JP2001117873A - Terminal identification method - Google Patents

Abstract

(57) [Summary] [PROBLEMS] To prevent a user from inputting a personal identification number or a password without knowing a fake terminal or system in card payment or server access, and to prevent such information from being stolen. In a terminal, card information and user ID are provided.
Is sent to the server, and from the information, the server sends user-specific information known only to the user to the terminal for display. The user confirms this information sent from the server, that is, the second PIN, and then enters the PIN that the user does not want others to know.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to data communication, and more particularly to data communication from a computer serving as a terminal and authentication of a user when accessing a server.
The present invention relates to a method, a terminal, a server, and a system for confirming the validity of a computer or a server used by a user.

[0002]

2. Description of the Related Art Conventionally, in a system composed of a terminal and a server, the server authenticates whether the terminal or its user is legitimate, or authenticates whether the terminal to which the terminal is connected is the correct server. Had been done.

[0003] For example, a device for mutually checking whether a terminal and a server are correct is disclosed in JP-A-11-8570.
As described in Japanese Unexamined Patent Publication No. 2 (Kokai) No. 2, during the exchange between the terminal and the server, one of the passwords prepared in advance is used.
The user was asked to enter one of them and they checked each other's legitimacy.

[0004] Conventionally, there has been a contrivance to prevent a third party from prying eyes when inputting a password or a password.

For example, in an automatic teller machine, a method of authenticating a user with a combination of card information and a password is generally used. As described in Japanese Patent Application Laid-Open No. 11-19094, a password is input. When changing the display, or by not knowing the key operation,
It was devised not to be seen by others.

[0006]

In the above method of mutually checking whether a terminal and a server are correct,
The user who enters the PIN cannot confirm whether the terminal is connected to the correct server or the terminal is legitimate. It did not deal with gender.

[0007] Further, in a device that prevents a third party from seeing the password or password when inputting, it is premised that the automatic teller machine is a correct machine. , And entered the password as instructed. For this reason, there was no countermeasure against the danger of stealing the personal identification number due to the fake machine itself.

[0008] In particular, in the future, such as taxis and temporary stores,
Increasingly, payment processing is performed using various types of terminals in various places.
Alternatively, whether the connected server or system is correct, or whether it is a fake terminal or fake system created for the purpose of stealing card information and personal identification number,
It was impossible to find out by inserting the current card and entering the password directly.

[0009] An object of the present invention is to prevent a terminal or a server connected to a terminal from being stolen in an electronic commerce or electronic settlement using a debit card, so that the password is stolen by others. An object of the present invention is to provide an identification method, a terminal, a server, and a system for preventing the identification.

[0010]

In order to achieve the above object, according to the present invention, a means for transmitting information to a server by inserting a card, inputting a user ID, an account number, etc., and Means for transmitting and displaying user-specific information known only to the user to the terminal, and the user can read, view,
Alternatively, a means is provided for confirming that the terminal and the server are legitimate by listening and recognizing that the content is correct, inputting a password, and transmitting the password to the server.

[0011] That is, before inputting a personal identification number that the user does not want to leak to another person, it is possible to solve the problem by preparing a system for providing information for the user to determine whether the terminal or the system is legitimate. . As information for the determination, user-specific information registered in advance by the user in a legitimate server is displayed on the terminal and presented to the user, so that the user can determine whether it is legitimate or fake. To do.

[0012]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a system configuration diagram showing an embodiment of the present invention.

In this figure, 101 is a user, 102 is a terminal, 103 is a network, 104 is a server, 105 is a database for storing user information, and 106 is a settlement center.

When the user 101 performs a settlement process from a remote place using the terminal 102, the user 101 accesses the server 104 in the settlement center 106 using the network 103, and stores the user information in a database. After performing the authentication process using 105, the payment process is performed. In this example, the user mainly uses a card to perform a payment process and uses a personal identification number or a password (hereinafter, referred to as a password).
Simply enter your password).
The data arrives at the server of the settlement center and is verified with the registered data in the server to prove the identity of the user and to perform the settlement processing.

