KR100796737B1 - Certification System Using One Time Passport And Certification Method Using One Time Passport - Google Patents

Abstract

The service provider authentication system of the present invention executes a service provider one-time password generation process using visual information and user information, and generates a service provider one time password, and compares the user one time password with the service provider one time password. It includes an authentication server for authenticating.

The service provider authentication system of the present invention includes a user information and a user one-time password generation process, and includes a smart card for generating a user one time password, a user computer including a user authentication applet for user authentication, and a user computer and a smart card. Intermediary to perform user authentication with a user terminal that allows a user to perform user authentication using a smart card.

User authentication, smart card, authentication system, one-time password

Description

Certification System Using One Time Passport And Certification Method Using One Time Passport

1 is a block diagram showing the configuration of a service provider authentication system according to an embodiment of the present invention.

FIG. 2 shows a configuration of a user terminal system for authenticating a user together with the authentication system of FIG. 1.

FIG. 3 shows a configuration of an authentication system using a one-time password composed of the service provider authentication system of FIG. 1 and the user terminal system of FIG. 2.

Figure 4 is a block diagram showing an authentication method using a one-time password in accordance with an embodiment of the present invention.

The present invention relates to an authentication system using a one time password and an authentication method using a one time password.

Currently, various services are provided through a web site based on the Internet. The user who wants to use the service in the website providing the service must authenticate the user to the website.

Typically, for user authentication on a website, the user enters an identification and password in the user authentication window of the website, and the authentication system of the service provider that provides the service through the website can The ID and password are used to authenticate the user by matching the ID and password already registered in the database.

The password used in the conventional user authentication method has a fixed value unless the user changes it. However, when such a password is exposed to another person and the user does not know that the password is exposed, the other person may abuse this password.

In this way, the user is frequently damaged when the ID and password are exposed to others, and the damage is serious in financial transactions.

Therefore, there is an urgent need for a user authentication system and an authentication method that do not use a fixed password and have no security problem even if the password is exposed to others.

In order to solve the above technical problem, the present invention provides a service provider authentication system and a service provider authentication method capable of authenticating a user by generating a one-time password using predetermined user information and predetermined time information in a smart card. To provide.

In addition, the present invention is to provide a user computer capable of authenticating a user by generating a one-time password using predetermined user information and predetermined time information in a smart card.

The present invention also provides a user terminal capable of authenticating a user by generating a one-time password using predetermined user information and predetermined time information in a smart card.

The present invention also provides a smart card capable of authenticating a user by generating a one-time password using previously stored predetermined user information and predetermined time information.

In order to solve the above technical problem, the service provider authentication system according to an aspect of the present invention is a password generation server for generating a service provider one-time password by executing a service provider one-time password generation process using time information and user information, And an authentication server for authenticating the user by comparing the user one time password with the service provider one time password. The service provider authentication system includes a user information and a user one-time password generation process, and a smart card for generating a user one time password, a user computer including a user authentication applet for user authentication, and a user computer and a smart card, The user authentication is performed together with the user terminal which enables the user to perform user authentication using a smart card.

According to another aspect of the present invention, a user computer includes a predetermined web browser, communicates with an authentication server and a user terminal via wired or wireless communication, accesses a service provider's website through a web browser, requests a service, and Present a predetermined user authentication window through a web browser, request a user one time password to the user terminal, if a user one time password is received, automatically enter the received user one time password in the password field of the user authentication window, When the user authentication from the authentication server is completed, provide the service of the service provider to the user. A user computer may be configured to execute a service provider one time password generation process using visual information and user information to generate a service provider one time password, and an authentication server that authenticates the user by comparing the user one time password with the service provider one time password. A smart card and service provider authentication system that includes a service provider authentication system, a user information and a user one-time password generation process, and a smart card and service provider authentication system that generates a user one time password, wherein the user authenticates the user using the smart card. Perform user authentication with a user terminal that enables it to be performed.

According to another aspect of the present invention, a user terminal includes a GPS communication unit capable of receiving visual information from a GPS satellite, a smart card communication unit capable of communicating with a smart card in a contact or non-contact manner, and a wired or wireless communication method with a user computer. And a wired / wireless communication unit capable of communicating with each other, and when receiving a user password generation request from the user computer, forwarding the user password generation request to the smart card, and receiving the user password from the smart card, Pass the user password. The user terminal includes a password generation server for executing the service provider one time password generation process using the time information and the user information to generate the service provider one time password, and an authentication server for authenticating the user by comparing the user one time password with the service provider one time password. Performing user authentication with a user computer comprising a service provider authentication system, a user information and a user one time password generation process, including a smart card for generating a one time user password and a user authentication applet for user authentication.

