JP2003242113A - Communication system, communication method, program, and server device - Google Patents

Abstract

(57) [Summary] [Problem] To start up a second application means
A user who does not have the right to use the service provided by the server device can omit re-input of authentication information in the second application device when using the service of the server device using the application device of Can avoid the danger of using the service of the server device using the second application means. A computer device includes a first application unit and a second application unit.
The service of the server device 10 can be used using the application means 21 or 26, and the first application means 21 authenticates the first application means 21 by the server device which has received the transmitted authentication information. Key code generating means 22 for generating a key code after performing
Key code transfer means 25 for transferring the key code to the second application means.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a communication system, a communication method, and a program for performing authentication required when using a plurality of programs for using a service provided by one server device on one computer device. And a server device.

[0002]

2. Description of the Related Art Conventionally, authentication when using a service provided by a server device is exclusively performed by a first application means (for example, means realized by a browser application). Also, authentication on the server device side between the server device that provides a service when the second application device is activated from the first application device and the second application device activated by the first application device ( Server authentication) has not been sufficiently technically studied.

An environment has been established in which various services provided by the server device are used via the Internet, and the server device has become widely used for recognizing the user and switching the service provided for each user. There is. In order for the server device to identify the user (that is, to identify the computer device in use), the server for confirming whether the user trying to connect to the server device has the right to use the service. Authentication technology is essential. As a method of realizing server authentication, at the time of connecting to a server device that provides a service, authentication information (identification I
A form in which the user is requested to input information such as D / password) is widely used. Usually, a program (for example, a browser application) that causes a computer device to function as the first application unit has a user interface for server authentication, and the server authentication is performed through the first application unit. On the other hand, in recent years, as the service provided from the server device via the Internet has become complicated, the first application means starts another second application means, and the server is passed through the started second application means. It is expected that there will be more and more forms of using the services provided by the device. However, in order to use the service provided by the server device by using the second application means different from the first application means, the second application means has already completed the first application means. You need to authenticate the server again. That is, the user is required to input the authentication information (information such as the identification ID / password) again, which causes a problem that the operation becomes complicated. If server authentication in the second application means is omitted in order to avoid inputting authentication information again, the safety at the time of connecting to the server device is impaired. That is, by misusing the second application means in which server authentication is omitted, there is a risk that a user who does not have the right to use the service of the server device will use the service of the server device.

[0004]

As described above, in the conventional communication system, there is a problem that it is necessary to input the authentication information again, and the operation becomes complicated.
If server authentication by the application means of is omitted,
There is a problem that the safety when connecting to the server device is impaired.

In this communication system, communication method, program, and server device, when the service of the server device is used by using the second application device activated by the first application device, the authentication information of the second application device is used. Re-entry can be omitted, and the risk that a user who does not have the right to use the service provided by the server device can use the service of the server device by using the second application means can be avoided. Is required.

In order to satisfy this requirement, the present invention re-inputs the authentication information in the second application means when using the service of the server device by using the second application means activated by the first application means. And a communication system capable of avoiding the risk that a user who does not have the right to use the service provided by the server device can use the service of the server device by using the second application means, And when reusing the authentication information in the second application means when using the service of the server device using the second application means activated by the first application means,
A communication method for avoiding the risk that a user who does not have the right to use the service provided by the server device uses the service of the server device by using the second application means, and the first application means When the service of the server device is used by using the second application means to be activated, re-input of the authentication information by the second application means is omitted, and the service is provided without the right to use the service provided by the server device. A program for avoiding the risk that a person uses the service of the server device by using the second application means, and the service of the server device by using the second application means activated by the first application means Re-input of the authentication information in the second application means can be omitted, An object of the present invention is to provide a server device that can avoid the risk that a user who does not have the right to use the service provided by the server device can use the service of the server device by using the second application means. To do.

[0007]

In order to solve the above problems, a communication system of the present invention is a communication system having a server device and a computer device connected to the server device via a network. , The first application means and the second application means, and the service of the server device can be used by using the first application means or the second application means, and the first application means is a server. The server device, which has received the authentication information transmitted to the device, has key code generation means for generating a key code after authenticating the first application means, and key code transfer means for transferring the key code to the second application means. It has a configuration.

