JP7038882B1 - Authentication information management device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication information management device and a program in consideration of authentication information management over the entire life of a user. SOLUTION: A request for authentication processing is accepted together with information for identifying a user, authentication processing is performed based on the authentication information of the user specified by the accepted information, and the user database is assisted in association with the information for identifying the user. When the information that identifies the person is registered, the assistant of the user specified by the information executes a predetermined assisting process, and at this time, the attribute information of the user to be assisted is referred to and the reference is made. It is an authentication information management device that determines the necessity of assistive processing based on the attribute information provided. [Selection diagram] Fig. 1

Description

The present invention relates to an authentication information management device and a program for managing authentication information.

In recent years, processing using information devices has been performed in various fields such as purchase of personal goods, bank settlement, and various contracts. Against this background, minors and the elderly may suffer damage by mistake or by fraudulent acts. Therefore, for example, when managing payment accounts, a technology that prepares teenage accounts, children's accounts, etc. as account styles, selects the account style according to maturity and age, and sets the security level accordingly is considered. (Patent Document 1).

Japanese Unexamined Patent Publication No. 2016-029592

In these technologies, as a method of ensuring security, for example, in the case of a service targeting a child, the parent's account is set together with the child's account and associated with each other so that the parent can monitor the child's service usage. Things are known.

However, these conventional techniques take into account the need for assistance throughout the life of a person who grows up from an early age, becomes independent as an adult, and then reaches old age, or changes in the mode of assistance to be performed. Not. Also, the situation of each individual is not taken into consideration.

For example, in the case of an elderly person, when it becomes inconvenient to manage the family, the person in charge of the welfare service may take turns to assist the family. In addition, there may be cases where guardianship is necessary even for adults.

The present invention has been made in view of such circumstances, and one of the objects thereof is to provide an authentication information management device and a program in consideration of authentication information management over the entire life of the user.

One aspect of the present invention that solves the problems of the above-mentioned conventional example is an authentication information management device that manages user authentication information, and is information that identifies the user, user attribute information, and user's authentication information for each user. An access means to access a user database that can be associated and held with authentication information and information that identifies the user's assistant, and accepts a request for authentication processing together with information that identifies the user, and responds to the request. When the authentication process based on the authentication information of the user specified by the received information is performed and the information for identifying the assistant is registered in the user database in association with the information for identifying the user, the information is specified. In the assist processing by the authentication processing means, which includes an authentication processing means for executing a predetermined assist processing by the assistant of the user, the attribute information of the user to be the target of the assist processing is referred to, and the referenced attribute is referred to. It was decided that the necessity of assistance processing would be determined based on the information.

This makes it possible to perform processing in consideration of authentication information management throughout the user's life.

It is a block diagram which shows the structural example of the authentication information management apparatus which concerns on embodiment of this invention. It is explanatory drawing which shows the example of the user database used by the authentication information management apparatus which concerns on embodiment of this invention. It is explanatory drawing which shows the example of the assistant database used by the authentication information management apparatus which concerns on embodiment of this invention. It is a functional block diagram which shows the example of the authentication information management apparatus which concerns on embodiment of this invention. It is a flowchart which shows the example of the operation which concerns on the authentication of the authentication information management apparatus which concerns on embodiment of this invention. It is a flowchart which shows the example of the operation which concerns on the notification of the assistant change guidance of the authentication information management apparatus which concerns on embodiment of this invention.

An embodiment of the present invention will be described with reference to the drawings. As illustrated in FIG. 1, the authentication information management device 1 according to the embodiment of the present invention is realized as a server computer including a control unit 11, a storage unit 12, and a communication unit 13. The authentication information management device 1 is communicably connected to other service providing server devices (hereinafter, simply referred to as server devices) 2a, 2b, etc. via a network.

The control unit 11 of the authentication information management device 1 is a program control device such as a CPU that operates according to a program stored in the storage unit 12. In the present embodiment, the control unit 11 performs an authentication process in response to an authentication request from the server devices 2a, 2b, and the like. Further, the control unit 11 accesses a user database that can hold, for each user, information that identifies the user, attribute information of the user, authentication information of the user, and information that identifies the assistant of the user in association with each other. .. Then, when the control unit 11 accepts the request for the authentication process together with the information specifying the user, the control unit 11 responds to the request and performs the authentication process based on the authentication information of the user specified by the accepted information. At this time, if the information for identifying the assistant is registered in the user database in association with the information for identifying the user, the control unit 11 is predetermined with the assistant of the user specified by the information. Execute the assistance process of. The details of the processing of these control units 11 will be described later.

The storage unit 12 is a memory device, a disk device, or the like, and holds a program executed by the control unit 11. The storage unit 12 also operates as a work memory of the control unit 11. In one example of the present embodiment, the storage unit 12 may store a user database that holds information on the user to be authenticated.

As illustrated in FIG. 2, this user database holds user-identifying information (U), user attribute information (Up), and user authentication information (Us) in association with each other, for example, as shown in FIG. Is what you do. Further, in this user database, information (P) that identifies the assistant of the user may be further recorded in association with the information (U) that identifies the user.

Here, the attribute information (Up) of the user includes various information such as the date of birth of the user, gender, whether or not the user is in a state of primary protection, and information on a health state such as a state such as cognitive ability. .. Further, the user authentication information (Us) is associated with authentication information such as a user name (Su) and a corresponding password (Sp) for each service (S), for example. The authentication information is not limited to the user name and password, but may be token information issued in advance (for example, an access token used in oauth authentication (RFC6749, RFC6750)).

Further, in the example of the present embodiment, the storage unit 12 may store an assistant database that holds information about the assistant. As illustrated in FIG. 3, this assistant database records the attribute information (Pp) of the assistant, the contact information (Pa) of the assistant, etc. in association with the information (Ps) that identifies the assistant. be. In an example of this embodiment, at least, as the attribute information (Pp) of this assistant,
・ Information that identifies users who are related to the assistant's relatives, relatives, or relatives,
・ Information on the profession of the assistant (information on doctors, caregivers, etc.) and ・ Information on the qualifications of assistants (information on doctors, nurses, caregivers, lawyers, etc.)
Shall include.

The communication unit 13 is a network interface or the like, and when it receives information such as an authentication request from the server device 2 or the like via the network, the communication unit 13 outputs the received information to the control unit 11. Further, the communication unit 13 sends the information instructed by the control unit 11 to the server device 2 or the like which is the destination instructed by the control unit 11 in accordance with the instruction input from the control unit 11.

Next, an operation example of the control unit 11 of the present embodiment will be described. As illustrated in FIG. 4, the control unit 11 of the present embodiment is functionally configured including a data acquisition unit 21, an authentication processing unit 22, and an assistant management unit 23. Further, the authentication processing unit 22 functionally includes an authentication unit 221 and an assistant processing unit 222.

