JPH1040203A - Method for authenticating information receiving person - Google Patents

Abstract

PROBLEM TO BE SOLVED: To authenticate a client being an information receiving person in a client server-type system. SOLUTION: An CGI script and an html file are requested to a server 1. The CGI script and the html file are transferred to the client 2. A browser part 22 of client 2 analyzes the html file and displays it in a display part 21. An HTTP part 11 of the server 1 transmits a server side telephone number, a password and a personal number, etc., to the client 2. The client 2 inputs data in entry columns of a telephone number, a name and an address, etc., which are displayed in the browser part 22 and automatically makes a phone call from the client 2 to the server 1 based on a server telephone number. The server 1 collates the telephone number communicated to the HTTP part with a caller number, etc., transmitted by a telephone so as to authenticate whetherl the client is the the one with a request.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a method of authenticating a client as an information receiver in a client-server type system including a plurality of computers connected to a communication network.

[0002]

2. Description of the Related Art In a conventional server, data required by a browser, security of a source, and personal authentication are defined by I.
It was done with a P address or the like. In the server, its IP
The user's telephone number must be determined by another data search server from the address or the like, and the operator must intervene with the telephone number to call the information receiver and confirm the authentication.
For this reason, information cannot be directly transmitted from the server when information having added value or profit is generated by the information, or when there is identification as a group member such as a member.

[0003]

Conventionally, authentication has been performed using data that can be input from a browser or the like. However, whether the person who input the data is the person himself or his telephone number belongs to the person himself / herself. Could not be identified, restricting the disclosure of data when performing services that require security, services that require data access fees, and services that require permission to provide information. There was a problem.

[0004] An object of the present invention is to specify an information receiver when receiving value-added information by computer communication or when profits are generated by the information, or when it is necessary to identify whether the member is a group member such as a member. An object of the present invention is to provide a method for authenticating an information recipient.

[0005]

According to an information receiver authentication method of the present invention, a client connects to a server via a network having a function of notifying a called party of a caller identification number upon connection, and The password input by the user of the client is transmitted to the server, and when the connection is received from the client, the server compares the password transmitted from the client with the caller identification number notified from the network. When the password and the caller identification number match,
The client is determined to be a genuine information recipient.

According to the present invention, when accessing a server or the like using a browser such as Netscape, a caller identification number of a telephone public network is used to authenticate an information receiver on the server side.

According to another information receiver authentication method of the present invention, a CGI script and an html file are requested from a client browser to a server, and the CGI script and the html file are transferred from the client to the client. Interprets the html file and displays it on the display unit. When the access displayed on the display unit is clicked, the server transmits the server-side telephone number, password, personal number, etc. to the client, and the client transmits the file. Enter the server-side phone number, password, personal number, etc., and call the server from the client based on the server-side phone number. The server sends the communicated phone number and the caller number sent by phone. Check to determine if the client is the requested client.

[0008]

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a configuration diagram of a client-server type system according to an embodiment of the present invention, and FIG. 2 is a flowchart of an information recipient authentication operation.

This client-server type system comprises a server 1, a client 2, a network connection device 3
, A public network (private network) 6, a computer network 5, and a LAN network 4.

The server 1 comprises an HTTP unit 11, a transmission unit 12, a server telephone control unit 13, and a server data analysis unit 14. The HTTP unit 11 includes a storage unit 11a and a CGI script 11b. The difference from the related art is that the server telephone control unit 13 and the server data analysis unit 14 are added. However, the server telephone control unit 13 and the server data analysis unit 14 can be configured on different computers. The client 2 includes a display unit 21, a browser unit 22, a storage unit 23, a client data analysis unit 25, and a client telephone control unit 26. The difference from the related art is that a client data analysis unit 25 and a client telephone control unit 26 are added. However, the client data analysis unit 25 and the client telephone control unit 26 can be configured on different computers.

The network connection device 3 secures a connection between computers, and has the same function as that of the related art.

The main function of the server 1 is that when an access request is received from the browser unit 22 of the client 2,
The html file (server-side telephone number, password, personal number, etc.) stored in the storage unit 11a of the TP unit 11 is transferred to the client 2. After that, the data (telephone number, name, address, etc.) of the browser 22 transferred from the client 2 is stored in the HTTP unit 11.

