JP6166212B2 - Communication terminal, membership card and authentication system - Google Patents

Description

  The present invention relates to a communication terminal, a membership card, and an authentication system for accessing a predetermined site.

  Conventionally, there are services provided only to a limited number of users, such as member-only sites or personal pages. When accessing such a site, predetermined authentication is required. For example, an individual is authenticated by entering a unique ID and password for the user, and access to the content is permitted.

  In such a situation, a technique has been proposed in which a communication terminal acquires authentication information from a contactless IC card via a reader / writer and accesses a site (for example, see Patent Documents 1 and 2).

JP 2011-28687 A JP 2013-57988 A

  However, there is a possibility that authentication information is acquired from the IC card by a third-party communication terminal and the site is illegally accessed.

  An object of the present invention is to provide a communication terminal, a membership card, and an authentication system that allow a communication terminal to easily access a specific site and improve the security of authentication.

  The communication terminal according to the present invention is indicated by the URL when the URL and the authentication information are read by the reading unit that reads the URL and the authentication information from the membership card in which the URL and the authentication information are stored. An authentication request unit that accesses a site, transmits the authentication information, and executes an authentication process; and a registration unit that registers the identification information of the own terminal in the site, and the authentication request unit includes the identification information If registered on the site, an authentication process is executed using the registered identification information instead of the authentication information.

  The communication terminal according to the present invention is indicated by the URL when the URL and the authentication information are read by the reading unit that reads the URL and the authentication information from the membership card in which the URL and the authentication information are stored. An authentication request unit that accesses a site, transmits the authentication information, and executes an authentication process; and a registration unit that registers the identification information of the own terminal in the site, and the authentication request unit includes the identification information If registered on the site, an authentication process is executed based on the registered identification information in addition to the authentication information.

  If the identification information of the terminal is different from the identification information registered in the site, the registration unit converts the identification information registered in the site into the identification information of the terminal after successful authentication by the authentication information. It may be updated.

  The reading unit may read the URL and authentication information by short-range wireless communication.

  The reading unit may decrypt the encrypted information read from the member card and obtain the URL and authentication information.

  The membership card according to the present invention stores the URL and authentication information readable by the communication terminal.

  The authentication system according to the present invention stores a URL and authentication information for a communication terminal to access a predetermined site, and reads the URL and authentication information from the membership card to the site indicated by the URL. A communication terminal that accesses and transmits the authentication information; and a management server that authenticates the communication terminal based on the received authentication information, the management server registers identification information of the communication terminal, and After the identification information is registered, the communication terminal is authenticated by the identification information instead of the authentication information.

  The authentication system according to the present invention stores a URL and authentication information for a communication terminal to access a predetermined site, and reads the URL and authentication information from the membership card to the site indicated by the URL. A communication terminal that accesses and transmits the authentication information; and a management server that authenticates the communication terminal based on the received authentication information, the management server registers identification information of the communication terminal, and After the identification information is registered, the communication terminal is authenticated by the identification information in addition to the authentication information.

  According to the present invention, a communication terminal can easily access a specific site, and the security of authentication can be improved.

It is a figure which shows schematic structure of the authentication system which concerns on embodiment. It is a figure which shows the function structure of the authentication system which concerns on embodiment. It is a figure which shows an example of the data for authentication which concerns on embodiment. It is a sequence diagram which shows the process sequence when the communication terminal which concerns on embodiment accesses content for the first time. It is a sequence diagram which shows the 1st example of the process sequence when the communication terminal which concerns on embodiment accesses a content after registration of terminal ID. It is a sequence diagram which shows the 2nd example of the process sequence when the communication terminal which concerns on embodiment accesses a content after registration of terminal ID.

Hereinafter, an example of an embodiment of the present invention will be described.
FIG. 1 is a diagram illustrating a schematic configuration of an authentication system 1 according to the present embodiment.

The authentication system 1 of this embodiment includes a communication terminal 10 operated by a user, a management server 20, and an IC card 30.
The communication terminal 10 is connected to the management server 20 via a predetermined network, and displays a member site requiring user authentication provided by the management server 20. At this time, the communication terminal 10 reads authentication information (for example, ID and password (PW)) from the IC card 30 together with the URL of the access destination, and notifies the management server 20 of it.
Further, the communication terminal 10 notifies the management server 20 of a unique terminal ID for identifying its own terminal and registers it, thereby enabling authentication processing using this terminal ID.

The IC card 30 is a membership card that stores a URL and authentication information that can be read by the communication terminal 10. The IC card 30 corresponds to a predetermined wireless communication protocol such as near field communication (NFC), and stored information is read by the communication terminal 10 corresponding to the protocol.
Here, the URL is for accessing a specific content such as a member-only site or a personal page, and the authentication information is an authentication target such as an ID and a password that are required to be input in order to acquire the content. It is data. Note that at least the authentication information of the URL and the authentication information may be encrypted and stored.