According to another aspect of the present invention, a smart card includes a user information and a user one time password generation process, and when a user one time password generation request is received from a user terminal, a smart one time password generation process is performed using time information and user information. It generates a user password and delivers it to the user terminal. The smart card includes a password generation server that executes a service provider one time password generation process using visual information and user information to generate a service provider one time password, and an authentication server that authenticates a user by comparing the user one time password with the service provider one time password. A user computer comprising a service provider authentication system, a user terminal that mediates a service provider authentication system and a smart card, allowing a user to perform user authentication using a smart card, and a user authentication applet for user authentication. Perform user authentication with

According to another aspect of the present invention, there is provided a method of authenticating a user of a service provider, wherein the authentication server requests a user one time password from the user computer, and when the authentication server receives the user one time password from the user computer, the service provider uses one time the service provider one time. Requesting a password, the password generation server requests and receives time information and user information for the user, and the password generation server uses the received time information and user information to perform a service provider one-time password generation process. Generating a service provider one-time password, the password generation server delivering the service provider one time password to the authentication server, and the authentication server contrasting the user one time password with the service provider one time password. Comprising the step of authenticating users over. The service provider's user authentication method includes a user information and a one-time password generation process, a smart card for generating a user one-time password, a user computer including a user authentication applet for user authentication, and a user computer and a smart card by mediating And a user terminal that enables a user to perform user authentication using the smart card.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention.

First, an authentication system using a one-time password according to an embodiment of the present invention will be described with reference to FIGS. 1 to 3.

Figure 1 shows the configuration of a service provider authentication system using a one-time password according to an embodiment of the present invention. FIG. 2 illustrates a configuration of a user terminal system for authenticating a user together with the service provider authentication system of FIG. 1. FIG. 3 shows a configuration of an authentication system using a one-time password composed of the service provider authentication system of FIG. 1 and the user terminal system of FIG. 2.

As can be seen in Figure 1, the service provider authentication system 100 according to an embodiment of the present invention is the authentication server 110, password generation server 130, database 150 and website server 170 It includes.

As can be seen in FIG. 2, the user terminal system 200 according to an embodiment of the present invention includes a smart card 210, a user terminal 230, and a user computer 250.

First, a service provider authentication system 100 according to an embodiment of the present invention will be described.

When the user requests a predetermined service through a service provider's website or the like, the authentication server 110 compares the user one time password with the service provider one time password corresponding to the user and authenticates the corresponding user.

Specifically, when a user wants to request a predetermined service from a service provider, the authentication server 110 of the service provider requests a user ID and a user disposable password for user authentication from the user computer 230.

The authentication server 110 requests the service provider one time password from the password generation server 130 when the user ID and the user one time password are received through the user computer 230.

When the service provider one time password is received from the password generation server 130, the authentication server 110 compares the user one time password and the service provider one time password and completes user authentication when both are the same.

Meanwhile, the authentication server 110 transmits a callback short service (SMS) message including a service permission message to the user terminal 230 after authentication of the user, and stops authentication from the user terminal 230 in response to the callback short service message. If requested, it will suspend authentication for the current user.

In the embodiment of the present invention, the authentication server 110 is disclosed to authenticate the user using a one-time password, the authentication server 110, in addition to the user authentication through a one-time password, a user using a fixed password commonly used The authentication function can be provided together.

When there is a service provider one time password request from the authentication server 110, the password generation server 130 generates a service provider one time password by providing a service provider one time password and provides it to the authentication server 110.

Specifically, the password generation server 130 communicates with the GPS satellites to receive time information, receive user information from the database 150, and perform a predetermined one time password generation process using the time information and the user information. To create a service provider one-time password.

