JP2006171857A - Personal authentication device, personal authentication method, and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To easily and accurately perform authentication. <P>SOLUTION: When a user receives one or more services using the Internet or the like, the primary authentication means of a primary authentication system performs basic authentication on the basis of the user's ID and password that the user receiving the services has inputted on a primary authentication screen 110. Once the user is authenticated, a service menu is displayed and the user is urged to select the services that he or she desires to receive. Based on the access control list (ACL) and the level of importance of each of the services selected, a determination is made as to whether or not terminal authentication will be performed. In the case of the service that requires terminal authentication, terminal authentication is performed. Depending on service, a secondary authentication screen may be displayed for user authentication in order to further ensure personal authentication. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a personal authentication method, a personal authentication device, and an authentication method for ensuring personal authentication when providing one or more services using the Internet or the like.

In the Internet and the like, conventionally, a combination of a user ID and a password for confirming that the person who entered it is used as a device that can identify an individual, and biometrics is used for more certainty. The personal authentication used, for example, authentication by fingerprint, is used in combination or independently (see, for example, Patent Document 1).
Japanese Patent Laid-Open No. 2001-290778

  When personal authentication using biometrics is introduced as system security, there are the following problems.

・ The authentication device cannot be provided globally.
・ There is an operation system for registering and managing fingerprints.
・ There is considerable resistance to taking physical features.
・ There are still some problems with authentication accuracy.
-Expensive costs are incurred.

  It is an object of the present invention to provide a personal authentication method, a personal authentication device, and an authentication method that can be performed with high accuracy without taking time and effort.

  In the present invention, by using the terminal authentication process, it is possible to perform the authentication accurately without taking time and effort.

  In order to solve the above-described problems, the present invention provides a personal authentication apparatus that replaces personal authentication using biometrics such as fingerprints, and primary authentication means that performs authentication by a combination of a user ID and a password as a personal authentication method. Primary authentication system having a menu function for displaying a service name, secondary authentication storage means for registering and storing secondary user information and terminal information, etc., a terminal that is downloaded to a user's terminal in advance or at the first connection, etc. Preventing impersonation by improper users by having an information acquisition module, secondary authentication processing means that performs terminal authentication with a terminal ID unique to the terminal that can identify the terminal and user authentication with a secondary user ID and secondary password Personal authentication method, personal authentication apparatus and authentication method can be realized.

  The secondary authentication processing means has a secondary authentication control function such as whether to perform terminal authentication and user authentication based on service ACL (hereinafter referred to as ACL) and importance. In addition, the personal authentication method, the personal authentication device, and the authentication method for performing the personal authentication more reliably can be realized by performing the encryption processing or the like when the user information and the terminal information are acquired in the secondary authentication processing means.

  In more detail, the present invention can solve the above problems by the following configuration.

  (1) A user who receives one or more services using the Internet or the like is primarily authenticated by a combination of a user ID and a password, and it is determined whether or not to perform terminal authentication based on an access control list or importance of the service, If it is determined to do so, terminal authentication is performed based on a comparison between the terminal information of the user and pre-registered terminal information, and further a comparison between the secondary user information of the user and the pre-registered user information A personal authentication method, wherein authentication is performed by a secondary authentication process for performing user authentication based on.

  (2) A primary authentication screen displayed when a user who receives one or more services using the Internet or the like first connects, a primary authentication means for authenticating whether or not the user is a regular user, and the user Primary authentication system having a menu function for displaying a service name provided when authenticated, secondary authentication storage means for pre-registering and storing secondary user information and terminal information of the user, access to the service A personal authentication apparatus comprising secondary authentication processing means for performing terminal authentication and user authentication based on a control list, importance, and the like.

  (3) When a service request is received from a terminal, it is determined whether or not the service requires terminal authentication. If it is determined that the service is necessary, terminal ID information of the terminal and previously registered terminal ID information and An authentication method characterized in that terminal authentication is performed by comparing the two, and control is performed so as to provide the service when the terminal authentication is successful.

  The present invention is effective in preventing impersonation by an improper user.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a flowchart of the procedure of the present invention. Based on the user ID and password entered by the user who receives the service on the primary authentication screen 110, the primary authentication unit 111 performs basic authentication on the primary authentication system. Once authenticated, the 112 service menu is displayed and the user selects the service he wants to receive. It is determined in 113 whether or not terminal authentication is necessary based on the ACL (Access Control List) or importance for each selected service, and if it is determined that it is necessary, 114 terminal authentication is performed. In addition, depending on the service, a secondary authentication screen 116 may be displayed for more reliable personal authentication, and more accurate user authentication 117 may be performed, or when the terminal authentication is successful, the service 118 is received. You may be made to do.