This makes it possible to omit re-input of the authentication information in the second application means when using the service of the server device by using the second application means activated by the first application means. A communication system can be obtained in which the user who does not have the right to use the service provided by the server device can avoid the risk of using the service of the server device by using the second application means.

In order to solve the above-mentioned problems, a communication method of the present invention provides a service of a server device using a server device and a first application means or a second application means built in and connected to the server device via a network. And a connection request step of transmitting connection request data from the first application means to the server device, and a first request from the server device for connection request data transmission. An authentication request step of making an authentication request to the application means; a connection request step of retransmitting connection request data, authentication information, and a key code for the authentication request from the first application means to the server device; Authenticates based on the authentication information, and after authentication, the key code is stored in the server device storage unit. An authentication step of storing, a service information transmitting step of transmitting service information from the server apparatus to the first application means after the authentication, and a request service for transmitting service information from the server apparatus every time there is a service request from the first application means. An information transmitting step; a key code storing step of storing the key code in a storage unit in the computer; and a second using the key code.
The service request step of transmitting the service request data together with the key code from the application means, the key code collating step of collating the transmitted key code with the key code stored in the storage unit in the server device, and the key code is collated. In this case, a service information transmitting step of transmitting service information from the server device to the second application means is provided.

Thus, when using the service of the server device by using the second application means activated by the first application means, re-input of the authentication information in the second application means is omitted, and A communication method for avoiding a risk that a user who does not have the right to use the provided service uses the service of the server device by using the second application means can be obtained.

In order to solve the above problems, a program of the present invention is a program for causing a computer device to function as an authentication means for an authentication work with a server device that provides a service, and the program is the first program. The program for causing the computer apparatus to function as the first application means includes a program for causing the computer apparatus to function as the application means and a program for causing the second application means to function as the second application means. A key code generation unit that generates a key code when transmitting the authentication information, a first key code storage unit that stores the generated key code in the first key code storage unit, and service information of the server device can be received. If the second application means is started in A program for functioning as a key code transfer unit that fetches a key code from the storage unit and transfers the key code to the second application unit. The program for functioning as the second application unit causes a computer device to operate as a second application. Key code receiving means for receiving the key code from the key code transferring means of the first application means when the means is activated, and second key code storing means for storing the received key code in the second key code storing section. And a configuration that is a program for causing the key code to be extracted from the second key code storage unit when the service request is transmitted to the server device and functioning as a key code transmitting means for transmitting the extracted key code to the server device. ing.

Thus, when the service of the server device is used by using the second application means activated by the first application means, re-input of the authentication information by the second application means is omitted, and It is possible to obtain a program for avoiding a risk that a user who does not have the right to use the provided service uses the service of the server device by using the second application means.

In order to solve the above-mentioned problems, a server device of the present invention is connected via a network, and various service information is provided for a first application means and a second application means included in one terminal device. A server device for providing the authentication information, the authentication information storage unit accumulating the authentication information in the authentication information storage unit, the authentication request unit requesting the authentication information, and the first application for the authentication information request by the authentication request unit. When the key code storage means for storing the key code transmitted from the means together with the authentication information in the key code storage portion and the authentication information transmitted from the first application means match the information stored in the authentication information storage portion. The authentication means for starting the provision of the service to the first application means and the second application means for which the authentication procedure has not been performed. When the key code transmitted together with the service request is transmitted from the authentication means, it is determined whether the key code stored in the key code storage unit matches the received key code. And a key code collating means for starting the provision of a service to the application means.

Thus, when the service of the server device is used by using the second application means activated by the first application means, re-input of the authentication information by the second application means can be omitted. It is possible to obtain a server device in which a user who does not have the right to use the service provided by the server device can avoid the risk of using the service of the server device by using the second application means.

[0015]

BEST MODE FOR CARRYING OUT THE INVENTION A communication system according to claim 1 of the present invention is a communication system having a server device and a computer device connected to the server device via a network, and the computer device is the first device. First application means and second application means,
The service of the server device can be used by using the second application device or the second application device, and the first application device is the server device that receives the authentication information transmitted to the server device and authenticates the first application device. After that, a key code generating means for generating a key code and a key code transferring means for transferring the key code to the second application means are provided.

