JPH1125050A - Transmission medium and information processing method and device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent a user from being accidently or intentionally pretended by a third person. SOLUTION: An issuing part 25 issues a checking temporary password with a term of validity for use in response to application information received by a receiving part 22 and an informing part 26 informs a user's previously registered electronic mail address of the temporary password and a uniform resource locator(URL) in a home page 212 for confirmation. A 2nd collation part 27 collates a temporary password inputted by the user with the received temporary password, and when the inputted password is correct, an approval receiving part 28 allows the user to check the application information from the user on the home page 212.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a transmission medium, and an information processing method and apparatus. More particularly, when specific information for specifying a user is input to a server connected to the Internet, the specific information is transmitted to the server. In order to confirm whether or not the input was made by the user identified from the specific information, the URL of the confirmation homepage and the temporary password were sent to the user's e-mail address, and the input was made. The present invention relates to a transmission medium that enables a user to confirm the content of the specified information, and an information processing method and apparatus.

[0002]

2. Description of the Related Art In a membership-based mail-order sales service, a paid message transmission service, a paid information service, and the like using a homepage on the Internet, a member inputs information such as a product purchase application and service acceptance on the homepage. The service provider will provide the member with
When an ID and password are issued at the time of enrollment and the user uses the service, by entering the ID and password before inputting the information, it is possible for a third party other than the member to input the information accidentally or intentionally. Has been eliminated. As security measures other than providing ID and password, SS
There is an L (Secure Socket Layer) method.

[0003]

However, if a third party other than the member obtains the member's ID and password,
There was a problem that a third party could impersonate a member corresponding to the ID and input information.

[0004] The SSL method depends on the type and version of a WWW (World Wide Web) browser, cannot be used using only an existing user terminal system, and requires a long time for confirmation processing. was there.

[0005] The present invention has been made in view of such a situation, and is intended to prevent a third party from accidentally or intentionally impersonating the person.

[0006]

According to the transmission medium of the present invention, when a predetermined system is accessed by a user, it is confirmed whether or not the access is made by the user himself. When first specific information for specifying a user is input in a transmission medium for transmitting a computer program to be executed, the first specific information is issued to the user in advance and registered, and the user is specified. A first matching step for matching with the second specific information;
When the correspondence between the first specific information and the second specific information is confirmed in the collation step, to access confirmation information for confirming whether or not the first specific information is input by the user himself / herself And a notifying step of notifying the user of the access information.

According to a seventh aspect of the present invention, there is provided an information processing method for confirming whether or not a predetermined system is accessed by a user when the predetermined system is accessed by the user. When the first specific information for specifying the user is input, the first specific information is
A first collation step that is issued to the user in advance and registered, and collates with the second identification information that identifies the user; and the first identification information and the second identification information in the first collation step.
Issuing a step of issuing access information for accessing confirmation information for confirming whether or not the first specific information is input by the user when the correspondence of the specific information is confirmed; And a notifying step of notifying the user of the information.

[0008] An information processing apparatus according to an eighth aspect of the present invention is an information processing apparatus that, when a user accesses a predetermined system, checks whether or not the access is made by the user himself. When the first specific information for specifying the user is input, the first specific information is
A first matching unit that is issued to the user in advance and registered, and matches the second specific information identifying the user; and a correspondence between the first specific information and the second specific information in the first matching unit. Is issued, issuing means for issuing access information for accessing confirmation information for confirming whether or not the first specific information is input by the user himself; and providing the access information to the user. And notifying means for notifying.

[0009] The transmission medium according to claim 1 and claim 7
In the information processing method described in (1), in the first collation step, when the first specific information for specifying the user is input, the first specific information is issued to the user in advance and registered. The first specific information is compared with the second specific information for identifying the user, and when the issuance step confirms the correspondence between the first specific information and the second specific information in the first collation step, Access information for accessing confirmation information for confirming whether or not the information has been input by the user is issued, and a notification step notifies the user of the access information.

[0010] In the information processing apparatus according to the present invention, when the first identification information for identifying the user is input, the first collation means issues the first identification information to the user in advance. And the registered information is compared with the registered second specific information for specifying the user. When the issuing unit confirms the correspondence between the first specific information and the second specific information in the first collating unit, Issue the access information for accessing the confirmation information for confirming whether or not the specific information has been input by the user himself, and the notifying means notifies the user of the access information.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below. In order to clarify the correspondence between each means of the invention described in the claims and the following embodiments, each means is described. When the features of the present invention are described by adding the corresponding embodiment (however, an example) in parentheses after the parentheses, the result is as follows.

