JP5773894B2 - Method and system for relaying authority information between terminals - Google Patents

Description

  The present invention relates to a technique for transferring authority information (for example, an ID (IDentifier) and a password) for accessing a terminal or content between the terminals.

  For example, the following cases are used for transferring authority information for accessing the terminal and contents between terminals.

  FIG. 1 is an explanatory diagram showing an example of transferring authority information between terminals.

According to FIG. 1, the user who possesses each terminal is specifically described.
User A who owns the first terminal: for example, parents and children's family User B who owns the second terminal: for example, their grandparents Then, for example, the following two cases are assumed.

[Case 1] Assume that the grandparents do not know how to use the second terminal they own. At this time, the grandparent may want to accept remote operation (remote control) from the first terminal operated by the parents. In this case, the second terminal operated by the grandparents can transfer authority information that enables access to the second terminal to the first terminal operated by the parents. Accordingly, the first terminal can log in to the second terminal using the received authority information and remotely control the second terminal by the operation of the parents.

[Case 2] It is assumed that the parents may want to show the grandparents the content of the photograph of the single grandchild or plural grandchildren. At this time, the first terminal uploads the content to the content server by the operation of the parents. And the 1st terminal which parents operate can also transfer the authority information which enables access to a part or all of the contents of the contents server to the 2nd terminal which grandparents operate. Thereafter, the second terminal operated by the grandparents transmits a content acquisition request to the content server using the authority information. Accordingly, the grandparents can browse or download the contents of the grandchild's photograph using the second terminal.

Note that “ID and password of B” and “ID and password of A” in FIG. 1 are not the ID and password used for locking the terminal itself, but are, for example, as follows (the same applies hereinafter).
ID and password for B: ID and password for setting remote control authority ID and password for A, password: ID and password for setting content use authority

  In these cases, it is necessary to securely transfer authority information between terminals using some kind of authentication sequence.

  Conventionally, when an image file group having the ownership of a user who operates a first terminal is stored in a server, a technique for accessing a part of the image file to a user who operates another second terminal. Yes (see, for example, Patent Document 1). According to this technique, the user of the first terminal has an album page dedicated to the user, and a password for viewing and downloading is set for each page. The second terminal can browse and acquire (download) the image file by accessing the album page of the server and transmitting a predetermined password.

  Further, there is a technique for remotely operating a device connected to a second telephone terminal from a first telephone terminal (see, for example, Patent Document 2). According to this technique, the second telephone terminal executes an authentication process using the authentication information received from the first telephone terminal after detecting a preset number of calls from the first telephone terminal. Next, the second telephone terminal automatically calls the first telephone terminal to complete the call connection. Thereafter, a control signal is transmitted from the first telephone terminal to the second telephone terminal, and the second telephone terminal controls the device according to the control signal.

  Furthermore, there is a technology for easily transmitting and receiving content between mobile terminals that exist in the vicinity of a mobile terminal such as a smartphone (see, for example, Non-Patent Document 1). Such a program is installed as a smartphone application, and transmits and receives contents such as address book information and images stored in advance. According to this technology, a pair of smartphones that communicate with each other is configured using GPS (Global Positioning System) position information and timing information communicated with a server, and content is transmitted and received between the pairs.

Patent 3918501 JP 2007-81664 A

“Bump”, [online], [Search January 7, 2012], Internet <URL: http://bu.mp/>

  However, according to the technique described in Patent Document 1, a user who operates another second terminal needs to know authority information for the page in advance. Also, the other second terminal needs to acquire authority information for the page in advance from the first terminal by some method.

  According to the technique described in Patent Document 2, the second telephone terminal needs to execute an authentication process based on the number of incoming calls from the first telephone terminal and the authentication information in order to accept the remote operation. For this reason, there is also a problem that the authentication sequence between the first telephone terminal and the second telephone terminal takes processing time.

  According to the technique described in Non-Patent Document 1, since authentication information is not exchanged between smartphones that transmit and receive information, there is a possibility that information is erroneously transmitted and received. Moreover, since it is necessary to communicate with a server via the Internet and to acquire position information by GPS, there is a problem that it cannot be used in a place where a GPS signal cannot be received such as indoors.