With this configuration, the key code is generated by the first application means after it is determined that the user has the right to use the service, and the second key is generated by using the key code.
Since it is possible to eliminate the need for authentication between the application means and the server device, the first application means of the first application means and the second application means which are configured to use various services of the server equipment. The application means is required to input the authentication information only once, and has the effect that the operation of the service user of the server device (operation of the computer device) can be simplified.
Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

A communication system according to a second aspect is a communication system having a server device and a computer device connected to the server device via a network, wherein the computer device comprises a first application means and a second application device. And means for using the service of the server device by using the first application device or the second application device.
An authentication information storage unit for storing the authentication information in the authentication information storage unit, an authentication request unit for requesting the authentication information, and the authentication information transmitted from the first application unit in response to the request for the authentication information in the authentication information storage unit. An authentication unit that starts providing a service to the first application unit when the stored information matches, and a key code transmitted together with the authentication information from the first application unit are stored in the first key code storage unit. If the key code transmitted with the service request from the first key code storage unit and the second application unit matches the key code stored in the first key code storage unit, the service for the second application unit is provided. And a key code collating means for starting the provision of Key code generation means for generating a key code when transmitting authentication information, a second key code storage part for storing the generated key code in a second key code storage part, and a first application means for a server. And a key code transfer means for taking out the key code from the second key code storage unit and transferring the key code to the second application means when the second application means is activated in a state where the service information of the device can be received. It was done.

With this configuration, the key code generated by the first application means is stored in the first key code storage section and the second key code storage section, and is transferred from the first application means to the second application means. Since the key codes stored in the first and third key code storage units that are transferred and stored in the third key code storage unit can be used by the server device and the second application unit, Only the first application means of the application means and the second application means is required to input the authentication information, which has the effect of simplifying the operability of the service user of the server device. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

A communication system according to a third aspect is a communication system having a server device and a computer device connected to the server device via a network, wherein the computer device comprises a first application means and a second application device. And means for using the service of the server device by using the first application device or the second application device.
The authentication information storage unit that stores the authentication information in the authentication information storage unit, the authentication request unit that requests the authentication information, and the authentication information transmitted from the first application unit in response to the request for the authentication information is stored in the authentication information storage unit. An authentication unit that starts providing a service to the first application unit if the stored information matches, a key code generation unit that generates a key code after authentication by the authentication unit, and a key code generated by the key code generation unit. To the first application means, a first key code storage means for storing the key code generated by the key code generation means in the first key code storage portion, and a service from the second application. If the key code transmitted with the request matches the key code stored in the first key code storage unit, the second application Key code collating means for starting the provision of the service to the authentication means, and the first application means receives the key code transmitted with the service information from the server device after being authenticated by the authenticating means of the server device. Means, a second key code storage unit for storing the received key code in the second key code storage unit, and a second application unit in a state in which the first application unit can receive the service information of the server device. The key code transfer means for taking out the key code from the second key code storage section and transferring the key code to the second application means upon activation is provided.

With this configuration, the key code generated by the key code generation means of the server device is stored in the first key code storage section and the second key code storage section, and the first application means to the second application. Since the server device and the second application unit can use the key codes stored in the first and third key code storage units after being transferred to the means, and stored in the third key code storage unit, 1
Of the application means and the second application means, only the first application means is required to input the authentication information, and the operability of the service user of the server device is simplified. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

According to a fourth aspect of the present invention, in the communication system according to the second or third aspect, the key code collating means deletes the matched key code from the first key code storage section. Is.

With this configuration, the key code shared by the server device with the first application means is deleted from the first key code storage section when the service is provided to the second application means, and the key code is stolen. This has the effect of making it difficult to misuse the server device service that may occur.

A communication system according to a fifth aspect is the communication system according to any one of the first to fourth aspects,
The key code is a unique code randomly generated each time authentication is performed.

With this configuration, it is possible to make it difficult to steal the key code from a third party (non-right holder) who does not have the right to connect to the server device.

