WO2008016147A1

WO2008016147A1 - Method for authenticating browserphone by telephone number, system for authenticating browserphone by telephone number, browserphone authentication server, program for authenticating browserphone by telephone number, service providing method,service providing system, service providing server, and service providing program

Info

Publication number: WO2008016147A1
Application number: PCT/JP2007/065291
Authority: WO
Inventors: Haruhiko Fujii; Tetsuya Nakagawa; Keisuke Hata
Original assignee: Nippon Telegraph And Telephone Corporation
Priority date: 2006-08-03
Filing date: 2007-08-03
Publication date: 2008-02-07
Also published as: JPWO2008016147A1; JP4422194B2

Abstract

When a user portable telephone receives a button operation specifying a displayed item on a Web page displayed on the screen by the user, the user portable telephone automatically calls telephone number information linked with the displayed item. A modem in a service system receives the caller number sent simultaneously with the call by the user portable telephone. The modem reads the caller number sent from the user portable telephone and transfers it to a service providing server. The service providing server receives the caller number transferred from the modem. The service providing server in the service system reads a registration user list where the telephone numbers of the users to which services are to be provided are registered in advance and judges whether or not there is any telephone number listed in the registration user list agreeing with the received caller number. If there is an agreeing telephone number, the user is authenticated as the registered user permitted to receive a service.

Description

Specification

Browser phone authentication method by phone number, browser phone authentication system by phone number, browser phone authentication server, browser phone authentication program by phone number, service providing method, service providing system, service providing server, and service providing program

Technical field

[0001] The present invention relates to the ability to be a legitimate user who can receive a web service provided on a web page, a browser phone authentication method using a phone number to be authenticated, a browser phone authentication system using a phone number, and a browser phone authentication server. If you are a legitimate user who can download file data provided via a web page, a browser phone authentication program by phone number, a service provision method that provides services to provide the file data, etc. TECHNICAL FIELD The present invention relates to a service providing system, a service providing server, and a service providing program xyz apparatus, an xyz method, and an xyz program.

Background art

[0002] Conventionally, when providing various services to a user of a terminal connected via a network, an authentication method for authenticating that user is an authorized user has been disclosed!

[0003] For example, in Patent Document 1 (Japanese Patent Laid-Open No. 2001-350724), a user ID notified from a PC owned by a user who wants to provide a service, and a caller ID notification function by this user operation An authentication method for authenticating whether the user is a legitimate user by determining whether the combination with the phone number of the mobile phone transmitted from the mobile phone equipped with the mobile phone is valid is disclosed.

[0004] In addition, a server operated by a local government or the like accepts an electronic certificate (file data) acquisition request for various certificates such as a resident's card from a user of a mobile phone having a browser function for browsing a web page. In addition, there is also a technology that authenticates the power of being a legitimate user who has registered in advance, and provides an electronic certificate upon request via a network. [0005] Patent Document 1: Japanese Patent Laid-Open No. 2001-350724

Disclosure of the invention

Problems to be solved by the invention

[0006] However, the above-described conventional technique is convenient for a user who wants to receive various services via a network. When an electronic certificate is provided, management costs are required! There was a problem.

[0007] That is, a user who wants to receive a service provides a PC having a browser function for browsing a WEB page of a server that provides the service, and a mobile phone having a caller ID notification function. This is convenient for users who want to receive various services via the network because it is necessary to provide the user ID required for user authentication and to notify the server by entering the user ID. There was a problem of applying to.

[0008] In addition, a server operated by a local government provides a user with a digital certificate in response to a request to a user of a mobile phone having a browser function for browsing a WEB page. Since it is common for a user to log in after authenticating with the assigned ID and password, there is a problem in that it costs money to assign and manage each user with an ID and password.

[0009] Therefore, the present invention has been made to solve the above-described problems of the prior art, and the user needs a plurality of devices in order to receive provision of various services via the network. Authentication using a telephone number, a browser phone authentication method using a telephone number, a browser phone authentication system using a telephone number, a browser phone authentication server, and a telephone number. Browser phone authentication program and service providing method, service providing system, and service providing that file data can be easily obtained on the user side and that the administrator side can provide file data at a low management cost. The purpose is to provide servers and service provision programs.

Means for solving the problem

[0010] In order to solve the above-described problems and achieve the object, the invention according to claim 1 provides a predetermined telephone. WEB provided by a mobile phone user who has a phone function to call the phone number and notify the local phone number as the caller number, and a browser function to browse web pages downloaded from the network. A browser phone authentication method using a phone number for authenticating whether the user is a regular user who can receive the service,

User phone number registration process that pre-registers the mobile phone number of the user who can receive the WEB service, and authentication to authenticate the user when receiving the web page request from the mobile phone user When the user receives a web page provision process that provides the user with a web page to which the display item associated with the telephone number information consisting of the original telephone number is pasted, and a button operation for designating the display item is received from the user. In addition, the caller number notified from the mobile phone that makes a call to the authentication source associated with the display item and the phone number registered in the user phone number registration step match each other. A user authentication process that authenticates whether the user who receives the caller ID is a legitimate user who can receive the WEB service. It is characterized by including the process.

[0011] Further, in the invention according to claim 2, in the above invention, the WEB page providing step includes a plurality of own telephones possessed in advance each time a request for the WEB page is received from a user of the mobile phone. The display item associating the telephone number selected from a number based on a predetermined algorithm and the telephone number information including predetermined additional information is pasted on the WEB page and transmitted.

[0012] In addition, the invention according to claim 3 is directed to the above-described invention, in the case where the user corresponding to the caller number is authenticated as a legitimate user by the user authentication step. When a predetermined button operation by the mobile phone is requested and the predetermined button operation is performed as requested, the service item of the WEB service pasted on the WEB page browsed by the user is displayed. A service-related information generation step for generating service-related information to be associated is further provided.

[0013] Further, in the invention according to claim 4, in the above invention, the user authentication step is a predetermined number that is uniquely given to the user in advance after specifying the user who is strong in the caller number. Request the input of the character string, and input the predetermined character string as requested In the case where the caller ID is received, the user who works on the caller number is authenticated as the regular user.

[0014] Further, the invention according to claim 5 includes a telephone function for calling a predetermined telephone number and notifying its own telephone number as a caller number, and a browser function for browsing a WEB page downloaded from a network. A browser phone authentication system using a phone number for authenticating whether a mobile phone user is a legitimate user who can receive the WEB service provided on the WEB page, and the user of the user who can receive the WEB service. User phone number registration means for registering a mobile phone number in advance, and phone number information that is the authentication source phone number for authenticating the user when the web page request is received from the mobile phone user WEB page providing means for providing the user with the WEB page to which the associated display item is pasted, and the display item When a button operation is received from the user, the caller number notified from the mobile phone that transmits to the authentication source associated with the display item, and registered in the user phone number registration means User authentication means for determining whether or not the telephone number is identical to each other and authenticating whether or not the user who has the caller number is a legitimate user who can receive the WEB service. Characterized by octopus.

[0015] Further, in the invention according to claim 6 in the above invention, the WEB page providing means has a plurality of own telephones possessed in advance each time it receives a request for the WEB page from a user of the mobile phone. The display item associating the telephone number selected from a number based on a predetermined algorithm and the telephone number information including predetermined additional information is pasted on the WEB page and transmitted.

[0016] Further, in the invention according to claim 7, in the above invention, when the user authentication unit authenticates that the user associated with the caller number is a legitimate user, When a predetermined button operation by the mobile phone is requested and the predetermined button operation is performed as requested, the service item of the WEB service pasted on the WEB page browsed by the user is displayed. Service related information generating means for generating service related information to be associated is further provided. [0017] Further, in the invention according to claim 8, in the above invention, the user authentication step is a predetermined number that is uniquely given to the user in advance after identifying the user who is strong in the caller number. If the predetermined character string is input as requested, the user who is strong at the caller number is authenticated as the regular user.

[0018] Further, the invention according to claim 9 has a telephone function for calling a predetermined telephone number and notifying its own telephone number as a calling party number, and a browser function for browsing a WEB page downloaded from a network. A browser phone authentication server that authenticates whether a mobile phone user is a legitimate user who can receive the web service provided on the web page, and the mobile phone of the user who can receive the web service. Phone number information consisting of a user phone number registration means for pre-registering the phone number of the talk, and the authentication source phone number for authenticating the user when receiving the request of the web page from the user power of the mobile phone Web page providing means for providing the user with the WEB page to which the display item associated with is pasted, and a button operation for specifying the display item. When received from the user, the caller number notified from the mobile phone that makes a call to the phone number of the authentication source associated with the display item, and registered in the user phone number registration means A user authentication means for authenticating the caller number and the user's ability to be a legitimate user who can receive the WEB service by determining whether or not the telephone numbers match each other. , Provided.

[0019] The invention according to claim 10 includes a telephone function for calling a predetermined telephone number and notifying the local telephone number as a caller number, and a browser function for browsing a web page downloaded from a network. A browser phone authentication program using a phone number that causes a computer to execute a method of authenticating whether a mobile phone user is a legitimate user who can receive the WEB service provided on the WEB page, User phone number registration procedure for pre-registering the mobile phone number of a user who can receive the WEB service, and authentication for authenticating the user when the mobile phone user requests the WEB service Phone number information consisting of the original phone number The authentication source associated with the display item when a web page provision procedure for providing the user with the web page to which the associated display item is pasted and a button operation for designating the display item are received from the user. It is determined whether or not the caller number notified from the mobile phone that makes a call to the phone number registered in the user phone number registration procedure matches the caller number. The computer executes a user authentication procedure for authenticating whether the user is a legitimate user who can receive the WEB service.

[0020] The invention according to claim 11 is a service providing method for providing a service to a legitimate user, wherein the invention according to claim 11 is a legitimate user who can receive the service. The storage step of storing the telephone number of the service in the storage unit, and the telephone number notified from the requester of the service is stored on the storage unit by the storage step and matches the telephone number! / And a service providing process for providing the service.

[0021] In the invention according to claim 12, in the above invention, the telephone number notified from the requester of the service does not exist in the telephone number stored in the storage unit by the storing step! In this case, based on the identity verification information! /, The identity verification process for verifying the identity and the telephone number notified from the service provider according to the identity verification result in the identity verification process. And a registration step of registering as the regular user's telephone number.

[0022] Further, in the invention according to claim 13, in the above invention, in the service providing step, the telephone number notified from the requester of the service is stored in the storage unit by the storage step The service is provided on the condition that a predetermined character string is further input when it matches.

[0023] The invention according to claim 14 further includes a telephone number providing step of providing a telephone number to the service requester in the above invention, wherein the service providing step is based on the telephone number providing step. The service is provided on the condition that the telephone number notified from the service request source in response to the call operation for the provided telephone number matches the telephone number stored in the storage unit by the storing step. And

[0024] Further, in the invention according to claim 15, in the above invention, the telephone number providing step includes: It is characterized in that it is provided to the above service requester on the telephone number recorded on the exterior of a paper medium, e-mail, or other article, displayed on a display or monitor, or recorded on an answering machine.