FIG. 2 shows a terminal and server configuration diagram.

As shown in FIG. 1, the terminal 101 includes a display unit 2
01, a CPU 202, a memory 203, a card reader 204, a key input unit 205, and a communication port 206. The settlement center 106
It has a server 104 and a database 105. Server 104
Has an input device 208, a display unit 209, a CPU 210, a memory 211, and a communication port 212. Database 105 is a storage device
It consists of 214. Server 104 and database 105
Are connected by a bus 213. Terminal 101 and server 104
Are connected by a network 103.

The terminal 101 executes the program stored in the memory 203 by the CPU 202, and controls the card reader 204, displays on the display unit 201, inputs from the key input 205, and communicates with the server through the communication port 206. Communication.

The server 104 executes the program stored in the memory 211 by the CPU 210, and communicates with the terminal through the communication port 206, accesses the database 105, displays on the display unit 209, Input.

The database 105 performs data search and collation under the execution of a program in the server 104.

FIG. 3 is a diagram showing a screen display on a terminal to which the present invention is applied.

The terminal screens 301a to 301d show screen displays along the processing flow. First, on the terminal screen 301a, a display 302 "Please let me read the card" is displayed.
coming out. Thereby, as shown at 303, the user causes the card reader of the terminal to read the card information. Next, the card information is transmitted to the server, and the user-specific information retrieved from the database from the card information is transmitted from the server to the terminal. As shown in the terminal screen 301b,
The user-specific information 304 is displayed. When the user determines that the value is correct and presses the OK button 305, the screen changes to the terminal screen 301c. On the terminal screen 301c, a display 306 "Please enter a password" appears.

As a result, the user inputs the personal identification number 307 as shown on the terminal screen 301d.

Subsequently, as shown at 308, the input personal identification number is sent to the server, and the settlement processing is performed. After the card insertion is instructed on the terminal screen 301a, the user specific information is displayed on the terminal screen 301b. The user sees the displayed user-specific information and determines whether or not he / she has registered himself / herself with the settlement center in advance, and inputs a password at the terminal 301d only when the value is correct. It is.

Here, if the screen for instructing the input of the personal identification number appears as it is without displaying the user-specific information, or the user-specific information is displayed, but the displayed value is incorrect. In this case, the user can determine that the terminal being used or the server to which the server is connected is unauthorized, and the user does not need to enter a password. Can be prevented.

FIG. 4 is a diagram showing a flow of processing among a user, a terminal, a server, and a database.

When the user 401 causes the terminal 402 to read the card as indicated by 405, the terminal transmits the card ID in the read card information to the server 403 as indicated by 406.
Here, the card ID may be any name, symbol, number, or the like, which is information that can identify the user. Card ID in this sense
Functions as a user identification ID including concepts such as an account number and a user ID shown in FIG.

The server 403 sends the card ID as shown at 407.
To the database 404. The database 404 searches the stored user information for user-specific information using the card ID as a key, and notifies the server 403 as indicated by 408. Here, the user specific information is the user identification I
This is information such as a name, number, symbol, and voice that is uniquely identified by D and recognized in advance by the user.

The server 403 transmits the user-specific information to the terminal 402 as indicated by 409. The terminal 402 displays the user-specific information, as shown at 410, and notifies the user 401.
The user 401 determines whether the displayed user-specific information is correct or not, and if correct, returns 411
As shown in (2), the personal identification number is input to the terminal 402. Terminal 402
Transmits the password to the server 403 as shown at 412.
The server 403 transmits the personal identification number to the database 404 as indicated by 413. In the database 404, it is checked whether the transmitted personal identification number matches the personal identification number registered in advance in the user information in the database.
If they match, as shown at 414, the server notifies the server 403 of the completion of the verification and the result. On server 403, 4
As shown in FIG. 15, the terminal 402 is notified of the completion of the collation, and if they match, the terminal 402 and the server 403
In, the settlement process 416 is started.