That is, in the information processing apparatus according to the present invention, when a predetermined system is accessed by a user, the information processing apparatus checks whether or not the access was performed by the user himself / herself. In the device, when the first specific information for specifying the user is input, the first specific information is collated with the second specific information for specifying the user, which is issued and registered in advance for the user. First
If the correspondence between the first specific information and the second specific information is confirmed by the collating means (for example, the first collating unit 23 in FIG. 2) and the first collating means, the first specific information is determined by the user himself / herself. Issuing means (for example, the issuing unit 25 in FIG. 2) for issuing access information for accessing confirmation information for confirming whether or not the information is input, and notifying means (for example, for notifying the user of the access information) , The notification unit 26 in FIG. 2)
And characterized in that:

However, of course, this description does not mean that the means are limited to those described.

FIG. 1 shows a configuration example of a network system to which the present invention is applied. In this specification,
The term system is intended to denote an entire device or portion made up of a plurality of devices or portions. In this system, a plurality of users 3-1 to 3-3 using an arbitrary WWW browser and an arbitrary e-mail transmitting / receiving software are used.
(Hereinafter, when it is not necessary to distinguish the users 3-1 to 3-3 individually, they are simply described as the user 3.)
In the case where it is not necessary to distinguish -1 to 4-3 individually, the terminal is simply referred to as a user terminal 4). When it is not necessary to distinguish the servers 1-1 to 1-3 individually, they are simply referred to as a server 1).

The server 1-1 has established a homepage (hereinafter, referred to as a service homepage) 211 (FIG. 2) for providing a membership-based mail-order service. User 3
However, in order to purchase a product using the service homepage 211, before using the service, register the e-mail addresses of the three users in the server 1-1 and issue an ID and a password. You need to receive it.

Next, the configuration of the server 1-1 will be described with reference to FIG. In FIG. 2, for convenience of explanation,
Although the state where the user terminal 4-1 of the user 3-1 is connected to the server 1-1 is shown, any user 3 can connect the user terminal 4 to the server 1-1.

The display unit 21 is provided with a service homepage 211 to which members of the mail order service (for example, the user 3-1) access to use the mail order service. The receiving unit 22 receives the ID and the password from the transmission from the user 3, and outputs the received ID and the password to the first matching unit 23. First collation unit 23
Checks the transmitted ID and password against a regular ID and password registered in advance in a built-in storage unit (not shown), and outputs the comparison result to the catalog unit 24. I have. The catalog section 24 sends catalog data to the display section 21, and the display section 21 sends catalog data to the accessing user terminal 4 for display.

The receiving section 22 also receives information (hereinafter, referred to as application information) such as a product purchase application transmitted by the user 3 and transmits the received application information to the issuing section 25 and the application processing section 2.
9. The issuing unit 25 issues a temporary password with an expiration date used when confirming the sent application information, and outputs it to the notifying unit 26 and the second matching unit 27. The notification unit 26 stores the e-mail address of the member, and stores the temporary password and the UR of the confirmation homepage 212 for confirming the application information.
L is notified to the e-mail address of the user 3 corresponding to the ID and password received by the receiving unit 22. The application processing unit 29 holds the application information sent from the receiving unit 22.

When the user 3 accesses the confirmation homepage 212, the receiving unit 22 receives the temporary password transmitted by the user 3 and sends the temporary password to the second collating unit 26. Second
The collating unit 27 collates the temporary password sent from the receiving unit 22 with the temporary password sent from the issuing unit 25, and sends the result of the collation and the temporary password to the approval receiving unit 28. .
The approval receiving unit 28 outputs the application information corresponding to the sent temporary password to the display unit 21. Display 2
1 is the application information sent, "OK" button indicating approval,
A "cancel" button indicating disapproval is displayed on the user terminal 4. When the user 3 confirms the application information and clicks an “OK” button indicating approval, the receiving unit 22 receives the signal and outputs the signal to the approval receiving unit 28. The approval receiving unit 28 sends a processing progress signal to the application processing unit 29. Upon receiving the processing progress signal, the application processing unit 29 proceeds with the processing of the held application information. .

Next, the operation of the server 1-1 will be described with reference to FIGS.
This will be described with reference to the flowchart of FIG.