[0025] Further, the invention according to claim 16 includes a telephone function for making a call to a predetermined telephone number and notifying its own telephone number as a caller telephone number, and a browser for browsing a WEB page displayed via a network. If the mobile phone user with the function is a legitimate user who can download the file data provided via the WEB page, the service providing method for providing the file data, A file data storage step for storing file data in the storage unit in advance, and the mobile phone number of the user is stored in advance in the storage unit in association with the personal information including the name, address and other information of the authorized user. User phone number storage step and when receiving the web page display request from the mobile phone, the user of the mobile phone A web page providing process in which a display item associated with the telephone number information indicating the telephone number of the authentication source that authenticates the user is pasted on the web page, and on the web page provided by the web page providing process When a button operation for designating the display item is received from the user, a caller telephone number transmitted from the mobile phone to the authentication source associated with the display item is determined by the user telephone number storage step. It is determined whether or not the mobile phone number stored in the storage unit is present, and if the caller telephone number exists in the mobile phone number, the user associated with the caller telephone number A user authentication step of authenticating the user as a legitimate user, and a user who is authenticated as the legitimate user by the user authentication step. The data providing step of providing the file data to the mobile phone of the user associated with the caller telephone number.

[0026] Further, in the invention according to claim 17 in the above invention, when the WEB page providing step receives a display request for the WEB page from the mobile phone, the WEB page providing step includes a plurality of phone numbers possessed in advance. A display item associated with the telephone number information consisting of a telephone number selected based on a predetermined algorithm is pasted on the WEB page and provided. [0027] Further, in the invention according to claim 18, in the above invention, in the user authentication step, the caller telephone number transmitted from the mobile phone is stored in the storage unit by the user telephone number storage step. If it exists in the stored mobile phone number, the user is requested to input a predetermined character string uniquely given in advance to the user's mobile phone related to the caller phone number, and the user When the input of the predetermined character string is accepted from the mobile phone, the user associated with the caller telephone number is authenticated as the regular user.

[0028] Further, in the invention according to claim 19 in the above invention, in the case where the data providing step provides the file data to the user related to the caller number, the file data is completely stored. It is characterized by providing information for protecting sex.

[0029] Further, in the invention according to claim 20, in the above invention, when it is confirmed by the user authentication step that the caller telephone number does not exist in the mobile phone number, the caller A verification information acquisition step of requesting and acquiring verification information for collating with the information in the file data stored in the storage unit in advance by the file data storage step with respect to the user's mobile phone related to the telephone number; Whether the collation information of the user related to the caller telephone number acquired in the verification information acquisition step is present in the information in the final data stored in the storage unit in advance by the file data storage step. And a user confirmation number confirmation step, wherein the user telephone number storage step is performed before the verification information acquisition step. When it is confirmed that the collation information is present in the information in the file data stored in the storage unit in advance by the file data storage step, the sender is associated with the collation information. The telephone number is stored in the storage unit.

[0030] The invention according to claim 21 includes a telephone function for calling a predetermined telephone number and notifying the local telephone number as a caller telephone number, and a browser for browsing a WEB page displayed via a network. When a mobile phone user with a function is a legitimate user who can download file data provided via the WEB page, the service providing system provides the file data, File data storage means for storing file data in advance, and the authorized user User phone number storage means for storing the mobile phone number of the user in advance in association with personal information such as name, address and other information power;

When a request to display an EB page is received, a display item associated with the telephone number information indicating the telephone number of the authentication source that authenticates the user of the mobile phone is provided on the WEB page. And the mobile phone to the authentication source associated with the display item when a button operation for designating the display item on the WEB page provided by the means and the WEB page providing unit is received from a user. It is determined whether or not the caller telephone number transmitted from the mobile telephone number stored in the user telephone number storage means is present, and the caller telephone number is included in the mobile telephone number. The user authentication means for authenticating the user associated with the caller telephone number as the regular user, and the caller telephone number by the user authentication means. Data providing means for providing the file data to the user's mobile phone associated with the caller telephone number when the user is authenticated as the legitimate user. .

Further, the invention according to claim 22 includes a telephone function for calling a predetermined telephone number and notifying its own telephone number as a caller telephone number, and a browser function for browsing a web page displayed via a network. If the mobile phone user is a legitimate user who can download the file data provided via the WEB page, the user is a service providing server that provides the file data. File data storage means for storing in advance, and user telephone number storage means for storing the mobile phone number of the user in advance in the storage unit in association with the name, address and other personal information of the legitimate user And authenticating the user of the mobile phone when receiving the display request of the WEB page from the mobile phone. WEB page providing means for pasting and providing a display item associated with telephone number information indicating the authentication source telephone number on the WEB page, and the display item on the WEB page provided by the WEB page providing means When a button operation for designating is received from the user, the caller telephone number transmitted from the mobile phone to the authentication source associated with the display item is changed by the user telephone number storage means. If the caller telephone number exists in the mobile phone number, the user associated with the caller telephone number is determined. If the user associated with the caller telephone number is authenticated as the authorized user by the user authentication means and the user authentication means for authenticating the user as the authorized user, Data providing means for providing the file data to a mobile phone.

Further, the invention according to claim 23 has a telephone function for calling a predetermined telephone number and notifying its own telephone number as a caller telephone number, and a browser function for browsing a web page displayed via a network. If the mobile phone user is a legitimate user who can download the file data provided via the WEB page, the service providing program causes the computer to execute the method of providing the file data. The file data storage procedure for storing the file data in the storage unit in advance and the personal information including the name, address and other information of the authorized user are associated with the user's mobile phone number in advance. The user phone number storage procedure and the mobile phone display request from the mobile phone. Web page provision procedure for pasting and displaying the display item associated with the telephone number information indicating the authentication source telephone number for authenticating the user of the mobile phone on the web page, and the web page provision procedure When a button operation for designating the display item on the WEB page provided by the user is accepted from the user, the caller telephone number transmitted from the mobile phone to the authentication source associated with the display item Is stored in the storage unit by the user phone number storing procedure! /, And whether the caller phone number exists in the mobile phone number is determined. The user authentication procedure for authenticating the user associated with the caller telephone number as the regular user, and the user associated with the caller telephone number through the user authentication procedure. If it is authenticated as a user of the serial legitimate, characterized in that to execute the data provision procedure for providing the file data to the user of the cellular phone according to the caller's telephone number, to the computer.

The invention's effect [0033] According to the present invention, a mobile phone number of a user who can receive a WEB service (various services provided on a WEB page via a network) is registered in advance, In response to a request, a display item that associates the telephone number of the authentication source that authenticates the user (for example, the telephone number of the server that is the authentication source is linked to allow the user of the mobile phone to specify when requesting authentication) Web pages with display items, etc.) are displayed on a screen provided on a mobile phone, for example, and when a button operation for specifying display items is received from the user, the Web page is associated with the display item. It is determined whether the caller number notified from the mobile phone calling the authentication source and the registered user's phone number match each other. Authenticates that the user is a legitimate user who can receive the WEB service. For example, a telephone function such as calling a predetermined phone number and notifying the local phone number as the caller number, and a WEB downloaded from the network When a user uses a mobile phone (browser phone) equipped with a browser function for browsing pages, the user can receive various services via the network. It is possible to authenticate without requiring a computer for browsing web pages and a mobile phone equipped with a telephone function, and it is possible to realize user authentication that is convenient for the user.

[0034] Also, according to the present invention, every time a request for a mobile phone user power web page is received, a predetermined algorithm (an algorithm in which a selection method is set in advance) is selected from a plurality of own phone numbers possessed in advance. ) Based on! /, And a display item that associates information consisting of the selected phone number and predetermined additional information (for example, subaddress) is pasted on the WEB page and sent, so the information consisting of the phone number and subaddress is sent. It can be used as a session ID (an ID that is valid only within that session), and it is possible to prevent a Service-to-Self who obtains this information illegally from impersonating a legitimate user.

[0035] Further, according to the present invention, when the user who is strong in the caller ID is authenticated as a legitimate user, the user is requested to perform a predetermined button operation by the mobile phone (for example, Requesting a button operation to input “#” or a character string consisting of alphanumeric symbols, etc.), and if a predetermined button operation is performed as requested, Generates service-related information linked to the service item (for example, file information for providing an effective service only on the launched web page) and disconnects the phone connection with the mobile phone, so the call is disconnected Even so, by making use of the browser function that returns to the browser screen that is being launched, it is possible to easily provide services to the user while associating the call from the user with the generated file information.

In addition, according to the present invention, after a user associated with a caller ID is specified, a predetermined character string (for example, service providing power at the time of user registration) that is uniquely given to the user. If the specified character string is entered as requested, the caller ID is used and the user is authenticated as a legitimate user, so the password can be known. The service can be provided only to legitimate users, and it is possible to prevent the service from being used for illegal purposes.

[0037] Further, according to the present invention, the telephone number of the user's mobile phone that can receive the WEB service (various services provided on the WEB page via the network) is registered in advance, and the mobile phone user Display item that associates the phone number of the authentication source that authenticates the user in response to the request (for example, the display item that the phone number of the server that is the authentication source is linked and specified by the mobile phone user when requesting authentication) ) Is pasted to the user, and when the button operation for specifying the display item is accepted from the user, the caller ID notified from the mobile phone and the registered user phone number For example, it is determined whether the user matches the caller ID and authenticates whether the user is a legitimate user who can receive the web service. A mobile phone (browser phone) that has a phone function such as calling the phone number and notifying the caller ID, which is the caller's phone number, and a browser function for browsing web pages downloaded from the network When a user wants to receive various services via a network, the user can use multiple devices (e.g., a computer for browsing web pages and a mobile phone with a telephone function). If the system configuration is such that the server that provides the service and the server that authenticates the user are distributed, the server that provides the service User authentication that is convenient for the user while eliminating the burden on the authentication It is possible to realize.

[0038] Further, according to the present invention, the telephone number of a legitimate user who can receive the service is stored, and the telephone number notified from the requester of the service matches the stored telephone number. By providing authentication based on the telephone number, the user can easily receive the service regardless of the password, etc., and the service provider can use the password or medium used for authentication. It is possible to provide various services (for example, information distribution services and electronic commerce services via a network) without incurring costs due to management.

[0039] Furthermore, according to the present invention, the telephone number is provided to the service requester, and the telephone number is notified when the service requester performs a call operation on the provided telephone number. S, since the service is provided on the condition that it matches the stored telephone number, for example, a device having a browser function and a user having a telephone function are provided via the browser function. Phone number (for example, a phone number provided on paper or a phone number displayed on a display, etc.) By being authenticated based on the service, it is possible to receive services easily.