In the communication method according to the sixth aspect of the present invention, the service of the server device can be used by using the server device and the first application means or the second application means built in and connected to the server device via the network. And a connection request step for transmitting connection request data from the first application means to the server device, and the server device authenticates the first application means for connection request data transmission. An authentication request step for making a request, a connection request step for sending connection request data, authentication information, and a key code for the authentication request again from the first application means to the server device, and the server device based on the authentication information. Authentication for authenticating and storing the key code in the first key code storage unit after the authentication Step, a key code storing step of storing the key code in the second key code storing section, a service information transmitting step of transmitting service information from the server device to the first application means after authentication, and a first application means Request service information transmitting step of transmitting service information from the server device each time there is a service request, service request step of transmitting service request data together with a key code from the second application means, the transmitted key code and first key A key code collating step of collating the key code stored in the code storage unit,
If the key codes match in the collation, the server device sends the second
And a service information transmitting step for transmitting service information to the application means.

With this configuration, the key code generated by the first application means is stored in the first key code storage section and the second key code storage section, and the first application means transfers to the second application means. Since the server device and the second application means can use the key codes transferred and stored in the third key code storage unit and stored in the first and third key code storage units, Only the first application means of the application means and the second application means is required to input the authentication information, and the operability of the service user of the server device is simplified. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

According to a seventh aspect of the communication method, it is possible to use the service of the server device by using the server device and the first application means or the second application means which is connected to the server device via a network and built therein. And a connection request step for transmitting connection request data from the first application means to the server device, and the server device authenticates the first application means for connection request data transmission. An authentication request step for making a request, a connection request step for transmitting connection request data and authentication information for the authentication request again from the first application means to the server device, and the server device performs authentication based on the authentication information. And an authentication student that generates a key code after authentication and stores it in the first key code storage unit. Step, a service information key code transmitting step of transmitting the service information and the generated key code after authentication from the server device to the first application means, and a reception of receiving the key code generated together with the service information by the first application means. A step, a key code storing step of storing the received key code in the second key code storing section, and a request service information transmitting step of transmitting service information from the server device every time there is a service request from the first application means. A service request step of transmitting service request data together with the key code stored from the second application means, and a key code collating step of collating the transmitted key code with the key code stored in the first key code storage section, If the key codes match in the verification, the The application means is obtained by a to have a service information transmitting step of transmitting service information.

With this configuration, the key code generated by the key code generation means of the server device is stored in the first key code storage section and the second key code storage section, and the first application means to the second application. Since the server device and the second application means can use the key codes transferred to the means and stored in the third key code storage portion and stored in the first and third key code storage portions, 1
Of the application means and the second application means, only the first application means is required to input the authentication information, and the operability of the service user of the server device is simplified. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

A program according to claim 8 is a program for causing a computer device to function as an authentication means for an authentication work with a server device that provides a service, and the program functions as a first application program means. And a program for causing it to function as second application means, and the program for causing it to function as the first application means sends the computer device authentication information in response to an authentication request from the server device. Key code generating means for generating a key code, a first key code storing means for storing the generated key code in the first key code storing part, and a first key code storing means for receiving service information of the server device. When activating the second application means, the key code is stored in the key code storage section. Is a program for functioning as a key code transfer means for taking out a code and transferring it to the second application means. The program for functioning as the second application means causes the computer device to activate the second application means. When first
Key code receiving means for receiving the key code from the key code transferring means of the application means, second key code storing means for storing the received key code in the second key code storing section, and a service request for the server device. This is a program for causing the key code to be extracted from the second key code storage unit when transmitting, and functioning as a key code transmitting unit for transmitting the extracted key code to the server device.