FIG. 5 shows a user information management table stored in a database in the settlement center, which comprises a user identification ID 501, user unique information 502, and a password 503.

The user identification ID 501 is, for example, a card ID
, An account number, a user ID, and the like. The user information management table 500 can search for the user unique information 502 and the password 503 using the user identification ID 501 as a key.

FIG. 6 is a diagram showing a processing flow viewed from the "user" in the present invention.

In process 601, when there is a card input request from the terminal, in process 602, the user causes the card to be read 602. Next, in process 603, it is determined whether the user-specific information displayed by the terminal is correct, and if it is correct, in process 604, an OK button is pressed. Next, as in step 605, when the terminal requests input of a password, in step 606, the terminal inputs the password,
Thereafter, in process 607, a settlement service is received.

On the other hand, if the user-specific information is not displayed or the displayed information is not correct in the process 603, the operation is stopped in the process 608 and the used terminal is It is determined that the terminal is a fake terminal or is connected to a fake system, and the processing is terminated without inputting a password.

FIG. 7 is a diagram showing a processing flow executed by the "terminal" in the present invention. The functions shown here are realized as a program.

In a process 701, a card is awaited to be inserted. When a card is inserted, in a process 702, card information including a user identification ID is read. In step 703, the read card information is transmitted to the server of the settlement center. Next, in step 704, the process waits for the reception of the user-specific information from the server.
Display user-specific information on the terminal screen. Next, processing 70
As shown in FIG. 6, when the user presses the OK button, in a process 707, a request for inputting a personal identification number is displayed on the terminal screen for the user. In step 708, when the user inputs the personal identification number, in step 709, the input personal identification number is transmitted to the server of the settlement center. Next, in process 710, the server waits for the completion of authentication in the server. If completed, the result of the authentication is checked in process 711. If it is OK, the settlement service is started in process 712, and the service is terminated in process 713. Then return to the initial state.

On the other hand, in the process 711, the authentication result is NG
In the case of, as in the process 714, a measure for stopping the transaction is taken, and the process returns to the initial state.

FIG. 8 is a diagram showing a processing flow executed by the "server" in the present invention. The functions shown here are realized as a program.

In process 801, reception of card information including the user identification ID from the terminal is waited, and if received, in process 802, the received card information is sent to the database, and a search for user-specific information is instructed. . Next, in process 803, a search for the user unique information from the database is performed, and when the search is completed, in process 804, the searched user unique information is transmitted to the terminal. Next, in step 805, the personal identification number is waited for from the terminal, and if it is received, in step 806, the received personal identification number is sent to the database, and it is checked whether it matches the personal identification number registered in the database in advance. Instruct processing. If it is found in the process 807 that the matching process in the database is completed, the matching result is checked in the process 808, and if it is OK, the settlement service is started in the process 810. Return to the state.

On the other hand, in process 808, the collation result is NG
In the case of, as in the process 812, a measure for giving an instruction to cancel the transaction is taken, and the process returns to the initial state.

FIG. 9 shows a "database" according to the present invention.
FIG. 5 is a diagram showing a processing flow of the first embodiment. The functions shown here are realized as a program.

In process 901, a search request from the server is awaited. If there is a request, in process 902, the content of the request is a search request for user-specific information using the card information including the user identification ID as a key. In step 903, the user information management table is searched for user-specific information using the card information as a key. Then, in process 904, the user-specific information of the search result is transmitted to the server, and the process returns to the beginning.

On the other hand, if the requested content is not a search for user-specific information in process 902, the requested content is a collation request for a password using card information including user identification information as a key in process 905. Find out if. If so, in step 906, the user information management table is searched for a password using the card information as a key. Then, in a process 907, it is checked whether or not the password from the server and the searched password match, and if they match, in a process 908, a collation completion process is performed, and the result of the collation is “match”. To the server and return to the beginning.

