WO2008004672A1

WO2008004672A1 - User authenticating method, user authenticating system, user authenticating device and user authenticating program

Info

Publication number: WO2008004672A1
Application number: PCT/JP2007/063590
Authority: WO
Inventors: Haruhiko Fujii; Tetsuya Nakagawa
Original assignee: Nippon Telegraph And Telephone Corporation
Priority date: 2006-07-07
Filing date: 2007-07-06
Publication date: 2008-01-10
Also published as: JP4813273B2; JP2008015933A

Abstract

In order to reduce necessary operations that a user is required to do for a user authentication by means of his or her own communication device, when call units (4d, 5d, 6d) receive user ID, the call units acquire inherent ID corresponding to the user ID by means of user ID corresponding lists (4b, 5b, 6b), respectively, and call user side communication devices (11) corresponding to the user ID by way of system side communication devices (13, 14, 15) by means of the acquired inherent ID. When incoming call units (11b) of user side communication devices (11) return incoming acknowledgement in accordance with a response to the incoming call bya user (1), the call units (4d,5d, 6d) receive the incoming acknowledgement by way of the system side communicating devices (13, 14, 15) to carry out the user authentication.

Description

Specification

User authentication method, user authentication system, user authentication device, and user authentication program

Technical field

TECHNICAL FIELD [0001] The present invention relates to a user authentication method, a user authentication system, a user authentication device, and a user authentication program that use a unique ID, which is unique information of a communication device used by a user, for user authentication. The present invention relates to a user authentication method, a user authentication system, a user authentication device, and a user authentication program that can reduce the number of operations of the machine and thereby reduce the burden on the user.

Background art

[0002] Conventionally, a technique for using a unique ID of a communication device such as a calling number of a mobile phone for user authentication has been developed. For example, in Patent Document 1, a service system that provides a service to a user stores a user ID and a calling number of a mobile phone in association with each other as a user ID correspondence list, acquires the user ID from a user terminal, A technique is disclosed in which when a calling number is acquired, a combination of the acquired user ID and calling number is in the user ID list, and the user is determined as a regular user.

[0003] Patent Document 1: Patent No. 3497799 Specification

Disclosure of the invention

Problems to be solved by the invention

[0004] However, in the related art, it is necessary to input a telephone number for making a call to the service system each time the user uses the service system. There are problems such as input.

[0005] The present invention has been made to solve the above-described problems caused by the prior art.

Another object of the present invention is to provide a user authentication method, a user authentication system, a user authentication device, and a user authentication program that can reduce the number of operations of a communication device during authentication, thereby reducing the burden on the user.

Means for solving the problem [0006] A configuration for achieving the object will be described below. That is, as shown in FIG. 1, a terminal 8 operated by a user 1 is connected to the service system 4, 5, 6 that is connected to the user 1 via the network 3 and provides the service to the user 1. There is a unique ID storage unit 11a that stores the unique ID indicating that the user 1 is a legitimate user and that it is difficult to rewrite it by an unauthorized operation. However, when a call is received from the service system via a predetermined network 12 having an eavesdropping / tampering prevention function, the user 1 is notified of the incoming call, and when the user 1 receives the incoming call, the incoming call indicating that the incoming call has been received Prepare the user side communication device 11 having the receiving unit l ib to send back the response, and call the user side communication device 11 between the network 12 and the service systems 4 to 6 and return it from the user side communication device 11 System-side communication devices 13, 14, and 15 that receive incoming call responses and forward them to service systems 4 to 6, and user IDs that identify the users themselves in service systems 4, 5, and 6 User ID correspondence lists 4b, 5b, and 6b indicating the correspondence between IDs and unique IDs are stored, and when user 1 inputs a user ID from terminal 8 to use a service system, for example, 4, service The call part 4d of the system 4 searches the user ID correspondence list 4b for a unique ID corresponding to the user ID, and sends the system side communication device 13 via the network 12 to the unique ID of the user side communication device 11 a predetermined number of times. When the user side communication device 11 that receives the call returns the incoming call response indicating that the user 1 has received the call to the system side communication device 13 via the network 12, the service system 4 Communication equipment 13 is notified of the incoming call response, and according to the incoming call response, the user 1 who operates the terminal 8 is provided with a service to the terminal 8 on the assumption that the user 1 is a legitimate user. Note that the predetermined number of times when a call is made to the user side communication device 11 is smaller than the number of times the transfer to another user side communication device is started, and by limiting the call to a predetermined number of times. Therefore, it is possible to prevent transfer to an unauthorized user side communication device, and to prevent an unauthorized person who has illegally obtained a user ID from transferring a call to the user side communication device 11 and using the service illegally.