[0040] Further, according to the present invention, for example, file data (for example, file data of an electronic certificate such as a resident's card or a family register provided by a local government) is stored in the storage unit in advance, and via a WEB page. The mobile phone number is stored in advance in the storage unit in association with personal information consisting of the name, address, and other information of a legitimate user who can download the file data provided by the When a web page display request is received from a user, the display item associated with the telephone number information indicating the authentication source telephone number that authenticates the user (for example, the telephone number of the server that is the authentication source) Link, and display items to be specified by mobile phone users when requesting authentication) When a button operation for designating a display item on the web page is accepted from the user, the caller telephone number transmitted from the mobile phone to the authentication source associated with the display item is stored in the storage unit. Determine whether it exists in the mobile phone number and If the talk number is present in the mobile phone number, the user associated with the caller phone number is authenticated as a legitimate user, and the file data is provided to the user's mobile phone associated with the caller phone number. Therefore, for example, a mobile phone (browser) that has a telephone function such as calling a predetermined telephone number and notifying the local station telephone number as a caller ID, and a browser function for browsing a web page downloaded from the network. The user can easily obtain file data (electronic certificate) such as a resident's card or family register, and the administrator can provide an ID and password for management. It is possible to provide file data at a reduced cost without the need to manage users.

[0041] Further, according to the present invention, when a web page display request is received from a mobile phone, a predetermined algorithm (an algorithm in which a selection method is preset) is selected from a plurality of phone numbers possessed in advance. The display item associated with the telephone number information consisting of the selected telephone number is pasted and provided on the web page, so that the telephone number information can be used as a one-time ID (valid only for that session). It is possible to prevent the Service-to-Self who obtained this information illegally from impersonating a legitimate user.

[0042] Further, according to the present invention, when the caller telephone number transmitted from the mobile phone is included in the mobile phone number stored in the storage unit, it is preliminarily given to the user. Requested for input of a predetermined character string (for example, file data providing power and password issued at the time of user registration), and the predetermined character string was input as requested In this case, since the user associated with the caller telephone number is authenticated as a legitimate user, the file data can be provided only to legitimate users who know the password, and the file can be used for illegal purposes such as stealing personal information. It is possible to prevent data from being used.

[0043] Also, according to the present invention, when file data is provided to a user associated with a caller ID, information for protecting the integrity of the file data (for example, a challenge based on PKI) (Public key and private key for adopting response authentication) are provided together, so when using the file data provided by the user, the file data Can be used by preventing forgery and tampering.

[0044] Further, according to the present invention, when a button operation for designating a display item on a WEB page is received by a user, a caller is transmitted to the authentication source associated with the display item. Check if the phone number already exists in the mobile phone number stored in the memory, and as a result of the check, the caller phone number does not exist in the stored mobile phone number! /, If it is confirmed, verification information (for example, name and address) is checked against the user associated with the caller's phone number in order to check the information in the file data stored in the storage unit in advance. Whether or not the user verification information related to the acquired caller telephone number exists in the information in the file data stored in advance in the storage unit. ,check As a result of the confirmation, if it is confirmed that the user verification information related to the acquired caller ID exists in the information in the file data stored in the storage unit in advance, the verification information is included in the verification information. The caller's phone number is stored in the storage unit in association with each other. For example, identity verification can be performed using information in the resident card stored as file data, and user registration is simplified. It is possible.

Brief Description of Drawings

FIG. 1 is a diagram for explaining the outline and features of a browser phone authentication system according to a first embodiment.

FIG. 2 is a block diagram illustrating a configuration of the browser phone authentication system according to the first embodiment.

FIG. 3 is a diagram showing a configuration example of a registered user list.

FIG. 4 is a diagram showing a configuration example of text information (HTML source).

FIG. 5 is a diagram illustrating a sequence showing a flow of processing by the browser phone authentication system according to the first embodiment.

FIG. 6 is a diagram illustrating a computer that executes a user authentication program according to a second embodiment.

FIG. 7 is a diagram for explaining the outline and features of the data providing system according to the third embodiment. FIG. 8 is a block diagram illustrating a configuration of a data providing system according to a third embodiment.

FIG. 9 is a diagram illustrating a configuration example of registered user data according to the third embodiment.

FIG. 10 is a diagram showing a configuration example of generated data.

FIG. 11 is a sequence diagram illustrating a flow of data providing processing according to the third embodiment.

FIG. 12 is a block diagram illustrating a configuration of a data providing system according to a fourth embodiment.

FIG. 13 is a diagram illustrating a configuration example of registered user data according to the fourth embodiment.

FIG. 14 is a flowchart showing a flow of identity verification registration processing according to the fourth embodiment.

FIG. 15 is a diagram illustrating a computer that executes a data providing program. Explanation of symbols

1 network

2 Public telephone network

3 Modem

10 user mobile phone

20 Service providing server

21 Communication control IF section

22 Memory unit

22a List of registered users

23 Control unit

23a Web page display

23b Authentication processing section

23c File information generator

30 computers

31 Communication control IF section

32 HDD (Hard Disk Drive)

3ό RAM (Random Access Memory)

34 ROM (Read Only Memory)

35 CPU (Central Processing Unit) bus

CTI

a modem

Data provision server

Communication control I / F section

Storage

a Registered user data storage b Certificate data storage

Control unit

a WEB page provider

b Data generator

c Authentication processor

Data provision server

Communication control I / F section

Storage

a Registered user data storage b Certificate data storage

Control unit

a WEB page provider

b Data generator

c Authentication processor

Computer

Communication control I / F section

HDD (Hard Disk Drive) RAM (Random Access Memory) ROM (Read Only Memory) CPU (and entral Processing Unit) bus BEST MODE FOR CARRYING OUT THE INVENTION

[0047] Hereinafter, with reference to the accompanying drawings, details of an embodiment of a browser phone authentication method using a telephone number, a browser phone authentication system using a telephone number, a browser phone authentication server, and a browser phone authentication program using a phone number according to the present invention Explained. In the following, the browser phone authentication system according to the present invention will be described as a first embodiment, and then another embodiment according to the present invention will be described.

Example 1

[0048] In the following first embodiment, the outline and features of the browser phone authentication system according to the first embodiment, the configuration and processing of the browser phone authentication system will be described in order, and finally the effects of the first embodiment will be described.

[0049] [Overview and Features of Browser Phone Authentication System (Example 1)]

First, the outline and features of the browser phone authentication system according to the first embodiment will be described with reference to FIG. FIG. 1 is a diagram for explaining the outline and features of the browser phone authentication system according to the first embodiment.

[0050] As shown in the figure, the browser phone authentication system according to the first embodiment is communicably connected via an access network (a communication network formed by a public telephone network, the Internet, an intranet, or the like). User mobile phone and service system.

[0051] Here, the user mobile phone has a telephone function for calling a predetermined telephone number and notifying the caller number which is the local telephone number, and a browser function for browsing a WEB page downloaded from the network.

[0052] In addition, the service system is not illustrated in the first embodiment, but a user who requests provision of a WEB service (a predetermined service via a WEB page) receives the WEB service. It consists of a service providing server that authenticates whether it is a legitimate user and provides a web service to the legitimate user, and a modem that reads the caller number sent from the user's mobile phone and transfers it to the service providing server. Is done.

[0053] The browser phone authentication system according to the first embodiment includes a telephone function for calling a predetermined telephone number and notifying the local telephone number as a caller number, and a browser for browsing a WEB page downloaded from a network. Functional user power of mobile phones S, W Is it a legitimate user who can receive the WEB service provided on the EB page? Power that outlines authenticating S, when a user wants to receive the provision of various services via the network, the user can use multiple devices. The main feature is that authentication can be performed without requiring authentication, and user authentication that is convenient for the user can be realized.

[0054] Specifically describing the main feature, the service providing server of the service system constituting the browser phone authentication system according to the first embodiment becomes a display item when receiving a WEB page display request from the user mobile phone. A web page that links phone number information to “(1) Login authentication” is displayed on the screen of the user's mobile phone.

[0055] Next, when the user mobile phone receives a button operation for designating the display item "(1) login authentication" displayed on the screen! /, WEB page from the user, the display item "(1 The phone number information (for example, “186—03— 1234— 5678 * 123456”) linked to “Guin Guin Authentication” is automatically dialed, and the modem in the service system dials from the user's mobile phone. At the same time, the caller ID notified is received. The modem reads the caller number notified from the user mobile phone and transfers it to the service providing server. The service providing server receives the caller ID transferred from the modem.

[0056] The service providing server executes authentication of the user who has notified the caller number. Specifically, the service providing server reads the registered user list in which the telephone numbers of the users who plan to provide the service are registered in advance, and the received caller number and the telephone number in the registered user list are detected. Judgment is made on whether or not they match, and if there is a match, it is authenticated that the user is authorized to provide the service.

[0057] Then, for example, when the user who has notified the caller number is authenticated as a legitimate user, the service providing server sends voice guidance to the mobile phone of the authenticated user and sends a predetermined button. Request an operation (eg, enter "#" once). When the user mobile phone receives a button operation input from the user as requested by the service providing server, the service providing server that has received the signal transmitted by the user mobile phone force pastes it on the WEB page “(2 ) Generate file information related to “transfer” and “remittance” of service items (information valid only on the web page being browsed) Link to the service item and disconnect the telephone connection.

[0058] Here, when the telephone connection is disconnected by the service providing server, the user mobile phone displays the WEB page being started up again. Although not shown in the figure, for example, when the user mobile phone accepts a button operation for designating a service item (for example, “money transfer”) on the WEB page from the user, the user mobile phone transmitted along with it is received. The service providing server that has received the power signal executes a process related to the specified service item (for example, “money transfer”), displays the service completion on the screen of the user's mobile phone, and performs a process that is powerful. Delete the item's file information (eg "Send Money").

[0059] As described above, the browser phone authentication system according to the first embodiment, for example, makes a call to a predetermined phone number and notifies the local phone number as the caller number according to the main features described above. By using a mobile phone (browserphone) that has a telephone function such as enabling a browser function for browsing web pages downloaded from the network, users can receive various services via the network. The user can be authenticated without the need for multiple devices (for example, a computer for browsing web pages and a mobile phone equipped with a telephone function). Authentication can be realized.

[0060] [Configuration of Browser Phone Authentication System (Example 1)]

Next, the configuration of the browser phone authentication system according to the first embodiment will be described with reference to FIG. FIG. 2 is a block diagram illustrating the configuration of the browser phone authentication system according to the first embodiment. In the figure, only the processing units necessary for explaining the browser phone authentication system according to the first embodiment are shown, and descriptions of other processing units are omitted.

As shown in the figure, the browser phone authentication system according to the first embodiment is configured such that a user mobile phone 10 and a service system are communicably connected via an access network. Here, the access network is composed of a network 1 such as the Internet or an intranet and a public telephone network 2 and has a function for preventing eavesdropping and tampering!

[0062] The user mobile phone 10 has a telephone function such as calling a predetermined telephone number and notifying its own telephone number as a caller number, and a browser function for browsing a web page downloaded from the network. It is configured with. [0063] In the first embodiment, the service system authenticates whether the user who requests the provision of the web service (predetermined service via the web page) is a regular user who can receive the web service. The service providing server 20 that provides WEB services to legitimate users, and the modem 3 that has a function of reading a caller number transmitted from the user mobile phone 10 and transferring it to the service providing server. The

The service providing server 20 includes a communication control IF unit 21, a storage unit 22, and a control unit 23. The communication control IF unit 21 is a means for controlling communication related to various information exchanged with the user mobile phone 10.

[0065] The storage unit 22 is a storage unit (storage unit) that stores data and programs necessary for various types of processing by the control unit 23. In particular, the storage unit 22a is closely related to the present invention. Is provided.