  As described above, when the above-described case 1 and case 2 are realized by using the authentication sequence of the prior art, there is a problem that the number of steps of the authentication process is increased and the processing time is required.

  Therefore, an object of the present invention is to provide an authority information relay method and system that can transfer authority information for accessing terminals and contents relatively easily in a one-time manner between terminals.

According to the present invention, a call connection server that establishes a call connection between a first terminal and a second terminal, an authority information relay server that relays authority information between the first terminal and the second terminal, An authority information relay method in a system having
A first step of establishing a call connection between a first terminal and a second terminal via a call connection server;
A second step in which the first terminal transmits a request for requesting the second terminal to the authority information relay server, and the second terminal transmits an acceptance request for the first terminal to the authority information relay server. When,
A third step in which the authority information relay server determines whether or not a time difference between the reception time of the request request and the reception time of the acceptance request is within a predetermined time;
The authority information relay server includes a fourth step of transferring authority information between terminals only when it is determined to be true for the third step.

  According to another embodiment of the authority information relay method of the present invention, with respect to the second step, each request request is received when the authority information relay server receives a plurality of request requests or acceptance requests within a predetermined time. Alternatively, if the source addresses of the acceptance requests are different, it is preferable to discard these requests.

According to another embodiment of the authority information relay method of the present invention,
The request request is a connection request for requesting access to the counterpart terminal , and the acceptance request is a connection acceptance request for accepting access from the counterpart terminal, or
It is also preferable that the request request is a download request request for requesting content download, and the acceptance request is a download acceptance request for accepting content download .

According to another embodiment of the authority information relay method of the present invention,
Regarding the second step, the acceptance request transmitted from the second terminal to the authority information relay server includes the authority information of the second terminal,
Regarding the fourth step, it is also preferable that a request response to the request request is transmitted from the authority information relay server to the first terminal, and the request response includes the authority information of the second terminal.

According to another embodiment of the authority information relay method of the present invention,
Regarding the second step, the request request transmitted from the first terminal to the authority information relay server includes the authority information of the first terminal,
Regarding the fourth step, it is also preferable that an acceptance response to the acceptance request is transmitted from the authority information relay server to the second terminal, and the acceptance information includes the authority information of the first terminal.

According to another embodiment of the authority information relay method of the present invention,
For the first step, the second terminal sends a random password to the authority information relay server,
For the second step,
The acceptance request that the second terminal sends to the authority information relay server includes a random password,
The authority information relay server determines whether or not the random password received in the first step matches the random password received in the second step, and discards the acceptance request if determined to be false. Is also preferable.

According to another embodiment of the authority information relay method of the present invention,
The authority information relay server has registered the account password of the first terminal in advance,
For the second step,
The request that the first terminal sends to the authority information relay server includes an account password,
It is also preferable that the authority information relay server determines whether the account password received in the second step matches the account password registered in advance, and discards the request request when it is determined to be false.

According to another embodiment of the authority information relay method of the present invention,
The terminal is a smartphone with a phone application pre-installed,
Terminal, in conjunction with a telephone application, it is also preferable to commission request or send an acceptance request signal to rights processing application is also pre-installed.

According to the present invention, a call connection server that establishes a call connection between a first terminal and a second terminal, an authority information relay server that relays authority information between the first terminal and the second terminal, A system comprising:
The first terminal has a function of performing call connection via the call connection server, and a function of transmitting a request for requesting the second terminal to the authority information relay server,
The second terminal has a function of performing call connection via the call connection server, and a function of transmitting an acceptance request to the first terminal to the authority information relay server,
The authority information relay server determines whether the time difference between the reception time of the request request and the reception time of the acceptance request is within a predetermined time, and only when the determination is true, the authority information between the terminals It is characterized by transferring.

  According to the authority information relay method and system of the present invention, authority information for accessing terminals and contents can be transferred between terminals relatively easily in a one-time manner.