[0007] According to the above configuration, the unique ID can be prevented from being tampered with by storing the unique ID in the storage unit, which is difficult to rewrite by an unauthorized operation, and adding an eavesdropping / falsification preventing function to the route. The system can be abused by someone else impersonating someone with relative ease. Can be prevented. In addition, since an incoming call response can be sent to a system side communication device compatible with any service system, if there is one user side communication device, it is possible to speak to multiple systems. Unlike conventional authentication methods using physical media, there is no need to prepare physical media and readers for each system and terminal. In addition, since the user side communication device only responds to incoming calls from the system side communication device, there is no need for the user to enter the calling number. Also, since the number of calls is limited to a predetermined number, it is possible to prevent unauthorized transfer.

Also, as shown in FIG. 2, the terminal 8 is operated with respect to service systems 24, 25, and 26 that are connected to the terminal 8 operated by the user 1 via the network 3 and provide services to the user 1. In the user authentication method for authenticating that the user 1 being created is a legitimate user, it has a unique ID storage section 1 la that stores a unique ID indicating that it is a legitimate user that is difficult to rewrite by an unauthorized operation. When a call is received from the service system via the specified network 12 equipped with an eavesdropping / tampering prevention function, the call is notified to the user 1 and when the user 1 receives the call, the incoming call response indicates that the call has been received. The user side communication device 11 having the receiving unit l ib is returned, and the correspondence between the user ID, which is information for identifying the user, and the unique ID is provided between the network 12 and the service system 24-26. The The user ID correspondence list 51b is stored, and on the basis of the authentication request from the service system 24 to 26, the user side communication device 11 is called and the incoming response transmitted from the user side communication device 11 is received to select the user. When the authentication device 51 having the call unit 51d to be authenticated is arranged and the user 1 inputs a user ID to use the service system, for example, 24 from the terminal 8, the authentication unit 24b of the service system 24 specifies the user ID. The authentication unit 51 requests the user to authenticate, and the call unit 51d of the authentication unit 51 searches the user ID correspondence list 51b for the unique ID corresponding to the user ID and When the user-side communication device 11 calls the unique ID a predetermined number of times and returns an incoming call response indicating that the user 1 has received the call, the call unit 51d operates the terminal 8. Iruyu monodentate 1 and notifies that the user is an authorized user to the authentication unit 24b of the service system 24.

[0009] According to the configuration, the unique ID is stored in the storage unit that is difficult to rewrite by an unauthorized operation, In addition, by adding an eavesdropping / falsification prevention function to the route, it is possible to prevent falsification of the unique ID, and it is possible to prevent other people from impersonating the person relatively easily like the password method. In addition, since an incoming response can be sent to an authentication device compatible with any service system, it is possible to log in to multiple systems with a single user-side communication device. Unlike conventional authentication methods using physical media, there is no need to prepare physical media and readers for each system and terminal. In addition, since the communication device on the user side only responds to incoming calls with the authentication device, there is no need for the user to enter the calling number.

. In addition, since the number of calls is limited to a predetermined number, unauthorized transfers can be prevented.

The invention's effect

[0010] According to the present invention, since the user only responds to the call at the time of authentication, there is an effect that it is possible to reduce the burden on the user in the authentication without having to input the calling number. In addition, since the number of calls is limited to a predetermined number, it can be prevented from being transferred, and if the user ID is stolen, the call to the user can be transferred to an unauthorized person and the service can be prevented from being used illegally. .

Brief Description of Drawings

FIG. 1 is a diagram showing a configuration of a user authentication system according to the present invention.

FIG. 2 is a diagram showing another configuration of the user authentication system according to the present invention.