The data acquisition unit 21 realizes the access means of the present invention. In response to a request from the authentication processing unit 22, which will be described later, the data acquisition unit 21 accesses the user database and the assistant database, and acquires user information, assistant information, and the like from these databases. The data acquisition unit 21 outputs the acquired information to the authentication processing unit 22 which is the request source.

Further, when the data acquisition unit 21 receives a request from the authentication processing unit 22 for information on the assistant such as the attribute information (Pp) of the assistant as well as the information for identifying the assistant, the data acquisition unit 21 accesses the assistant database. Then, the data acquisition unit 21 is associated with the information for identifying the assistant received from the authentication processing unit 22, and the attribute information (Pp) of the assistant stored in the assistant database and the contact information of the assistant (Pp). Information such as Pa) is acquired, and the acquired information is output to the authentication processing unit 22 which is the request source.

The authentication unit 221 of the authentication processing unit 22 basically accepts a request for authentication processing together with information identifying a user from an external server device 2 or the like, responds to the request, and is specified by the accepted information. Performs authentication processing based on the user's authentication information. As an example, this authentication unit 221 can be used by a user.
-When a product purchase request is made on the server device 2a of the product sales site,
・ When making a transfer request to the bank server device 2b
・ When administrative procedures are performed for the administrative server device 2c ・ When requesting the server device 2d such as a pharmacy to provide information on prescription drugs ...
When a user performs some operation on various server devices 2, such as, the server device 2 accepts a request to authenticate the user together with information for identifying the user. For example, when the server device 2 receives an operation request from the user, the server device 2 requests the user to input authentication information such as a user name and a password, and the authentication information input by the user in response to the request is sent to the user's mail. It is included in the authentication request together with information that identifies the user such as an address, and is sent to the authentication information management device 1 of the present embodiment. At this time, the server device 2 is information for identifying the service related to the operation requested by the user (information unique to a predetermined service ID or the like, which is also managed by the authentication information management device 1). And parameters (for example, if the transfer is requested, the transfer amount, etc.) may be included in the information to be sent. As a result, the authentication information management device 1 can specify the service requested by the user.

The authentication unit 221 of the authentication processing unit 22 accepts information that identifies a user (user's e-mail address, etc.) and authentication information from the server device 2, and performs the next authentication processing when an authentication request is received. The authentication unit 221 outputs information that identifies the user to the data acquisition unit 21, and receives input of the user's authentication information (Us). Further, if the information (P) of the user's assistant is associated with the information for identifying the user stored in the user database at this time, the authentication unit 221 can perform the information (P) of the assistant from the data acquisition unit 21. Will also be accepted.

When the information output by the data acquisition unit 21 does not include the assistant's information (P), the authentication unit 221 performs general authentication processing. That is, the authentication unit 221 compares the authentication information received from the server device 2 with the authentication information (Us) received from the data acquisition unit 21, and if they match, the authentication unit 2 succeeds in authenticating. Information to that effect is sent. Further, the authentication unit 221 compares the authentication information received from the server device 2 with the authentication information (Us) received from the data acquisition unit 21, and if they do not match, the server device 2 is authenticated. Send information to the effect that it failed.

Further, when the authentication unit 221 receives the information (P) for identifying the assistant from the data acquisition unit 21, the authentication unit 221 first performs the user authentication process, and receives the authentication information received from the server device 2 and the data acquisition unit 21. Compare with the authentication information (Us). If the authentication information received from the server device 2 and the authentication information (Us) received from the data acquisition unit 21 do not match, the authentication unit 221 sends information to the server device 2 that the authentication has failed. do.

On the other hand, if the authentication information received from the server device 2 and the authentication information (Us) received from the data acquisition unit 21 match, the authentication unit 221 determines that the authentication was successful and performs an assist process. The unit 222 is requested to perform a predetermined process by the assistant, for example, a process of approval by the assistant.

Then, when the assistant processing unit 222 responds to this request and outputs the information that the authentication approval is completed, the authentication unit 221 indicates that the authentication is successful for the server device 2 that requested the authentication. Send information. On the other hand, when the assistant processing unit 222 outputs the information that the authentication cannot be approved, the authentication unit 221 sends the information that the authentication has failed to the server device 2 that requested the authentication.

When the assistant processing unit 222 receives a request for certification approval processing from the certification unit 221, it determines whether or not to request the assistant for the predetermined assistance processing, and when it determines that the request is made, the assistant processing unit 222 assists the assistant. Request processing, eg, authorization approval. Here, when the assistant refuses (or reserves) the assist processing, the assistant processing unit 222 outputs information to the authentication unit 221 that the assist processing cannot be executed. Further, the assistant processing unit 222 approves the authentication unit 221 (here) when the approval of the authentication is approved by the assistant who requested the approval as the assistant processing (that is, when the assistance processing is successfully executed). Outputs information to the effect that the prescribed assistance process) has been completed.

Specifically, the assistant processing unit 222 requests the data acquisition unit 21 for information about the assistant, which is stored in the assistant database in association with the information (P) for identifying the assistant output by the data acquisition unit 21. do. If there is a plurality of information (P) output by the data acquisition unit 21 that identifies the assistant (when there are a plurality of assistants), the assistant processing unit 222 provides data on the information regarding the plurality of assistants. Request to the acquisition unit 21.

When the assistant processing unit 222 receives the information about the assistant from the data acquisition unit 21, the assistant processing unit 222 selects the assistant who is the request destination for approval. Specifically, this selection is made according to a predetermined rule with reference to the attribute information (Up) of the user to be authenticated and the attribute information (Pp) of the assistant. For example, this rule can be defined as follows for each difference between the date of birth of the user's attribute information (Up) and the current date and time (that is, the age of the user) and for each assistant's attribute information (Pp).

(1) When the user is a minor and is not in a temporary protection state:
Among the assistants, if there is a lineal relative higher than the user's parents who is within the second degree of kinship in order from the one with the smallest number of relatives, the assistant (referred to as the first-ranked person) is selected.

If there is no first-ranked person, if there is a sibling of the user or a collateral relative within the third degree of kinship above the user's parents, the person with the smaller number of relatives is in order. In addition, the assistants (called second-ranked persons) selected in the order of age (highest age) are selected.

Furthermore, if there is no second-ranked person, and if there is an assistant who has been set as a person in charge of protection in advance, the assistant is selected.

(2) When the user is a minor and is in a state of temporary protection:
If there is an assistant who has been set as a person in charge of protection in advance, the assistant is selected. If there is no such assistant, if there is a sibling of the user or a collateral relative within the third degree of kinship above the user's parents, the person with the smallest number of relatives is in order. , Select the assistants to be selected in order of age (highest age).

