WO2006109752A1

WO2006109752A1 - User authentication system for rss reader

Info

Publication number: WO2006109752A1
Application number: PCT/JP2006/307504
Authority: WO
Inventors: Kazuho Oku
Original assignee: Cybozu Labs, Inc.
Priority date: 2005-04-08
Filing date: 2006-04-07
Publication date: 2006-10-19
Also published as: JPWO2006109752A1

Abstract

A web browser (40) includes a cookie DB (41) for storing user authentication information on a web server (21) and request means (step S46) for requesting an RSS reader (42) to receive new arrival information according to a reception request when a web page received from the web server (21) contains the reception request of new arrival information. In response to the request by the request means, the RSS reader (42) logs-in the web server (21) (step S48) according to the user authentication information stored in the cookie DB (41). The RSS reader (42) includes new arrival information reception means for receiving the new arrival information from the web server (step S49). Thus, user authentication in the RSS reader is automated.

Description

Specification

User authentication system for RSS reader

Technical field

The present invention relates to an RSS reader user authentication system, an RSS reader user authentication method, a program, and an information storage medium, and more particularly, to sharing user information between an RSS reader and a web browser.

Background art

In recent years, an increasing number of people browse websites using personal computers. When browsing a website, use a viewing software to display text and images on the screen of a PC that is published on a website on the Internet.

[0003] This browsing software is called a web browser, and HTML (Hyper Text

Markup Language) files, image files, music files, etc. are downloaded, the layout of the web page is analyzed, and characters and images are laid out and displayed as appropriate.

[0004] Many users who use the Internet search and collect information published on websites. However, the number of sites sent by individuals is enormous, so it is a huge amount of work to check whether each site's information is updated and accessed one by one. .

[0005] Therefore, recently, the site and search target keywords are registered in advance in the i¾, R¾S (RDF (Resource Description Framewong Site Summary; reader), and only the information updated by the RSS reader is stored. It can be collected automatically.

[0006] Here, the RSS reader receives new arrival information (update information) in the form of RSS, etc., and displays it in the form of a link list as to whether the information of the site to be searched is newly updated. Software (computer program). RSS is a type of language format based on XML (extensible Markup Language), which is used to describe new arrival information on websites. In this specification, software that receives and displays new arrival information in RSS-derived formats such as ATOM is also referred to as an RSS reader. [0007] Sites with high usability, such as web logs and -you sites, often provide new information via RSS. Documents written in RSS can describe the title, address, headline, summary, update time, etc. of each page of the website. By using RSS documents, new information on many websites can be unified. It is possible to grasp efficiently by a conventional method.

Disclosure of the invention

Problems to be solved by the invention

[0008] However, at present, the user authentication information is shared between the RSS reader and the web browser. Therefore, the distribution of the web page to the web browser and the distribution of the new information to the RSS reader. When both sides require user authentication, the user must log in by entering user authentication information such as user name, user ID, and password in both the RSS reader and the web browser.

[0009] In recent years when privacy issues such as protection of personal information are screamed, there are users who hesitate to send user authentication information in a detour. For example, for users familiar with the Internet, the ability to enter user authentication information without having a sense of resistance in the mouth gui page displayed by the web browser. A new authentication screen displayed by the RSS reader. You may feel uncomfortable with re-entering user authentication information.

[0010] Particularly in recent years, phishing scams that pretend to be real websites and send e-mails that exploit user authentication information have become popular. Not desirable.

[0011] The present invention has been made in view of these points, and the purpose of the present invention is to automate user authentication in an RSS reader so that new information on a large number of websites can be unified in a uniform manner. An object is to provide an RSS reader user authentication system, an RSS reader user authentication method, a program, and an information storage medium that can be efficiently grasped. Means for solving the problem

[0012] In order to solve the above-mentioned problem, an RSS reader user authentication system according to the present invention Includes a web browser and an RSS reader that are communicatively connected to a web server via a communication network. The web browser includes storage means for storing user authentication information of the web server, and when the web page received from the web server includes a request for receiving new information, the RSS reader responds to the reception request. Requesting means for requesting to receive the new arrival information. In addition, the RSS reader logs in to the web server based on the user authentication information stored in the storage unit and receives the new arrival information from the web sano in response to a request by the request means. Including information receiving means;

[0013] According to the present invention, when a web page received from a web server includes a new information reception request, the RSS reader automatically performs web browsing based on the user authentication information stored by the web browser. You can log in to the site and receive new information

In one aspect of the present invention, the web server distributes a web page on condition of confirmation of the user authentication information, and means of distributes the new arrival information on condition of confirmation of the user authentication information. ,including.