On the other hand, in step 907, if the password from the server does not match the retrieved password, in step 909, a collation completion process is performed, and the server is informed that the collation result is "mismatch". Then return to the beginning.

If the request does not correspond to any of the requests in the process 905, the process returns to the beginning.

FIG. 10 is a diagram showing a flow of processing up to the point where the terminal used is a fake terminal, which is determined to be illegal and the transaction is stopped.

The user 1001 enters the terminal (fake terminal) 1002 with 10
As in 03, the card is read, but since the terminal is fake, it is not possible to connect to the legitimate server, and it is not possible to know the user-specific information to be returned. When the display is performed, the user determines in the process 1005 that it is improper, and stops the transaction.

Similarly, the user 1006 sets the terminal (fake terminal) 10
In 07, the card is read like 1008, but since the terminal is fake, it can not connect to the legitimate server,
If incorrect user-specific information is displayed, such as 1009, because the user-specific information to be returned is not known, the user determines in step 1010 that the information is invalid and cancels the transaction.

FIG. 11 is a diagram showing the flow of processing up to the determination that the server connected is a fake server and that the transaction is aborted and the transaction is stopped. The fake server is
Of course, it doesn't have access to a legitimate database. For this reason, the fake server cannot grasp the relationship between the user identification ID and the user unique information as shown in FIG.
Cannot retrieve legitimate user-specific information.

The user 1101 causes the terminal 1102 to read a card as indicated by 1105. The terminal 1102 transmits a user identification ID such as a card ID to the connected server (fake server) 1103 as shown in 1106, and the fake server 1103 receives this,
An attempt is made to search for user-specific information in the database 1104, but since a correct value has not been registered,
In 03, incorrect user-specific information is transmitted as in 1108. The fake server 1103 further conveys this incorrect user-specific information to the terminal 1102 as in step 1109, and the terminal 1102 displays the incorrect user-specific information on the display unit of the terminal as in step 1110. And prompt the user for processing. The user 1101, as in the process 1111, determines that the transaction is illegal and takes measures to stop the transaction.

The following embodiment is an embodiment in which user-specific information is notified to the user by voice.

FIG. 12 is a configuration diagram of a terminal and a server when the terminal or the connected server is genuine or fake by voice, and includes a terminal 101, a settlement center 106, a server 104, and a database. Consists of 105.

The terminal 101 is provided with an audio output unit 1201 to which a headphone 1202 can be connected. In the CPU 202 of the terminal, the user unique information received from the server 104 is converted into a sound, reproduced by the sound output 1201, and it is determined whether or not the user is correct user unique information. The headphones 1202 are provided to prevent a third party from hearing the read information.

By making it possible to view not only the screen display on the terminal but also the sound, the system becomes easy to use even for the visually impaired.

The following embodiment is an embodiment in which a plurality of user-specific information can be registered, the checking means can be changed as necessary, and the security is enhanced.

FIG. 13 is a diagram showing a user information management table stored in the database when there are a plurality of pieces of user unique information. The user identification ID 1301, user instruction information 1302, user unique information 1303, It consists of a password 1304.

The user identification ID 1301 is, for example, a card ID
, An account number, a user ID, and the like. Multiple pieces of user specific information can be registered for one user identification ID, and which user specific information is to be read is specified by the user by specifying the user instruction information 1302, and the corresponding user specific information 1303 is read. It is. That is, the user unique information 1303 is searched using the user identification ID 1301 and the user instruction information 1302 as keys, and the corresponding user unique information 1303 is read.

Since a plurality of user-specific information can be prepared and designated by the user presentation information 1302, the user can change the value used for confirmation as necessary.
Even if the user-specific information is known to another person, there is a means for confirming whether or not the terminal is genuine using the other user-specific information, so that the security is improved. If it is determined that user-specific information that is normally used has been stolen, it is possible to prevent even the personal identification number from being stolen by allowing the user instruction information to select another user-specific information Becomes

FIG. 14 is a diagram showing a terminal screen when there are a plurality of pieces of user-specific information.