(3) When the user has reached the age of majority and there is no diagnosis of dementia:
Do not select an assistant.

(4) When the user has reached the age of majority and has a diagnosis of dementia:
If there is an assistant who has been set as a person in charge of protection in advance, the assistant (first-ranked person) is selected.

If there is no first-ranked person, and if there is a person who is a lineal relative lower than the self and is within the second degree of kinship in order from the person with the smallest number of relatives, the assistant (second-ranked person) ) Is selected.

If there is no second-ranked person, the assistant (called the third-ranked person) who is a sibling of the user and is selected in order of age (highest age) among the assistants. select.

The assistant processing unit 222 attempts to select an assistant according to such a rule, for example. Here, if the assistant cannot be selected, information indicating that the assist processing cannot be executed may be output to the authentication unit 221. If the assistant cannot be selected, the assist processing is performed to the authentication unit 221. You may output the information to the effect that it is completed.

Next, the assistant processing unit 222 determines whether or not to notify the selected assistant of the user's operation by the following processing. In one example of the present embodiment, the assistant processing unit 222 notifies the selected assistant of the user's operation based on the attribute information of the assistant and the operation performed by the user to be authenticated. Judge whether or not.

As one of the specific examples, the assistant processing unit 222 of the present embodiment depends on the relationship between the user and the assistant (which can be determined based on the attribute information of the assistant).
(1) When the selected assistant is a lineal relative of the user:
Notify all operations (eg authentication requests for all service IDs) (2) If the selected assistant is a collateral of the user:
Notify the authentication request for the operation of transactions that meet or do not meet the predetermined conditions (predetermined service ID, predetermined amount upper limit, transfer account number, etc.) (3) The selected assistant is a relative If you are an assistant set up as a protector, not:
Rules such as notifying an authentication request related to an operation of a transaction that meets or does not meet predetermined conditions (predetermined service ID, predetermined amount, etc.) are defined. Then, the assistant processing unit 222 determines whether or not to give a notification in relation to the operation performed by the user, depending on which of the above cases the selected assistant corresponds to.

Then, when it is determined that the notification is not performed, the assistant processing unit 222 outputs information to the effect that the approval is completed to the authentication unit 221 at this stage. On the other hand, when the assistance processing unit 222 determines that the notification is to be performed, the assistance processing unit 222 sends a predetermined assistance processing, for example, a message requesting the approval of authentication to the contact information (email address or the like) of the selected assistant.

In this example, when the assistant processing unit 222 sends a message, it issues unique identification information for each message, and issues information indicating an operation of a user to be approved and information indicating approval. Send a message containing this unique identification information, along with a link to a website for sending (approval site), a link to a website for sending information indicating disapproval (denial site), and so on.

The assistant processing unit 222 shall include the above-mentioned unique identification information as, for example, a parameter in this link. When the destination of the message (selected assistant) accesses the approval site or the denial site, the assistant processing unit 222 acquires the above-mentioned unique identification information and is the object of approval identified by the identification information. The operation of the user is specified, and it is determined whether the assistant approves the authentication for the operation (accesses the approval site) or (accesses the denial site). However, the process for confirming the intention of the assistant is not limited to this example, and a so-called one-time password is issued to notify the assistant, and the website provided by the assistant processing department 222 is one-time. Various well-known methods can be adopted, such as having the user enter a password.

When the assistant processing unit 222 determines that the selected assistant has approved the operation of the user to be approved, the assistant processing unit 222 outputs information to the effect that the approval is completed to the authentication unit 221. Further, when it is determined that the selected assistant does not approve the operation of the user to be approved, the assistant processing unit 222 outputs information to the effect that the authentication unit 221 has not been approved. According to this example of the present embodiment, for example, when a minor user tries to purchase a product in the server device 2, the server device 2 requests authentication from the authentication information management device 1 of the present embodiment. .. Then, the authentication information management device 1 determines whether or not the user name and password of the minor user match the registered authentication information. Further, when the information for identifying the assistant (for example, the parent of the user) is registered in association with the user, the authentication information management device 1 selects the assistant and causes the user to the selected assistant. Notify the operation (purchase of goods) and inquire whether to approve the operation.

Then, when the authentication information management device 1 accepts the instruction to approve the user's operation from the assistant who has notified the above, the authentication information management device 1 has succeeded in authenticating to the server device 2 that has requested the authentication. The server device 2 proceeds with the procedure for purchasing the user's product.

On the other hand, when the authentication information management device 1 receives the instruction not to approve the user's operation from the assistant who has notified the above, the authentication information management device 1 requests the authentication even if the authentication information is successfully authenticated. Notify the server device 2 that has performed the authentication to the effect that the authentication has failed. Then, in this case, the server device 2 cancels the user's product purchase procedure.

In addition, the rule of selection of the assistant used by the assistant processing unit 222 and the rule indicating whether or not to notify the assistant are examples, for example, the administrator of the authentication information management device 1 or the assistant. It may be set arbitrarily by the person who obtains it.

Further, when the assistant processing unit 222 sends a message to the assistant, the information specifying the service related to the server device 2 that requested the authentication (for example, the URL of the website provided by the server device 2) and predetermined information. The approval information (for example, the one-time password issued at the time of sending the message) may be sent to request the server device 2 to input the approval information. If necessary in the approval process, the assistant processing unit 222 sends information to the effect that the user has been successfully authenticated and the assistant's approval is requested to the server device 2 that has requested the authentication. At this time, the assistant processing unit 222 may include the approval information such as the one-time password issued here in the information to be transmitted to the server device 2 that has requested the authentication.

In this example, the assistant accesses the server device 2 for which authentication is requested and approves by inputting the issued one-time password or other approval information, or inputs the approval information. Instead, the server device 2 is accessed and the approval is rejected.

Then, in this example, when the server device 2 receives the information that the user has been successfully authenticated and the assistant is requesting the approval, the server device 2 waits for the assistant to input the approval information, and the approval information is input. When it is executed, it is assumed that the authentication is successful, and the processing requested by the user is executed.

The assistant management unit 23 records the information for identifying the assistant of the user in the information for identifying the requested user in the user database in response to the request from the user. Further, the assistant management unit 23 deletes the information for identifying the assistant associated with the information for identifying the requested user in the user database in response to the request from the user.

Further, the assistant management unit 23 refers to the user attribute information of the user database at predetermined timings, and the attribute information satisfies (or is not satisfied with) a predetermined condition. ) Occasionally, it functions as a guidance means for guiding the user to change the assistant. As an example, the assistant management unit 23 refers to the attribute information of each user registered in the user database every 24 hours, for example, and checks whether or not the age of each user has changed.

Then, the assistant management unit 23 determines, for the user whose age has changed, whether or not to guide the change of the assistant by using, for example, the following rule based on the information of the age after the change. Here, the rules are as follows, for example.