FIG. 3 is a diagram illustrating the configuration of the user authentication system according to the first embodiment.

FIG. 4 is a flowchart of a user authentication processing procedure performed by the user authentication system according to the first embodiment.

FIG. 5 is a diagram illustrating a configuration of a user authentication system according to the second embodiment.

FIG. 6 is a flowchart of a user authentication process performed by the user authentication system according to the second embodiment.

FIG. 7 is a block diagram illustrating a hardware configuration of a computer that executes a user authentication program according to the first and second embodiments.

Explanation of symbols

[0012] 1, 61 users 2, 7, 8 terminals

3, 12 network

4-6, 24-26 service system

4b-6b User ID correspondence list

4d ~ 6d corner section

11 User side communication device

11a Unique ID storage

l i Call receiver

13-15 Communication device on system side

24b-26b recognition, voucher ^

51 Authentication device

51b User ID correspondence list

51d Cornole | 5

62, 63 PC (personal computer)

64 UNIX (UNIX® workstation)

65 Internet

66 File server

66b to 68b User ID list

6d ~ 68d Corner section

7, 68 Web service providing server

71 mobile phone

71a Local number storage

1b Incoming part

2 Wireless network

3 Public telephone network

4, 75 Modem with receiving number receiving function

6 Authentication server

6b User ID list 76d Cornoré Club

86 Huinore Server

86b to 88b Authentication section

86c ~ 88c Character transmitter

87, 88 WEB service providing server

100 computers

110 RAM

111 User authentication program

120 CPU

121 User authentication process

130 HDD

140 LAN interface

150 I / O interface

160 DVD drive

BEST MODE FOR CARRYING OUT THE INVENTION

Exemplary embodiments of a user authentication method, a user authentication system, a user authentication device, and a user authentication program according to the present invention will be described below in detail with reference to the accompanying drawings. In the first embodiment, the case where the service system itself authenticates the user will be described. In the second embodiment, the case where the service system requests user authentication from the authentication apparatus will be described.

Example 1

First, the configuration of the user authentication system according to the first embodiment will be described. FIG. 3 is a diagram illustrating the configuration of the user authentication system according to the first embodiment. In the figure, 61 is a user, 62 and 63 are personal computers (PC) as terminals, 64 is a UNIX (registered trademark) workstation (UNIX (registered trademark)) as a terminal, 65 is the Internet as a network, 66 is File sano as a service system, 67 and 68 are web service providing servers as service systems.

[0015] In addition, 71 is a mobile phone as a user-side communication device, and 72 and 73 are predetermined networks. All wireless networks and public telephone networks, 74 and 75 are modems with a calling number receiving function as system side communication devices (however, the modem 75 is shared by the web service providing servers 67 and 68).

Here, the own station number storage unit 71a in the mobile phone 71 is used as the unique ID storage unit, that is, the telephone number (calling number) stored in the own station number storage unit 71a as the unique ID is used. Shall be used. The wireless network 72 and the public telephone network 73 shall have a function to prevent tapping and tampering of communications. It is assumed that the modems 74 and 75 with a calling number receiving function have a function of reading and transferring an incoming telephone number.

[0017] In addition, the file server 66 and the web service providing servers 67 and 68 are provided in the user ID correspondence lists 66b, 67b, 68b, and the mobile phone 71 indicating the correspondence between the user ID and the unique ID (calling number in this case). It is assumed that call units 66d, 67d, and 68d for making a call a predetermined number of times via modems 74 and 75 with a calling number receiving function are provided. Here, the predetermined number of times is a number smaller than the number of times that a call to the mobile phone 71 is transferred to another mobile phone.

[0018] Also, here, the call units 66d, 67d, 68d are capable of calling the mobile phone 71 using a fixed call number of each service system. Randomly from among a plurality of call numbers of each service system. It is also possible to call the mobile phone 71 by selecting the calling number. By randomly selecting one of multiple calling numbers and making a call from that number, it becomes difficult to identify the calling number that the service system has, and the possibility of the service system being attacked is reduced. be able to.