With this configuration, only the first application means of the first application means and the second application means is required to input the authentication information, and the operability of the service user of the server device is simplified. Has the effect of. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

According to a ninth aspect of the present invention, there is provided a program for causing a computer device to function as an authentication unit for performing an authentication operation with a server device that provides a service, the program functioning as a first application unit. And a program for causing it to function as the second application means. The program for causing the first application means to function includes the service information from the server device after the computer device is authenticated with the server device. A key code receiving means for receiving a key code transmitted together with the key code, a first key code storing means for storing the key code received by the key code receiving means in a first key code storing section, and a first application means. With the service information of the server device available for reception, A program for the second application means to function as a key code transfer means for transferring the second application means removed the key code from the first key code storage unit when it is activated, the second
And a program for causing the computer device to function as the application means of the first application means to receive the key code from the key code transfer means of the first application means when the second application means is activated, and the received key. Second key code storage means for storing the code in the second key code storage section, and when transmitting a service request to the server device, the key code is retrieved from the second key code storage section, and the retrieved key code is stored in the second key code storage section. This is a program for functioning as a key code transmitting means for transmitting to the server device.

With this configuration, only the first application means of the first application means and the second application means is required to input the authentication information, and the operability of the service user of the server device is simplified. Has the effect of. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

The program according to claim 10 is the program according to claim 8 or 9, wherein the key code is
This is a unique code that is randomly generated each time authentication is performed.

This configuration has the effect of making it difficult to steal the key code from a third party (non-right holder) who does not have the right to connect to the server device.

A server device according to claim 11 is a server which is connected via a network and which provides various service information to a first application means and a second application means included in one terminal device. An authentication information storage unit that stores the authentication information in the authentication information storage unit; an authentication request unit that requests the authentication information;
Key code storage means for storing the key code transmitted from the first application means together with the authentication information in response to the request for the authentication information by the authentication request means in the key code storage part;
An authentication unit that starts providing a service to the first application unit when the authentication information transmitted from the first application unit matches the information stored in the authentication information storage unit, and a second authentication unit that does not perform the authentication procedure. When the key code transmitted together with the service request is transmitted from the application means of (1), it is determined whether the key code stored in the key code storage unit matches the received key code. The key code collating means for starting the provision of the service to the second application means.

With this configuration, only the first application means of the first application means and the second application means is required to input the authentication information, and the operability of the service user of the server device is simplified. Has the effect of. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

A server device according to a twelfth aspect is a server which is connected via a network and provides various service information to a first application means and a second application means included in one terminal device. An authentication information storage unit that stores the authentication information in the authentication information storage unit; an authentication request unit that requests the authentication information;
In response to the authentication request, the authentication means that starts providing the service to the first application means when the authentication information transmitted from the first application means matches the information stored in the authentication information storage unit; After the authentication, the server key code generation means for generating the key code, the server side key code storage section for storing the key code generated by the key code generation means, and the key code generated by the key code generation means for the first application means. When the key code transmitted along with the service request is transmitted from the server side key code transmitting means for transmitting to the server side and the second application means that has not performed the authentication procedure, the key code stored in the server side key code storage section. Determines whether the received key code and the received key code match, and if they match, the second application means Is obtained by the fact that and a key code collating means for initiating the provision of services against.

With this configuration, only the first application means of the first application means and the second application means is required to input the authentication information, and the operability of the service user of the server device is simplified. Has the effect of. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. It has the effect of being able to.

According to a thirteenth aspect of the present invention, in the server apparatus according to the eleventh aspect or the twelfth aspect, the key code collating means deletes the key code which is coincident in collation from the server side key code storage section. It is a thing.

With this configuration, the key code shared by the server device with the first application means is deleted from the first key code storage section when the service is provided to the second application means, and the key code is stolen. This has the effect of making it difficult to misuse the server device service that may occur.

According to a fourteenth aspect of the present invention, in the server apparatus according to any one of the eleventh to thirteenth aspects, the key code is a unique code randomly generated each time authentication is performed. It is a thing.

This configuration has the effect of making it difficult to steal the key code from a third party (non-right holder) who does not have the right to connect to the server device.

FIG. 1 shows an embodiment of the present invention.
~ It demonstrates using FIG.

(Embodiment 1) FIG. 1 is a block diagram showing a communication system according to Embodiment 1 of the present invention. The communication system according to this embodiment includes server devices 10, 4
0, computer devices 20 and 50 to which various functions are given by a program, and a network 30. The server device 10, the computer 20, and the network 30 will be described here.