(1) The age has changed and the user has reached the age of majority:
If the user's assistant exists, the user or the assistant is instructed to delete the information that identifies the assistant associated with the information that identifies the user from the user database.
(2) The age has changed and the user has reached a predetermined old age (for example, 75 years old):
If there is a record that there is a symptom related to dementia as the attribute information of the user, the user is instructed to set an assistant to the user or a person registered in the assistant database as a relative of the user. do.
…

By the operation of the assistant management unit 23, the user himself or the assistant (potential person) can be informed about the change of the assistant, and the assistant associated with the user stored in the user database. It triggers an operation to add, delete, or change (change an assistant) the information that identifies the database.

Further, in another example of the present embodiment, the assistant management unit 23 refers to the user attribute information of the user database at predetermined timings, and the attribute information satisfies a predetermined condition. When it becomes (or becomes unsatisfied), the setting regarding the assistant to the user may be changed without any human operation.

For example, in one example of the present embodiment, the assistant management unit 23 examines the user attribute information of the user database every 24 hours and associates it with information that identifies a user who is an adult and has not reached the age. The information that identifies the assisted person is deleted from the user database or invalidated (registered to the effect that it is invalidated as an assistant).

When the user database is changed without human operation in this way, the assistant management unit 23 e-mails the corresponding user and the assistant with the information that the change is made (or changed). It may be sent by e-mail or the like to notify that there has been a change.

Further, in an example of the present embodiment, the assistant management unit 23 may register another user B as an assistant in response to a request from the user A who is an assistant of the user U. In this example, when the assistant management unit 23 receives a request from the user A to register the assistant B together with the information specifying the user U, the assistant management unit 23 refers to the information of the user U from the user database and displays the user U. It is checked whether or not the information that identifies the user A as an assistant is associated with the information to be specified.

Here, if the information for identifying the user U stored in the user database is associated with the information for identifying the user A as an assistant, the assistant management unit 23 updates the user database and specifies it according to the request. In the information that identifies the user U, the information of the assistant B is recorded as the information that identifies the assistant of the user U.

Further, the assistant management unit 23 may determine whether or not to permit the registration of another assistant depending on the attributes of the assistant (user A in this case) who intends to register another assistant. In this example, the assistant management unit 23 refers to the assistant database and acquires the attribute information (Pp) and the like related to the user A who is the assistant of the user U.

Then, the assistant management unit 23 determines whether or not to permit the update of the user database based on the acquired attribute information (Pp) of the assistant user A and the like. In this example, for example, the user database is updated only when the assistant user A is a lineal relative of the user U, and the assistant of the user U is specified in the information specifying the user U specified by the request. As the information to be performed, the information of the assistant B may be recorded.

Further, instead of the example considering the attributes of the assistant (in this case, user A) to be registered, or in addition to the processing of the example, the assistant management unit 23 is another assistant to be registered. It may be determined whether or not to permit the registration of the other assistant based on the attributes of the above. In this example, the assistant management unit 23 refers to the assistant database and acquires the attribute information (Pp) and the like related to the user B designated as another assistant to be registered by the user A.

Then, the assistant management unit 23 determines whether or not to permit the update of the user database based on the acquired attribute information (Pp) of the user B and the like. In this example, for example, only when the user B who is requested to register is a lineal relative of the user U, or when the user B is a specific occupation (for example, a doctor), the user database is updated and the request is made. It is permitted to record the information of the assistant B as the information for identifying the assistant of the user U in the information specifying the user U specified by. When considering the attributes of the user A, the assistant management unit 23 sets the information to identify the assistant of the user U only when the attribute information of the user A and the user B each satisfy a predetermined condition. Permission to record the information of Assistant B.

According to this example of the present embodiment, for example, when the user U is a child or loses consciousness, the assistant of the user U registers a doctor or the like as an assistant, and the pharmacy or the like. It is possible to access the server device 2 of the above and acquire information on prescribed medicines and the like.

[Other examples of user attributes]
Further, in the explanation so far, the process of referring to the age as the attribute information of the user has been described, but the attribute information referred to for the process is not limited to the age information, for example, gender and whether or not the person is elderly. It may also include various information such as information on school / work place, location of residence, and whether or not the person is the head of the household. In addition, various information such as medical history, hospital visit status, prescription drug information, insurance information, and administrative service information received may be included in the attribute information of this user.

As a result, for example, the authentication information management device 1 requests the approval of the head of the household when a person other than the head of the household performs procedures for the administration, or when the child becomes the head of the household independently, the person concerned as an assistant at that time. It is possible to delete the information that identifies the original householder associated with the information that identifies the child, and so on.

[Registration of user attribute information]
Further, in an example of this embodiment, it is set that the control unit 11 of the authentication information management device 1 receives access from a terminal or the like of a predetermined administrative agency (as attribute information, the person in charge of the predetermined administrative agency is in charge). It may accept changes in predetermined information such as attribute information stored in the user database (under access from an authenticated user). For example, the control unit 11 receives an instruction from the user associated with the attribute information indicating that the person is in charge of the child guidance center or the like, and the attribute information of the user who is the child being consulted is in the state of primary protection. Etc. may be registered.

[motion]
The authentication information management device 1 according to the embodiment of the present invention basically has the above configuration and operates as follows. In the following example, it is assumed that the assistant process performed by the assistant is a process of approving the user's authentication (authentication approval process).

Further, in the following example, an operation example of the authentication information management device 1 at each stage until a certain user A becomes an adult from a minor state, marries a user B and has a child C, and then the user A becomes old. Will be explained. In addition, in the state of a minor, this user shall associate the information that identifies the parent P of this user with the information that identifies the assistant.

[(1) Underage stage]
At this stage, when the user A accesses the server device 2 (here, it is assumed to be the server device that provides the product purchase service) and requests the product purchase, the server device 2 is the user, as illustrated in FIG. Upon receiving the input of the authentication information such as the user name and the password from A, the authentication information management device 1 of the present embodiment is requested to authenticate (S11). The server device 2 includes a unique authentication request identifier and the content of the operation of the user A (information that the product is purchased, the amount of money, the payee, etc.) in this request.

Upon receiving the authentication request, the authentication information management device 1 reads the authentication information of the user A from the user database, and determines whether or not the authentication information matches the authentication information input by the user A to the server device 2 (authentication process: S12).

If the authentication information of the user A recorded in the user database and the authentication information input by the user A to the server device 2 do not match, the authentication information management device 1 has the authentication included in the authentication request. Along with the request identifier, the fact that the authentication has failed is transmitted to the request source server device 2. In this case, the server device 2 determines that the authentication request identified by the authentication request identifier has failed, and performs processing such as interrupting the product purchase processing.

