the stolen contractor number and password. However, even if the non-contractor in this embodiment can steal the contractor number and the password, it is not easy to bypass the second authentication. This is because when the control unit 210 of the server device 20 matches the processing history stored in each of the information processing terminal 10 and the server device, particularly the request transmission time and the request reception time, as the second authentication. Only by judging that the authentication was successful. More specifically, the terminal-side history information and the server-side history information are added to the terminal-side history information table 121 and the server-side history information table 221 every time the service is used by the contractor. Therefore, even if the non-contractor tries to use the service provided by the server device 20 from the information processing terminal 10 owned by the non-contractor, the information processing terminal 10 of the non-contractor has the server side history information table 221 Since the terminal-side history information table 121 that can match the contents is not stored, the second authentication cannot be successful. Further, for example, it is assumed that a non-contractor can illegally copy the terminal-side history information to the terminal-side history information table 121 of his / her information processing terminal 10 by some method. However, when the contractor performs a process of adding the terminal-side history information and the server-side history information while copying the history, it is no longer possible to impersonate. Even if a non-contractor illegally steals terminal-side history information and illegally uses the service while maintaining consistency between the terminal-side history information and the server-side history information, the contractor uses the service. At this time, since the contractor himself / herself cannot use the service, the contractor can determine that an unauthorized process has been performed by the third party.

(2) Second Embodiment Next, an information processing system according to a second embodiment of the present invention will be described.
In the first embodiment described above, the server device 20 performs authentication. However, in the second embodiment, the information processing terminal 10 performs authentication. Since the configuration of the first embodiment and the configuration of the second embodiment are common, the description of the points that are common to the first embodiment will be omitted, and the differences related to the authentication operation will be mainly described below.
(2-1) Operation When the power is turned on, the control unit 110 of the information processing terminal 10 acquires the current date and time from its own timer, and stores it in the IC card 171 of the contractor information acquisition unit 170 as the activation date and time. For example, as illustrated in FIG. 3, the control unit 110 stores the date and time “2009128000000” acquired from the timer in the IC card 171 as the activation date and time. Next, the control unit 110 reads the UIM identification information “0009”, the contractor number “USER09”, and the activation date and time “200911128000000” stored in the IC card 171 and stores them in its own memory. Thereafter, until the power is turned off, the control unit 110 continues to store the UIM identification information, the contractor number, and the activation date and time.

Next, processing when the user uses the service provided by the server device 20 using the information processing terminal 10 will be described with reference to the sequence shown in FIG.
The user operates the operation unit 140 of the information processing terminal 10 to cause the control unit 110 of the information processing terminal 10 to execute a computer program for requesting a service to the server device 20. The control unit 110 executes the computer program and causes the display unit 150 to display a screen for requesting a service from the server device 20. This screen includes a menu including guidance for various services, and the user inputs a password corresponding to the contractor number and designates the service number of the desired service according to the guidance of this menu. When the service is specified (step S1201), the control unit 110 acquires the current date and time (that is, the request transmission date and time) from the timer and stores it in the memory (step S1202). Here, it is assumed that the control unit 110 obtains, for example, “2009912192530” as the request transmission date and stores it in the memory.

  Next, the control unit 110 reads terminal-side history information corresponding to the latest request transmission date / time from the terminal-side history information table 121 (at this time, line 43 is the latest) and temporarily stores it in the memory ( Step S1203). Then, the control unit 110 transmits, from the communication unit 130 to the server device 20, a service request message for requesting a service for the server device 20 including the contractor number stored in its own memory and the password (step). S1204). Thereafter, the control unit 110 stores the UIM identification information, the contractor number, the start date and time, the service number of the service designated by the user, and the service number specified by the user in the memory at the time of power-on. The requested transmission date and time is described in the terminal side history information table 121 (step S1205). As a result, the contents of the terminal side history information table 121 are as shown in FIG. 4 (line 43 in FIG. 4).

