JP2002007355A - Communication method using password - Google Patents

Abstract

PROBLEM TO BE SOLVED: To surely hold the security of data by a simple procedure in a multifunctional service available by a dedicated portable terminal. SOLUTION: The personal password and address of a user capable of utilizing the Intranet 4 are registered in a database 3. When the user requests a one-time password from portable terminal equipment 1 to a server 2 and the one-time password is given from the server 2 to the portable terminal equipment 1, the user can access the Intranet 4 by using the one-time password received from the portable terminal equipment 1 and the personal password.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a multifunctional service using a data communication network which can be used with a dedicated portable terminal, for example, i-mode (i-mode / i-mode; registered trademark of NTT Tidcomo Inc.) The present invention relates to a communication method using a password used for the communication.

[0002]

2. Description of the Related Art When a fixed terminal such as a personal computer is connected to a corporate information system through a network such as the Internet, a one-time password that can be used only once is issued, and the one-time password is used. 2. Description of the Related Art It has been practiced to allow communication only with a fixed terminal to ensure communication security. As a method of creating this one-time password, specifically, so that this one-time password is not leaked,
(a) A one-time password is created by using a common key between a server and a fixed terminal. (B) In the case where a common key is not used, a one-time password created by a server is encrypted and transmitted to a fixed terminal for use.

[0003] On the other hand, multi-function services such as i-mode, in which data communication can be performed using a small dedicated portable terminal, have been provided. According to this service, online services such as mobile banking and ticket reservation can be used, desired information can be automatically received, and messages can be exchanged by e-mail.

[0004]

In this multi-function service, since it can be used to connect to a corporate information system, there is a need to secure security using a one-time password. But,
Since the dedicated mobile terminal has a small amount of information processing, the (a) (b)
It is difficult to incorporate advanced security functions such as

[0005] The present inventor has studied whether a one-time password can be used without performing complicated processing in a multifunctional service, and as a result, a simple procedure is used.
In addition, they have found that a communication method using a password that can securely maintain data security can be realized.

[0006]

According to a communication method using a password of the present invention, a personal password and an address of a user who can use an information system are registered in a server, and the user uses the personal password with a dedicated portable terminal. Request a one-time password from the server, and the server issues a one-time password after confirming that the access is from the dedicated mobile terminal using the registered personal password, and the server issues a dedicated one-time password In this method, the portable terminal is called to give the one-time password, and the user can connect to the information system from the dedicated portable terminal using the received one-time password.

[0007] Here, the "server" is a server belonging to the information system and dedicated to a multifunctional service.
The "one-time password" is a password prepared by the server each time a request is made. The “dedicated mobile terminal” refers to a dedicated mobile terminal for a multifunctional service.
According to this method, the address of the dedicated portable terminal of the user who can use the information system and its personal password are registered in advance, and when the user requests the server with the dedicated portable terminal, the server sends the one-time password to the server. A one-time password is given to the dedicated portable terminal through a dedicated data communication network. Thereby, the user can know the one-time password given only to him / her only for one communication. Then, the server is accessed using the one-time password and the personal password, and when the passwords match, the user can log in to the information system. If they do not match, you cannot log in to the information system.

According to the feature of the present invention, the one-time password is issued after confirming that the access is made from the dedicated portable terminal using the registered personal password, so that the general fixed terminal or the general fixed terminal is issued. It is not issued for access from mobile terminals. Also, the issued one-time password is given to the dedicated mobile terminal by calling the dedicated mobile terminal, and as in the past, it is stored on the server side and the terminal comes to read it. Not in principle (stored on the server side when communication with the dedicated portable terminal is not possible and unavoidable).

It is desirable that the server generate and issue a one-time password every time a request is made (claim 2). This is because fixing the one-time password increases the possibility that information in the information system will be stolen when the one-time password is leaked. Further, it is preferable that a valid time of the one-time password is set (claim 3). This is also to prevent the information in the information system from being stolen when the one-time password is leaked.

When a user requests a one-time password from a server using a dedicated portable terminal, the request may be made using the web (homepage) (claim 4). The server is
The one-time password may be encrypted and provided to the dedicated portable terminal (claim 5).

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below in detail with reference to the accompanying drawings, assuming an i-mode which is an example of a multifunctional service. FIG. 1 is a schematic configuration diagram of the system, in which a packet communication network 6 to which an i-mode dedicated portable terminal 1 is connected and an intranet 4 of a company connected to an i-mode server 2 are connected via the Internet 5.

The i-mode server 2 registers in the database 3 the personal password and the address of a subscriber who can use the intranet 4 (hereinafter simply referred to as “subscriber”). Hereinafter, a procedure in which a subscriber accesses the intranet 4 using the dedicated portable terminal 1 will be described with reference to screen diagrams of the dedicated portable terminal 1 (FIGS. 2 to 5). The subscriber calls the i-mode server 2 from the dedicated portable terminal 1 using a URL (uniform resources locators), and uses the password input screen (see FIG. 2) to enter a personal password (77777).
By inputting 7), a request is made to the i-mode server 2 for a one-time password for logging in to the intranet 4.