Specifically, in the embodiment of the present invention, the one-time password generation process may include time information, user ID, user personal information, physical information of the smart card itself, a serial number of the smart card, and a predetermined number for security of the generated password. A service provider one-time password is generated by combining user information selected from one or more groups from the group of random values generated by the mechanism. Here, the physical information of the smart card may include a card manufacturing number on the semiconductor chip used for the smart card, the serial number of the smart card means a serial number assigned to the smart card by the smart card issuing authority. The mechanism for generating a random value is not particularly limited as long as it generates a random value from a predetermined input value and typically generates a random value from the input value. Herein, the input value input to the mechanism may include a serial number of the smart card.

In an embodiment of the present invention, a high level of security is achieved by generating a service provider one-time password using the physical information of the smart card, a serial number given when the smart card is issued, a random value issued by a predetermined mechanism, and the like, in addition to visual information. Can be achieved.

Although the password generation server 130 is disclosed as a separate element from the authentication server 110 in the embodiment of the present invention, the password generation server 130 may be one authentication engine embedded in the authentication server 110. have.

The database 150 stores user information such as a user ID, user personal information, physical information of the smart card itself, a serial number of a smart card issuing authority, and the like, when requested by the password generation server 130, the user information is stored. to provide. The user information stored in the database 150 may be information previously provided to the service provider when the user applies for a service from the service provider.

When the user authentication is completed in the authentication server 110, the web site server 170 provides a service to the user through the Internet. Such services may be euro or free content available on the website.

Next, a user terminal system 200 according to an embodiment of the present invention will be described.

The user terminal 230 mediates the user computer 250 and the smart card 210 to enable the user to receive a predetermined service from the service provider through the user computer 250 using the smart card 210. .

The user terminal 230 according to an embodiment of the present invention is a GPS communication unit (not shown) capable of receiving visual information from a GPS satellite, and a smart card communication unit (not shown) capable of communicating with a smart card in a contact or non-contact manner. And a wired / wireless communication unit (not shown) capable of communicating with a user computer by a wired or wireless communication method.

In detail, when a user's one-time password generation request is received from the user computer 250, the user terminal 230 receives visual information by communicating with a global poisiting system (GPS) satellite and contacts or contacts the smart card 210. It communicates by contactless method and requests creation of user password.

In addition, when a user password is received from the smart card 210, the user terminal 230 transmits the user password to the user computer 250 through a wired or wireless communication method. In this case, the user terminal 230 may display the received user password through a predetermined display unit (not shown). The user terminal 230 according to an embodiment of the present invention may include a mobile phone, a PDA, a desktop computer, a notebook computer, an MP3 player, a PMP, and the like.

The smart card 210 includes a certificate, user personal information, physical information of the smart card, a serial number of the smart card, and a user one-time password generation process, and when a user one-time password generation request is received from the user terminal 230, The user one-time password generation process is performed to generate a one-time user password.

The smart card 210 used in the embodiment of the present invention is not limited to a card including an integrated circuit (IC) memory device capable of storing a large amount of information such as the above application. The smart card 210 may be a credit card, check card, or security card.

When the smart card 210 receives a user one-time password generation request from the user terminal 230, the smart card 210 performs a user one-time password generation process by using the time information received from the user terminal 230 and pre-stored user information. Create a new password.

Specifically, in the embodiment of the present invention, the user one-time password generation process may be applied to visual information, user personal information, physical information of the smart card itself, the serial number of the smart card, and a predetermined mechanism to secure the generated password. A service provider one-time password is generated by combining user information selected from one or more selected from the group consisting of random values.

In the embodiment of the present invention, a high level of security can be achieved by generating a user one-time password using the physical information of the smart card, the serial number of the smart card, a random value issued by a predetermined mechanism, etc. in addition to the visual information. .

Here, the user one-time password generation process preset in the smart card 210 is substantially the same as the one-time password generation process preset in the password generation server 130, and thus the same one-time use from the same visual information and the same user personal information. Create a password.

In the exemplary embodiment of the present invention, the smart card 210 receives time information from the user terminal 230 and discloses generating a one-time user password using personal information previously stored in the smart card, but the present invention is limited thereto. It doesn't happen. Specifically, the user terminal 230 is configured to include a user one-time password generation process, the smart card 210 delivers previously stored personal information to the user terminal 230, the user terminal 230 is visual information and personal It can be configured to generate a user one-time password using the information.

The user computer 250 is provided with a predetermined web browser or the like and accesses the service provider's website via wired or wireless internet to request a predetermined service, and communicates with the service provider authentication system 100 to authenticate the user. It is not limited. In more detail, the user computer 250 may include a desktop computer, a notebook computer, a mobile phone, a PDA, and the like.