The server telephone control number section 13 stores a data field (user information and the like) that can be added simultaneously with the caller number notified from the client 2 via the public network 6 (private network).
The data stored in the server telephone control unit 13 and the HTT
The data stored in the P unit 11 is compared with the server data analysis unit 1
4 compares and compares.

The main functions of the client 2 are a function of transmitting data (telephone number, name, address, etc.) on the browser unit 22 side and an html file (HTTP file) stored in the HTTP storage unit 11 transmitted from the server 1 side. This function analyzes the data of the server-side telephone number, password, personal number, etc. in the client data analysis unit 25 and makes a call from the telephone number via the public network (private network) 6 from the client telephone control unit 26. .

Next, the mechanism of the present information recipient authentication method will be described by taking as an example the case where information is output from the server 1 in response to a request from the client 2 and authentication is performed.

(1) First, a CGI script and an htm are sent from the browser unit 22 of the client 2 to the server 1.
A request for an l file is made (step 31).

(2) In the server 1, the CGI script 11b and the html file are transferred to the client 2 by the HTTP unit 11 (step 32).

(3) The browser unit 22 of the client 2 interprets the html file and displays it on the display unit 21 (step 33).

(4) Click "Access" displayed on the display unit 21 (step 34).

(5) When "Access" is clicked, the server-side telephone number, password, personal number, and the like are transmitted from the HTTP unit 11 of the server 1 to the client 2 (step 35).

(6) In the client 2, the browser unit 2
Enter data in the input fields such as telephone number, name, address, etc. displayed in 2 and click "Send". At the same time, from the client 2 to the server 1 based on the server telephone number
Is automatically called (step 36).

(7) In the server 1, the telephone number communicated to the HTTP section and the caller number transmitted by telephone (originating I
D) and the like, the client is authenticated as a requestor, and if the authentication is confirmed, the HTTP unit 11 can be permitted to refer to the next source and download data (step 37).

[0024]

As described above, according to the present invention, WW
Using CGI script which is the basic function of W server,
Authentication without requiring a response can be performed without any modification of the existing browser, and the network can be used effectively. In particular, the present invention is effective in networks using HTTP, browsers, and public networks.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a client-server type system according to an embodiment of the present invention.

FIG. 2 is a flowchart of an information recipient authentication operation in the system of FIG. 1;

[Explanation of symbols]

Reference Signs List 1 server 2 client 3 network connection device 4 LAN network 5 computer network 6 public network (private network) 11 HTTP unit 11a storage unit 11b CGI script 12 transmission unit 13 server telephone control unit 14 server data analysis unit 21 display unit 22 browser Unit 23 reception unit 24 storage unit 25 client data analysis unit 26 client telephone control unit 31 to 37 steps

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Yasuhiro Yamashita Nippon Telegraph and Telephone Corporation 3-19-2 Nishishinjuku, Shinjuku-ku, Tokyo

Claims (3)

[Claims] 1. A method of authenticating a client, which is an information receiver, in a client-server type system including a plurality of computers connected to a communication network, wherein the client transmits a caller identification number to a called party at the time of connection. A connection is made to the server via a network having a function of notifying the client, a password input by a user of the client is transmitted to the server, and when the server receives the connection from the client, A password transmitted from a client is compared with a caller identification number notified from the network, and when the password matches the caller identification number, information reception that determines the client as a genuine information receiver Authentication method. 2. A public telephone communication network having a function of notifying a called party of a caller identification number at the time of connection, wherein the password and the caller identification number are subscriber telephone numbers of the public telephone communication network. The information recipient authentication method according to claim 1, wherein 3. A method for authenticating a client, which is an information receiver, in a client-server type system including a plurality of computers connected to a communication network, wherein a client browser transmits a CGI script and an html file to a server. Makes a request, the server transfers the CGI script and the html file to the client, and the client browser interprets the html file and displays it on the display unit. When the access displayed on the display unit is clicked, the server displays the server. The client sends the server-side telephone number, password, personal number, etc. to the client, and the client inputs the transmitted server-side telephone number, password, personal number, etc., and calls the server from the client based on the server-side telephone number. The sir A method of verifying an information recipient by comparing a transmitted telephone number with a caller number or the like transmitted by telephone to determine whether or not the client has made a request.