First, for example, the user 3-1 becomes a member of the mail-order service of the server 1-1 and the server 1-1.
The operation in the case of using the mail order service assuming that the user has registered his / her own e-mail address and has been issued an ID and password will be described. If the user 3-1 is any user
Server 1 via network 2 using WWW browser
When the user accesses the service homepage 211 established at -1 in step S31, the first collating unit 2
3 requests the user 3-1 to input an ID and a password. In response to this request, in step S32, the user 3-1 inputs an ID and a password. The ID and the password are received by the receiving unit 22. In step S33, the first matching unit 23 converts the received ID and password into
It checks the password against the regular ID and password registered in advance in the built-in storage unit. When the first checking unit 23 confirms that the received ID and password are the ID and password issued to the user 3-1, the process proceeds to step S34.

In step S34, the display unit 21
The catalog data is transmitted to the user terminal 4-1 via the network 2 and displayed. When viewing the displayed catalog and applying for the purchase of the service, the user 3-1 inputs application information in step S35. This application information is received by the receiving unit 22. At this time, in step S36, the issuing unit 25 issues a temporary password for confirmation with a validity period for specifying the input application information. In step S37, the notification unit 2
6 is temporary password and homepage 21 for confirmation
2 is transmitted to the e-mail address of the user 3-1 as a member corresponding to the ID and password input in step S32.

In step S41, the user 3-1
Receives the temporary password and the URL of the confirmation homepage 212 using any electronic mail transmission / reception software, and accesses the confirmation homepage 212 using any WWW browser in step S42.
In step S43, the second matching unit 27 determines that the user 3
-1 is required to input a temporary password. In response to this request, in step S44, the user 3-1
Inputs the temporary password received by e-mail. In step S45, the second collation unit 27 collates the input temporary password with the temporary password issued in step S36, confirms that the password is a legitimate temporary password, and checks in step S46.
Proceed to. In step S46, the second matching unit 27
It is determined whether or not the input date and time of the temporary password is within the validity period of the input temporary password, and if it is within the validity period, the process proceeds to step S47.

In step S47, the second collating unit 27
Deletes the input temporary password from the internal memory. In step S48, the display unit 21
Represents application information (application information received by the receiving unit 22) corresponding to the input temporary password, and represents approval.
An "OK" button and a "Cancel" button indicating disapproval are displayed on the user terminal 4-1.In step S49, the user 3-1 checks the contents of the application information to determine whether to approve the user. In step S50, when the application information is approved, the "OK" button is clicked in step S50, and in step S51, the application processing unit 29 proceeds with the processing of the application information.

Next, an operation will be described, for example, in which the user 3-2 impersonates the user 3-1 using the ID and password of the user 3-1 obtained illegally and uses the mail order service. When the user 3-2 accesses the service homepage 211 established on the server 1-1 via the network 2 using an arbitrary WWW browser, in step S31, the first collation unit 23 sends the user 3-2 Prompt for ID and password. In response to this request, in step S32, the user 3-2
Enter your ID and password. In step S33, the first matching unit 23 compares the input ID and password with
The ID is compared with the regular ID and the password registered in the storage unit in advance, and it is confirmed that the ID and the password are the user 3-1.

In step S34, the display unit 21
The catalog is displayed on the user terminal 4-2. User 3-
2 sees this catalog and in step S35,
Enter application information. In step S36, the issuing unit 25 issues a temporary password for confirmation with a validity period for specifying the input application information. In step S37, the notification unit 26 sends the temporary password and the URL of the confirmation homepage 212 to each other in step S3.
The notification is sent to the e-mail address of the user 3-1 as a member corresponding to the ID and password input in Step 2.

In step S41, the user 3-1
Receives the temporary password and the URL of the confirmation homepage 212 using any electronic mail transmission / reception software, and accesses the confirmation homepage 212 using any WWW browser in step S42.
In step S43, the second matching unit 27 determines that the user 3
-1 is required to input a temporary password. In response to this request, in step S44, the user 3-1
Inputs the temporary password received by e-mail. In step S45, the second collation unit 27 collates the input temporary password with the temporary password issued in step S35, and confirms that the password is a legitimate temporary password.
Proceed to 46. In step S46, the second matching unit 27
Determines whether or not the input date and time of the temporary password is within the validity period of the input temporary password, and proceeds to step S47 if it is within the validity period.

In step S47, the second collating unit 27
Deletes the input temporary password from the internal memory. In step S48, the display unit 21
Displays on the display screen of the user terminal 4-1 application information corresponding to the input temporary password, an "OK" button indicating approval, and a "Cancel" button indicating disapproval. In step S49, the user 3-1 checks the content of the application information and determines whether to approve the content. The user 3-1 does not approve it because it is not the application information entered by himself, and clicks a “cancel” button in step S54. At this time, in step S55, the application processing unit 29 stops processing the application information.