[0019] These call parts 66d, 67d, and 68d, when the user 61 presses the call button and the call is established, the talk key is "This is a bank. If you want to log in, dial 1 #. Please flow. " When the characters are returned from the mobile phone 71, the call units 66d, 67d, and 68d determine whether or not “1 #” matches, and if they match, the user 61 is determined as a regular user. To do.

[0020] It should be noted that, here, it is also possible to specify other characters and character strings by specifying “1 #” with the talk key. Here, “character” includes “symbol” and “number”.

[0021] As a talkie, “This is a bank. Inn is permitted. Please hang up the call. " In this case, when the call units 66d, 67d, and 68d receive an incoming call response indicating that the call button of the mobile phone 71 has been pressed, the call units 66d, 67d, and 68d determine that the user 61 is a legitimate user. Also, the user 61 is permitted to log in only by pressing the call button.

Alternatively, it is also possible to send a character or character string to the terminal that has transmitted the user ID and cause the user 61 to return the character or character string displayed on the terminal. In this case, as one of the talkies, for example, “This is OO bank. If you want to log in, please dial the characters displayed on the screen.”

[0023] These call parts 66d, 67d, and 68d force By calling the mobile phone 71 and authenticating using the characters returned from the mobile phone 71, the user 61 simply authenticates the specified characters by dialing. It can be performed. In addition, by authenticating using these call parts 66d, 67d, 68d force S, and characters returned by the mobile phone 71, an attacker of the service system can illegally steal the user ID and forge the caller ID In addition, since it is not possible to identify the character to be returned, the possibility of the service system being attacked can be eliminated.

Next, a processing procedure of user authentication processing by the user authentication system according to the first embodiment will be described. FIG. 4 is a flowchart of the user authentication process performed by the user authentication system according to the first embodiment. Here, a case where the user 61 accesses the file server 66 on the Internet 65 using the PC 62 will be described as an example.

As shown in the figure, in this user authentication process, when the user 61 inputs a user ID to the PC 62, the PC 62 sends the user ID to the file server 66 through the Internet 65 (step Sl l). .

[0026] Then, the call unit 66d of the file server 66 searches for the mobile phone number corresponding to the user ID from the user ID correspondence list 66b (step S12), and uses the searched mobile phone number for the mobile phone 71. Is called a predetermined number of times via the modem 74 with a calling number receiving function (step S13).

[0027] Then, when the user 61 presses the call button, the incoming call unit 71b of the mobile phone 71 is moved to the call button. An incoming call response indicating that the button is pressed is returned (step S14). When the call is established, the call unit 66d of the file sensor 66 transmits a talkie (step S15).

[0028] Then, the receiving unit 71b of the mobile phone 71 plays a talkie, and when the character designated by the talkie (here, "1 #") is dialed by the user 61, "1 #" is returned (step S 1 6). Then, the call unit 66d receives the character returned through the modem 74 with the calling number receiving function and disconnects the call (step S17). Then, the call unit 66d determines whether or not the returned character matches “1 #”, and if it matches, gives the login permission to the PC 62 (step S18).

[0029] In this manner, when the call unit 66d of the file server 66 calls the mobile phone 71 via the modem 74 with the caller ID reception function, the user 61 can authenticate only by returning the character specified by the talkie. This can be done and can reduce the burden on the user 61 in user authentication.

[0030] As described above, in the first embodiment, the call units 66d, 67d, and 68d use the user ID correspondence lists 66b, 67b, and 68b to acquire the mobile phone numbers corresponding to the user IDs, respectively. Call the cellular phone 71 corresponding to the user ID using the cellular phone number via the modems 74 and 75 with a calling number reception function to cause the talkie to flow. When the characters specified in the above are sent back, the call units 66d, 67d, 68d perform user authentication based on the characters received via the modems with caller ID reception function 74 and 75 and the characters specified in the token. Therefore, the user 61 can authenticate only by returning the character, and the burden on the user can be reduced.

[0031] In the first embodiment, when a call is made to the mobile phone 71, by restricting the call to a predetermined number of times, transfer to an unauthorized mobile phone is prevented, and an unauthorized person who obtained a user ID illegally. Can prevent unauthorized use of the service by transferring a call to mobile phone 71.