  On the other hand, when receiving the service request message (step S1206), the control unit 210 of the server device 20 acquires the current date and time (request received date and time) from its own timer and stores it in its own memory (step S1207). Here, it is assumed that the control unit 210 obtains, for example, “2009129129530” as the request reception date and stores it in its own memory. Next, the control unit 210 reads the contractor information from the contractor information table 222 and temporarily stores it in its own memory (step S1208), and the contract received from the information processing terminal 10 in the contractor information. It is determined whether there is a record corresponding to the user number “USER09” and the password “PASS09” (step S1209). Thereby, the control part 210 can confirm whether the contractor who concluded the contract for using a service is requesting the service. This confirmation is referred to as first authentication.

  Here, when the control unit 210 determines that there is no record corresponding to the contractor number and password received from the information processing terminal 10 in the contractor information described in the contractor information table 222. (Step S1209; NO), information indicating that the first authentication has failed is transmitted to the information processing terminal 10. In response to this, the control unit 110 of the information processing terminal 10 displays that the service cannot be received.

  On the other hand, the control unit 210 is an example of a determination unit, and the contractor information described in the contractor information table 222 includes a record corresponding to the contractor number and password received from the information processing terminal 10. If it is determined that the first authentication is successful (step S1209; YES), it is determined that the first authentication is successful. Then, the control unit 210 reads server-side history information corresponding to the contractor number from the server-side history information table 221 and temporarily stores it in its own memory (step S1210). For example, in FIG. 7, it is assumed that the control unit 210 reads server-side history information describing the latest request reception date and time (row 73 is the latest at this time) and stores it in its own memory. And the control part 210 transmits the server side log | history information read by the process of step S1210 from the communication part 230 to the information processing terminal 10 (step S1211).

  On the other hand, when receiving the server-side history information (step S1212), the control unit 110 of the information processing terminal 10 receives the content of the terminal-side history information stored in its own memory in the process of step S1203 and the process of step S1212. The second authentication is performed by comparing the contents of the server-side history information (step S1213). Here, the control unit 110 of the information processing terminal 10 determines that there is no difference only when the contractor number, the service number, and the activation date and time are completely the same, but the difference is determined between the request transmission date and the request reception date and time. A permissible range is determined in advance, and it is determined that there is a difference only when the difference is larger than the range. This is because the time required for transmission / reception changes depending on the volume of various information transmitted / received between the information processing terminal 10 and the server device 20 and the volume of traffic on the communication network 30, so that the change is allowed.

  When the control unit 110 of the information processing terminal 10 determines that there is no difference between the terminal-side history information and the server-side history information (step S1213; YES), the server device 20 sends a message indicating that the second authentication has been successful. (Step S1214). When the control unit 210 of the server device 20 receives the message indicating that the second authentication is successful, the service number of the service requested by the service request message received in step S1206 and the date and time when the service request message is received. A certain request reception date and time, a contractor number and an activation date and time included in the service request message are described in the server side history information table 221 as server side history information (step S1215). As a result, the contents of the server side history information table 221 are as shown in FIG. 7 (row 74 in FIG. 7). Then, the control unit 210 provides a service in response to a request for content distribution or the like. As an example of providing a service in response to a request, the control unit 210 transmits a music data file to the information processing terminal 10 through the communication unit 230 (step S1216). When receiving the result of the service request (step S1217), the control unit 110 of the information processing terminal 10 displays the result on the display unit 150 (step S1218).

  On the other hand, when the control unit 110 of the information processing terminal 10 determines that there is a difference between the terminal-side history information and the server-side history information (step S1213; NO), information indicating that the display unit 150 cannot receive the service. Is displayed (step S1218).

(3) Modifications The contents of the above-described embodiment can be modified as follows.
(3-1) Modification 1
In the above-described embodiment, the contents included in the terminal-side history information and the server-side history information are not limited to the information exemplified in the embodiment. Examples of terminal-side history information and server-side history information include, for example, those related to the start and end processing of a computer program, in the case of a folded information processing terminal, those related to opening / closing operations of the folded portion, Related to pressing operations, if the information processing terminal is a telephone, related to outgoing or incoming call processing, related to e-mail transmission / reception processing, related to music or image media data playback processing, In the history of operations and processes performed on the information processing terminal, such as those related to the imaging processing, or if the information processing terminal has a television function, Anything can be considered. Further, the definition of these terminal-side history information and server-side history information may be changed, added, or deleted by the user.