[0066] As illustrated in FIG. 3, the registered user list 22a includes a user name (eg, B) and a user's mobile phone number (eg, 090- * * * * — +++++) is stored in association with each other.

[0067] The control unit 23 has a control program such as an OS (Operating System), a program that defines various processing procedures, and an internal memory for storing necessary data, and executes various processes based on these programs. As a processing unit, which is particularly closely related to the present invention, a web page display unit 23a, an authentication processing unit 23b, and a file information generation unit 23c are provided.

The WEB page display unit 23 a is a processing unit that displays a WEB page on the screen of the user mobile phone 10 when receiving a display request from the user mobile phone 10. Specifically, the file information generation unit 23c, which will be described later, is instructed to generate telephone number information to be linked to “(1) login authentication”, which is a display item on the WEB page. When the phone number information is accepted, a web page that links this phone number information to “(1) Login authentication” is displayed on the screen of the user mobile phone 10 (see FIG. 1). In addition, when file information related to “(2) Service item“ transfer ”or“ transfer ”etc.” is received from the file information generation unit 23c, this file information is changed to “(2) Service item“ transfer ”or“ transfer ”. Link to "Remittance" etc. [0069] The authentication processing unit 23b is a processing unit that executes an authentication process of the user who has notified the caller ID. Specifically, the authentication processing unit 23b reads the registered user list 22a (see FIG. 3), and whether or not the received caller number matches the telephone number stored in the registered user list 22a. If there is a match, it is authenticated that the user is authorized to provide the service.

[0070] When the authentication processing unit 23b authenticates the user who has notified the caller number as a legitimate user, the authentication processing unit 23b transmits (sends) voice guidance to the user mobile phone 10 of the authenticated user. , Request a predetermined button operation input (for example, input "#" once or input a character string consisting of alphanumeric characters 歹 IJ). Then, when the user mobile phone 10 receives the button operation input as requested by the user, the authentication processing unit 23b that has received the signal transmitted from the user mobile phone 10 in response to the request is input to the file information generation unit 23c. And instructing the generation of file information and disconnecting the telephone connection with the user mobile phone 10.

[0071] The file information generation unit 23c displays the telephone number information for linking to “(1) Login authentication”, which is a display item on the WEB page, and “(2) Service item“ transfer ”and“ transfer ”. Is a processing unit that generates text information that is file information for linking to "."

Specifically, as illustrated in FIG. 4, the file information generation unit 23c receives a command from the WEB page display unit 23a, and among the plurality of telephone numbers managed in advance by the service providing server 20. The telephone number information is generated by adding a sub-address to the telephone number selected based on a predetermined algorithm (algorithm with a selection method set in advance). In other words, the purpose is to have a valid session ID role only for the web page being browsed. The file information generation unit 23c is not limited to the case of generating telephone number information by adding a sub-address to a telephone number selected at random from among the telephone numbers managed in advance. The telephone number information may be generated by adding a sub-address to the number. In addition, the file information generation unit 23c receives the command from the authentication processing unit 23b and generates file information (information valid only on the WEB page being browsed).

[0073] It should be noted that the service providing server 20 can be realized by mounting the above-described functions on an information processing apparatus such as a known personal computer or workstation. wear.

[0074] [Processing of Browser Phone Authentication System (Example 1)]

Subsequently, the processing by the browser phone authentication system according to the first embodiment will be described with reference to FIG. FIG. 5 is a sequence showing a flow of processing by the browser phone authentication system according to the first embodiment.

As shown in the figure, user mobile phone 10 transmits a WEB page display request in response to a request from the user (step S501). When the service providing server 20 receives the WEB page display request from the user mobile phone 10 or the like, the telephone number information for linking the file information generating unit 23c to the display item “(1) login authentication” on the WEB page. When the phone number information is received from the file information generation unit 23c, a web page in which the phone number information is linked to “(1) Login authentication” is displayed on the screen of the user mobile phone 10 (step S502).

[0076] When the user mobile phone 10 receives a button operation for designating the display item “(1) mouth authentication” on the WEB page displayed on the screen (step S503), the user mobile phone 10 displays the display item “(1 Phone number information linked to ") Login authentication" (eg "186-03-03-12

34— 5678 * 123456 ") 勺勺勺自動勺ステップ (Step S504), and the modem 3 in the system receives the caller ID that is notified from the user mobile phone 10 at the same time as the call. I believe.

The modem 3 reads the caller number notified from the user mobile phone 10 and transfers it to the service providing server 20 (step S505). The service providing server 20 receives the caller number transferred from the modem 3.

[0078] Next, the service providing server 20 performs authentication of the user who has notified the caller number (step S506). Specifically, the service providing server 20 reads the registered user list 22a (see FIG. 3), and checks whether the received caller number matches the telephone number stored in the registered user list 22a. If there is a match, authenticate that the user is authorized to provide the service.

[0079] When the user who has notified the caller number is authenticated as a legitimate user, the service providing server 20 sends voice guidance to the user mobile phone 10 of the authenticated user. Is transmitted and a predetermined button operation (for example, “#” is input once) is requested (step S507). When the user mobile phone 10 receives a button operation input as requested by the service providing server 20 from the user (step S508), the service providing server 20 that receives the signal transmitted from the user mobile phone 10 accordingly , Generate file information (valid information only on the browsing web page) about “(2) Service item“ transfer ”and“ remittance ”etc. to be pasted on the web page (step S509), and the service item And the telephone connection is disconnected (step S510).

[0080] When the telephone connection is disconnected by the service providing server 20, the user mobile phone 10 displays the WEB page being started up again (step S511). Although not shown in the figure, for example, when the user mobile phone 10 receives a button operation for designating a service item (for example, “money transfer”) on the WEB page from the user, the user mobile phone 10 transmitted along with the button operation is received. The service providing server 20 that has received the signal from the telephone 10 executes a process related to the specified service item (for example, “money transfer”), displays the service completion on the screen of the user mobile phone 10, and performs the process. Delete the file information (eg "remittance") of the service item.

[Effects of Example 1]

As described above, according to the first embodiment, the telephone number of the user mobile phone 10 that can receive the WEB service (various services provided on the WEB page via the network) is registered in advance, and the user mobile In response to a display request from the telephone 10, a web page to which a display item (for example, “(1) login authentication”) associated with the telephone number information of the service providing server 20 that authenticates the user is pasted is, for example, mobile From the user's mobile phone 10 that makes a call to the service providing server 20 associated with the display item when a button operation for specifying the display item is received from the user. It is determined whether the notified caller number and the registered user's mobile phone number match each other. For example, a phone function such as calling a specified phone number and notifying the local phone number as the caller number, and a web page downloaded from the network are authenticated. A mobile phone with a browser function for browsing ( When a user intends to receive provision of various services via a network by using the browser phone, the user can use a plurality of devices (for example, a mobile phone with a computer and a telephone function for browsing a web page) Etc.), it is possible to achieve user authentication that is convenient for the user.

Further, according to the first embodiment, when a request for a WEB page is received from the user mobile phone 10, a predetermined algorithm (an algorithm in which a selection method is set in advance) is selected from a plurality of own phone numbers possessed in advance. Based on! /, The display item that associates the phone number information consisting of the selected phone number and the specified additional information (for example, subaddress) is pasted on the WEB page and sent, so the phone consisting of the phone number and subaddress It is possible to make the number information function as an effective session ID only on the WEB page that is being launched, and it is possible to prevent the Service-to-Self who obtained this information illegally from impersonating a legitimate user.

[0083] Further, according to the first embodiment, when the user associated with the caller ID is authenticated as a legitimate user, the user is requested to input a predetermined button operation by the user mobile phone 10 ( For example, a button operation to input “#” or a button operation to input a character string consisting of alphanumeric symbols is requested), and if a predetermined button operation input is performed as requested, the web service service Service-related information linked to the item (for example, file information for providing an effective service only on the web page being started up) is generated, and the telephone connection with the user mobile phone 10 is disconnected. By utilizing the browser function that returns to the browser screen that is running even if it is disconnected, the call from the user is associated with the generated file information and It is possible to provide a service to the simple.

[0084] Further, in the first embodiment, after the user related to the caller number is specified based on the registered user list 22a, a predetermined character string (for example, user registration) uniquely given to each user is further added. If the specified character string is entered as requested, the user associated with the caller ID is authenticated as a legitimate user. If you want to, It is possible to provide services only to legitimate users who know the password, and to prevent the services from being used for illegal purposes.

Example 2

Now, the force described in the first embodiment of the present invention so far The present invention may be implemented in various different forms other than the above-described embodiments. Therefore, in the following, embodiments included in the present invention will be described.

[0087] (1) System configuration, etc.

Of the processes described in the first embodiment, all or part of the transmission process of the user mobile phone 10 described as being automatically performed can be manually performed. In addition, the processing procedures, control procedures, specific names, and information including various data and parameters shown in the above documents and drawings are arbitrarily changed except for special cases. The power S to do.

[0088] Each component of the browser phone authentication system shown in FIG. 2 is functionally conceptual and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution and integration of the browser authentication system is not limited to the one shown in the figure. For example, the service providing server 20 is distributed between a server having only a service providing function and a server having only a user authentication function. All or part of it can be configured by functionally and physically distributing and integrating in arbitrary units according to various loads and usage conditions.

[0089] For this reason, for example, in order to view a telephone function such as calling a predetermined telephone number and notifying the caller ID that is the caller's telephone number, and a web page downloaded from the network. When a user uses a mobile phone (browser phone) equipped with the browser function of the above, and the user wants to receive various services via the network, the user can browse multiple devices (for example, to browse web pages) A system configuration in which the server that provides services and the server that authenticates users are distributed. Provides user authentication that is convenient for the user while eliminating the load associated with user authentication on the server that provides the service. Bets are possible. Further, each component of the service providing server 20 is functionally conceptual and does not necessarily need to be physically configured as illustrated. In other words, the specific form of the distribution / integration of the browser phone authentication system is not limited to the one shown in the figure, and all or part of the authentication processing unit 23b and the file information generation unit 23c are integrated with various loads. It can be configured to be functionally or physically distributed and integrated in arbitrary units according to the usage conditions and the like. In addition, each processing function performed by the user mobile phone 10 and the service providing server 20 constituting the browser phone authentication system (the telephone function and browser function of the user mobile phone 10 and the user authentication function of the service providing server 20) All or any part of it can be realized by a CPU and a program that is analyzed and executed by the CPU, or it can be realized as hardware by wired logic.

[0091] (2) User authentication program

By the way, the user authentication method of the service providing server 20 described in the first embodiment (see FIG.

5) can be realized by executing a prepared program on a computer system such as a personal computer workstation. Therefore, in the following, an example of a computer that executes a user authentication program having the same function as in the first embodiment will be described with reference to FIG. FIG. 6 is a diagram illustrating a computer that executes a user authentication program according to the second embodiment.

As shown in the figure, the computer 30 serving as the service providing server includes a communication control IF unit.

31, HDD32, RAM33, ROM34 and CPU35 are connected by bus 40. Here, the communication control IF unit 31 corresponds to the communication control IF unit 21 shown in FIG.