Example 2

In the first embodiment, the case where each service system performs user authentication has been described. However, user authentication may be performed using an authentication apparatus that receives a user authentication request from the service system and performs user authentication. it can. Therefore, in this second embodiment, the service The case of using an authentication device that accepts user authentication requests from the system and performs user authentication will be described.

First, the configuration of the user authentication system according to the second embodiment will be described. FIG. 5 is a diagram illustrating the configuration of the user authentication system according to the second embodiment. Here, for convenience of explanation, functional units that play the same functions as those shown in FIG. 3 are given the same reference numerals, and detailed explanations thereof are omitted.

As shown in FIG. 5, this user authentication system has a file server 86 in place of the file server 66 as a service system, and a WEB service in place of the WEB service providing servers 67 and 68 as service systems. Service providing servers 87 and 88 are provided. The user authentication system also includes an authentication server 76 that receives user authentication requests from each service system and performs user authentication. Each service system and the authentication server 76 are connected by a highly secure network such as a VPN.

[0035] The file server 86 and the web service providing servers 87 and 88 have character transmission units 86c, 87c and 88c and authentication units 86b, 87b and 88b, respectively. The character transmission units 86c, 87c and 88c are When the ID is received, characters are randomly selected from a plurality of characters and sent to the terminal that sent the user ID, and the authentication unit 86b, 87b, 88b specifies the user ID and the character and sends the user authentication to the authentication server 76. And determines whether to provide a service to the user based on the authentication result of the authentication server 76.

[0036] The authentication server 76 includes a user ID correspondence list 76b and a corner section 76d. When receiving the authentication request from the service system, the calling unit 76d searches the user ID correspondence list 76b for a mobile phone number corresponding to the user ID, and calls the mobile phone 71 using the searched mobile phone number. When a character is returned from the mobile phone 71, user authentication is performed based on whether the returned character matches the character specified in the authentication request, and the authentication result is sent to the authentication request source. Notify the service system.

[0037] In this example, a character is randomly selected from a plurality of characters and transmitted to the terminal. However, a predetermined character string or character such as "1 #" may always be transmitted to the terminal. it can. Also, here, characters are sent to the terminal that sent the user ID, and the user 61 sends back the characters displayed on the terminal. You can also specify characters and strings. For example, as a talkie, you can say, "This is a bank. If you want to log in, please dial 1 #."

[0038] Or, as a talkie, you can say "This is a bank. The call button has been pressed, so login is allowed. Please hang up." In this case, when an incoming call response indicating that the call button of the cellular phone 71 is pressed is returned, the call unit 76d determines that the user 61 is a legitimate user. Further, the user 61 is permitted to log in only by disconnecting the call after pressing the call button.

Next, a processing procedure of user authentication processing by the user authentication system according to the second embodiment will be described. FIG. 6 is a flowchart of a user authentication process performed by the user authentication system according to the second embodiment. Here, a case where the user 61 accesses the file server 86 on the Internet 65 using the PC 62 will be described as an example.

As shown in the figure, in this user authentication process, when the user 61 inputs a user ID to the PC 62, the PC 62 transmits the user ID to the file server 86 via the Internet 65 (step S21).

[0041] Upon receiving the user ID, the character transmitting unit 86c of the file server 86 randomly selects a character from a plurality of characters and transmits it to the PC 62 (step S22), and the authentication unit 86b sends the authentication server 76 to the authentication server 76. The user authentication request is transmitted by designating the user ID and the character transmitted by the character transmission unit 86c (step S23). When the call unit 76d of the authentication server 76 receives the authentication request, the mobile phone number corresponding to the user ID is searched from the user ID correspondence list 76b (step S24).

[0042] Then, the calling unit 76d calls the cellular phone 71 a predetermined number of times using the retrieved cellular phone number (step S25), and when the user 61 presses the call button, the incoming unit 71b of the cellular phone 71 is called. Returns an incoming call response indicating that the call button is pressed (step S26), and when the call is established, the call unit 76d of the authentication server 76 transmits a talkie (step S27).