In FIG. 1, reference numeral 10 denotes a server device that provides service information to a computer device 20 described later,
Reference numeral 11 is a key code generation means for randomly generating a unique key code, and 12 is a key code storage means for storing the key code in a key code storage unit (first key code storage unit) 19 (first
The key code stored in the first key code storage unit 19 is the same as the key code sent from the second application unit 26 (described later) of the computer device 20. A key code collating means for determining whether or not the service is provided to the second application means when the two match, and a user who can provide the service by the server device 10 (that is, the service can be provided by the server device 10). Computer equipment capable)
Authentication information storage means for storing authentication information (information such as an identification ID and password) for determining whether or not to be stored in the authentication information storage portion 18, and 15 is a first application means 21 to be described later.
Authentication request means for requesting the transmission of the authentication information when there is a connection request from the computer. Reference numeral 16 indicates whether or not the authentication information transmitted from the first application means 21 of the computer device 20 is registered in the authentication information storage unit 18. Authenticating means 17 for determining whether or not is a key code transmitting means for transmitting the key code taken out from the key code storage section 19 after the authentication by the authenticating means 16 to the first application means 21 of the computer device 20 which receives the service information.

Further, 20 is a computer device which receives service information from the server device 10 via a network 30 which will be described later, 21 is a computer device 20 and comprises a browser program or the like for using the service of the server device 10. First application means realized, 22 is a key code generation means for generating a key code in the first application means 21, 23
Is a key code storage unit (second key code storage unit)
Key code storage means (second key code storage means) to be stored in 23a, 24 is a key code receiving means for receiving the key code transmitted from the server device 10, and 25 is a key stored in the key code storage section 23a. Key code transfer means for transferring the code to the second application means 26 described later,
Reference numeral 26 is a second application means that is activated by the first application means 21 and is realized by plug-in software that uses services of the server device 10 or ActiveX (trademark), and 27 is the key code transfer means 2
5 is a key code receiving means for receiving the key code transferred from 5, and 28 is a key code storing means (third key code storing means) for storing the key code received by the key code receiving means in the key code storing portion (third key code storing portion) 28a. Key code storage means 3), 29
Is a key code transmitting means for transmitting the key code retrieved from the key code storage unit 28a to the server device 10.

Further, 30 is a plurality of server devices 10, 4
0 is a network (a local area network or a global network such as the Internet) to which the computer devices 20 and 50 are connected.

The communication system configured as described above will be described with reference to FIG. FIG. 2 is a sequence diagram showing the operation of the communication system according to the present embodiment.