FIG. 2 is a diagram illustrating a functional configuration of the authentication system 1 according to the present embodiment.
The communication terminal 10 includes a reading unit 11, an authentication request unit 12, and a registration unit 13.
The management server 20 includes an authentication processing unit 21, a management unit 22, and a member DB 23.

The reading unit 11 reads the URL and authentication information from the IC card 30 by a predetermined wireless communication protocol.
In addition, when reading the encrypted data from the IC card 30, the reading unit 11 decrypts the encrypted data and acquires the URL and the authentication information.

  When the reading unit 11 reads the URL and the authentication information, the authentication request unit 12 accesses the site indicated by the URL, transmits the authentication information, and causes the management server 20 to execute the authentication process.

The registration unit 13 notifies the management server 20 of the terminal ID (for example, UIM-ID), which is identification information unique to the communication terminal 10, as authentication data for the access destination site and registers it.
Accordingly, when the terminal ID is registered, the authentication request unit 12 causes the registered terminal ID to execute an authentication process instead of the authentication information or in addition to the authentication information.

In addition, when the terminal ID of the communication terminal 10 is different from the registered terminal ID, the registration unit 13 communicates the registered terminal ID when a predetermined condition is satisfied after successful authentication using the authentication information. The terminal ID of the terminal 10 is updated.
The case where a predetermined condition is satisfied is, for example, a case where update permission is set by an authenticated user, or a case where authentication is successful by an alternative authentication unit.

The authentication processing unit 21 performs user authentication of the communication terminal 10 based on the authentication information received from the communication terminal 10.
Moreover, after the terminal ID of the communication terminal 10 is registered, the authentication processing unit 21 authenticates the communication terminal 10 with the terminal ID instead of the authentication information or in addition to the authentication information.

The management unit 22 registers the terminal ID of the communication terminal 10 in the member DB 23.
FIG. 3 is a diagram showing an example of authentication data stored in the member DB 23 according to the present embodiment.
The ID and password of a member who is permitted to acquire specific content are stored in association with the terminal ID of the communication terminal 10 used when the member accesses the site.

  FIG. 4 is a sequence diagram showing a processing procedure when the communication terminal 10 according to the present embodiment accesses content for the first time.

  In step S <b> 1, the communication terminal 10 receives the content URL, the member ID, and the password (PW) from the IC card 30.

  In step S2, the communication terminal 10 starts a browser application in response to the reception of the URL in step S1.

  In step S3, the communication terminal 10 accesses the site indicated by the URL and transmits authentication information (member ID and password) required by the site.

  In step S4, the management server 20 performs an authentication process for the user of the communication terminal 10 based on the received authentication information.

  In step S <b> 5, the management server 20 transmits the page data for the member to the communication terminal 10 that has been successfully authenticated.

  In step S <b> 6, the communication terminal 10 transmits a terminal ID unique to the own terminal to the management server 20.

In step S7, the management server 20 registers the terminal ID received in step S6 in the member DB 23.
The terminal ID of the communication terminal 10 may be transmitted to the management server 20 together with the member ID and password.

  FIG. 5 is a sequence diagram illustrating a first example of a processing procedure when the communication terminal 10 according to the present embodiment accesses the content after registering the terminal ID.

  In step S <b> 11, the communication terminal 10 receives the content URL, the member ID, and the password (PW) from the IC card 30.

  In step S12, the communication terminal 10 activates the browser application in response to the URL received in step S1.

  In step S13, the communication terminal 10 accesses the site indicated by the URL, and transmits authentication information (member ID and password) required by the site and the terminal ID.

  In step S <b> 14, the management server 20 performs an authentication process for the user of the communication terminal 10 based on the received terminal ID or both the authentication information and the terminal ID.

  In step S15, the management server 20 determines whether or not the received terminal ID matches that registered. If this determination is YES, authentication has succeeded, so the process proceeds to step S17. If the determination is NO, the process proceeds to step S16.

  In step S <b> 16, the management server 20 updates the member DB 23 when a predetermined condition is satisfied, such as when update permission is set in advance by an authenticated user, or when authentication is successful by an alternative authentication unit. The terminal ID is updated and the authentication is successful.

  In step S <b> 17, the management server 20 transmits the page data for the member to the communication terminal 10 that has been successfully authenticated.

  FIG. 6 is a sequence diagram illustrating a second example of a processing procedure when the communication terminal 10 according to the present embodiment accesses the content after registering the terminal ID.

  In step S21, the communication terminal 10 starts a browser application based on an instruction input from the user.

  In step S <b> 22, the communication terminal 10 transmits the terminal ID of its own terminal to the management server 20 with access to a specific site.