The user computer 250 according to an embodiment of the present invention includes a user authentication applet (not shown), and performs a user authentication procedure by wired or wireless communication with the authentication server 110 and the user terminal 230 using the user authentication applet. To perform.

Specifically, when the user accesses the service provider's website using the user computer 250 and requests a predetermined service, the service provider's website displays the user authentication window through the web browser of the user computer 250. Will be presented to. Here, the user authentication window is linked with the authentication server 110 of the service provider authentication system 100.

As such, when there is a user one-time password request through the user computer 250, the user computer 250 requests the user one-time password from the user terminal 230.

On the other hand, when the user one-time password is received from the user terminal 230, the user computer 250 may be set to be automatically input to the password input field of the authentication window of the service provider's website.

 In the exemplary embodiment of the present invention, the smart card 210 is disclosed as a separate element from the user terminal 220, but the smart card 210 may be configured to be mounted on the user terminal 220. In addition, although the user terminal 220 is disclosed as a separate element from the user computer 250 in the embodiment of the present invention, the user terminal 220 may be configured to be combined with the user computer 220.

The service provider authentication system 100 and the user terminal system 200 using the one time password according to the above embodiment are disclosed to use time information received from a GPS satellite as time information, but is not limited thereto. Specifically, the web standard time may be used as the time information, or the web standard time may be used together with the time information received from the GPS satellite.

Such time information is used up to the second or minute unit of the time of the time, and preferably, the time information having the minute unit as the minimum count element.

Specifically, when the minute unit is the minimum count element, the one-time password generated is changed every minute. However, when the difference between the newly used time information and the time information used for generating the previous one-time password in the authentication server 110 is within 1 minute, or when the newly generated one-time password is the same as the previous one-time password, the newly generated one is generated. It is desirable to discard the one-time password.

Hereinafter, an authentication method using a one-time password according to an embodiment of the present invention will be described in detail with reference to FIG. 4.

4 is a block diagram illustrating an authentication method using a one-time password according to an embodiment of the present invention.

The user requests a service from the service provider through the user computer 250. In this case, the service provider requests user authentication through the authentication server 110.

The authentication server 110 of the service provider requests the user one-time password from the user computer 250.

As such, when the user disposable password request is received from the authentication server 110, the user computer 250 requests the user disposable password from the user terminal 230 (S100).

Specifically, the user computer 250 determines whether the user authentication request from the authentication server 110 is a user authentication using a fixed password or a user authentication using a one-time password using a user authentication applet, and the user authentication request is a one-time password. In the case of using the user authentication, the user terminal 230 requests the user one-time password. If the user authentication request is user authentication using a fixed password, the user computer 250 requests the user to input a fixed password. This user authentication method can be configured to be selected by the user.

The user terminal 230 receives the time information or the web standard time information from the GPS satellite and transmits the time information or the web standard time information from the user computer 250 to the smart card 210.

The smart card 210 generates a one-time user password by performing a preset one-time password generation process by using user information about a user who has been previously stored and time information received from the user terminal 230 (S200). Since the method of generating the user one-time password has been described in detail above, further description thereof will be omitted.

The user terminal 230 receives the user one-time password generated from the smart card 210 and transmits it to the user computer 250 (S300).

The user computer 250 automatically authenticates first to the authentication server 110 using the received user disposable password (S400). The user one-time password is used for the first authentication in the user terminal system, the generated user one-time password is used only for the corresponding first authentication, and may be rejected if the user authentication is used again later.

When the authentication server 110 receives the user disposable password from the user computer 250, the authentication server 110 requests the service provider one time password from the password generation server 130 (S500).

The password generation server 130 receives time information or web standard time information from the GPS satellite, requests user information about the user who requested the service from the database 150, and then presets the time information using the time information and the user information. The one-time password generation process is performed to generate the service provider one-time password (600). Since the method of generating the service provider one-time password has been described in detail above, further description thereof will be omitted.

The password generation server 130 transfers the generated service provider one-time password to the authentication server 110 (S700).