[0093] Then, the ROM 34 has a user authentication program that exhibits the same function as the service providing server 20 shown in the first embodiment, that is, as shown in FIG. 6, the WEB page display program 34a, the authentication A processing program 34b and a file information generation program 34c are stored in advance. Note that these programs 34a, 34b, and 34c may be appropriately integrated or distributed in the same manner as each component of the service providing server 20 shown in FIG. The ROM 34 may be a nonvolatile “RAM”.

[0094] Then, by reading and executing these programs 34a, 34b and 34c from the ROM 34, the programs 34a, 34b and 34c are transferred to the WEB as shown in FIG. It functions as a page display process 35a, an authentication process 35b, and a file information generation process 35c. Each process 35a, 35b, and 35c corresponds to the WEB page display unit 23a, the authentication processing unit 23b, and the file information generation unit 23c shown in FIG. 2, respectively.

In addition, as shown in FIG. 6, the HDD 32 is provided with a registered user list table 32a. The registered user list table 32a corresponds to the registered user list 22a shown in FIG. Then, the CPU 35 reads the registered user list data 33 a from the registered user list table 32 a and stores it in the RAM 33, and executes user authentication processing based on the registered user list data 33 a stored in the RAM 33.

[0096] The above-described programs 34a, 34b and 34c are not necessarily stored in the ROM 34 from the beginning. For example, a flexible disk (FD), a CD-ROM, “Portable physical media” such as MO discs, DVD discs, magneto-optical discs, IC cards, etc., or “fixed physical media” such as HD D installed inside and outside the computer 30, public lines, the Internet Each program is stored in “another computer (or server)” connected to the computer 30 via a LAN, WAN, etc., and the computer 30 reads each program from these and executes the actual fi. Ayo lei.

Hereinafter, embodiments of a service providing method, a data providing system, a data providing server, and a data providing program according to the present invention will be described in detail with reference to the accompanying drawings. In the following, a data providing system to which the service providing method according to the present invention is applied will be described as a third embodiment, and then another embodiment included in the present invention will be described.

Example 3

In the following third embodiment, the outline and features of the data providing system according to the third embodiment, the configuration and processing of the data providing system will be described in order, and finally the effects of the third embodiment will be described.

[0099] [Outline and Features of Data Providing System (Example 3)]

First, the outline and features of the data providing system according to the first embodiment will be described with reference to FIG. FIG. 7 is a diagram for explaining the outline and features of the data providing system according to the third embodiment. FIG.

[0100] The data providing system according to the third embodiment includes a telephone function for calling a predetermined telephone number and notifying the local telephone number as a caller telephone number, and a browser for browsing a web page displayed via a network. User power of mobile phones with functions S, the ability to download file data provided via a web page If the user is a legitimate user, the ability to provide file data as an overview The main feature is that file data can be obtained easily, and the administrator can provide file data at a low management cost.

[0101] This main feature will be specifically described. As shown in FIG. 7, the data providing system according to the third embodiment is an access network (communication formed by a public telephone network, the Internet, an intranet, etc.). The user is provided with a telephone function and a browser function via a network, and is connected to a mobile phone so that the telephone can communicate with the mobile telephone.

[0102] The data providing system according to the third embodiment includes a force S (not shown), CTKComputer Telephony Integration), and a data providing server. The data providing server stores file data (for example, electronic certificate file data such as a resident's card or family register provided by the local government) in the storage unit in advance and downloads the file data via the web page. The personal information including the name and address obtained at the time of registration reception is associated with the telephone number of the user mobile phone and stored in advance in the storage unit.

[0103] When the data providing system according to the third embodiment receives a WEB page display request from the user mobile phone via the access network, the display items on the WEB page such as "resident's card" and "seal stamp" In addition to generating a one-time URL to link to a phone number, one phone number is selected based on a predetermined algorithm (algorithm pre-set for selection) from among a plurality of phone numbers possessed in advance. , Generate a one-time phone number information to link to “(1) Login authentication”, and link the web page that links the one-time phone number information to “(1) login authentication” on the screen of the user's mobile phone Display.

[0104] Note that this is limited to linking one-time URLs and one-time phone number information that function as one-time IDs (IDs that are valid only within the session) to display items on the WEB page. You can create URLs and phone number information that can be used repeatedly and link them.

[0105] Next, the data provision system according to Example 3 is a display item on the WEB page "(

When a button operation specifying “1) Login authentication” is accepted from the user, the caller's phone number is automatically sent from the user's mobile phone that automatically calls the phone number linked to “(1) Mouth authentication”. Receive.

Subsequently, the data providing system according to the third embodiment performs user authentication based on the received caller telephone number. Specifically, it is determined whether or not the received caller telephone number is present in the mobile phone number stored in advance in the storage unit upon accepting the user registration. Is included in the mobile phone number, the user associated with the caller phone number is authenticated as a legitimate user.

[0107] After authenticating the user associated with the caller telephone number as a legitimate user, the data providing system according to the third embodiment performs file data stored in the storage unit (for example, an electronic certificate of a resident card). File data for download on the basis of the data on the web page, and a private key and public key to protect the integrity of the file data. Link to the one-time URL corresponding to the item “Registration Card”. Then, a voice guidance is sent to inform the user that the download is ready, and the telephone connection is disconnected.

[0108] After the telephone connection is disconnected, the screen of the user mobile phone automatically transitions to the browser screen on which the WEB page is displayed. For example, when a button operation for specifying “resident card”, which is a display item on the WEB page, is received from the user, the user mobile phone is linked to the “resident card” item! You can automatically access the one-time URL and download the file data, private key, and public key of “resident card” (to receive file data).

[0109] The data providing system according to the third embodiment can easily obtain file data according to the main features described above, and the administrator side can reduce the management cost. It is possible to provide file data while suppressing.

[0110] [Configuration of Data Providing System (Example 3)] Next, the configuration of the data providing system according to the first embodiment will be described with reference to FIG. FIG. 8 is a block diagram illustrating the configuration of the data providing system according to the third embodiment. In this figure, only the configuration (processing function unit, etc.) necessary for realizing the data providing system according to Example 1 is described, and other configurations are described! Is omitted!

[0111] As shown in FIG. 8, the data providing system according to the third embodiment is a user mobile phone 10 having a telephone function and a browser function via an access network composed of a network 1 and a public telephone network 2. Connected to and telephone and communicable. This data providing system is composed of a CTI (Computer Telephony Integration) 50 and a data providing server 60.

[0112] In the data providing system according to the third embodiment, the CTI 50 links the processing related to the telephone connection received from the user mobile phone 10 with the processing related to the network access request received from the user mobile phone 10. It is a processing part. For example, the modem 50a in the CTI 50 transfers the caller telephone number transmitted from the user mobile phone 10 to the authentication processing unit 63c of the data providing server 60 described later. Further, it accepts a request from the authentication processing unit 63c of the data providing server 60, which will be described later, sends a voice guidance notifying the user that the download is ready, and disconnects the telephone connection with the user mobile phone 10.

[0113] The data providing server 60 includes a communication control I / F unit 61, a storage unit 62, and a control unit 63. Among these, the communication control I / F unit 61 controls communication related to various information exchanged with the user mobile phone 10 via the network 1.

[0114] The storage unit 62 is a storage unit that stores data and programs necessary for various processes by the control unit 63. Particularly, the storage unit 62 is closely related to the present invention, and includes a registered user data storage unit 62a and a proof. A document data storage unit 62b is provided.

[0115] Among these, the registered user data storage unit 62a is a storage unit that stores various types of information related to registered users when receiving registration of a user who desires to download file data via a WEB page. Specifically, as illustrated in FIG. 9, the mobile phone number of the user mobile phone 10 is stored in association with personal information including a user name and an address. As personal information, other information (for example, date of birth or permanent address) Or the like) may be further stored.

[0116] The certificate data storage unit 62b is a storage unit that stores in advance file data of an electronic certificate such as a resident's card, a seal certificate, and a family register provided by a local government.

[0117] The control unit 63 has a control program such as an OS (Operating System), a program that defines various processing procedures, and an internal memory for storing necessary data, and executes various processes based on these programs. The processing unit, which is particularly closely related to the present invention, includes a web page providing unit 63a, a data generation unit 63b, and an authentication processing unit 63c.

Of these, the WEB page providing unit 63 a is a processing unit that provides the WEB page to the user mobile phone 10. More specifically, when a web page display request is received from the user mobile phone 10 via the network 1, the data generation unit 63b is requested to generate a one-time URL and one-time telephone number information. Then, the one-time URL and the one-time telephone number information are received from the data generation unit 63b. For example, a web page in which the one-time telephone number information is linked to the display item “(1) Login authentication” on the web page is displayed. To be displayed on the screen of the user's mobile phone.

[0119] Further, the web page providing unit 63a accepts the authentication processing unit 63c, the file data for download, the private key and the public key for protecting the integrity of the file data, and receives them on the web page. Link to the one-time URL corresponding to the display item (for example, “resident card” item) and link this one-time URL to the display item on the WEB page.

[0120] The data generation unit 63b is a processing unit that generates a one-time URL and one-time telephone number information. Specifically, when a request is received from the WEB page providing unit 63a, for example, as shown in FIG. 10, it is linked to a display item on the WEB page such as “resident card” or “seal stamp”. One-time URL of HTML (Hyper Text Markup

(Language) format and select one phone number based on a predetermined algorithm (algorithm with a preset selection method) out of multiple phone numbers that you have in advance. 1) Generate one-time phone number information for linking to “Login Authentication” in HTML format and output it to WEB page provider 63a.

[0121] The data generation unit 63b uses a one-time ID (an ID that is valid only within the session). This is not limited to generating one-time URLs and one-time phone number information that function in the same way, and URLs and phone number information that can be used repeatedly may be generated.

[0122] The authentication processing unit 63c is a processing unit that performs user authentication and the like based on the received caller telephone number. Specifically, when a button operation for specifying “(1) Login authentication”, which is a display item on the WEB page, is received from the user, the phone number linked to “(1) Login authentication” is automatically set. Whether the caller telephone number received via the CTI50 modem 50a from the user mobile phone 10 that makes a call to the mobile phone number is among the mobile phone numbers stored in advance in the registered user data storage unit 62a upon accepting user registration. Judge whether or not. If the result of the determination is that the caller telephone number is among the mobile phone numbers stored in advance in the registered user data storage unit 62a, the user associated with the caller telephone number is authenticated as a legitimate user. On the other hand, when the caller telephone number does not exist among the mobile phone numbers stored in advance in the registered user data storage unit 62a, the identity confirmation registration process described in the following embodiment is executed.

[0123] After authenticating the user associated with the caller telephone number as a legitimate user, the authentication processing unit 63c uses the file data stored in the certificate data storage unit 62b (for example, the electronic certificate of the resident card). Can be used to generate file data for download, and to protect the integrity of the file data, any method such as PKI-based challenge 'and' response authentication can be employed. Request the web page provider 63a to generate a private key and public key and link to the one-time URL corresponding to the display item on the web page (for example, the “resident card” item). It should be noted that the authentication processing unit 63c is not limited to adopting a challenge-and-response authentication method based on PKI, but adopts an arbitrary method such as challenge-and-response authentication based on a shared secret password. Anyway.