[0043] Then, the receiving unit 71b of the mobile phone 71 plays a talkie, and when the character transmitted to the terminal is dialed by the user 61, the dialed character is returned (step S28). Then, the call unit 76d receives the returned character and disconnects the call (step S29). Yes

[0044] Then, the call unit 76d determines whether or not the returned character matches the character specified by the file server 86, and if it matches, the call server 76d is an authorized user of the file server 86. Is notified (step S30). Then, the authentication unit 86b of the file server 86 gives a login permission to the PC 62 (step S31).

[0045] As described above, when the call unit 76d of the authentication server 76 receives the user authentication request, the user 61 performs authentication only by returning the character by calling the mobile phone 71 and requesting a character return. It is possible to reduce the burden on the user 61 in user authentication.

[0046] As described above, in the second embodiment, the authentication server 76 accepts the user authentication request from the service system and performs the user authentication, so it is necessary to provide a user authentication function for each service system. It is possible to efficiently construct a user authentication system that can be used with Gaga.

In the first and second embodiments, the user authentication function of the service providing server and the authentication server has been described as! /, But the user authentication function is a user executed by the service providing server and the authentication server. Realized by an authentication program. Therefore, the hardware configuration of the service providing server that executes the user authentication program and the authentication server will be described.

FIG. 7 is a block diagram illustrating a hardware configuration of a computer that executes the user authentication program according to the first and second embodiments, that is, a service providing server and an authentication server. As shown in the figure, the computer 100 includes a RAM 110, a CPU 120, an HDD 130, a LAN interface 140, an input / output interface 150, and a DVD drive 160.

The RAMI 10 is a memory that stores a program, a program execution result, and the like. The CPU 120 is a central processing unit that reads a program from the RAMI 10 and executes it.

[0050] The HDD 130 is a disk device that stores programs and data, and the LAN interface 140 is an interface for connecting the computer 100 to another computer via the LAN or the Internet 65. [0051] The input / output interface 150 is an interface for connecting an input device such as a mouse and a keyboard and a display device, and the DVD drive 160 is a device for reading and writing a DVD.

[0052] The user authentication program 111 executed in the computer 100 is stored in the DVD, read from the DVD by the DVD drive 160, and installed in the computer 100.

Alternatively, the user authentication program 111 is stored in a database or the like of another computer system connected via the LAN interface 140, read from these databases, and installed in the computer 100.

[0054] Then, the installed user authentication program 111 is stored in the HDD 130, read out to the RAMI 10, and executed as the user authentication process 121 by the CPU 120.

[0055] In the first and second embodiments, the power S described for authenticating a user who uses a service system via the Internet, the present invention is not limited to this. For example, ATM ( The same applies to other user authentication such as user authentication in Automatic Teller Machine.

Industrial applicability

[0056] As described above, the user authentication method, the user authentication system, the user authentication device, and the user authentication program according to the present invention are useful when it is desired to specify whether or not the user is authenticated, that is, a legitimate user. Especially suitable when it is important to reduce the burden on the user in user authentication!

Claims

The scope of the claims

[1] A user authentication method using a user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for authentication.

A unique ID corresponding to the user ID obtained by the user ID obtaining process from the user ID obtaining process for obtaining the user ID, which is information for identifying the user, and the user ID list indicating the correspondence between the user ID and the unique ID. A unique ID search process that searches for a unique ID, a call process that makes a call a predetermined number of times to the communication device having the unique ID searched by the unique ID search process,

A user determination step of determining that a user whose user ID has been acquired by the user ID acquisition step is a legitimate user when receiving an incoming call response indicating that the user has received a call made by the call step. When,

A user authentication method comprising:

[2] When the user determination step receives an incoming response indicating that the user has received the call made in the call step from the communication device, the user determination step transmits a talk key requesting the user to return a predetermined character to the communication device. When the character inputted by the user who heard the talkie sent from the communication device is received from the communication device, it is determined whether or not the received character matches the predetermined character. 2. The user authentication method according to claim 1, wherein the user whose user ID has been acquired in the acquisition step is determined to be a regular user.

3. The user authentication method according to claim 1, wherein the communication device is a telephone and the unique ID is a telephone number.