On the other hand, if the authentication information of the user A recorded in the user database and the authentication information input by the user A to the server device 2 match in step S12, the authentication information management device 1 further uses the user. The database is referred to to check whether or not the user A has an assistant (S13).

Here, since it is assumed that the parent of the user A is set as an assistant, the authentication information management device 1 acquires information for identifying the assistant associated with the user, and then is specified by the acquired information. The attribute information of the assistant is acquired from the assistant database (S14). Here, it is assumed that there is only one registered assistant. In this case, the authentication information management device 1 selects the assistant and determines whether or not to notify the selected assistant of the operation (purchase of the product) of the user A (S15).

In the example here, it is assumed that a rule is set to notify all operations when the assistant selected for the minor user is a lineal relative of the user. In this case, the authentication information management device 1 refers to the set rule, and also refers to the attribute information of the selected assistant acquired in step S14, and the selected assistant is the parent (direct line) of the user A. Since it is a blood relative), the operation of the user A will be notified to this assistant.

The authentication information management device 1 acquires the contact information of the selected assistant for the user A, issues unique identification information, and approves the information representing the operation of the user A to be approved. Obtained above a message containing a link to a website (approval site) for sending information indicating disapproval and a link to a website (denial site) for sending information indicating disapproval. Send to the contact (S16). All of the above websites shall be provided by a web server operating on the authentication information management device 1. Further, the authentication information management device 1 shall include the above-mentioned unique identification information as a parameter in this link.

Further, the authentication information management device 1 stores the identification information in association with the authentication request identifier received in step S11.

When the assistant receives this message and accesses the approval site or the denial site by operating the above link (S17), the authentication information management device 1 obtains the unique identification information contained in the link. get. Then, the authentication information management device 1 determines whether or not the assistant has approved the operation related to the identification information (whether the assistant has accessed the approval site) or not (accessed the denial site) (S18).

Here, when the assistant accesses the denial site, the authentication information management device 1 determines that the assistant has not approved, and acquires the authentication request identifier held in association with the identification information acquired from the above link. , Information indicating that the authentication has failed is sent to the server device 2 which is the request source of the authentication together with the authentication request identifier. In this case, the server device 2 determines that the authentication request identified by the authentication request identifier has failed, and performs processing such as interrupting the product purchase processing.

Here, it is assumed that the assistant has accessed the approval site. In this case, the authentication information management device 1 determines that the assistant has approved the authentication, acquires the authentication request identifier associated with the identification information acquired from the link operated by the assistant, and together with the authentication request identifier. Information indicating that the authentication was successful is sent to the server device 2 which is the request source of the authentication (S19). In this case, the server device 2 continues the process of purchasing the product (S20).

[(2) Adult stage]
Further, as illustrated in FIG. 6, the authentication information management device 1 checks whether or not the attribute information such as age has changed for each user registered in the user database at predetermined timings (S31). For example, when the user A reaches the age of majority (the birthday when the adult reaches the age of majority), the authentication information management device 1 determines that the attribute information of the user A has changed (S31: Yes).

At this time, the authentication information management device 1 refers to a predetermined rule and determines whether or not to guide the user A to change the assistant (S32). Here, for example, when "the age has changed and the user has reached the age of majority", "if the user has an assistant, the information that identifies the assistant associated with the information that identifies the user is provided. , Guidance to the user or assistant to delete from the user database "is set.

In this case, the authentication information management device 1 determines that the user A has reached the age of majority (S32: Yes), and the contact information between the user A and its parent is "because the user A has reached the age of majority." , Why don't you remove the assistant? ”(Hereinafter referred to as the assistant status change guide) is transmitted (S33). Upon receiving this guidance, the user A or his / her assistant accesses the authentication information management device 1, and deletes the information that identifies the assistant, which is recorded in the user database in association with the information that identifies the user A. Instruct to do. Then, the authentication information management device 1 accesses the user database, and deletes the information that identifies the assistant, which is recorded in association with the information that identifies the user A, from the user database.

If it is determined that the user whose attribute information has not changed such as age, or that the notification is not given even if the attribute information has changed (S31: No or S32: No), the authentication information management device 1 applies to the user. May do nothing.

After that, for example, when the user A accesses the same server device 2 as in the above-mentioned example for a minor and requests the purchase of a product, the server device 2 inputs authentication information such as a user name and a password from the user A. In response to this, the authentication information management device 1 of the present embodiment is requested to authenticate (this request includes a unique authentication request identifier).

Upon receiving the authentication request, the authentication information management device 1 reads the authentication information of the user A from the user database, and determines whether or not the authentication information matches the authentication information input by the user A to the server device 2 (authentication processing). .. If the authentication information of the user A recorded in the user database and the authentication information input by the user A to the server device 2 match, the authentication information management device 1 further uses the user database. Refer to it to find out if User A has an assistant.

Here, since the assistant's information about the user A is deleted, the authentication information management device 1 determines that the user A does not have an assistant, and as a result of the previous authentication process, the authentication received from the server device 2 is performed. Along with the request identifier, information indicating that the authentication was successful is sent to the server device 2. In this case, the server device 2 continues the process of purchasing the product.

As described above, in the example of the present embodiment, when it is determined that the user has reached the age at which he / she can act independently, the setting to remove the assistant is guided to the user himself / herself, the assistant, and the like.

[Example of restricting changes of assistants]
In addition, in order not to change the assistant for the purpose of fraud, the authentication information management device 1 may issue a unique passcode when sending the assistant status change guide and send it together with the assistant status change guide. good. The authentication information management device 1 may request the input of this passcode when changing the user database. In this example, the authentication information management device 1 refuses to change the user database if this passcode is not input.

In addition, the permission to change the assistant who uses this unique passcode is limited to the case where the target user is a minor or after reaching the old age, and in other cases, the assistant does not use the passcode. You may be able to change (including delete) the person. As described above, the conditions for changing the assistant may differ depending on the attribute information of the user.

As another example of the condition for changing the assistant, the authentication information management device 1 is used to enroll the user in a school, a company, a self-defense force, etc. regardless of whether the user is a minor or an adult. On condition that the organization to which the user belongs has changed, the superiors in the organization to which the user belongs (for example, teachers and professors in the case of schools, bosses and accounting management in the case of companies) Person, etc.) may be set as an assistant to the user without any human operation. Further, at this time, the authentication information management device 1 may exclude the superiors and the like in the organization to which they do not belong from the user's assistants without any human operation.

According to this example, when the information of the affiliation as the attribute information of the user is changed, the assistant is set, or the setting is deleted or invalidated according to the change without requiring other human operations. Is set to.

In these examples, the administrator of the user database receives a request from the user or his / her agent to change the attribute information about the user so that false information is not registered as the attribute information such as the affiliation of the user. , You may request proof (documentary evidence, etc.) to prove that the change is true, and accept the change request only when the evidence confirms it.