[0124] Then, the authentication processing unit 63c sends a voice guidance notifying the user that the download preparation is complete, and requests the CTI 50 to disconnect the telephone connection with the user mobile phone 10.

Note that the authentication processing unit 63c further associates the generated download file data, secret key, and public key with each piece of information stored in the registered user data storage unit 62a. It is also possible to store the file data for download, the secret key, and the public key that have been stored and link to the stored file data for download when there is a request for downloading the file data again.

[0126] After the telephone connection is disconnected, the screen of the user mobile phone 10 automatically transitions to the browser screen on which the WEB page is displayed. For example, when a button operation for specifying “resident card”, which is a display item on the WEB page, is received from the user, the user mobile phone 10 is linked to the “resident card” item! /, You can automatically access the one-time URL to download file data, private key, and public key of “resident's card” (get file data provided).

[0127] The data providing server 60 can also be realized by mounting the above-described functions of the WEB page providing unit 63a, the data generating unit 63b, and the authentication processing unit 63c on a known personal computer or workstation. .

[0128] [Processing of data providing system (Example 3)]

Subsequently, processing of the data providing system according to the third embodiment will be described with reference to FIG. FIG. 11 is a sequence diagram illustrating the flow of the data providing process according to the third embodiment.

As shown in the figure, user mobile phone 10 receives a request from the user, and transmits a web page display request to data providing server 60 (step S1101).

[0130] Upon receiving the WEB page display request from the user mobile phone 10 via the network 1, the WEB page providing unit 63a of the data providing server 60 generates the one-time URL and the one-time telephone number information to the data generating unit 63b. Request

[0131] Upon receiving a request from the WEB page providing unit 63a of the data providing server 60, the data generating unit 63b of the data providing server 60 generates a one-time URL and one-time telephone number information (step S1102). More specifically, for example, as shown in Fig. 10, HTML (Hyper Text Markup Language) is a one-time URL for linking to resident cards, seal stamps, etc., which are display items on the WEB page. A phone number is generated based on a predetermined algorithm (an algorithm in which the selection method is set in advance) from among a plurality of phone numbers possessed in advance, and “(1) Login authentication” is selected. Generate one-time phone number information for linking in HTML format and WEB Output to page providing unit 63a.

[0132] Then, the one-time URL and the one-time telephone number information are received from the data generating unit 63b, and the WEB page providing unit 63a of the data providing server 60 is, for example, a display item “(1 A web page in which the one-time phone number information is linked to “login authentication” is provided and displayed on the screen of the user mobile phone (step S 1103).

[0133] When a button operation specifying “(1) login authentication”, which is a display item on the WEB page, is received from the user (step S1104), the user mobile phone 10 changes to the “(1) login authentication”. Calls are automatically made to the linked phone numbers! (Step S 1105). The modem 50a installed in the CTI 50 transfers the caller telephone number transmitted from the user mobile phone 10 to the authentication processing unit 63c of the data providing server 60 (step S1106).

[0134] The authentication processing unit 63c of the data providing server 60 performs user authentication based on the received caller telephone number (step S1107). Specifically, a user who automatically makes a call to the phone number linked to “(1) Login authentication”, which is a display item on the WEB page, makes a call received from the mobile phone 10 via the CTI50 modem 50a. The user telephone number is accepted, and it is determined whether or not it exists in the mobile phone number stored in advance in the registered user data storage unit 62a. If the result of the determination is that the caller telephone number is among the mobile phone numbers stored in advance in the registered user data storage unit 62a (Yes at step S1107), the user associated with the caller telephone number is designated as a legitimate user. Authenticate as On the other hand, if the caller's phone number is stored in advance in the registered user data storage unit 62a and does not exist in the mobile phone number (No in step S1107), this will be described in a later embodiment. Identity verification registration processing is executed (step S 1109).

[0135] After authenticating the user associated with the caller telephone number as a legitimate user, the authentication processing unit 63c of the data providing server 60 uses the file data stored in the certificate data storage unit 62b ( For example, the file data for download is generated based on the electronic certificate data of the resident card (step S1108), and a private key and a public key for protecting the integrity of the file data are generated. The Web page providing unit 63a of the data providing server 60 is requested to link to a one-time URL corresponding to a display item on the WEB page (for example, “resident card” item). The user is then notified that the download is ready. C TI50 is requested to disconnect the telephone connection with the user mobile phone 10.

[0136] Upon receiving the request from authentication processing unit 63c, CTI50 issues a voice guidance notifying the user that the download is ready (step S1110), and disconnects the telephone connection with user mobile phone 10. (Step S1111).

[0137] After the telephone connection is disconnected, the screen of the user mobile phone 10 automatically transitions to the browser screen, and the WEB page is redisplayed (step S1112). For example, when a button operation for designating “resident's card”, which is a display item on the web page, is received from the user (step S 1113), the user mobile phone 10 is linked to the “resident card” item. ! /, You can automatically access the one-time URL and download the file data, private key and public key of “resident card” (to receive file data).

[Effects of Example 3]

As described above, according to the third embodiment, file data (for example, electronic certificate file data such as a resident's card or family register provided by the local government) is stored in the certificate data storage unit 62b in advance, A mobile phone number associated with personal information consisting of the name, address and other information of a legitimate user who can download the file data provided via the WEB page (for example, the date of birth or permanent address) Is stored in the registered user data storage unit 62a in advance, and when a web page display request is received from the user, a telephone number indicating the telephone number of the data providing system that is the authentication source for authenticating the user After providing a display item with associated information (for example, “(1) Login authentication”) to a web page, the display item on the web page is displayed. When the button operation to be determined is accepted from the user, the caller telephone number transmitted from the user mobile phone 10 to the authentication source associated with the display item is stored in the registered user data storage unit 62a. If it is determined whether or not the caller phone number exists in the mobile phone number, if the caller phone number exists in the mobile phone number, the user associated with the caller phone number is authenticated as a legitimate user and the call is made. File data is provided to the user's mobile phone 10 related to the caller's phone number. For example, a call function such as calling a predetermined phone number and notifying the local phone number as the caller's number, and downloading from the network Shi By using a mobile phone (browser phone) equipped with a browser function for browsing web pages, the user can easily obtain file data (electronic certificate) such as a resident's card or family register. It is possible for the administrator to provide file data at a reduced cost without the need to manage users who are given IDs and passwords.

[0139] Further, according to the third embodiment, every time a web page display request is received from the user mobile phone 10, a predetermined algorithm (an algorithm in which a selection method is set in advance) is selected from a plurality of telephone numbers possessed in advance. ), The display item associated with the telephone number information consisting of the selected telephone number is pasted on the WEB page and provided. It is possible to function as a valid ID) and prevent a Service-to-Self who obtained this information illegally from impersonating a legitimate user.

[0140] Also, according to the third embodiment, when file data is provided to the user associated with the caller ID, information for protecting the integrity of the file data (for example, a public key is a secret key). In addition, when using the file data provided by the user, it is possible to prevent the file data from being forged or altered and use it.

[0141] Also, in the above-described third embodiment, the data providing system 60, when the caller telephone number received from the user mobile phone 10 does not exist in the mobile phone number stored in advance, A confirmation registration process may be executed. Therefore, in the following fourth embodiment, the configuration and processing of the data providing system according to the fourth embodiment will be described in order, and finally the effects of the fourth embodiment will be described.

[0142] [Data providing system configuration (Example 4)]

First, the configuration of the data providing system according to the fourth embodiment will be described with reference to FIG. FIG. 12 is a block diagram illustrating the configuration of the data providing system according to the fourth embodiment.

[0143] The data providing system according to the fourth embodiment includes a communication control I / F unit 71 of the data providing server 70, a certificate data storage unit 72b of the storage unit 72, and a web page of the control unit 73 shown in FIG. The providing unit 73a and the data generating unit 73b have the same configuration (processing function) as the data providing server 60 according to the third embodiment shown in FIG. 8 (processing function), the registered user data storage unit 72a of the storage unit 72, The authentication processing unit 73c of the control unit 73 and the CTI 50 are different from the third embodiment.

[0144] That is, the authentication processing unit 73c confirms the identity if the caller telephone number S received from the user mobile phone 10 does not exist in the mobile phone number stored in advance in the registered user data storage unit 72a. Execute the registration process.

Specifically, the authentication processing unit 73c does not exist in the mobile phone number stored in advance in the caller telephone number S received from the user mobile phone 10 and the registered user data storage unit 72a. In this case, collation information (for example, personal information such as name and address) for checking the information in the file data stored in the certificate data storage unit 72b in advance for the user associated with the caller telephone number. ) Request and get.

[0146] Here, the authentication processing unit 73c instructs the CTI 50 to extract the verification information from the user mobile phone 10 based on the call response to the talkie, and analyze and acquire the response content by voice recognition. The CTI 50 outputs the acquired collation information to the authentication processing unit 73c.

[0147] The authentication processing unit 73c that has received the verification information from the CTI 50 checks whether or not the acquired verification information exists in the certificate data storage unit 72b. As a result of the confirmation, if the obtained verification information exists in the certificate data storage unit 72b, it is confirmed that the user associated with the caller telephone number is the person himself, for example, as shown in FIG. As described above, the caller telephone number received from the user mobile phone 10 is registered in the registered user data storage unit 72a in association with the acquired collation information (for example, the user name “ji”). On the other hand, if the acquired verification information does not exist in the certificate data storage unit 72b, for example, a voice guidance indicating that the authentication has not been completed normally is transmitted, and the CTI 50 is disconnected so as to disconnect the call connection. Request.

[0148] Note that the authentication processing unit 73c is not limited to the case where the above-described identity confirmation registration process is executed, and any operator who makes a call with the user of the user mobile phone 10 and If the user is the person himself / herself, it may be registered by checking the information in the file data stored in the certificate data storage unit 32b.

[0149] Confirm that the user associated with the caller telephone number is the user, and register the registered user data. After registration in the storage unit 72a, the authentication processing unit 73c performs the same processing as described in the third embodiment with the file data stored in the certificate data storage unit 72b (for example, the electronic certificate of the resident card). Secrets that can generate file data for download based on data, and can employ any method such as PKI-based challenge and response authentication to protect the integrity of the file data A key and a public key are generated, and the web page providing unit 73a is requested to link to a one-time URL corresponding to a display item on the web page (for example, “resident card” item).

[0150] Then, in the same manner as described in the third embodiment, the authentication processing unit 73c transmits a voice guidance notifying the user that the download preparation has been completed and disconnects the telephone connection with the user mobile phone 10. Request to CTI50.

[0151] [Process of data provision system (Example 4)]

Next, processing of the data providing system according to the fourth embodiment will be described with reference to FIG. FIG. 14 is a flowchart illustrating the flow of identity verification registration processing according to the fourth embodiment.

[0152] The authentication processing unit 73c performs identity verification registration processing when the caller telephone number received from the user mobile phone 10 does not exist among the mobile phone numbers stored in advance in the registered user data storage unit 72a. Execute.