(3-2) Modification 2
In the embodiment described above, the control unit 210 and the control unit 110 (hereinafter, collectively referred to as a control unit when there is no need to distinguish between them) will be described with the contents of the terminal-side history information and the server-side history information. A second authentication was performed by comparing each. However, the control unit does not compare the contents of the terminal-side history information and the server-side history information, but performs the second authentication based on the number of times that the information processing terminal 10 requests the server device 20 for service within a certain predetermined period. May be performed. For example, at the time of requesting a service, the control unit 110 of the information processing terminal 10 stores the number of records that fall within a predetermined range with a request transmission date and time of the terminal-side history information described in the terminal-side history information table 121. Transmit to device 20. Then, the control unit 210 of the server device 20 determines the number of received records and the number of records that fall within a predetermined range with the request transmission date and time of the server-side history information described in the server-side history information table 221. In comparison, if the number of records is the same or the difference is within a predetermined number, the second authentication may be permitted.

(3-3) Modification 3
In the embodiment described above, the control unit may determine whether there is unauthorized communication only in accordance with a specific service number. For example, in the first embodiment, it is assumed that the service 1 is stored in the storage unit 220 of the server device 20 as a service number serving as a reference for determining the presence or absence of unauthorized communication. In this case, based on the service number stored in the storage unit 220, the control unit 210 determines whether there is an unauthorized communication with respect to the service request for the service 1, and responds to the service request for a service other than the service 1. Therefore, it is not necessary to make a determination as to whether or not there is unauthorized communication.

(3-4) Modification 4
Assume that the contractor replaces the information processing terminal 10 owned by the contractor with a newly purchased information processing terminal 10. In this case, since the terminal side history information described in the terminal side history information table 121 of the new information processing terminal 10 is different from the terminal side history information described in the terminal side history information table 121 of the old information processing terminal 10, In the second authentication, it is determined that it is different from the server-side history information, and the service is not provided as unauthorized access.

  For the purpose of preventing such a situation, for example, when the terminal-side history information and the server-side history information are different, the control unit that performs the second authentication performs the activation date and time of the information processing terminal 10 and the service request message. When the date and time (request transmission date and time or request reception date and time) transmitted and received are compared, and the start date and time is newer than the date and time when the service request message is transmitted and received, there is a possibility that the information processing terminal 10 has been replaced. The user may be asked to confirm whether or not the information processing terminal 10 has been replaced without immediately generating an error. As a confirmation method for this user, when it is determined that the information processing terminal 10 may be exchanged, the control unit that performs the second authentication gives the contractor the user of the terminal. It may be requested to input information that can only be known, or the date and time when the terminal was purchased may be confirmed from a purchase history or the like. This purchase history may be stored in any device of the information processing system 1, or may be stored in a system associated with the information processing system 1.

Further, the control unit 110 of the information processing terminal 10 transfers the terminal side history information described in the terminal side history information table 121 from the old information processing terminal 10 to the new information processing terminal 10 only when the information processing terminal 10 is exchanged. You may provide the function for taking over. In the case of providing the function for taking over, the user can record the terminal-side history described in the terminal-side history information table 121 of the old information processing terminal 10 and the terminal-side history information table 121 of the new information processing terminal 10, respectively. It is necessary to confirm the difference in information contents. The control unit 110 converts all or a part of the information described in the old and new terminal side history information table 121 into a certain easy-to-remember image and displays it in order to reduce the load related to the user confirmation work. You may have the function to do. For example, the control unit 110 determines in advance, for example, 0: mandarin orange, 1: apple, 2: banana, etc. according to the numbers from 0 to 9. And the control part 110 respond | corresponds to the numerical value (in this case 5) obtained by continuing adding each digit of information with many digits, such as starting date / time, which is difficult for a user to confirm a difference until it becomes one digit. The image is converted and displayed on the display unit 150. Since the user can easily identify images such as mandarin oranges and apples rather than information in which numerical values such as the start date and time are arranged, the difference in the contents of the terminal side history information described in the terminal side history information table 121 is confirmed. It becomes easy to do.
The technology for reducing the load related to the confirmation work described above is not only applied to the information described in the old and new terminal-side history information table 121 by the control unit 110 of the information processing terminal 10, but also the server device 20 May be applied to the information described in the server-side history information table 221. In this case, the user can easily confirm the difference between the information described in the server-side history information table 221 and the terminal-side history information table 121, and the user's service from the information described in the various tables. It is possible to prevent the usage status of the user from being seen.