[(3) Post-marriage stage]
Further, when the user A obtains a spouse by marriage, the authentication information management device 1 changes the assistant status to guide the user A and the user B who is the spouse to register the spouse as an assistant. You may send a guide.

[(4) Stage when a child is born]
Further, when a child C is created between the user A and the spouse user B, the authentication information of the child C may be registered in the authentication information management device 1 by the user A. In this case, the user A further registers himself / herself as an assistant, and sets the attribute information indicating that the child C is his / her own child in association with the information that identifies himself / herself in the assistant database.

Since the authentication information management device 1 can recognize that the child C is a minor and the user A is the parent of the child C from the assistant database, the user A is specified in the information for specifying the child C in the user database. The information to be used is associated and registered as information for identifying the assistant of the child C.

[(5) When the child becomes an adult]
When the child C of the user A reaches the age of majority (the birthday when the adult reaches the age of majority), the authentication information management device 1 determines that the age of the user C has reached the age of majority. As already mentioned, here, for example, when "the age has changed and the user has reached the age of majority", "if the user has an assistant, the assistant associated with the information that identifies the user". A rule is set to "instruct the user or an assistant to delete the information that identifies the person from the user database".

Therefore, according to this rule, the authentication information management device 1 tells the contact information between the user C and its parent user A, "Because the user C has reached the age of majority, why not remove the assistant user A?" Send the assistant status change information. Upon receiving this guidance, the user A or the user C accesses the authentication information management device 1, and the information for identifying the assistant (user A) recorded in the user database in association with the information for identifying the user C. Instruct to delete the information that identifies). Then, the authentication information management device 1 accesses the user database, and deletes the information that identifies the assistant (information that identifies the user A) that is recorded in association with the information that identifies the user C from the user database.

[(6) When oneself reaches old age]
After that, the authentication information management device 1 detects the change in the age of each user at predetermined timings. Then, when the age of the user A reaches a predetermined old age, for example, when "the age changes and the user reaches the old age", the authentication information management device 1 "if the user does not have an assistant". , Record the information that identifies the lineal relative or protector below you as an assistant in relation to the information that identifies the user, and guide the user to update the user database. " , The assistance status change guide to this effect is transmitted to the user A.

Upon receiving this guidance, the user A accesses the authentication information management device 1 and instructs the user database to register, for example, the user C as an assistant in association with the information that identifies the user A. Then, the authentication information management device 1 accesses the user database, and records the information that identifies the user A in the user database in association with the user C as an assistant.

After that, when the user A accesses the server device 2 (assumed to be a server device that provides the product purchase service) and requests, for example, a relatively small amount of product purchase, the server is similar to the process illustrated in FIG. The device 2 receives the input of the authentication information such as the user name and the password from the user A, and requests the authentication information management device 1 of the present embodiment to authenticate. The authentication information management device 1 includes a unique authentication request identifier and the content of the operation of the user A (information that the product is purchased, the amount of money, the payee, etc.) in this request.

Then, the authentication information management device 1 receives the authentication request, executes the authentication process of the user A (step S12), and when the authentication process is successful, further refers to the user database to see if the user A has an assistant. Find out if it isn't.

Since the user C is set as an assistant at this stage, the authentication information management device 1 selects the user C as an assistant and acquires the attribute information from the assistant database. Then, the authentication information management device 1 determines whether or not to notify the user C, who is the selected assistant, of the operation (purchase of the product) of the user A.

In this example, a rule is set that if the assistant selected for an elderly user is a lineal relative of the user, he / she will be notified only if the purchase exceeds a predetermined amount. It is assumed that it has been done. In this case, the authentication information management device 1 selects by referring to the set rule and further referring to the attribute information of the selected assistant user C and the content of the operation of the user A related to the authentication request. The assistant is a child of user A (a lineal relative), but since the purchase price of user A is small, user C is not notified of the operation of user A.

In this case, the authentication information management device 1 sends information indicating that the authentication is successful to the server device 2 which is the request source of the authentication together with the accepted authentication request identifier. Then, the server device 2 continues the process of purchasing the product.

[Multiple assistants]
Further, in the present embodiment, a plurality of assistants may be set for one user. In this case, as described above, the authentication information management device 1 selects one of a plurality of assistants based on, for example, the attribute information of the user, and determines whether or not to notify the selected assistants. I was supposed to do it. However, the present embodiment is not limited to this.

For example, when a plurality of assistants are set for the user, the authentication information management device 1 determines whether or not to notify each of the plurality of assistants without selecting one assistant. , The assistant who is determined to notify may be notified of the user's operation.

Further, in another example, when the authentication information management device 1 determines whether or not to select one assistant and perform the notification, and then determines that the notification is not performed, the authentication information management device 1 excludes the selected assistant. , Select another assistant according to the rules and decide whether to notify, until the assistant who gives the notification is found or it is decided not to notify all the assistants. It may be repeated.

Specifically, in the case of determining whether or not to notify each of the plurality of assistants without selecting an assistant, for example, after the user A reaches old age in the above example, for example, a care worker. Such a person in charge of protection may be registered as an assistant together with the child user C. In this case, for example, when the user A makes a request for daily support activities to the server device 2 of the long-term care service provider, or makes a request for administrative services related to care to the administrative server device 2. The authentication information management device 1 notifies the person in charge of protection of the operation of these requests, not the user C, and requests the server device 2 of the bank to transfer money to an account not registered in advance. In such a case, it is possible to notify both the user C and the person in charge of protection of this operation.

Further, in an example of the present embodiment, when there are a plurality of assistants in this way, the authentication information management device 1 may be determined as a predetermined number of people (for example, 50% of the registered assistants). However, it may be controlled so that the process of assuming that the authentication is successful is not performed until the assistant who assists (for example, the numerical value of the number of people may be determined) performs the assist process (for example, approves).

[Delegation of operation]
In the present embodiment, the user delegates to another person in advance in consideration of the case where the user is placed in a state where he / she cannot operate the electronic device or the user has not reached the age at which the electronic device can be operated. May be set.

Specifically, in relation to the information that identifies the user registered in the user database, in addition to the authentication information of the user himself (hereinafter referred to as the principal user for the sake of distinction), the authentication information of other users is recorded. The other user may be able to request the server device 2 to perform a predetermined operation regarding the principal user on behalf of the principal user.

In one example of the present embodiment, the user (the principal user) associates with the information for identifying himself / herself registered in the user database, the authentication information of another user, and the other user with respect to the server device 2. Record information that identifies the requestable operation and information about the delegation period. Further, the authentication information of the other user may be further associated with information for identifying an assistant for approving the operation of the other user when the other user performs the operation. ..