Note that the subscriber may request a one-time password from the dedicated portable terminal 1 using electronic mail instead of the URL. The i-mode server 2 determines that the access is from the dedicated portable terminal 1, extracts the subscriber from the database 3 based on the authentication of the personal password, and randomly uses a random number or the like to randomly generate the one-time password ( The content is, for example, "123456"). Then, the user accesses the dedicated portable terminal 1 and notifies the extracted subscriber address by e-mail (i-mode mail). At this time, it is preferable to encrypt the one-time password and transmit it, because the probability of information leakage is reduced.

Accordingly, the one-time password is i
In principle, the mode server 2 notifies the dedicated portable terminal 1 immediately. However, when the dedicated portable terminal 1 is outside the area or when the power is turned off, it is temporarily stored in the i-mode server 2. FIG. 3 shows a screen for receiving the one-time password of the dedicated portable terminal 1 at this time. The subscriber who knows the one-time password can access i
The user accesses the login screen of the mode server 2 and inputs a one-time password and a personal password as shown in FIG.

The i-mode server 2 authenticates whether the received one-time password and personal password are predetermined, and if the received password is the predetermined one, the dedicated portable terminal 1 sends an initial screen of the intranet 4 (see FIG. 5). Allow to connect to. The i-mode server 2 does not connect to the initial screen of the intranet 4 if at least one of the received one-time password and the personal password is different. Further, even if the valid time has passed since the issuance of the one-time password, it is assumed that the initial screen of the intranet 4 is not connected. In these cases, the subscriber needs to obtain a one-time password again.

Although the embodiment of the present invention has been described above, the embodiment of the present invention is not limited to the above embodiment. Various changes can be made within the scope of the present invention.

[0017]

According to the present invention, the one-time password is issued after confirming that the access is made from the dedicated portable terminal using the registered personal password, so that the general fixed terminal or It is not issued for access from general mobile terminals. Therefore, the possibility that the one-time password leaks to another person can be reduced. In addition, the issued one-time password is given to the dedicated portable terminal by calling the dedicated portable terminal, and the procedure of storing the one-time password on the server side and reading the terminal by the terminal is not taken in principle. Therefore, it is possible to reduce the chance that the one-time password is stolen by accessing the spoofing dedicated mobile terminal while the data is stored in the server.

[Brief description of the drawings]

FIG. 1 is a schematic configuration diagram of a system to which the present invention is applied.

FIG. 2 is a view showing a password input screen of the dedicated portable terminal 1;

FIG. 3 is a diagram showing a one-time password reception screen of the dedicated portable terminal 1;

FIG. 4 is a login screen view of the intranet 4 of the dedicated portable terminal 1;

FIG. 5 is an initial screen diagram of the intranet 4 of the dedicated portable terminal 1.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Dedicated portable terminal 2 i-mode server 3 database 4 intranet 5 internet 6 packet communication network

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Kengo Imon 4-5-20 Minamihonmachi, Chuo-ku, Osaka-shi, Osaka Japan Housing Finance Corporation Sumitomo Securities Building NTT Visual Communications Co., Ltd. 72) Inventor Akihiko Tsuruya 4-5-20 Minamihonmachi, Chuo-ku, Osaka City, Osaka Prefecture Housing Finance Corporation and Sumitomo Seimei Building NTT Visual Communications Co., Ltd. Osaka term office F term (reference) 5B085 AE03 BC02 5J104 AA01 AA07 EA03 KA01 KA21 NA05 PA02 PA07 5K067 AA32 BB02 BB21 EE02 EE10 EE16 FF02 FF05 GG01 GG11 HH23 HH24 HH36

Claims (6)

[Claims] 1. A communication method using a password used for a multifunctional service using a data communication network that can be used by a dedicated portable terminal, wherein a personal password and an address of a user who can use an information system are registered in a server. In advance, the user requests a one-time password from the server using a personal password on the dedicated mobile terminal, and the server confirms that the access is from the dedicated mobile terminal using the registered personal password. Issues a one-time password, and the server calls the dedicated mobile terminal at the address,
A communication method using a password, wherein the one-time password is given, and the user can connect to the information system from the dedicated portable terminal using the received one-time password. 2. The communication method using a password according to claim 1, wherein the one-time password is issued by generating a random number in a server every time a one-time password is requested. 3. The communication method using a password according to claim 1, wherein an effective time of the one-time password is set. 4. The communication method using a password according to claim 1, wherein when a user requests a one-time password from a server with a dedicated portable terminal, the user uses a web of the server. 5. The communication method using a password according to claim 1, wherein the server encrypts the one-time password and provides the encrypted one-time password to the dedicated portable terminal. 6. The communication method using a password according to claim 1, wherein the multifunctional service is i-mode.