After the card is read from the terminal screen 1401a to the terminal screen 1401f, the user is prompted to input instruction information in order to display the user-specific information intended by the user. This is for displaying user-specific information.

On the terminal screen 1401b, after entering a card,
A screen 1403 for prompting input of instruction information is displayed, and the user
The instruction information 1404 is input on the terminal screen 1401c. Accordingly, the corresponding user unique information 1405 is displayed on the terminal screen 1401d, and the user can determine whether or not the information is legitimate.

FIG. 15 is a diagram showing the flow of processing when there are a plurality of pieces of user specific information.

The flow of processing among a user, a terminal, a server, and a database is shown.

When the user 1501 reads the card into the terminal 1502 as indicated by 1505, the terminal transmits the card ID in the read card information to the server 1503 as indicated by 1506. The server 1503 transmits the card ID to the database 1504 as indicated by 1507.

Further, when the user 1501 inputs user instruction information to the terminal 1502 as indicated by 1508, the terminal
As shown by 1509, the entered user instruction information is
Tell 1503. The server 1503 transmits the input user instruction information to the database 1504 as indicated by 1510.

The database 1504 searches the stored user information for user-specific information by using the card ID and the user instruction information as keys.
Tell The server 1503 transmits the user unique information to the terminal 1502 as indicated by 1512. The terminal 1502 displays the user-specific information as shown by 1513 to notify the user 1501. The user 1501 determines whether the displayed user-specific information is correct or not, and if correct,
As shown at 1514, the personal identification number is input to the terminal 1502.

FIG. 16 is a system configuration diagram including a certification authority applied to the present invention in an authentication process including a certification authority.

Reference numeral 101 denotes a user, 102 denotes a terminal, 103 denotes a network, 104 denotes a server, 105 denotes a database for storing user information, 106 denotes a settlement center, and 1601 denotes a certificate authority.

When the terminal 102 transmits the card information to the server 104, the authentication is performed by the certificate authority 1601, and the user-specific information of the present invention is displayed. This is an example in which connection can be confirmed.

FIG. 17 is a diagram showing a processing flow in the case of passing through a certificate authority in the system of FIG.

The flow of processing among the user, the terminal, the server, the database, and the certificate authority is shown.

When the user 1701 causes the terminal 1702 to read the card as indicated by 1706, the terminal transmits the card ID in the read card information to the server 1703 as indicated by 1707. The server 1703 transmits the card ID to the certificate authority 1704 as shown in 1708.

The certificate authority 1704 searches for authentication calculation information from the stored user information using the card ID as a key.
As shown in 09, the generated challenge code is
Tell 03. The server 1703 transmits the challenge code to the terminal 1702 as indicated by 1710. The terminal 1702 calculates a response code to the challenge code as indicated by 1711 and returns the result to the server 1703. The server 1703 transmits the response code from the terminal 1702 to the certificate authority 17
Pass to 04. The certificate authority 1704 checks the response code received from the server 1703, and passes it to the server 1703 as an authentication result as indicated by 1713. If the received authentication result indicates that the received authentication result is valid, the server 1703 passes the card ID previously received from the terminal to the database 1705 as indicated by 1714. If the contents of the authentication result received by the server 1703 are not valid contents, the process ends without sending the card ID received from the terminal 1702 to the database.

The database 1705 that has received the card ID from the server 1703 searches for the corresponding user-specific information from the received card ID and transmits it to the server 1703. server
1703 transmits the user-specific information to the terminal 1502 as indicated by 1716.
Tell The terminal 1502 displays the user-specific information as shown by 1513 to notify the user 1701. A user
The 1701 determines whether the displayed user-specific information is correct or not, and if so, inputs the personal identification number to the terminal 1702 as indicated by 1718.

FIG. 18 is a block diagram of a terminal using an IC card, and shows that the present invention can be applied when performing authentication.