  In step S23, the management server 20 performs an authentication process for the user of the communication terminal 10 based on the received terminal ID.

  In step S24, the management server 20 transmits the page data for the member to the communication terminal 10 that has been successfully authenticated.

According to the present embodiment, the authentication system 1 allows the communication terminal 10 to easily access a specific site based on the authentication information read from the IC card 30. Furthermore, the authentication system 1 can improve safety by registering the terminal ID of the communication terminal 10 and performing authentication using unique identification information.
At this time, since the communication terminal 10 can read data from the IC card 30 by short-range wireless communication, convenience for the user is improved.

  In addition, when the authentication system 1 performs authentication using the terminal ID, if the terminal ID of the communication terminal 10 is different from the registration information, the registration information can be updated by satisfying a predetermined condition. It can respond to changes and improves convenience.

  The IC card 30 encrypts and stores the authentication information, and the read communication terminal 10 decrypts and uses it. Therefore, the authentication system 1 can improve the safety by using the IC card 30 only in the communication terminal 10 that can perform the decryption process.

  As mentioned above, although embodiment of this invention was described, this invention is not restricted to embodiment mentioned above. Further, the effects described in the present embodiment are merely a list of the most preferable effects resulting from the present invention, and the effects of the present invention are not limited to those described in the present embodiment.

  The authentication method by the authentication system 1 is realized by software. When implemented by software, a program constituting the software is installed in the information processing apparatus (communication terminal 10 and management server 20). These programs may be recorded on a removable medium such as a CD-ROM and distributed to the user, or may be distributed by being downloaded to the user's computer via a network.

DESCRIPTION OF SYMBOLS 1 Authentication system 10 Communication terminal 11 Reading part 12 Authentication request part 13 Registration part 20 Management server 21 Authentication processing part 22 Management part 23 Member DB
30 IC card

Claims (6)

A reading unit that reads the URL and authentication information from the member card storing the URL and authentication information;
When the URL and authentication information are read by the reading unit, an authentication request unit that accesses the site indicated by the URL and transmits the authentication information to execute an authentication process;
A registration unit for registering identification information of the terminal on the site,
When the identification information is registered in the site, the authentication request unit executes an authentication process with the registered identification information instead of the authentication information,
If the identification information of the terminal is different from the identification information registered in the site, the registration unit is set to allow update by an authenticated user after authentication by the authentication information is successful, or substitute A communication terminal that updates the identification information registered in the site to the identification information of its own terminal on the condition that the authentication by the authentication means is successful. A reading unit that reads the URL and authentication information from the member card storing the URL and authentication information;
When the URL and authentication information are read by the reading unit, an authentication request unit that accesses the site indicated by the URL and transmits the authentication information to execute an authentication process;
A registration unit for registering identification information of the terminal on the site,
The authentication request unit, when the identification information is registered in the site, causes an authentication process to be executed by the registered identification information in addition to the authentication information,
If the identification information of the terminal is different from the identification information registered in the site, the registration unit is set to allow update by an authenticated user after authentication by the authentication information is successful, or substitute A communication terminal that updates the identification information registered in the site to the identification information of its own terminal on the condition that the authentication by the authentication means is successful.   The communication terminal according to claim 1, wherein the reading unit reads the URL and authentication information by short-range wireless communication.   The communication terminal according to any one of claims 1 to 3, wherein the reading unit decrypts encrypted information read from the member card and acquires the URL and authentication information. A membership card for storing a URL and authentication information for a communication terminal to access a predetermined site;
When the URL and authentication information are read from the membership card, a communication terminal that accesses the site indicated by the URL and transmits the authentication information;
A management server that authenticates the communication terminal based on the received authentication information,
The management server
Registering the identification information of the communication terminal, and after the identification information is registered, authenticate the communication terminal with the identification information instead of the authentication information,
When the identification information of the communication terminal is different from the registered identification information, after the authentication by the authentication information is successful, the update permission is set by the authenticated user, or the authentication is successful by the alternative authentication means An authentication system that updates the registered identification information to the identification information of the communication terminal on the condition of A membership card for storing a URL and authentication information for a communication terminal to access a predetermined site;
When the URL and authentication information are read from the membership card, a communication terminal that accesses the site indicated by the URL and transmits the authentication information;
A management server that authenticates the communication terminal based on the received authentication information,
The management server
Register the identification information of the communication terminal, and after the identification information is registered, authenticate the communication terminal with the identification information in addition to the authentication information,
When the identification information of the communication terminal is different from the registered identification information, after the authentication by the authentication information is successful, the update permission is set by the authenticated user, or the authentication is successful by the alternative authentication means An authentication system that updates the registered identification information to the identification information of the communication terminal on the condition of

Images