[0015] In one aspect of the present invention, the web browser transmits user authentication information to the web server in accordance with a login page transmitted from the web server, and the user authentication information transmitting means and the user A user authentication information updating unit that updates the user authentication information stored in the storage unit when the user authentication information transmitted by the authentication information transmission unit is confirmed by the web server.

[0016] In this case, when the RSS reader fails to log in to the web server based on the user authentication information stored in the storage unit, the RSS reader logs in from the web server to the web browser. Login page re-reception request means for requesting to receive the page again may be further included. In this way, the user can enter the user authentication information on the login page displayed by the web browser, and the user has the mental burden of entering the user authentication information on the screen displayed by different software. You don't have to hang it. At this time, when the RSS reader fails to log in based on the user authentication information stored in the storage unit, the web server transmits the URL of the login page to the RSS reader. Further include login URL sending means. In this way, the RSS reader can notify the web browser of the URL of the login page and request re-reception of the mouth page.

[0018] The web browser may further include login page requesting means for requesting the login page from the web server in response to a request by the login page re-reception requesting means. Alternatively, the web browser notifies the user that the login to the web server based on the user authentication information stored in the storage unit has failed in response to a request from the login page re-reception request unit. It may further include output means for performing output for the purpose.

[0019] Also, in one aspect of the present invention, the web server includes a request for receiving the new arrival information in the web browser when confirming the user authentication information transmitted by the user authentication information transmitting unit. Web page transmitting means for transmitting a web page is further included. In this way, when new user authentication information is confirmed, the RSS reader immediately receives the new information. This mode has the advantage that the RSS reader can receive newly received information reliably, especially when an expiration date is set for the user authentication information.

[0020] Also, in one aspect of the present invention, the new arrival information reception request includes a URL of the new arrival information. In this way, the web browser can notify the RSS reader of the URL of the new information and request the RSS reader to receive the new information.

[0021] Further, the RSS reader user authentication method according to the present invention includes a storage step in which a web browser stores user authentication information of a web server in a storage means, and a new information reception request for a web page received from the web server In response to the reception request, the web browser requests the RSS reader to receive the new arrival information, and the RSS reader responds to the request in the request step. Based on the user authentication information stored in the storage means, the user logs in to the web server and receives the new arrival information from the web sano. And a tape.

[0022] In addition, when a web page received by a web browser from a web sano includes a new arrival information reception request, the program according to the present invention sends the new arrival information to an RSS reader in response to the reception request. A requesting step for requesting reception, and in response to the request by the requesting step, based on the user authentication information of the web server stored in the storage means by the web browser for the RSS reader, A program for causing a computer to execute a new arrival information reception step for logging in to the web server and receiving the new arrival information from the web sano. An information storage medium according to the present invention is an information storage medium storing the above program.

Brief Description of Drawings

FIG. 1 is a diagram showing an overall configuration of an RSS reader user authentication system according to an embodiment of the present invention.

FIG. 2 is a diagram showing a hardware configuration example of a user computer used in the RSS reader user authentication system according to the embodiment of the present invention.

FIG. 3 is a flowchart showing authentication processing of the RSS reader user authentication system according to the embodiment of the present invention.

FIG. 4 is a flowchart showing authentication error power recovery processing of the RSS reader user authentication system according to the embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

[0024] [Summary]

According to the RSS reader user authentication system of this embodiment, user authentication information is shared between the RSS reader and the web browser.

The web server performs user authentication using cookies, and user authentication information used for this user authentication is stored in the user's computer. The RSS reader reads out this user authentication information at an appropriate timing, uses it to log in to the web server, and receives new arrival information.

[0026] Here, a cookie is a file created by a website, transmitted from the web server to the user's web browser, and stored in the hard disk of the user computer. Means information stored in Cookies can store personal information such as name, email address, address, and phone number that can be used to identify and contact the user.

[0027] In this embodiment, when the RSS reader fails to log in to the web server due to the expiration of the cookie or the expiration of the user authentication information, the RSS reader itself inputs the user authentication information. Instead of displaying a screen requesting, the web browser displays that screen. For this reason, the RSS reader requests re-login to the web browser when login to the web server fails. In response to this request, the web browser accesses the web server again to request re-login, and displays a login page transmitted from the web server in response to this request on the computer display. In this way, the user can input user authentication information on the authentication screen displayed by the familiar web browser. In addition, when an error screen with a display for re-login instructions such as button images and anchors associated with the URL of the login page is displayed by the RSS reader, and a re-login instruction is issued by the user according to the display Alternatively, the web browser may access the web server again and display the login page.