The terminal 1801 and the IC card 1809 are provided. Terminal
The 1801 has a card I / F for connecting an IC card. The CPU 1802 executes a program, performs display and input as a terminal, and can designate an input / output instruction of information with respect to an IC card, and designate an execution operation and the like.

On the other hand, a non-volatile memory 1813 for storing information, an input / output control of information,
CPU 1810 and memory 1811 required for encryption and decryption processing,
A card I / O for exchanging data with the terminal 1801
F 1812 is provided.

FIG. 19 shows a user, a terminal, an IC card, and an IC card for performing processing by authentication with an IC card.
FIG. 9 is a diagram showing a flow of processing with a nonvolatile memory in a C card.

When the user 1901 inserts the card into the terminal 1902 as shown at 1905, the terminal 1902 issues an instruction to read out the user unique information in the inserted IC card to the IC card 1903 as shown at 1906. Do it. IC card,
As in 1907, an instruction to read out user-specific information is given to the internal nonvolatile memory 1904. The non-volatile memory 1904 in the IC card reads the user unique information and transfers the user unique information to the IC card 1903 as in 1908. The IC card 1903 transmits the user unique information to the terminal 1902 as indicated by 1909. The terminal 1902 displays the user-specific information as shown by 1910, and notifies the user 1901. The user 1901 determines whether the displayed user-specific information is correct or not, and if correct,
As shown in 1911, the personal identification number is input to the terminal 1902. The terminal 1902 enters the personal identification number into the IC card 1903 as shown in 1942.
Tell

On the other hand, as indicated by 1913, the IC card 1903 issues an instruction to the nonvolatile memory 1904 in the IC card to read out the registered password. 1914
As described above, the password read out from the nonvolatile memory is passed to the IC card 1903. The IC card 1903 stores the password received from the terminal 1902 and the nonvolatile memory 1904
The collation processing of the personal identification number read from is performed. The collation result is transmitted from the IC card 1903 to the terminal 1902 as shown in 1915, and when they match, as shown in 1916,
Payment processing is performed between the 02 and the IC card 1903.

[0081]

According to the present invention, before the user enters the password, the user can confirm that the system is correct by displaying the user-specific information that can only be understood by the user from the connected server. You can enter your password with confidence. Thus, it is possible to prevent the user from inputting the password without knowing that the terminal or the system is unauthorized, and the password is stolen.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram showing an embodiment of the present invention.

FIG. 2 is a configuration diagram of a terminal and a server.

FIG. 3 is a diagram showing a terminal screen.

FIG. 4 is a diagram showing a processing flow.

FIG. 5 is a user information management table.

FIG. 6 is a diagram showing a flow of “user”.

FIG. 7 is a diagram showing a flow of a “terminal”.

FIG. 8 is a diagram showing a flow of a “server”.

FIG. 9 is a diagram showing a flow of a “database”.

FIG. 10 is a diagram showing a flow of judging fraud in the case of a fake terminal.

FIG. 11 is a diagram showing a flow of judging impropriety in the case of connection to a fake server.

FIG. 12 is a configuration diagram of a terminal and a server when confirming by voice.

FIG. 13 is a user information management table when there are a plurality of pieces of user specific information.

FIG. 14 is a diagram showing a terminal screen when there are a plurality of pieces of user specific information.

FIG. 15 is a diagram showing the flow of processing when there are a plurality of pieces of user specific information.

FIG. 16 is a system configuration diagram including a certificate authority.

FIG. 17 is a diagram showing a flow of processing in the case of passing through a certificate authority.

FIG. 18 is a configuration diagram of a terminal using an IC card.

FIG. 19 is a diagram showing a flow of processing by authentication with an IC card.