Here, the information for specifying the operation that can be requested from the server device 2 by another user can be expressed by using, for example, the service ID already described, the conditions related to the parameters, and the like. Specifically, if the user wants to delegate tax procedures during hospitalization, the user associates the service ID issued by the government agency with respect to the information registered in the user database to identify himself / herself, and another user can use it. Have the server device 2 record as information that identifies the requestable operation.

Information on the period of delegation is not always necessary, but it is possible to make settings such as enabling only 10 days from the setting.

As an example, the user A who is the principal user associates with the information registered in the user database to identify himself / herself, and the authentication information for the user B who is another user (user B identifies the user B himself / herself in the user database). (It does not have to be the same as the authentication information recorded in association with the information to be executed) RB and the amount specified as "rent transfer" as information specifying the operation that the user B can request to the server device 2. The information RC that allows the transfer to be operated against the server device 2 of the bank is recorded. Further, in addition to this information, the user A shall record information that identifies the user C as an assistant.

At this time, when the user B accesses the server device 2 of the bank and inputs the authentication information RB on behalf of the user A to request the rent transfer, the server device 2 inputs the authentication information RB input by the user B. It is transmitted to the authentication information management device 1 to request authentication. At this time, the server device 2 includes the unique authentication request identifier and the content of the operation of the user B (information that the transfer is made, the amount of money, the payee, etc.) in this request.

Upon receiving the authentication request, the authentication information management device 1 searches the user database for the authentication information input by the user B. At this time, the authentication information management device 1 searches not only the information registered as the authentication information of each user but also the authentication information of another person delegated by each user. The authentication information management device 1 finds the authentication information of the user B associated with the information identifying the user A by this search process, and performs an operation that can be requested to the server device 2 associated with the authentication information. Read the information to be specified.

Here, the operation that can be requested to the server device 2 specified by the information recorded in association with the authentication information input by the user B in the user database is the operation of the user B sent by the server device 2. If the content is different, the authentication information management device 1 transmits to the server device 2 of the request source that the authentication has failed together with the authentication request identifier included in the authentication request. In this case, the server device 2 determines that the authentication request identified by the authentication request identifier has failed, and rejects the transfer operation.

On the other hand, the operation that can be requested to the server device 2 specified by the information recorded in association with the authentication information input by the user B here is the content of the operation of the user B sent by the server device 2. If they match, the authentication information management device 1 further refers to the user database and checks whether or not there is information that identifies the assistant in association with the authentication information input by the user B.

Here, since it is assumed that the user C is set as an assistant, the authentication information management device 1 acquires the information that identifies the user C who is the assistant, and then the assistant specified by the acquired information. Attribute information of is obtained from the assistant database. The authentication information management device 1 acquires the contact information of the user C who is an assistant, issues unique identification information, and represents the information indicating the operation of the user B to be approved and the approval. The contact obtained above contains a message containing a link to a website (approval site) for sending information and a link to a website (denial site) for sending information indicating disapproval. Send to. All of the above websites shall be provided by a web server operating on the authentication information management device 1. Further, the authentication information management device 1 shall include the above-mentioned unique identification information as a parameter in this link.

Further, the authentication information management device 1 stores the identification information and the authentication request identifier in association with each other.

When the assistant receives this message and accesses the approval site or the denial site by operating the above link, the authentication information management device 1 acquires the unique identification information included in the link. Then, the authentication information management device 1 determines whether or not the assistant has approved the operation related to the identification information (whether the assistant has accessed the approval site) or not (accessed the denial site).

Here, when the assistant accesses the denial site, the authentication information management device 1 determines that the assistant has not approved, and acquires the authentication request identifier held in association with the identification information acquired from the above link. , Information indicating that the authentication has failed is sent to the server device 2 which is the request source of the authentication together with the authentication request identifier. In this case, the server device 2 determines that the authentication request identified by the authentication request identifier has failed, and rejects the transfer operation by the user B.

Further, when the user C who is an assistant accesses the approval site, the authentication information management device 1 determines that the assistant has approved the site, and holds the authentication information in association with the identification information acquired from the link operated by the assistant. The authentication request identifier is acquired, and along with the authentication request identifier, information indicating that the authentication is successful is sent to the server device 2 which is the request source of the authentication. Then, the server device 2 executes the transfer procedure in response to the request of the transfer operation by the user B.

If such processing is possible, for example, it becomes possible to delegate various procedures to a nurse during hospitalization, and if a parent or spouse is set as an assistant, a malicious assignee can be assigned. However, it is possible to prevent fraudulent procedures and improve convenience.

Further, an infant user may be registered in the user database accessed by the authentication information management device 1 of the present embodiment. Considering that it may not be possible to set an assistant by yourself, such as when the user is an infant, allow the person who intends to become an assistant to update the user database as an assistant to the user. May be good.

For example, when one of the parents registers the born child as a user at the time of birth of the child, the parent may register the parent himself as an assistant to the child.

In this case, in order to prevent an unauthorized assistant from being associated with the account related to the child, the authentication information management device 1 is a user database only when accessed from the terminal of the local government that received the birth certificate. It may be possible to register an assistant for the child's account. In this way, fraudulent registration is eliminated by allowing only registration at public institutions such as local governments.

Alternatively, the authentication information management device 1 receives a request to set an assistant from a user other than the principal user, and the principal user (for example, a child) given by the national or local government at the time of setting the assistant and the assistant. You may be asked to enter your personal number (my number, etc.) with the person who intends to become (for example, your parent). When using an individual number like this,
(1) There are circumstances in which the individual user cannot set an assistant by himself / herself, such as the age (month age) of the individual user acquired by the individual number is less than a predetermined value (for example, 3 years old).
(2) The individual number of the person who intends to become an assistant matches the individual number of the parental authority of the person concerned, and it is judged in advance that the person is appropriate as an assistant between the person user and the assistant. Registering a person who intends to become the assistant as an assistant to the user when the conditions such as having a predetermined relationship or the assistant being a person with a predetermined qualification such as a lawyer are satisfied. And it is sufficient.

[Reservation for assistant]
Further, the user may appoint another person who should be an assistant when the predetermined condition is satisfied. In this case, when the authentication information management device 1 receives a request from a user other than the principal user to set an assistant, the person who intends to become an assistant should become an assistant from the principal user in advance according to the request. It is checked whether or not the person has been nominated, and if so, the person who intends to become the assistant is registered as the assistant of the user.

[Other examples of assistance processing]
Further, in the description so far, as an example of the process of assisting by the assistant, the process of obtaining the approval of the certification at the stage of the authentication process has been described as an example, but the assist process of the present embodiment is not limited to this example.

In the present embodiment, the processing of the assistant requested by the authentication information management device 1 from the assistant is
(Level 1) A level for proxying a procedure (Level 2) A level for approving a procedure (Level 3) A level for referring to information, and a plurality of levels may be set for each stage of the magnitude of influence on the user. This level is set for each assistant (for each set of information that identifies the assistant and the user to be assisted) and may be recorded in the assistant database.