The steps in FIGS. 3 and 4 which have not been described above will be further described. Step S3
In step S3, if the ID and password input by the user 3 are compared with the regular ID and password registered in the storage unit in advance, and if the two do not match, step S
Proceed to 38. In step S38, the display unit 21
"The ID and password are incorrect" on the user terminal 4
Is displayed. At this time, the process returns to step S31 to request the user 3 to input the ID and the password again.

If it is determined in step S45 that the temporary password input by the user 3 does not match the regular temporary password, the process proceeds to step S45.
Go to 52. In step S52, the display unit 21
The user terminal 4 displays "Temporary password is incorrect". At this time, in order to request the user 3 to input the temporary password again, step S43 is performed.
Return to

If it is determined in step S46 that the expiration date of the temporary password has expired,
Proceed to step S53. In step S53, the display unit 21 displays "the temporary password has expired" on the user terminal 4, and the application processing unit 29 ends the processing.

A program for performing each of the above processes can be transmitted to the user via a transmission medium such as an information recording medium such as a magnetic disk or a CD-ROM, or a network transmission medium such as the Internet or a digital satellite.

[0033]

As described above, according to the transmission medium described in claim 1, the information processing method described in claim 7, and the information processing apparatus described in claim 8, a user can be connected to a predetermined system. When the first specific information for specifying is input, the first specific information is compared with the second specific information for specifying the user, which is issued in advance to the user and registered, and When the correspondence between the specific information and the second specific information is confirmed, access information for accessing confirmation information for confirming whether or not the first specific information is input by the user himself is issued. Since the user is notified of the access information, it is possible to prevent a third party from accidentally or intentionally impersonating the user.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a network system to which the present invention is applied.

FIG. 2 is a diagram illustrating a configuration of a server in FIG. 1;

FIG. 3 is a flowchart illustrating a procedure of a confirmation process of the server in FIG. 1;

FIG. 4 is a flowchart illustrating a procedure of a confirmation process of the server in FIG. 1;

[Explanation of symbols]

1 server, 2 networks, 3 users, 4
User terminal, 21 display unit, 22 receiving unit, 23
1st collation section, 24 catalog section, 25 issuing section, 26
Notification section, 27 Second collation section, 28 Approval reception section,
29 application processing section, 211 homepage of mail order service, 212 homepage for confirmation

Claims (8)

[Claims] 1. A transmission medium for transmitting a computer program for confirming whether or not a predetermined system is accessed by a user when the user accesses the predetermined system, comprising: When the first specific information to be specified is input, the first specific information is issued to the user in advance and registered, and the second specifying the user is specified.
A first collation step of collating with the specific information of the user; and a correspondence between the first specific information and the second specific information is confirmed in the first collation step. Transmitting a computer program comprising: an issuing step for issuing access information for accessing confirmation information for confirming whether or not the input information has been input; and a notifying step for notifying the user of the access information. A transmission medium characterized by the above-mentioned. 2. The transmission medium according to claim 1, wherein, in the notifying step, the access information is notified by e-mail. 3. The transmission medium according to claim 1, wherein the system is a server connected to the Internet. 4. The transmission medium according to claim 1, wherein the confirmation information is a homepage established on a server connected to the Internet. 5. The access information according to claim 4, wherein the access information is a URL of the home page and a temporary password corresponding to application information input by the user following the first specific information. Transmission medium. 6. When the temporary password is input, a second collation step of collating the inputted temporary password with a temporary password in the access information; and in the second collation step, the temporary password and the access 6. The transmission medium according to claim 5, further comprising an approval receiving step of presenting the application information to the user when the correspondence of the temporary password in the information is confirmed, and receiving the user's approval. 7. An information processing method for confirming, when a user accesses a predetermined system, whether or not the access is made by the user himself, a first method for specifying the user. When the specific information of the user is input, the first specific information is issued to the user in advance and registered in the second
A first collation step of collating with the specific information of the user; and a correspondence between the first specific information and the second specific information is confirmed in the first collation step. Issuing an access information for accessing confirmation information for confirming whether or not the access information has been input, and a notifying step of notifying the user of the access information. Processing method. 8. An information processing apparatus which, when a user accesses a predetermined system, checks whether or not the access has been made by the user himself. When the specific information of the user is input, the first specific information is issued to the user in advance and registered in the second
A first matching unit that matches the first specific information with the second specific information, wherein the first specific information is associated with the user himself / herself. Issuing means for issuing access information for accessing confirmation information for confirming whether or not the input information has been input; and a notifying means for notifying the user of the access information. Processing equipment.