[0153] First, the authentication processing unit 73c, when the caller telephone number received from the user mobile phone 10 does not exist in the mobile phone number stored in advance in the registered user data storage unit 72a, Requests the user associated with the caller telephone number for verification information (for example, personal information such as name and address) to collate with the information in the file data stored in the certificate data storage unit 72b in advance. (Step S1401).

[0154] Here, the authentication processing unit 73c instructs the CTI 50 to extract the verification information from the user mobile phone 10 based on the call response to the talkie, and analyze and acquire the response content by voice recognition. The CTI 50 outputs the acquired collation information to the authentication processing unit 73c.

[0155] The authentication processing unit 73c that has received the verification information from the CTI 50 checks whether or not the acquired verification information exists in the certificate data storage unit 72b (step S1402). As a result of the confirmation, if the acquired verification information exists in the certificate data storage unit 72b (Yes at step S1402), it is confirmed that the user associated with the caller telephone number is the person himself / herself, for example For example, as illustrated in FIG. 13, the caller telephone number received from the user mobile phone 10 is registered in the registered user data storage unit 72 a in association with the acquired collation information (for example, the user name “ji”). (Step S1403). On the other hand, if the acquired collation information does not exist in the certificate data storage unit 72b (No at step S1402), for example, a voice guidance indicating that the authentication has not been completed normally is issued and the call connection is established. Request CTI50 to disconnect.

[0156] After confirming that the user associated with the caller telephone number is the user and performing registration in the registered user data storage unit 72a, the authentication processing unit 73c is the same as described in the third embodiment. In addition, file data for download is generated based on the file data stored in the certificate data storage unit 72b (for example, electronic certificate data of the resident card) (see step S1108 in FIG. 11), and the file In order to protect the integrity of the data, a private key and a public key that can adopt any method such as challenge-and-response authentication based on PKI are generated and displayed on the web page (for example, WEB page provision section 73a is requested to link to the one-time URL corresponding to the “resident card” item.

[Effects of Example 4]

As described above, according to the fourth embodiment, when a button operation for specifying a display item on a WEB page is received from a user, a call is transmitted from a mobile phone to an authentication source associated with the display item. Check if the caller's phone number exists in advance in the mobile phone number stored in the registered user data storage unit 72a. If it is confirmed that the caller telephone number does not exist, the user associated with the caller telephone number is checked against the information in the file data stored in the certificate data storage unit 72b in advance. Requesting and obtaining verification information (for example, personal information such as name and address) and storing the user verification information related to the acquired caller telephone number in the certificate data storage unit 72b in advance. Whether or not it exists in the information in the file data being confirmed, the result of the confirmation, the verification information power S of the user related to the caller number obtained, and the certificate data storage unit 7 2b in advance If it is confirmed that it exists in the information in the file data stored in, the caller telephone number is recorded in the registered user data storage unit 72a in association with the verification information. Therefore, for example, identity verification can be performed using information in a resident card stored as file data, and user registration can be performed easily.

Example 5

[0158] Now, the forces described for the third and fourth embodiments of the present invention so far The present invention may be implemented in various different forms other than the above-described embodiments. Therefore, other embodiments included in the present invention will be described below.

[0159] (1) Enter password

In the third embodiment, when the caller telephone number transmitted from the user mobile phone 10 exists in the mobile phone number stored in the registered user data storage unit 62a, the user of the user mobile phone 10 If the password is entered as requested, the user associated with the caller telephone number may be authenticated as a legitimate user! /, .

[0160] The ability to provide file data only to legitimate users who know the password can prevent the use of file data for illegal purposes such as theft of personal information. It is possible.

[0161] (2) System configuration, etc.

Each component of the data providing server 60 and the data providing server 70 shown in FIG. 8 and FIG. 12 is functionally conceptual and does not necessarily need to be physically configured as illustrated. That is, the specific form of the distribution / integration of the data providing server 60 and the data providing server 70 is not limited to the illustrated one. For example, the data generating unit 63b and the authentication processing unit 63c are integrated, and the data generating unit 73b For example, all or part of the authentication processing unit 73c may be integrated and functionally or physically distributed and integrated in arbitrary units according to various loads and usage conditions. In addition, each processing function performed by the data providing server 60 and the data providing server 70 (the data providing processing function and the identity confirmation registration processing function, see FIGS. 11 and 14) is all or any part of the processing functions. It can be realized by a CPU and a program that is analyzed and executed by the CPU, or can be realized as hardware by means of yard logic.

[0162] (3) Data provision program By the way, in the various processes related to the data providing method of the data providing server described in the third embodiment (see FIG. 11 etc.), a program prepared in advance is executed by a computer system such as a personal computer workstation. The power that can be realized by doing S. Therefore, in the following, an example of a computer that executes a data providing program having the same function as in the third embodiment will be described with reference to FIG. FIG. 15 is a diagram illustrating a computer that executes a data providing program.

[0163] As shown in the figure, the computer 80 as the data providing server includes a communication control I / F unit.

81, HDD82, RAM83, ROM84 and CPU85 are connected by bus 90. Here, the communication control I / F unit 81 corresponds to the communication control I / F unit 61 shown in FIG.

[0164] Then, the ROM 84 stores a data providing program that exhibits the same function as the data providing server 60 shown in the third embodiment, that is, as shown in FIG. The generation program 84b and the authentication processing program 84c are stored in advance. Note that these programs 84a, 84b, and 84c may be appropriately integrated or distributed as in the case of each component of the data providing server 60 shown in FIG. The ROM 84 may be a nonvolatile “RAM”.

[0165] Then, by reading and executing these programs 84a, 84b, and 84c from the ROM 84, the programs 84a, 84b, and 84c are transferred to the web page providing process 85a as shown in FIG. Thus, it functions as a data generation process 85b and an authentication process 85c. The processes 85a, 85b, and 85c correspond to the web page providing unit 63a, the data generating unit 63b, and the authentication processing unit 63c shown in FIG. 8, respectively.

Also, as shown in FIG. 15, the HDD 82 is provided with a registered user data table 82a and a certificate data table 82b. These registered user data table 82a and certificate data table 82b correspond to the registered user data storage unit 62a and the certificate data storage unit 62b shown in FIG. 8, respectively. The CPU 85 reads the registered user data 83a and the certificate data 83b from the registered user data table 82a and the certificate data table 82b, stores them in the RAM 83, and stores the registered user data 83a and the certificate data stored in the RAM 83. Data provision processing is executed based on 83b. [0167] The above-mentioned programs 84a, 84b, and 84c are not necessarily stored in the ROM 84 from the beginning. For example, a flexible disk (FD), a CD-ROM, “Portable physical media” such as MO discs, DVD discs, magneto-optical discs, IC cards, etc., or “fixed physical media” such as HD D installed inside and outside the computer 80, as well as public lines and the Internet Each program is stored in “another computer (or server)” connected to the computer 80 via a LAN, WAN, etc., and the computer 80 reads each program from these and executes the actual fi. Ayo lei.

[0168] (4) Service usage and authentication using other than mobile phones with browser function

In the above-described third embodiment, the data providing method (see FIG. 11 and the like) performed between the user mobile phone 10 which is a mobile phone with a browser function and the data providing server is described. 1S The present invention is not limited to this. For example, the present invention can also be provided in the same manner when the user has a device having a browser function and a device having only a telephone function.

[0169] For example, a user who has a personal computer with a browser function and a mobile phone with only a telephone function, for example, writes it on the exterior of a paper medium, e-mail, or other article, or displays or monitors The phone number provided by the service provider is dialed and displayed on the answering machine or recorded on the answering machine, and authentication is performed based on the telephone number notified with the dialing operation. In this way, the user can easily receive the service.

[0170] In the third embodiment, the case has been described where the mobile phone number used by the user is used as information for authenticating the authorized user who can receive the file data. However, the present invention is not limited to this. For example, a solid identification number of a mobile phone may be used.

[0171] In the third embodiment, the case where the present invention is applied to a service that provides file data of various certificates provided by local governments has been described. However, the present invention is not limited to this. For example, the present invention can be similarly applied to an information distribution service or an electronic commerce service via a network. Industrial applicability

As described above, the user authentication method, the browser phone authentication system, the server device, and the user authentication program according to the present invention call a predetermined telephone number and notify the local telephone number as a caller number, and Useful when authenticating that a mobile phone user with a browser function that browses the web page downloaded from the network is a legitimate user who can receive the web service provided on the web page. In particular, when a user wants to receive various services via a network, the user can be authenticated without requiring a plurality of devices, thereby realizing user authentication that is convenient for the user. Suitable. The service providing method, service providing system, service providing server, and service providing program according to the present invention include, for example, a telephone function for calling a predetermined telephone number and notifying the local telephone number as a caller telephone number, If the user of a mobile phone equipped with a browser function is a legitimate user who can download the file data provided via the web page This is useful when providing services that provide the file data. In particular, the user is suitable for receiving services easily regardless of the password, etc. Various services (for example, information via a network) without incurring the cost of media management Suitable for a child provides trust services and e-commerce services).

Claims

The scope of the claims

[1] A user of a mobile phone equipped with a telephone function for calling a predetermined telephone number and notifying his / her own telephone number as a caller number and a browser function for browsing a web page downloaded from a network can be displayed on the web page. A browser phone authentication method with the power of being a legitimate user who can receive the web service provided by

A user phone number registration step of pre-registering a mobile phone number of a user who can receive the WEB service;

When a request for the WEB page is received from the user of the mobile phone, the WEB page to which the display item associated with the telephone number information including the authentication source telephone number for authenticating the user is pasted is displayed to the user. The WEB page providing step to be provided and, when a button operation for designating the display item is accepted from the user, the call sent from the mobile phone that sends to the authentication source associated with the display item It is determined whether or not the telephone number registered in the user telephone number registration process and the telephone number registered in the user telephone number registration process match each other, and the user who works on the caller number receives the Web service. And a user authentication process for authenticating whether the user is a legitimate user.

[2] In the web page providing step, each time a request for the web page is received from a user of the mobile phone, a telephone selected based on a predetermined algorithm from a plurality of own telephone numbers possessed in advance. 2. The browser phone authentication method using a telephone number according to claim 1, wherein the display item associated with the telephone number information including a number and predetermined additional information is transmitted by being pasted on the WEB page.

[3] When the user corresponding to the caller number is authenticated as a legitimate user by the user authentication step, the user is requested to perform a predetermined button operation by the mobile phone, and the predetermined user as requested. A service-related information generation step of generating service-related information associated with the service item of the WEB service pasted on the WEB page browsed by the user when the button operation is performed The browser phone authentication method using a telephone number according to claim 1.

[4] In the user authentication step, after identifying the user who is strong in the caller number, the user is requested to input a predetermined character string that is uniquely given in advance to the user, and the predetermined number is requested as required. The phone number according to any one of claims 1 to 3, characterized in that if the character string is input, the user who authenticates the caller number is authenticated as the regular user. Browser phone authentication method.