The authentication server 110 contrasts the user one-time password received from the user computer 250 and the service provider one-time password received from the password generation server 130 (S800). At this time, if the user one-time password received from the user computer 250 and the service provider one-time password received from the password generation server 130 is matched to complete the user authentication (S900). In this case, when the user one-time password and the service provider one-time password do not match, the authentication server 110 displays a user authentication failure message to the user.

When the user authentication is completed in this way, the authentication server 110 may send a callback short message service to the user terminal 230 to inform the user of the completion of the user authentication. In addition, after receiving the user authentication completion through the callback short service, the user may request to stop the user authentication through the callback return, and the authentication server 110 stops the user authentication when the authentication stop is requested from the user. This is preferable.

Although the preferred embodiments of the present invention have been described above, the present invention is not limited thereto, and various modifications and changes can be made within the scope of the claims and the detailed description of the invention and the accompanying drawings. Naturally, it belongs to the range of.

As described above, when the service provider authentication system according to an embodiment of the present invention has a user authentication request, the user terminal system generates a one-time password for the user from the user information pre-stored in the smart card and the GPS time base or the web standard time base. And, the service provider authentication system generates a service provider one-time password from the pre-stored user information and GPS time based or web standard time for the smart card user, and whether or not the user authentication against the generated user one time password and the service provider one time password Judge.

That is, the authentication system according to the embodiment of the present invention generates a one-time password every time the user is authenticated, thereby achieving security without having to worry about exposing a password to another person, and generating a one-time user password and a service provider one-time password, respectively. By contrasting each other, the security of user authentication is further secured.

In addition, the user terminal system according to an embodiment of the present invention, when a user one-time password is received, by automatically inputting it into the password input field of the authentication window of the service provider loaded on the user computer, the user authentication is made automatically Can be achieved.

Claims (31)