It is explanatory drawing showing the example which transfers authority information between terminals. It is a system configuration diagram in the present invention. It is a basic sequence diagram in the present invention. It is a sequence diagram when a plurality of request requests or acceptance requests are received by the authority information relay server. FIG. 3 is a first sequence diagram of the present invention in Case 1. FIG. 6 is a second sequence diagram of the present invention in Case 1. It is a sequence diagram of the present invention in Case 2.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 2 is a system configuration diagram according to the present invention.

  According to the system of FIG. 2, the authority information relay server 1 is connected to the Internet. The authority information relay server 1 relays authority information between the first terminal 3A and the second terminal 3B. “Authority information” is authentication information including, for example, an ID (IDentifier) and a password. As in the cases 1 and 2 described above, by using the authority information, the remote terminal can be remotely operated, and the content uploaded by the remote terminal can be accessed.

  In addition, the call connection server 2 establishes a call connection between the first terminal 3A via the first access network and the second terminal 3B via the second access network. The call connection server may be an exchange for a telephone network (including a mobile telephone network) or a SIP (Session Initiation Protocol) server for the Internet.

  The terminal 3 may be a mobile phone or a smartphone (including a tablet terminal) or a personal computer. However, a telephone application (software) for establishing a call connection (session) is installed in advance, or it is necessary for the user to download and install it. As a telephone application, there are, for example, Skype (registered trademark) and LINE (registered trademark) in addition to a standard telephone application preinstalled in a terminal by each communication carrier.

  A content server 4 that stores content uploaded from the terminal 3 is also connected to the Internet. The content uploaded from the first terminal 3A can be accessed from the second terminal 3B.

  FIG. 3 is a basic sequence diagram in the present invention.

(S31) A call connection is established between the first terminal 3A and the second terminal 3B via the call connection server 2. Here, it may be a call (call connection request) from any terminal.

(S32) The first terminal 3A transmits a “request request” for the second terminal 3B to the authority information relay server 1 at the timing of call connection completion. The request request includes information indicating that the first terminal 3A is requesting the second terminal 3B.
Similarly, the second terminal 3B also transmits an “acceptance request” for the first terminal 3A to the authority information relay server 1 at the timing of call connection completion. The acceptance request includes information indicating that the second terminal 3B accepts the request to the first terminal 3A.

  Here, when the authority information relay server 1 receives, for example, the “request request” from the first terminal 3A first, the call connection is made between the first terminal 3A and the second terminal 3B from the request request. Recognize that is complete. Therefore, the authority information relay server 1 waits for an “acceptance request” from the second terminal 3B for a predetermined time. That is, when a request for requesting the second terminal 3B from the first terminal 3A is received, the reception request for the first terminal 3A from the second terminal 3B, which is the opposite, is awaited.

  On the contrary, the authority information relay server 1 waits for the “request request” from the first terminal 3A for a predetermined time when the “acceptance request” is received first from the second terminal 3B, for example. That is, when an acceptance request for the first terminal 3A is received from the second terminal 3B, a request request for the second terminal 3B from the first terminal 3A is reversed.

(S33) The authority information relay server 1 determines whether or not the time difference between the reception time of the “request request” and the reception time of the “acceptance request” is within a predetermined time. Here, by setting the standby time to a predetermined time range (for example, 5 seconds depending on the communication environment), the risk of receiving a “request request” that has been fraudulently received from a malicious third-party terminal is reduced as much as possible. ing. That is, a simple one-time authentication sequence is taken. If the other request / acceptance request is not received within a predetermined time, it is regarded as a failure and the request / acceptance request is discarded.

(S34) Only when the determination in S23 is true, the authority information relay server 1 returns a “request response (success)” indicating that the request is successful to the first terminal 3A, and the second "Acceptance response (success)" indicating that the acceptance was successful is returned to the terminal 3B.

(S35) Thereafter, the second terminal 3B that has received the “acceptance response (success)” transmits authority information accessible to the terminal or content to the authority information relay server 1. The authority information relay server 1 transfers the authority information to the first terminal 3A.
Similarly, the first terminal 3 </ b> A that has received “request response (success)” transmits authority information accessible to the terminal or content to the authority information relay server 1. The authority information relay server 1 transfers the authority information to the second terminal 3B.
Here, the authority information is transmitted in both directions, but of course, the authority information may be transmitted only in one direction.