[5] A user of a mobile phone equipped with a telephone function for calling a predetermined telephone number and notifying his / her own telephone number as a caller number and a browser function for browsing a WEB page downloaded from the network can be displayed on the WEB page. A browser phone authentication system with the power to be a legitimate user who can receive the web service provided by

A user telephone number registration means for registering in advance a mobile telephone number of a user who can receive the WEB service;

When a request for the WEB page is received from the user of the mobile phone, the WEB page to which the display item associated with the telephone number information including the authentication source telephone number for authenticating the user is pasted is displayed to the user. The web page providing means to be provided and, when a button operation for designating the display item is accepted from the user, the call sent from the mobile phone that sends to the authentication source associated with the display item The user number and the telephone number registered in the user telephone number registration means! /, Determine whether or not the telephone numbers coincide with each other, and the user who works on the caller number receives the Web service. And a user authentication means for authenticating whether the user is a legitimate user.

[6] Each time the WEB page providing means receives a request for the WEB page from a user of the mobile phone, the telephone selected based on a predetermined algorithm from a plurality of own telephone numbers possessed in advance. 6. The browser phone authentication system according to claim 5, wherein the display item associated with the telephone number information including a number and predetermined additional information is transmitted by being pasted on the WEB page.

[7] When the user corresponding to the caller ID is authenticated by the user authentication means, the user is requested to perform a predetermined button operation using the mobile phone, and the predetermined user is requested as required. Service related information generating means for generating service related information associated with the service item of the WEB service pasted on the WEB page browsed by the user when the button operation is performed. The browser phone authentication system by the telephone number according to claim 5.

[8] After identifying the user who is strong in the caller ID, the user authentication step requests the user to input a predetermined character string that is uniquely given in advance, and performs the predetermined process as requested. If the character string is input, the user who authenticates the caller number is authenticated as the regular user. The telephone number according to any one of claims 5 to 7, Browser phone authentication system.

[9] A user of a mobile phone equipped with a telephone function for calling a predetermined telephone number and notifying his / her own telephone number as a caller number and a browser function for browsing a WEB page downloaded from the network can be displayed on the WEB page. A browser phone authentication server that authenticates whether the user is a legitimate user who can receive the WEB service provided by the user, and is a user phone number that pre-registers the mobile phone number of the user who can receive the WEB service. Registration means;

When a request for the WEB page is received from the user of the mobile phone, the WEB page to which the display item associated with the telephone number information including the authentication source telephone number for authenticating the user is pasted is displayed to the user. Web page providing means to be provided and, when a button operation for designating the display item is accepted from the user, notification from the mobile phone that is sent to the authentication source telephone number associated with the display item It is determined whether or not the caller number and the phone number registered in the user phone number registering unit match each other, and the user who works on the caller number receives the WEB service. A user authentication means for authenticating whether the user is a legitimate user,

A browser phone authentication server comprising:

[10] A telephone function for calling a predetermined telephone number and notifying the local telephone number as the calling party number, In addition, a mobile phone user with a browser function that browses web pages downloaded from the network is a legitimate user who can receive the web service provided on the web page, and how to authenticate the computer. A browser phone authentication program by phone number to be executed,

A user phone number registration procedure for pre-registering a mobile phone number of a user who can receive the WEB service;

When there is a request for the WEB service from a user of the mobile phone, a WEB page on which a display item associated with telephone number information consisting of an authentication source telephone number for authenticating the user is pasted to the user. Provided WEB page provision procedure to be provided and, when a button operation for designating the display item is accepted from the user, the call sent from the mobile phone that sends to the authentication source associated with the display item The user number who is registered in the user telephone number registration procedure and the telephone number registered in the user telephone number registration procedure is determined whether or not they match each other. A browser phone authentication program by telephone number, characterized by causing a computer to execute a user authentication procedure for authenticating whether the user is a legitimate user.

[11] A service providing method for providing services to legitimate users,

A storage step of storing in the storage unit a telephone number for identifying an authorized user who can receive the service;

A service providing step of providing a service on condition that the telephone number notified from the requester of the service matches the telephone number stored in the storage unit by the storing step;

A service providing method characterized by including:

[12] The telephone number notified from the requester of the service is stored in the storage unit by the storage process, and is not present in the telephone number. / Identity verification process to verify identity,

Notification from the service provider according to the result of identity verification in the identity verification process 12. The service providing method according to claim 11, further comprising: a registration step of registering the obtained telephone number as the regular user's telephone number.

[13] The service providing step further requests input of a predetermined character string when the telephone number notified from the requester of the service matches the telephone number stored in the storage unit by the storing step. 12. The service providing method according to claim 11, wherein the service is provided on condition that the predetermined character string is input.

[14] The method further includes a telephone number providing step of providing a telephone number to the service requester. The service providing step includes a service requesting source accompanying a call origination operation for the telephone number provided in the telephone number providing step. 12. The service provision method according to claim 11, wherein the service is provided on condition that the telephone number stored in the storage unit matches with the telephone number power notified from the storage step.

[15] In the telephone number providing step, the service requester was recorded on the exterior of a paper medium, e-mail, or other article, displayed on a display or monitor, or recorded on an answering machine. 15. The service providing method according to claim 14, wherein a telephone number is provided.

[16] A mobile phone user with a phone function that calls a specified phone number and notifies the local phone number as the caller's phone number, and a browser function that browses web pages displayed via the network. In the case of a legitimate user who can download file data provided via the web page, a service providing method for providing the file data,

A file data storage step for storing the file data in the storage unit in advance, and the mobile phone number of the user is stored in advance in the storage unit in association with the personal information including the name, address and other information of the authorized user. User phone number storage process,

When the display request of the mobile phone is received, the display item associated with the phone number information indicating the authentication source phone number for authenticating the user of the mobile phone is pasted and provided on the web page. Web page provision process, When a button operation for specifying the display item on the WEB page provided by the WEB page providing step is received from a user, the mobile phone transmits the button to the authentication source associated with the display item. It is determined whether the caller telephone number is present in the mobile phone number stored in the storage unit by the user telephone number storage step, and the caller telephone number is determined to be the mobile phone number. A user authentication step of authenticating a user associated with the caller telephone number as the regular user,

A data providing step of providing the file data to the mobile phone of the user related to the caller telephone number when the user related to the caller telephone number is authenticated as the regular user by the user authentication step When,

A service providing method characterized by including:

[17] In the web page providing step, when the display request for the web page is received from the mobile phone, the telephone including the telephone number selected based on a predetermined algorithm from a plurality of telephone numbers possessed in advance. 17. The service providing method according to claim 16, wherein the display item associated with the number information is provided by being pasted on the WEB page.

[18] In the user authentication step, if the caller telephone number transmitted from the mobile phone is present in the mobile phone number stored in the storage unit by the user phone number storage step, When a request is made to input a predetermined character string that is uniquely assigned to the user's mobile phone related to the caller's phone number, and the input of the predetermined character string is accepted from the user's mobile phone 17. The service providing method according to claim 16, wherein the user associated with the caller telephone number is authenticated as the regular user.

[19] The data providing step is characterized in that when the file data is provided to a user associated with the caller ID, information for protecting the integrity of the file data is also provided. The service providing method according to claim 16.

[20] When it is confirmed by the user authentication step that the caller telephone number does not exist in the mobile phone number, the mobile phone of the user related to the caller telephone number is On the other hand, a verification information acquisition step of requesting and acquiring verification information for collating with the information in the file data stored in the storage unit in advance by the file data storage step;

Whether the user's collation information related to the caller telephone number acquired by the collation information acquisition step exists in the information in the file data stored in the storage unit in advance by the file data storage step And the information confirmation process to confirm,

The user telephone number storage step confirms that the verification information acquired by the verification information acquisition step exists in the information in the file data stored in the storage unit in advance by the file data storage step. 17. The service providing method according to claim 16, wherein when the call is made, the caller telephone number is stored in a storage unit in association with the verification information.

A user of a mobile phone equipped with a telephone function for calling a predetermined telephone number and notifying his / her own telephone number as a caller telephone number and a browser function for browsing a web page displayed via a network can be A service providing system for providing file data if the user is an authorized user who can download the file data provided via

File data storage means for storing the file data in advance;

Corresponding to personal information consisting of the name, address and other information of the legitimate user, user phone number storage means for storing the user's mobile phone number in advance and the mobile phone power receiving the web page display request A web page providing means for pasting and providing a display item associated with telephone number information indicating a telephone number of an authentication source for authenticating the user of the mobile phone on the web page;

When a button operation for designating the display item on the WEB page provided by the WEB page providing means is received from a user, it is transmitted from the mobile phone to the authentication source associated with the display item. The caller telephone number is present in the mobile telephone number stored in the user telephone number storage means. If the caller telephone number is present in the mobile phone number, a user authentication means for authenticating the user associated with the caller telephone number as the regular user;

Data providing means for providing the file data to the mobile phone of the user related to the caller telephone number when the user related to the caller telephone number is authenticated as the regular user by the user authentication means When,

A service providing system characterized by comprising:

A user of a mobile phone equipped with a telephone function for calling a predetermined telephone number and notifying his / her own telephone number as a caller telephone number and a browser function for browsing a web page displayed via a network can be If the user is a legitimate user who can download the file data provided through the service, the service providing server that provides the file data,

File data storage means for storing the file data in advance;

A user telephone number storage means for storing the mobile phone number of the user in advance in a storage unit in association with personal information including the name, address and other information of the legitimate user;

When the display request of the mobile phone is received, the display item associated with the phone number information indicating the authentication source phone number for authenticating the user of the mobile phone is pasted and provided on the web page. Web page provision means,

When a button operation for designating the display item on the WEB page provided by the WEB page providing means is received from a user, it is transmitted from the mobile phone to the authentication source associated with the display item. It is determined whether the caller telephone number is present in the mobile phone number stored in the user telephone number storage means, and the caller telephone number is present in the mobile phone number. A user authentication means for authenticating a user associated with the caller telephone number as the regular user;

When the user associated with the caller telephone number is authenticated as the regular user by the user authentication means, the user's mobile phone associated with the caller telephone number is Data providing means for providing the file data;

A service providing server comprising:

A user of a mobile phone equipped with a telephone function for calling a predetermined telephone number and notifying his / her own telephone number as a caller telephone number and a browser function for browsing a web page displayed via a network can be A service providing program for causing a computer to execute a method of providing the file data if the user is a legitimate user who can download the file data provided via

A file data storage procedure for storing the file data in the storage unit in advance, and the mobile phone number of the user is stored in the storage unit in advance in association with the personal information including the name, address and other information of the regular user. User phone number storage procedure,

When the display request of the mobile phone is received, the display item associated with the phone number information indicating the authentication source phone number for authenticating the user of the mobile phone is pasted and provided on the web page. Web page provision procedure,

When a button operation for designating the display item on the WEB page provided by the WEB page provision procedure is accepted from the user, the mobile phone sends the authentication source associated with the display item to the authentication source. The caller telephone number is determined to be present in the mobile phone number stored in the storage unit by the user phone number storage procedure, and the caller telephone number is determined to be the mobile phone number. A user authentication procedure for authenticating a user associated with the caller telephone number as the regular user,

A data providing procedure for providing the file data to the mobile phone of the user related to the caller telephone number when the user related to the caller telephone number is authenticated as the regular user by the user authentication procedure When,

A service providing program for causing a computer to execute.