Hereinafter, embodiments of the present invention will be described in more detail based on the drawings.

[0029] [Overall configuration]

In FIG. 1, an RSS reader user authentication system 10 includes a web server 21, a user computer (computer used by a user) 31, and a wired or wireless communication network 51 such as the Internet. Connected, the user computer 31 can send and receive information on websites on the Internet. The wired or wireless communication network 51 may include an information communication network represented by a LAN or a public line in addition to the Internet of any kind.

[0031] The user computer 31 is a computer connectable to the Internet or the like. O A large number of user computers may be connected to the communication network 51. Here flight For convenience, one user computer 31 is taken up.

[0032] The user computer 31 includes any computer that can be connected to the communication network 51, such as a personal computer, a PHS, a mobile phone, a satellite mobile phone, a PDA, and an electronic notebook.

[0033] [Hardware configuration of user computer]

FIG. 2 is a block diagram showing an example of the hardware configuration of the user computer 31 used in the RSS reader user authentication system according to the present embodiment.

[0034] The user computer 31 includes a central processing unit (hereinafter referred to as a CPU) 32 that performs comprehensive information processing, a storage unit 35 that includes RAM 33 and ROM 34, and a peripheral device and a storage unit 35. Transfer device 36 that controls the transmission of information while synchronizing between them, an input device unit 37 that also controls the instruction input, such as a keyboard or pointing device, and an output that controls the screen displayed on the CRT display etc. The device unit 38 is configured mainly by NIC (network “interface” card) power, and is configured by a communication device unit 39 that transmits and receives various data via the communication network 51.

[0035] The storage unit 35 includes a RAM (random access 'memory) 33 that functions as a main memory or work area of the CPU 32, and a ROM (read') that functions as a storage for boot programs, network management programs, and the like. Only 'memory) 34.

[0036] The user computer 31 is installed with an RSS reader program and a web browser program. Then, a web browser program is executed in response to the user's instruction input, the desired web page data is received from the web site constructed in the web server 21, and the web page is displayed on the display of the user computer. It has become. Also, the RSS reader program is resident, and it regularly accesses websites to receive new information. Each program is stored in a computer-readable information storage medium such as a CD-ROM or DVD-ROM, and the program is also installed in the user computer 31. Then, when the user computer 31 executes the program stored in the information storage medium, various processes according to the present embodiment such as the processes of FIGS. 3 and 4 are realized. Each program is connected to other combinations through various communication networks such as the Internet. Of course, it may be downloaded to the user computer 31 from the user.

[0037] The user authentication information (cookie) of the website constructed in the web server 21 is stored in the cookie DB (see Fig. 3 and Fig. 4) constructed in the storage device unit 35 by the transfer device 36 and stored in the cookie DB. The stored user authentication information is transmitted to the web server 21 by the communication device unit 39. As described above, the cookie that is the user authentication information stored in the cookie DB is used by both the RSS reader program and the web browser program. In other words, the web server 21 uses the common user authentication information to restrict access by distributing new information and web pages.

[0038] [Login procedure]

FIG. 3 is a flowchart showing the authentication process of the RSS reader user authentication system according to the present embodiment.

The flow of processing when the web server 21 and the user computer 31 access a website that performs authentication using cookies will be described with reference to FIG.

[0040] First, the web browser 40 requests the web server 21 to transmit a login page (step S41). Specifically, when the user starts the web browser (program) 40 installed in the user computer 31 and enters the URL of the login page, the user logs in to the web server 21 specified by the URL. A page request is sent.

In response to this request, the web server 21 returns a login page to the web browser 40 of the user computer 31 (step S42). The login page is a data file (such as an HTML file) saved on the web server 21 and indicates a form for requesting login to the web server 21 by entering user authentication information.

[0042] The web browser 40 displays the login page received from the web server 21. When the user inputs the user name and password, which are user authentication information, to the login page, they are transmitted to the web server 21 (step S43).

[0043] Here, the mode of user authentication is not limited, such as fingerprint authentication, in which user authentication is performed using a user name and a password. User authentication information can be transmitted using SSL (Secure Socket Layer), public key cryptography, private key cryptography, digital It will be sent using cryptographic techniques such as Tal Certificate, No, and Shuh Function.