  Note that the present invention can be realized by a general-purpose computer, and in this case, the processing of the present invention can be performed by executing a computer program stored in a storage medium by a CPU.

  FIG. 2 is a conceptual diagram of the personal authentication method and apparatus of the present invention.

  In FIG. 2, the initial user ID and password are input on the primary authentication screen 210 (1). The entered user ID and password are authenticated by the primary authentication means 221. As a result of authentication, if the user is an authorized user, the service menu 223 is displayed by the menu function 222. When the service is selected (2), the secondary authentication processing unit 230 operates according to the importance, and the connected user is connected by the terminal information acquisition module 231 downloaded to the user's terminal in advance or at the time of the first connection or the like. The MAC address (terminal ID) of the terminal is acquired (2).

  232 terminal authentication is performed in which the acquired MAC address is compared with the user's terminal MAC address registered in the secondary authentication storage unit 240. If they match as a result of authentication, a secondary authentication screen 233 is displayed. When the secondary user ID and the secondary password are input on the secondary authentication screen, the secondary authentication processing means 230 is activated and the secondary user registered in the secondary authentication storage means 240 is activated. 234 user authentication is performed to compare the ID with the secondary password. As a result of authentication, if the user is a regular user, 250 services can be provided (5).

  As the terminal ID, an ID uniquely assigned to the terminal such as a MAC address, an IP address, or a host name is used.

  In FIG. 2, the initial user ID and password are input on the primary authentication screen 210 (1). The entered user ID and password are subjected to basic authentication by the primary authentication means 221. If the user is authorized as a result of the authentication, the service menu 223 is displayed by the menu function 222. When the service is selected (2), 230 secondary authentication processing means operates based on ACL (Access Control List), and the terminal information acquisition module 231 downloaded to the user's terminal in advance or at the first connection time. The terminal ID of the connected user is acquired (2).

  232 terminal authentication is performed in which the acquired terminal ID is compared with the user terminal ID registered in the secondary authentication storage unit 240. If the authentication results match, the user can immediately receive 250 services without performing user authentication 234 (4).

  In FIG. 1, it is also possible to use secondary authentication processing means (from 112 onward) without using the primary authentication system.

  According to the first and second embodiments, there is an effect in preventing impersonation by an unauthorized user.

  Moreover, since terminal information is used for authentication, the terminal of a connected user can be specified.

  In addition, the operation and management system can be made relatively simple.

3 is a flowchart of the procedure of the present invention. It is a conceptual diagram of the personal authentication method and apparatus of this invention.

Explanation of symbols

210 Primary authentication screen 220 Primary authentication system 230 Secondary authentication processing means 240 Secondary authentication storage means 250 Service

Claims (7)

  A user who receives one or more services using the Internet or the like is primarily authenticated by a combination of a user ID and a password, and it is determined whether or not to perform terminal authentication based on an access control list or importance of the service, and is determined to be performed In such a case, terminal authentication is performed based on a comparison between the terminal information of the user and terminal information registered in advance, and a user based on a comparison between the secondary user information of the user and user information registered in advance. A personal authentication method characterized by performing authentication by a secondary authentication process for performing authentication.   A primary authentication screen displayed when a user who receives one or more services using the Internet or the like first connects, a primary authentication means for authenticating whether or not the user is an authorized user, and the user is authenticated A primary authentication system having a menu function for displaying the service name provided in the case, secondary authentication storage means for pre-registering and storing secondary user information and terminal information of the user, an access control list for the service, A personal authentication apparatus comprising secondary authentication processing means for performing terminal authentication and user authentication based on importance or the like.   Secondary user information such as secondary user ID and secondary password, and secondary information such as IP address, MAC address, and host name that can identify the terminal such as host name are registered and stored. The personal authentication apparatus according to claim 2, further comprising an authentication storage unit.   3. The personal authentication apparatus according to claim 2, further comprising a terminal information acquisition module that is downloaded to a user's terminal in advance or at the time of first connection.   5. A secondary authentication processing means for performing terminal authentication based on a comparison between user terminal information acquired by a terminal information acquisition module and terminal information in a secondary authentication storage means. The personal authentication device described in 1.   User authentication based on the comparison between the secondary user ID and secondary password entered by displaying the secondary authentication screen and the secondary user ID and secondary password in the secondary authentication storage means The personal authentication device according to claim 3, further comprising a secondary authentication processing unit capable of performing authentication.   When a service request is received from a terminal, it is determined whether the service requires terminal authentication. If it is determined, the terminal ID information of the terminal is compared with previously registered terminal ID information. An authentication method characterized in that terminal authentication is performed, and control is performed so as to provide the service when the terminal authentication is successful.

Images