A smart card comprising user information and a user one time password generation process, the smart card generating the user one time password; A user computer including a user authentication applet for user authentication; And A service provider authentication system for performing user authentication with a user terminal, which mediates the user computer and the smart card to allow a user to perform user authentication using the smart card. A password generation server that generates a service provider one time password by executing a service provider one time password generation process using time information and user information which is time information or web standard time information received from a GPS satellite; And An authentication server for authenticating a user by comparing the user one time password with the service provider one time password; Service provider authentication system comprising a. The method of claim 1, The authentication server And a service provider authentication system for authenticating the user when the user one time password and the service provider one time password are the same. The method of claim 1, The authentication server Ask the user for a password through the user's computer, And comparing the password input by the user with a preset and stored password, and performing a user authentication function for authenticating the user when the input password and the preset stored password are the same. delete The method of claim 1, And at least one user information is selected from a user ID, user personal information, physical information of the smart card itself, a serial number of the smart card, and the like. The method of claim 5, The service provider one-time password generation process And a mechanism for obtaining a predetermined random value by using the serial number of the smart card. The method of claim 6, And the user information further comprises the random value obtained by the mechanism. The method of claim 1, And the service provider one time password generation process is set to be substantially the same as the user one time password generation process. The method of claim 8, The service provider one time password generation process is executed asynchronously with the user one time password generation process. The method according to any one of claims 1 to 3 or 5 to 9, User information such as a user ID, user personal information, physical information of the smart card itself, and a serial number (including various key values) assigned by a smart card issuing authority is stored for each user, and the user information is stored in the password generation server. A service provider authentication system further comprising a database to be delivered upon request. A password generation server that executes a service provider one time password generation process using time information and user information to generate a service provider one time password, and an authentication server that authenticates the user by comparing the user one time password with the service provider one time password. Service provider authentication system; A smart card including user information and a user one time password generation process and generating the user one time password; And In the user computer for performing the user authentication with a; User terminal for interrogating the service provider authentication system and the smart card, the user to perform a user authentication using the smart card, It is provided with a predetermined web browser, and communicates with the authentication server and the user terminal by wire or wireless, Access a website of a service provider through the web browser to request a service, and present a predetermined user authentication window through the web browser linked to the authentication server; Requesting the user one time password from the user terminal and automatically receiving the user one time password in the password input box of the user authentication window when the user one time password is received, And provide the service of the service provider to the user when the user authentication is completed from the authentication server. A password generation server that executes a service provider one time password generation process using time information and user information to generate a service provider one time password, and an authentication server that authenticates the user by comparing the user one time password with the service provider one time password. Service provider authentication system; A smart card comprising user information and a user one time password generation process, the smart card generating the user one time password; And A user terminal that performs user authentication with a user computer including a user authentication applet for user authentication, the user terminal comprising: A GPS communication unit capable of receiving visual information from a GPS satellite; A smart card communication unit capable of communicating with the smart card in a contact or non-contact manner; And A wired / wireless communication unit capable of communicating with the user computer through a wired or wireless communication method; Including, When the user password generation request is received from the user computer, the user password generation request is forwarded to the smart card, And when the user password is received from the smart card, transferring the user password to the user computer. The method of claim 12, The user terminal When receiving the user password, the user terminal further comprising a display unit for displaying the user password. The method according to claim 12 or 13, The user terminal is a mobile phone, a PDA, a desktop computer, a notebook computer, an MP3 player, or a PMP. A password generation server that executes a service provider one time password generation process using time information and user information to generate a service provider one time password, and an authentication server that authenticates the user by comparing the user one time password with the service provider one time password. Service provider authentication system; A user terminal which mediates the service provider authentication system and the smart card so that a user may perform user authentication using the smart card; And A smart card for performing user authentication with a user computer including a user authentication applet for user authentication, comprising: Includes user information and user one-time password generation process, When the user one-time password generation request is received from the user terminal, the user one-time password generation process is performed by using the time information and the user information, which is time information or web standard time information received from a GPS satellite, so that the user A smart card that generates a password and delivers it to the user terminal. delete The method of claim 15, The at least one user information is selected from a user ID, user personal information, physical information of the smart card itself, and a serial number assigned by a smart card issuing authority. The method of claim 15, The user one-time password generation process And a mechanism for obtaining a predetermined random value by using a serial number assigned to the smart card when issuing the smart card. The method of claim 17, The user information further comprises the random value obtained by the mechanism. The method of claim 15, The user one time password generation process is substantially the same as the service provider one time password generation process. The method of claim 15, The user one time password generation process is executed asynchronously with the service provider one time password generation process. A smart card comprising user information and a user one time password generation process, the smart card generating the user one time password; A user computer including a user authentication applet for user authentication; And In the user authentication method of the service provider to perform the user authentication with; a user terminal for mediating the user computer and the smart card, the user to perform a user authentication using the smart card, The authentication server requesting a user one time password from a user computer; When the authentication server receives the user one time password from the user computer, requesting a service provider one time password from a password generation server; The password generation server requesting and receiving time information which is time information or web standard time information received from a GPS satellite and user information about the user; Generating, by the password generation server, the service provider one-time password by performing a preset and stored service provider one-time password generation process using the received time information and the user information; The password generation server transferring the service provider one time password to the authentication server; And Authenticating the user against the user one time password and the service provider one time password; User authentication method of the service provider comprising a. The method of claim 22, And a service authentication method for authenticating the user when the user one time password and the service provider one time password are the same. The method of claim 22, When the user computer receives the user one time password request from the authentication server, the user computer requests the user one time password generation request, The user terminal receives the time information when the user one-time password generation request is received and delivers to the smart card, The smart card performs the one-time password generation process by using the user information about the user and the time information received from the user terminal, and generates the one-time password for the user, respectively. Way. delete The method according to any one of claims 22 to 24, And at least one user information is selected from a user ID, user personal information, physical information of a smart card itself, and a serial number assigned by a smart card issuing authority. The method of claim 26, The service provider one-time password generation process And a mechanism for obtaining a predetermined random value by using a serial number assigned to the smart card when issuing the smart card. The method of claim 26, The user information further comprises the random value obtained by the mechanism. The method according to any one of claims 22 to 24, The service provider one time password generation process is substantially the same as the user one time password generation process. The method of claim 29, The service provider one time password generation process is performed asynchronously with the user one time password generation process. A computer-readable recording medium, Requesting a user one time password from a user computer via an authentication server; Requesting a service provider one time password from a password generation server when receiving the user one time password from the user computer; Requesting and receiving time information which is time information or web standard time information received from a GPS satellite through a password generation server and user information for the user; A function of generating a service provider one time password by performing a preset and stored service provider one time password generation process using the time information and the user information received through the password generation server; Delivering the service provider one-time password to the authentication server through the password generation server; And A function of authenticating a user against the user one time password and the service provider one time password through the authentication server; The recording medium on which a program for executing the program is recorded.

Images