The user of the computer device 20 who wants to use the service provided by the server device 10 first
Through the first application means 21 (for example, means realized by a network browser application such as Internet Explorer (registered trademark)) operating on the computer device 20, the server device 1
The connection request data is transmitted to 0 (S1, connection request step). The connection request is started by transmitting a service request described by the HTTP protocol from the first application unit 21 to the server device 10 specified by the IP address or the URL. Next, in response to the connection request from the first application means 21, the authentication request means 15 of the server device 10 requests the authentication information and the key code (hereinafter referred to as “authentication request”) (S2, authentication request). Step). When the authentication request from the server device 10 is received, the first information is displayed on the display unit (not shown) of the computer device.
Information by the application means 21 of (identification ID
/ Password and other information) input screen is displayed. When the user of the computer device 20 inputs the authentication information from the input screen (not shown) and performs the transmission operation to the server device 10, the key code is generated by the key code generating means 22, and the connection request data and the authentication information are re-established. (Identification ID /
The key code is transmitted to the server device 10 together with the information such as the password) (S3, connection request step again). Here, the key code generation means 22 generates a unique code randomly generated as a key code each time authentication is performed. Since the unique code generated at the time of authentication is used as the key code, it is difficult to steal the key code from a third party who does not have the right to connect to the server device 10. The generated key code is stored in the key code storage unit (second key code storage unit) 23a (key code storage step). Next, the server device 10, which has received the authentication information and the key code, uses the authentication means 1
6 sends the authentication information sent to the authentication information storage unit 18
Judgment whether it matches the authentication information stored in
If they match, it is determined that the authentication has been completed, the key code is stored in the key code storage unit (first key code storage unit) 19 in the server device 10 (S4, authentication step), and the first The service information is provided to the application means 21 (S5, service information transmitting step).
Hereinafter, after starting the service provision from the server device 10,
The application means 21 repeats transmission and reception of various data (for example, character information and image information) with the server device 10 according to the operation of the service user (S).
6, S7, request service information transmission step). The first application means 2 according to the operation of the service user
By the second application unit 26 that operates with a program different from 1, service functions on the computer device 20 (for example, information processing of voice, image, moving image, etc.)
If it is necessary to realize the above, the second application means 26 is activated. Second application means 26
When is activated, the key code is taken out from the key code storage unit (second key code storage unit) 23a, transferred to the key code receiving unit 27 of the second application unit 26 by the key code transfer unit 25, and the key code The key code received by the code receiving means 27 is stored in the key code storage unit (third key code storage unit) 28a. Furthermore, the information necessary for the second application unit 26 to connect to the server device 10 (for example, the IP address clearly indicating the server device 10 and the service type number) together with the key code, the first
The second application means 26 is notified from the second application means 21 (S8). Since the second application unit 26 receives the service information, the second application unit 26 extracts the service request together with the service request from the information stored in the key code storage unit 28a (the key code entity or the area information in which the key code entity is stored). The key code is transmitted by the key code transmitting means 29 to the server device 10 via the network 30 (S9, service request step). The server device 1 that has received the key code and the service request data transmitted from the second application means 26.
In the case of 0, the key code collating means 13 retrieves the key code from the key code storage portion (first key code storage portion) 19 (S10, S11), and the retrieved key code and the key received from the second application means 26. It is determined whether the codes match (key code collating step), and if they match, the key code is deleted from the key code storage unit 19 and service information for the second application means 26 (second application means). The provision of the service information corresponding to the service request from 26 is started (S12, service information transmitting step). If the key code extracted from the key code storage unit 19 does not match the key code received from the second application unit 26, or if the key code is not stored in the key code storage unit 12, the second code is stored. No service information is provided to the application means 26.

As described above, according to the present embodiment, the computer device 20 includes the first application means 21.
And the second application unit 26, and the service of the server device 10 can be used by using the first application unit 21 or the second application unit 26. The server device 10 uses the authentication information as the authentication information. The authentication information storage unit 14 stored in the storage unit 18, the authentication request unit 15 requesting the authentication information, and the authentication information transmitted from the first application unit 21 in response to the request for the authentication information are stored in the authentication information storage unit 18. The authentication means 16 that starts providing the service to the first application means 21 when the stored information matches, and the key code transmitted together with the authentication information from the first application means 21 are stored in the key code storage unit 19. The first key code storage means 12 and the second application means 26 are sent together with the service request. Has been a key code if the key code stored in the first key code storage unit 19 matches the second
Key means for starting the provision of services to the application means 26, and the first application means 21 is a key for generating a key code when transmitting the authentication information for the authentication request from the server device 10. Code generating means 22 and second key code storing means 23 for storing the generated key code in the key code storing portion 23a.
And the first application means 21 causes the server device 10 to
The second key code storage unit 2 when the second application means 26 is started in a state in which the service information of
By having the key code transfer means 25 for taking out the key code from 3a and transferring it to the second application means 26, the key code generated by the first application means 21 is the same as the first key code storage section 19 and the first key code storage section 19. 2 is stored in the second key code storage unit 23a, transferred from the first application unit 21 to the second application unit 26 and stored in the third key code storage unit 28a, and stored in the server device 10 and the second application unit 26. Is the first and the third
Since it is possible to use the key code stored in the key code storage units 19 and 28a of the above, the authentication information can be input only in the first application unit 21 of the first application unit 21 and the second application unit 26. The advantageous effect that the operability of the service user of the server device 10 is simplified is obtained. In addition, a key code is used to indicate the risk of use of the server device 10 by an unprivileged person who may be at risk due to omission of input of authentication information in the second application means 26 omitted to improve the operability of the service user of the server device 10. Can be avoided.