Of these, in the (level 3) level of processing that refers to information, the authentication information management device 1 functions as an authorization server in, for example, oauth. In this example, the assistant accesses the server device 2 (corresponding to the resource owner) holding the information of the user (for example, the school grade information of the user) as the user and makes an authorization request. Then, the server device 2 provides the authorized grant to the assistant who has accessed it as the person himself / herself. The assistant requests the authentication information management device 1 (accessing as an assistant) to issue an access token for the user using the provided authorization grant.

The authentication information management device 1 examines whether or not the assistant is associated with the information for identifying the principal user held in the user database, and when it is confirmed that the assistant is associated (also, the principal user and the assistant). If the level of processing permission associated with the information that identifies the person includes level 3), the access token of the user is issued. If the authority to access the information of the user is set for the assistant here, the authentication information management device 1 assists the information provided by the server device 2 that has performed the authorization grant by the authority. It may be possible to check whether or not the information is set as presentable information to the person, and issue the access token of the user only when the information is set to be presentable to the assistant.

Then, when the authentication information management device 1 issues the access token of the principal user, the authentication information management device 1 sends the access token to the user who is an assistant, not to the principal user.

The assistant sends the access token issued by the authentication information management device 1 to the server device 2 in this way, and requests the provision of information. When the server device 2 verifies this access token and confirms that it is the access token of the principal user, the server device 2 presents the information of the principal user to the user who is an assistant.

Further, the level for approving the (level 2) procedure has already been described, but also in this example, the authentication information management device 1 examines whether or not the assistant is associated with the information that identifies the user. At the same time, the level 2 processing may be executed on condition that the processing permission level associated with the information identifying the user and the assistant concerned includes the level 2. Further, the assistance process at this level 2 may include a confirmation process for confirming the validity of the procedure.

Further, at the level of proxying the (level 1) procedure, the authentication information management device 1 functions as an authorization server in, for example, oauth, and permits or rejects the operation in the server device 2 corresponding to the resource owner, as in the process related to the level 3. You may manage it. However, at this time, the authentication information management device 1 is only for the restricted assistant (for example, only for the assistant who is allowed to perform the level 1 processing) than when the access token is provided in the processing related to the level 3. ), It may act to provide the access token of the user. That is, also in this example, when the authentication information management device 1 examines whether or not the assistant is associated with the information that identifies the principal user, the information that identifies the principal user and the assistant is also included. The level 1 processing may be executed on condition that the processing permission level associated with the above includes level 1.

For example, in the authentication information management device 1, the user who requested the access token is an assistant of the user, and the qualification information recorded in the assistant database in association with the information identifying the assistant is predetermined. If the conditions are satisfied, the access token of the user is provided to the assistant.

As an example, when the server device 2 for which the authorization grant is performed is a server for tax procedures, the authentication information management device 1 is such that the user who requested the access token on behalf of the principal user is the principal user. Only when the assistant and the user who is the assistant is a tax accountant, the access token of the user is provided to the assistant.

Further, as in the above-mentioned example, when the user A who is an assistant of the user U can newly register another user B as an assistant, the level of the assistant processing related to the user A is set. It may be controlled so that the level of the registered user B is not exceeded. For example, in the above-mentioned level 1 to level 3, when the user A as the assistant of the user U is set as the assistant of the user U to be the assistant who is allowed to process the level 2. When the user A registers the user B as an assistant of the user U, the authentication information management device 1 restricts the user B to be set to allow the level 1 processing as the assistant of the user U.

Further, when the user A who is an assistant of the user U can newly register another user B as an assistant, the authentication information management device 1 sets the user B as the user U. As an assistant to the above, it may be set to allow only the processing of a predetermined level, for example, level 3.

[Another aspect of the database]
Further, in the explanation so far, it is assumed that the user database and the assistant database are stored in the storage unit 12, but both or one of them is stored in another server accessible via the network. You may.

Further, the user database and the assistant database may be an integrated database.

1 Authentication information management device, 2 Server device, 11 Control unit, 12 Storage unit, 13 Communication unit, 21 Data acquisition unit, 22 Authentication processing unit, 23 Assistant management unit, 221 Authentication unit, 222 Assistant processing unit.

Claims (4)

An authentication information management device that manages user authentication information.
For each user, an access means for accessing a user database that can hold information that identifies the user, attribute information of the user, authentication information of the user, and information that identifies the assistant of the user in association with each other.
It accepts a request for authentication processing together with information that identifies a user, and in response to the request, performs authentication processing based on the authentication information of the user specified by the accepted information, and associates it with the information that identifies the user. When the information for identifying the assistant is registered in the user database, the authentication processing means for executing the predetermined assistance process by the assistant of the user specified by the information, and the authentication processing means.
Including
In the assist processing by the authentication processing means, the attribute information of the user to be assisted is referred to, and the necessity of the assist processing is determined based on the referred attribute information.
An authentication information management device further including a guidance means for guiding a change of an assistant to the user by referring to the attribute information of the user in the user database at a predetermined timing . The authentication information management device according to claim 1.
The request for authentication processing includes information regarding the operation of the user to be authenticated.
As an assistant process, the authentication processing means notifies the assistant of the operation of the user for each assistant of the user based on the information regarding the operation of the user who is the target of authentication specified by the received information. An authentication information management device that determines whether or not to perform the operation and notifies the assistant who has determined to perform the notification regarding the operation of the user. The authentication information management device according to claim 2.
The access means is
At least as the attribute information of the assistant
Information that identifies users who are relatives, relatives, or relatives of the assistant, and
Information about the profession of the assistant and
Information on the qualifications of assistants and
Access the assistant database that holds one of them,
An authentication information management device that determines whether or not the authentication processing means notifies the assistant of the operation of the user based on the attribute information of each assistant of the user. A program that lets a computer manage user credentials
For each user, an access means for accessing a user database that can hold information that identifies the user, attribute information of the user, authentication information of the user, and information that identifies the assistant of the user in association with each other.
It accepts a request for authentication processing together with information that identifies a user, and in response to the request, performs authentication processing based on the authentication information of the user specified by the accepted information, and associates it with the information that identifies the user. When the information for identifying the assistant is registered in the user database, the authentication processing means for executing the predetermined assistance process by the assistant of the user specified by the information, and the authentication processing means.
Guidance means for guiding the change of the assistant to the user by referring to the attribute information of the user in the user database at each predetermined timing.
To make the computer work,
When performing the assist processing when functioning as the authentication processing means, the computer is made to refer to the attribute information of the user who is the target of the assist processing, and the necessity of the assist processing is determined based on the referred attribute information. program.

Images