(3-5) Modification 5
In the above-described embodiment, the control unit determines the validity of the information processing terminal 10 using a service request as a trigger. However, the control unit may make a determination on the validity of the information processing terminal 10 at an arbitrary timing. For example, the control unit may perform authentication at a predetermined date and time or for each cycle. The more times the control unit performs authentication, the easier it is to detect a person who uses the information processing system 1 illegally.

(3-6) Modification 6
It is assumed that a contractor uses a service provided by the server device 20 for the first time using his / her information processing terminal 10. In this case, neither the terminal-side history information table 121 of the information processing terminal 10 nor the server-side history information table 221 of the server device 20 describes information for performing the second authentication. Therefore, the control unit 210 of the server device 20 need not perform the second authentication only by the authentication based on the contractor information table 222 only when the service is used for the first time.

(3-7) Modification 7
In the above-described embodiment, the control unit notifies the error at the time of authentication by causing the display unit 150 of the information processing terminal 10 to display an error message and not providing the requested service. However, the method by which the control unit notifies the error is not limited to this. For example, the control unit may notify the user of the information processing terminal 10 by pronunciation, mail, vibration, or the like, or notify the administrator of the server device 20 that there is an unauthorized user. May be.

(3-8) Modification 8
When the second authentication fails due to unauthorized access by a third party, the control unit 210 of the server device 20 provides a service to the user by newly issuing a contractor number and a password. May be.
More specifically, it is assumed that the control unit 210 of the server device 20 detects that the second authentication has failed due to unauthorized access by a third party. The control unit 210 of the server device 20 creates a new contractor number and password by a predetermined algorithm and describes them in the contractor information table 222. And the control part 210 is described with respect to the information processing terminal 10 according to the UIM identification information described in the service request message received from the control part 110 of the information processing terminal 10 and temporarily stored in its own memory. A new contractor number and password are transmitted by a secure communication method such as SMS. In this case, the control unit 210 of the server device 20 not only disables the contractor number and password illegally used by a third party, but also provides a new information to a user illegally used by a third party. Immediately issue contractor number and password as authentication information. That is, information including the contractor number, which is new authentication information, is described as a communication history in the terminal-side history information table 121 of the information processing terminal 10 and the server-side history information table 221 of the server device 20. Accordingly, since there is no difference between the terminal side history information and the server side history information corresponding to the new contractor number, the user can immediately receive the service provided by the server device 20, and the availability is reduced. It is suppressed.
Note that the control unit 210 of the server device 20 may request the user of the information processing terminal 10 to create a new contractor number and password by a secure communication method such as SMS, for example.

(3-9) Modification 9
In the above-described embodiment, the same server device is configured to perform two authentications, the first authentication and the second authentication. However, a plurality of server devices may be configured to share the first authentication and the second authentication. For example, a configuration may be adopted in which a server device that provides a service (referred to as a service server device) performs a first authentication and a dedicated server device that performs a second authentication. For example, it is assumed that the service server apparatus has already started providing a service and a new function for performing the second authentication is added. In this case, when a plurality of server devices share the first authentication and the second authentication, the same server device performs the two authentications of the first authentication and the second authentication. Compared to the case, the range of function correction for the service server apparatus that has already started providing services is limited, and the ease of introduction is enhanced. As an example of increasing ease of introduction, it is possible to avoid a change in communication protocol between the information processing terminal and the service server device.