[0044] The web server 21 checks whether the user authentication information (user name and password) transmitted from the web browser 40 of the user computer 31 is correct, that is, matches the user name and password stored in advance. Judge whether to do. If the user authentication information is correct, that is, if the confirmation of the user authentication information is completed by the web server 21, a cookie and a login completion page are transmitted to the web browser 40 (step S44). Here, in the cookie, the user authentication information transmitted from the web browser 40 of the user computer 31 in step S43 or other user authentication information (for example, that the user is an authenticated user) that is a substitute information thereof. Identification code). The login completion page is a page for notifying the user that the login has been completed. In particular, the new request information re-reception request includes, for example, a header (HTTP response header) and content as meta information. This new information re-reception request includes the URL of the new information that the RSS reader 42 should receive.

[0045] The web browser 40 stores the cookie received from the web server 21 in the cookie DB 41 in the user computer 31 (step S45).

[0046] Further, the web browser 40 searches the web page (login completion page) received from the web server 21 to determine whether or not the new information re-reception request is included. The new information re-reception request is transferred to the RSS reader 42 (step S46).

[0047] The RSS reader 42 reads the cookie (user authentication information) stored in the cookie DB 41 (step S47), attaches the read cookie, and sends a new information transmission request to the web server 21. (Step S48). At the time of this request, the URL included in the re-reception request transferred from the web browser 40 is used as the URL of the new arrival information. The RSS reader 42 may store in advance the URL of the website that the user has instructed to regularly receive new arrival information. In this case, the RSS reader 42 receives a re-reception request transferred from the web browser 40. A new information transmission request is transmitted to the web server 21 only when the URL included in the URL is included in the URL thus stored.

[0048] The web server 21 authenticates the user by comparing the user key information stored in advance with the key sent from the RSS reader 42 of the user computer 31. If the user authentication information is confirmed, the new information is returned to the RSS reader 42 (step S49). The RSS reader 42 accesses the site designated by the user from the websites described in the new arrival information (step S50).

Note that the RSS reader 42 may not be provided in the user computer 31. For example, there may be a web browser 40 in the user computer 31 and an RSS reader 42 in a mobile device such as a mobile phone. In this case, the user computer 31 may transfer a request for re-receiving a cookie or user information as user authentication information to the RSS reader 42. The mopile device may be a portable personal computer, a PHS (Personal Handy phone System), a mobile phone, a satellite mobile phone, a PDA (Personal Data Assistance), an electronic notebook, or the like.

[0050] [Authentication error power recovery procedure]

As described above, the RSS reader 42 periodically accesses the web server 21 and receives new arrival information. Also at this time, the RSS reader 42 logs in to the web server 21 with a V, cookie (user authentication information) stored in the cookie DB 41 attached. However, login may fail due to cookie expiration or authentication information expiration. In this case, an authentication error is transmitted from the web server 21 to the RSS reader 42.

FIG. 4 is a flowchart showing a recovery process from an authentication error of the RSS reader user authentication system according to the present embodiment. The figure shows the flow of processing when the RSS reader 42 fails to log in to the web server 21 using a cookie.

[0052] First, the RSS reader 42 reads a cookie (user authentication information) stored in the cookie DB 41 (step S61), attaches the read cookie, and requests the web server 21 to send new information. (Step S62).

[0053] The web server 21 compares the cookie (user authentication information) with information stored in advance, and if the verification fails, returns authentication error data to the RSS reader 42 (step S63). This authentication error data includes the URL of the login page for the web browser 40 of the web server 21! /.

[0054] The RSS reader 42 that has received the authentication error data from the web server 21 Request user 40 to display the login page (step S64). At this time, the RSS reader 42 notifies the web browser 40 of the URL of the login page included in the authentication error data. It is also possible to display an error screen in the RSS reader 42 and request the web browser 40 to display a login page when a button or other UI included in the error screen is operated! / ,.

[0055] The web browser 40 that has received the re-login request may automatically access the web server 21 and make a login page transmission request. Alternatively, after the user gives an instruction, the web server 21 may be accessed and a login page transmission request may be made. In the latter case, it is preferable that the web browser 40 displays on the display that an authentication error has occurred when the RSS reader 42 accesses the web server 21 at least until the user gives an instruction. When the login page data is transmitted from the web server 21 in response to the login page transmission request, the web browser 40 receives it and displays the login page on the display. Since the processing after the web browser 40 sends a request for sending a login page to the web server 21 is the same as the steps S41 to S50 in the login procedure shown in FIG. 3, further explanation is omitted here.

Industrial applicability

[0056] According to the present invention, since user authentication information is shared between the RSS reader and the web browser, it is possible to save the trouble of inputting the user authentication information when logging in to the website using the RSS reader. A very useful web system can be realized.