[4] A user authentication method by a user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for user authentication,

A user authentication request receiving step for receiving a user authentication request together with a user ID, which is information for identifying a user, from a device that requires user authentication;

A unique ID search step of searching for a unique ID corresponding to the user ID received by the user authentication request receiving step from a user ID list indicating a correspondence relationship between the user ID and the unique ID; A call process for making a predetermined number of calls to the communication device having the unique ID searched in the unique ID search process;

When an incoming response indicating that the user has received a call made by the call process is received from the transmitter, the user whose user ID is received by the user authentication request receiving process is confirmed to be a legitimate user. A user determination step of notifying a device requiring user authentication;

A user authentication method comprising:

[5] A user authentication system comprising a communication device used by a user and a service system that uses a unique ID, which is unique information of the communication device, for authentication,

The service system includes:

A user ID list storage means for storing a user ID list indicating a correspondence relationship between a user ID, which is information for identifying a user, and a unique ID;

A user ID acquisition means for acquiring a user ID;

Unique ID search means for searching for a unique ID corresponding to the user ID acquired by the user ID acquisition means from the user ID list storage means;

Call means for making a predetermined number of calls to the communication device having the unique ID searched by the unique ID search means;

User determination means for determining that a user whose user ID has been acquired by the user ID acquisition means is a legitimate user when receiving an incoming response indicating that the user has received a call made by the call means from the transmitter And

The communication device is

A user authentication system comprising: an incoming means for receiving a call made by the call means and returning an incoming call response indicating that the user has received the call when the user receives the received call.

[6] A communication device used by a user, a service system that provides a service to the user, and an authentication device that performs user authentication using a unique ID that is unique information of the communication device based on a user authentication request from the service system A user authentication system consisting of The authentication device

User authentication request receiving means for receiving a user authentication request together with a user ID from the service system;

Unique ID search means for searching for a unique ID corresponding to the user ID received by the user authentication request receiving means from the user ID list storage means;

When an incoming response indicating that the user has received a call made by the call means is received from the transmitter, the user whose user ID is received by the user authentication request receiving means is determined to be a legitimate user. User judgment means for notifying the service system;

With

The communication device is

A user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for authentication.

A user ID acquisition means for acquiring a user ID;

Call means for making a predetermined number of calls to the communication device having the unique ID searched by the unique ID search means; User determination means for determining that a user whose user ID has been acquired by the user ID acquisition means is a legitimate user when receiving an incoming response indicating that the user has received a call made by the call means from the transmitter When,

A user authentication device comprising:

[8] A user authentication device that uses a unique ID, which is unique information of a communication device used by a user, for user authentication,

A user authentication request receiving means for receiving a user authentication request together with a user ID from a device requiring user authentication;

When an incoming response indicating that the user has received a call made by the call means is received from the transmitter, the user whose user ID is received by the user authentication request receiving means is determined to be a legitimate user. User determination means for notifying a device that requires user authentication;

A user authentication device comprising:

[9] A user authentication program that uses a unique ID, which is unique information of a communication device used by a user, for authentication.

User ID acquisition procedure for acquiring a user ID, which is information for identifying a user, and a unique ID corresponding to the user ID acquired by the user ID acquisition procedure from the user ID list indicating the correspondence between the user ID and the unique ID A unique ID search procedure for searching for, a call procedure for making a predetermined number of calls to a communication device having a unique ID searched by the unique ID search procedure,

When an incoming response indicating that the user has received a call made by the call procedure is received from the transmitter, the user whose user ID has been acquired by the user ID acquisition procedure is determined. A user determination procedure for determining that the user is a legitimate user;

A user authentication program that causes a computer to execute.

A user authentication program that uses a unique ID, which is unique information of a communication device used by a user, for user authentication,

A user authentication request receiving procedure for receiving a user authentication request from a device that requires user authentication together with a user ID that is information for identifying the user;

A unique ID search procedure for searching for a unique ID corresponding to the user ID received by the user authentication request receiving procedure from a user ID list indicating a correspondence relationship between the user ID and the unique ID, and the unique ID search procedure. A call procedure for making a call a specific number of times to a communication device with a unique ID,

When an incoming call response indicating that the user has received a call made by the call procedure is received from the transmitter, the user whose user ID is received by the user authentication request reception procedure is determined to be a legitimate user. A user determination procedure for notifying a device that requires user authentication;

A user authentication program that causes a computer to execute.