  FIG. 4 is a sequence diagram when a plurality of request requests or acceptance requests are received by the authority information relay server.

  According to FIG. 4, for S42, the authority information relay server 1 receives two request requests (or two acceptance requests) within a predetermined time. At this time, the source addresses (for example, IP addresses) of the two request requests (or two acceptance requests) may be different. In this case, the received request / acceptance request is discarded, assuming that there is a possibility that there are a mixture of fraudulent requests from malicious third parties. That is, according to the present invention, as in the sequence of FIG. 3 described above, the request received by the right information relay server 1 is only one of “request request” and “acceptance request”.

  In the following, the present invention will be further described assuming Case 1 and Case 2 described above.

[Case 1] The second terminal 3B wants to accept remote operation from the first terminal 3A. Specifically, the grandparents may not know how to use the second terminal they own, This is a case where a remote operation from the first terminal to be operated is desired to be accepted.

  FIG. 5 is a first sequence diagram of the present invention in Case 1.

(S51) The second terminal 3B transmits an inquiry request to the call connection server (for example, the SIP server) 2 in order to obtain the address of the first terminal 3A that is the call destination. In response to this, the call connection server 2 responds with the address of the first terminal 3A. Next, the second terminal 3B transmits a call connection request to the first terminal 3A. Thereby, the call connection is completed between the second terminal 3B and the first terminal 3A.

(S52) Similar to S32 of FIG. 3 described above, the first terminal 3A transmits a “connection request request” for the second terminal 3B to the authority information relay server 1 at the timing of call connection completion. Similarly, the second terminal 3B also transmits a “connection acceptance request” for the first terminal 3A to the authority information relay server 1 at the timing of call connection completion. Here, the connection acceptance request includes authority information (ID and password) that enables access to the second terminal 3B.

(S53) Similar to S33 of FIG. 3 described above, the authority information relay server 1 determines whether or not the time difference between the reception time of the “connection request” and the reception time of the “connection acceptance request” is within a predetermined time. Determine.

(S54) Similar to S34 of FIG. 3 described above, the authority information relay server 1 sends a “connection request” indicating that the request is successful to the first terminal 3A only when it is determined to be true by the determination of S53. Response (success). The connection request response includes authority information that enables access to the second terminal 3B. In addition, a “connection acceptance response (success)” indicating that the acceptance is successful is returned to the second terminal 3B.

(S55) Then, the first terminal 3A uses the authority information included in the connection request response to log in to the second terminal 3B and execute a remote operation by the operation of the parents. For communication between the first terminal 3A and the second terminal 3B, it is preferable to secure a secure communication path obtained by encrypting the communication path using SSL (Secure Socket Layer) or the like.

  FIG. 6 is a second sequence diagram of the present invention in Case 1.

(S60) The authority information relay server 1 registers the account password (ID and password) in the first terminal 3A. After the call connection is completed, the authority information relay server 1 can accept only a request request from a terminal in which an account password is registered.

(S61) In the previous stage of S51 in FIG. 5, the second terminal 3B transmits a call notification including a random password (random number: key) to the authority information relay server 1. The authority information relay server 1 temporarily holds this random password and recognizes that a request will be received from the second terminal 3B after the call connection is completed. Thereafter, similarly to S51 of FIG. 5, the call connection is completed between the second terminal 3B and the first terminal 3A.

(S62) Similar to S52 of FIG. 5 described above, the first terminal 3A transmits a “connection request request” for the second terminal 3B to the authority information relay server 1 at the timing of call connection completion. Here, the connection request request includes the account password (ID and password) of the first terminal 3A.

  Similarly, the second terminal 3B also transmits a “connection acceptance request” for the first terminal 3A to the authority information relay server 1 at the timing of call connection completion. Here, the connection acceptance request includes the random password transmitted in S61 in addition to the authority information (ID and password) that enables access to the second terminal 3B.