[Explanation of symbols]

101 ... user, 102 ... terminal, 103 ... network, 104 ... server, 105 ... database, 106 ... payment center, 301a-30
1d: terminal screen, 500: user information table, 501: user identification ID, 502: user unique information, 503: password

Continued on the front page F term (reference) 3E040 AA03 BA18 CA06 CB04 DA03 5B055 HA04 HA15 HA17 JJ05 5B085 AE02 AE03 AE23 AE29 9A001 BB01 BB03 BB04 BB05 CC07 DD13 EE03 FF03 HH15 JJ27 JJ67

Claims (11)

[Claims] 1. A terminal for authenticating a terminal user based on first information input from the terminal user,
Outputting third information previously grasped by the terminal user according to second information inputted by the terminal user inputted before the terminal information is inputted by the terminal user Output means, and input means for allowing the terminal user to input the first information after the output means outputs the third information, wherein the output means is input from the input means A terminal outputting an authentication result of the terminal user based on first information. 2. The terminal according to claim 1, wherein the first information is a password or a password,
The second information is a user identification ID, which is information for identifying the terminal user, and the third information indicates that the terminal user has a correspondence between the second information and the third information. A terminal characterized by user-specific information that can be grasped in advance. 3. The terminal according to claim 2, wherein the third information includes a plurality of pieces of user-specific information for each terminal user, and the input unit includes a plurality of pieces of user-specific information from the terminal user. A terminal for inputting instruction information designating one piece of user specific information from the user, and the output unit outputs user specific information selected based on the instruction information from the input unit. 4. The terminal according to claim 2, wherein said output means displays said user specific information. 5. An information processing apparatus connected via a network to a terminal for authenticating a terminal user according to first information input from the terminal user, the information processing apparatus comprising: a first terminal corresponding to the first information; Storage means for storing a plurality of sets of information of the third type, and the terminal user knows in advance according to the second information received from the terminal before the terminal user inputs the first information. Means for searching for third information, means for transmitting the searched third information to the terminal, and the first information received from the terminal after outputting the third information to the terminal, Means for authenticating the terminal user. 6. The terminal according to claim 5, wherein the first information is a password or a password,
The second information is a user identification ID, which is information for identifying the terminal user, and the third information indicates that the terminal user has a correspondence between the second information and the third information. User-specific information that can be grasped in advance, and the storage unit includes:
A plurality of user-specific information is stored for each terminal user, and the search means searches for one of the plurality of user-specific information according to instruction information received from the terminal. Information processing device. 7. A user authentication system for performing authentication of a terminal user according to first information input from a terminal user, wherein the terminal allows the terminal user to input the first information; An information processing device connected to the terminal via a network, wherein the terminal inputs second information from the terminal user before inputting the first information, and transmits the second information to the information processing device. The information processing apparatus further includes a storage unit configured to store a plurality of sets of third information corresponding to the second information. The user searches for the third information previously grasped, transmits the searched result to the terminal, and receives the searched third information, the terminal further receives the first information from the terminal user. Receiving information, transmitting the information to the information processing device, Receiving the first information from the terminal, the information processing apparatus authenticates the terminal user based on the first information. 8. The user authentication system according to claim 7, wherein the first information is a password or a password,
The second information is a user identification ID, which is information for identifying the terminal user, and the third information indicates that the terminal user has a correspondence between the second information and the third information. A user authentication system characterized by user-specific information that can be grasped in advance. 9. A method for authenticating a user, wherein the user is notified that the terminal is genuine before the user inputs a password or a password to the terminal. 10. A user authentication method for authenticating a user using a password or a password input by the user, wherein the user is required to input the password or the password before the user inputs the password or the password. A plurality of sets of user unique information corresponding to the personal identification number or the password are stored. According to the user ID, the user unique information that the user knows in advance is searched. After outputting the retrieved user-specific information as a display or sound that can be recognized by the user, receiving a password or password from the user, and authenticating the user based on the received password or password. A user authentication method characterized by performing. 11. The user authentication method according to claim 9, wherein a plurality of pieces of the user specific information are stored for each user, and the instruction information input from each user is A user authentication method, wherein one of the plurality of pieces of user-specific information is selected based on the information.