Claims

The scope of the claims

[1] Includes a web browser and RSS reader that are connected to a web server via a communication network,

The web browser

Storage means for storing user authentication information of the web server;

Requesting means for requesting the RSS reader to receive the new arrival information in response to the reception request when the web page received from the web server includes a new arrival information reception request;

The RSS reader

In response to a request by the request unit, the log-in unit includes a new arrival information receiving unit configured to log in to the web server based on the user authentication information stored in the storage unit and receive the new arrival information from the web sano.

RS S reader user authentication system.

[2] In the RSS reader user authentication system according to claim 1, the web server includes:

An RSS reader user authentication system comprising: means for distributing a web page on condition of confirmation of the user authentication information; and means for distributing the new arrival information on condition of confirmation of the user authentication information.

[3] In the RSS reader user authentication system described in claim 1 or 2,

The web browser

User authentication information transmitting means for transmitting the user authentication information to the web server according to a login page transmitted from the web sano;

User authentication information updating means for updating the user authentication information stored in the storage means when the user authentication information transmitted by the user authentication information transmitting means is confirmed by the web server;

An RSS reader user authentication system characterized by further including:

[4] In the RSS reader user authentication system described in claim 3, The RSS reader

When the login to the web server based on the user authentication information stored in the storage unit fails, the login page re-reception that requests the web browser to receive the login page again from the web server. Including further request means,

RS S reader user authentication system.

[5] In the RSS reader user authentication system according to claim 4, the web server includes:

A log-in URL transmission unit that transmits a URL of the log-in page to the RSS reader when the RSS reader fails to log in based on the user authentication information stored in the storage unit;

RS S reader user authentication system.

[6] In the RSS reader user authentication system described in claim 4 or 5,

The web browser

Log page request means for requesting the login page from the web server in response to a request by the login page re-reception request means;

RS S reader user authentication system.

[7] In the RSS reader user authentication system described in claim 4 or 5,

The web browser

In response to a request from the login page re-reception request means, an output means for performing output for notifying the user that login to the web server based on the user authentication information stored in the storage means has failed. Including,

RS S reader user authentication system.

[8] In the RSS reader user authentication system according to any one of claims 1 to 7,

The web server is When confirming the user authentication information transmitted by the user authentication information transmitting means, further comprising a web page transmitting means for transmitting a web page including the new information reception request to the web browser.

RS S reader user authentication system.

[9] In the RSS reader user authentication system according to any one of claims 1 to 8,

The new information reception request includes a URL of the new information,

RS S reader user authentication system.

[10] A storage step in which the web browser stores the user authentication information of the web server in the storage means;

A request step for requesting the RSS reader to receive the new arrival information in response to the reception request when the web page received from the web server includes a new arrival information reception request;

In response to the request in the request step, the RSS reader logs into the web server based on the user authentication information stored in the storage means, and receives the new arrival information from the web server. When,

An RSS reader user authentication method characterized by including:

[11] In the RSS reader user authentication method described in claim 10,

When the RSS reader fails to log in to the web server based on the user authentication information stored in the storage means, the RSS reader re-logs the login page from the web server to the web browser. A login page re-reception request step for requesting reception;

An RSS reader user authentication method characterized by the above.

[12] When the web page received by the web browser from the web server includes a new arrival information reception request, a request step for requesting the RSS reader to receive the new arrival information in response to the reception request;

Based on the user authentication information of the web server stored in the storage means by the web browser for the RSS reader in response to the request in the requesting step, A new arrival information receiving step of logging into the web server and receiving the new arrival information from the web sano;

A program that causes a computer to execute.

[13] In the program according to claim 12,

When the RSS reader fails to log in to the web server based on the user authentication information stored in the storage means, the RSS reader power also receives the login page from the web server to the web browser again. A program for causing the computer to further execute a login page re-reception request step for requesting to do so.

[14] A request step for requesting the RSS reader to receive the new arrival information in response to the reception request when the web page received by the web browser from the web server includes a new arrival information request;

In response to the request in the requesting step, the RSS reader is made to log in to the web server based on the user authentication information of the web server stored in the storage means by the web browser, and the new arrival from the web server. A new information receiving step for receiving information;

An information storage medium storing a program for causing a computer to execute.

[15] In the information storage medium according to claim 14,

When the RSS reader fails to log in to the web server based on the user authentication information stored in the storage means, the RSS reader power also receives the login page from the web server to the web browser again. An information storage medium storing a program, further comprising causing the computer to execute a login page re-reception requesting step for requesting to do so.