(S63) Similar to S53 of FIG. 5 described above, the authority information relay server 1 determines whether or not the time difference between the reception time of the “connection request” and the reception time of the “connection acceptance request” is within a predetermined time. Determine.

  At this time, it is also determined whether or not the random password received in S61 matches the random password included in the connection acceptance request in S63. As a result, it becomes possible to discard the connection acceptance request impersonating the second terminal 3B. Further, it is also determined whether or not the account password of the first terminal 3A that is the transmission source of the connection request request in S63 is registered in advance. As a result, it is possible to discard the connection request request that has been fraudulently transmitted to the first terminal 3A.

(S64) Only when it is determined to be true for all three determinations in S63, the authority information relay server 1 sends a “connection request response (success)” to the first terminal 3A indicating that the request has been successful. Send back. The connection request response includes authority information that enables access to the second terminal 3B. In addition, a “connection acceptance response (success)” indicating that the acceptance is successful is returned to the second terminal 3B.

[Case 2] When the first terminal uploads content to the server and wants the second terminal to access the content. Specifically, the parents show the grandchild's photo content to the grandparents. This is a case where the content uploaded from the content server is accepted for browsing and downloading the content from the second terminal operated by the grandparents.

  The content server 4 is a storage site in the cloud on the Internet, for example. The user of the first terminal 3A has a user account on the storage site and stores content. In such a case, it is assumed that authority information that can access part or all of the content is given to the user of the second terminal 3B who does not have a user account at the storage site.

(S70) The first terminal 3A uploads the content to the content server 4. At this time, the content server 4 returns authority information (ID and password) that enables downloading to the content to the first terminal 3A.

(S71) Thereafter, the first terminal 3A transmits an inquiry request to the call connection server 2 in order to obtain the address of the second terminal 3B as the call destination. On the other hand, the call connection server 2 responds with the address of the second terminal 3B. Next, the first terminal 3A transmits a call connection request to the second terminal 3B. Thereby, the call connection is completed between the first terminal 3A and the second terminal 3B.

(S72) As in S32 of FIG. 3 described above, the first terminal 3A transmits a “download request request” to the second terminal 3B to the authority information relay server 1 at the timing of call connection completion. Here, the download request request includes authority information (ID and password) that enables access to the content of the content server 4. The second terminal 3B also transmits a “download acceptance request” for the first terminal 3A to the authority information relay server 1 at the timing of call connection completion.

(S73) Similar to S33 of FIG. 3 described above, the authority information relay server 1 determines whether the time difference between the reception time of the “download request” and the reception time of the “download acceptance request” is within a predetermined time. Determine.

(S74) Similar to S34 of FIG. 3 described above, the authority information relay server 1 indicates to the second terminal 3B that the request has been successful only when it is determined to be true by the determination of S73. Response (success). The download acceptance response includes authority information that enables access to the content of the content server 4.

(S75) Then, the second terminal 3B transmits a content acquisition request for the content to the content server using the authority information included in the download acceptance response by the operation of the grandparents. Thereby, the content server 4 transmits the content to the second terminal 3B.

  Note that the content server 4 preferably deletes the content itself after the content has been downloaded by the second terminal 3B.

  Here, even in the case of the sequence of FIG. 7 of case 2, the authority information relay server 1 registers the account password (ID and password) in the first terminal 3A, as in S60 of FIG. It is also preferable. Similarly to S61 of FIG. 6, the second terminal 3B may transmit a transmission notification including a random password (random number: key) to the authority information relay server 1. Furthermore, as in S62 of FIG. 6, the second terminal 3B also includes the previously transmitted random password in the “download acceptance request” transmitted to the authority information relay server 1.

  As a result, similarly to S63 in FIG. 6, it is also determined whether or not the random password received in S71 matches the random password included in the connection acceptance request in S73. Further, it is also determined whether or not the account password of the first terminal 3A, which is the transmission source of the download request request in S73, is registered in advance.

  According to the embodiment described above, the relay of authority information between two parties has been described as the minimum unit, but of course, the call connection and the relay of authority information may be performed by three or more parties. For example, when the authority information is relayed between N users, each user may individually execute the processing based on the present invention for the other N-1 users.