  DESCRIPTION OF SYMBOLS 1 ... Information processing system, 10 ... Information processing terminal, 110 ... Control part, 120 ... Storage part, 130 ... Communication part, 140 ... Operation part, 150 ... Display part, 151 ... Order screen, 160 ... Voice input / output part, 170 ... contractor information acquisition unit, 20 ... server device, 210 ... control unit, 220 ... storage unit, 230 ... communication unit, 240 ... operation unit, 250 ... display unit, 30 ... communication network.

Claims (7)

An information processing terminal;
A server device that performs processing requested from the information processing terminal,
The information processing terminal
First communication means for communicating with the server device;
First storage means for storing a terminal-side communication history including a date and time when the terminal communicates with the server device;
First transmission means for transmitting the terminal side communication history stored by the first storage means to the server device by the first communication means;
The server device
A second communication means for communicating with the information processing terminal;
Second storage means for storing a server-side communication history including a date and time when the device communicates with the information processing terminal;
Based on the degree of coincidence including the difference between the date and time included in the terminal-side communication history received by the second communication means and the date and time included in the server-side communication history stored by the second storage means Determining means for determining whether there is unauthorized communication with the device;
Processing means for performing processing according to the result of the judgment by the judgment means ,
The determination means includes
If the difference exceeds a determined value and the date and time when the information processing terminal communicates with the server device is earlier than the date and time when the information processing terminal is activated, there is an unauthorized communication. An information processing system for confirming whether communication is valid for a user of the information processing terminal and a user of the server device, or any one of the users without making a determination . Before Symbol determination means,
Based on the terminal side communication history received by the second communication means, the number of times that the information processing terminal has communicated with the server device within a determined period is specified, and the second storage means Based on the stored communication history on the server side, the number of times the server device communicated with the information processing terminal within the determined period is specified, and the difference between the specified times exceeds the determined value. The information processing system according to claim 1, wherein it is determined that there has been unauthorized communication. Before Symbol determination means,
The information processing system according to claim 1 or 2 , wherein the presence or absence of unauthorized communication is determined only when a predetermined process is requested from the information processing terminal to the server device. Before Symbol processing means,
The information processing terminal and / or the server device, when either of the determination means determines that there is an unauthorized communication, notifies the information processing terminal and / or the server device that there is an unauthorized communication. The information processing system according to any one of 1 to 3 . Pre Symbol processing unit, when said determination means determines that there is improper communication issues a new authentication information to the information processing terminal,
It said first storage means and second storage means, the information processing system according to any one of claims 1-4, characterized by storing a history of the communication including the new authentication information. And information processing terminal,
A server device that performs processing requested from the information processing terminal,
The server device
A second communication means for communicating with the information processing terminal;
Second storage means for storing a server-side communication history including a date and time when the device communicates with the information processing terminal;
A second transmission unit configured to transmit the server communication history stored in the second storage unit to the information processing terminal by the second communication unit;
The information processing terminal
First communication means for communicating with the server device;
First storage means for storing a terminal-side communication history including a date and time when the terminal communicates with the server device;
Based on the degree of coincidence including the difference between the date and time included in the server-side communication history received by the first communication unit and the date and time included in the terminal-side communication history stored by the first storage unit Determining means for determining the presence or absence of unauthorized communication with the server device;
Processing means for performing processing according to the result of the judgment by the judgment means ,
The determination means includes
If the difference exceeds a determined value and the date and time when the information processing terminal communicates with the server device is earlier than the date and time when the information processing terminal is activated, there is an unauthorized communication. An information processing system for confirming whether communication is valid for a user of the information processing terminal and a user of the server device, or any one of the users without making a determination . Before Symbol information processing terminal,
Conversion means for converting all or part of the terminal-side communication history stored in the first storage means into a predetermined type of image by a predetermined process;
Display means for displaying the image converted by the conversion means;
The information processing system according to any one of claims 1 to 6 , further comprising:

Images