  As described above in detail, according to the authority information relay method and system of the present invention, authority information for accessing terminals and contents can be transferred between terminals relatively easily in one time. . According to the present invention, it is possible to relay and transfer authority information in one time at short time intervals with the completion of call connection between terminals as a trigger. Thus, the present invention is not limited to the case 1 and case 2 described above, and can be used for various purposes.

  Various changes, modifications, and omissions of the above-described various embodiments of the present invention can be easily made by those skilled in the art. The above description is merely an example, and is not intended to be restrictive. The invention is limited only as defined in the following claims and the equivalents thereto.

1 authority information relay server 2 call connection server 3 terminal 4 content server

Claims (9)

Authority information in a system having a call connection server that establishes a call connection between a first terminal and a second terminal, and an authority information relay server that relays authority information between the first terminal and the second terminal A relay method,
A first step of establishing a call connection between the first terminal and the second terminal via the call connection server;
The first terminal transmits a request for requesting the second terminal to the authority information relay server, and the second terminal transmits an acceptance request for the first terminal to the authority information relay server. And the steps
A third step in which the authority information relay server determines whether or not a time difference between a reception time of the request request and a reception time of the acceptance request is within a predetermined time;
The authority information relay server includes a fourth step of transferring authority information between terminals only when it is determined to be true in the third step.   Regarding the second step, when the authority information relay server receives a plurality of the request requests or the acceptance requests within the predetermined time, the source addresses of the request requests or the acceptance requests are different. The authority information relay method according to claim 1, wherein these requests are discarded. The request request is a connection request request for requesting access to the counterpart terminal , and the acceptance request is a connection acceptance request for accepting access from the counterpart terminal, or
The authority according to claim 1 or 2, wherein the request request is a download request request for requesting content download, and the acceptance request is a download acceptance request for accepting content download. Information relay method. Regarding the second step, the acceptance request transmitted from the second terminal to the authority information relay server includes the authority information of the second terminal,
Regarding the fourth step, a request response to the request request is transmitted from the authority information relay server to the first terminal, and the request response includes the authority information of the second terminal. The authority information relay method according to any one of claims 1 to 3. Regarding the second step, the request request transmitted from the first terminal to the authority information relay server includes the authority information of the first terminal,
In the fourth step, an acceptance response to the acceptance request is transmitted from the authority information relay server to the second terminal, and the acceptance response includes the authority information of the first terminal. The authority information relay method according to any one of claims 1 to 3. For the first step, the second terminal sends a random password to the authority information relay server,
For the second step,
The acceptance request transmitted by the second terminal to the authority information relay server includes the random password,
The authority information relay server determines whether the random password received in the first step matches the random password received in the second step, and discards the acceptance request if it is determined to be false. 6. The authority information relay method according to claim 1, wherein the authority information relay method is performed. The authority information relay server has registered in advance the account password of the first terminal,
For the second step,
The request request transmitted from the first terminal to the authority information relay server includes the account password,
The authority information relay server determines whether or not the account password received in the second step matches the account password registered in advance, and discards the request request if determined to be false. The authority information relay method according to any one of claims 1 to 6, characterized in that: The terminal is a smartphone, and a telephone application is installed in advance,
The terminal, in cooperation with said telephone application, according to any one of claims 1 to 7, characterized in that said are commission request or is also pre-installed rights processing application that sends the acceptance request Authority information relay method. A system having a call connection server that establishes a call connection between a first terminal and a second terminal, and an authority information relay server that relays authority information between the first terminal and the second terminal. ,
The first terminal has a function of performing a call connection via the call connection server, and a function of transmitting a request for the second terminal to the authority information relay server,
The second terminal has a function of performing call connection via the call connection server, and a function of transmitting an acceptance request to the first terminal to the authority information relay server,
The authority information relay server determines whether or not a time difference between the reception time of the request request and the reception time of the acceptance request is within a predetermined time, and only when it is determined to be true by the determination A system for relaying authority information, characterized by transferring authority information using

Images