Further, the key code collating means 13 deletes the matched key code from the first key code storing means 12, so that the key code shared by the server device 10 with the first application means 21 is deleted. When the service is started to be provided to the second application means 26, it is deleted from the first key code storage means 12, and it becomes difficult to misuse the server device service that may occur due to the key code theft.

Furthermore, since the key code is a unique code randomly generated each time authentication is performed, it is difficult to steal the key code from a third party (unrighted person) who does not have the right to connect to the server device 10. To

(Second Embodiment) The operation in the first embodiment is a sequence operation when the first application means 21 generates a key code.
The operation in is a sequence operation when the server device 10 generates a key code. FIG. 3 is a sequence diagram showing the operation of the communication system according to the present embodiment. Further, the configuration of the communication system according to the present embodiment is the same as that of the first embodiment, as shown in FIG.

The user of the computer device 20 who intends to use the service provided by the server device 10 first
Via the first application means 21 (for example, means realized by a network browser application such as Internet Explorer (registered trademark)) operating on the computer device 20, the server device 10
The connection request data is transmitted to (S21, connection request step). The connection request is started by transmitting the service request data described by the HTTP protocol from the first application means 21 to the server device 10 specified by the IP address or the URL. Next, in response to the connection request from the first application means 21, the authentication request means 15 of the server device 10 requests the authentication information (S22, authentication request step). When the authentication information request from the server device 10 is received, the authentication information input screen by the first application means 21 is displayed on the display unit of the computer device 20. The user of the computer device 20 inputs the authentication information from the input screen, and the server device 1
When the transmission operation to 0 is performed, the authentication information input together with the connection request data again is transmitted to the server device 10 (S2).
3, step of requesting connection again). Next, in the server device 10 that has received the authentication information, the authentication means 16 collates the authentication information stored in the authentication information storage unit 18 with the received authentication information, and the authentication can be confirmed by the agreement of both authentication information. In this case, the key code generation means 1
1 (S24, authentication generation step), and the generated key code is stored in the key code storage unit 19 (S2).
5). Here, the key code generation means 11 generates a unique code randomly generated as a key code each time authentication is performed. Since the unique code generated at the time of authentication is used as the key code, it is difficult to steal the key code from a third party who does not have the right to connect to the server device 10. Next, based on the already confirmed authentication, the service information and the key code are transmitted to the first application means 21 (service information key code transmitting step), and the transmitted key code is the first one. It is received by the key code receiving means 24 of the application means 21 (reception step) and stored in the key code storage unit 23a (S26, key code storage step). Hereinafter, after starting the service provision from the server device 10, the first application means 21 transmits / receives various data (for example, character information or image information) to / from the server device 10 according to the operation of the service user. Is repeated (S27, S28, request service information transmitting step).
When it is necessary to realize the service function on the computer device 20 by the second application means 26 realized by a program different from the first application means 21 according to the operation of the service user, the second application is executed. Means 26 are activated. When the second application means 26 is activated, the key code is the key code transfer means 25 of the first application means 21.
Is transferred to the key code receiving means 27 of the second application means 26, and the key code received by the key code receiving means 27 is stored in the key code storage unit 28a. Further, the second application means 26 is used by the server device 10.
Information necessary to connect to the second application means 26 is notified from the first application means 21 to the second application means 26 together with the key code (S29). In order to receive the service information, the second application unit 26 receives the service request data and the key code extracted from the information stored in the key code storage unit 28a by the key code transmitting unit 29 via the network 30. It is transmitted to the server device 10 (S30, service request step). The server device 10, which has received the key code transmitted from the second application means 26, retrieves the key code from the key code storage unit 19 (S31, S32). Next, the key code matching unit 13 determines whether the key code extracted from the key code storage unit 12 and the key code received from the second application unit 26 match (key code matching step), and match. In that case, the key code is deleted from the key code storage unit 19, and the service information (service information corresponding to the service request from the second application unit 26) is started to be provided to the second application unit 26 (S33). , Service information transmission step). If the key code extracted from the key code storage unit 19 and the key code received from the second application unit 26 do not match, or if the key code is not stored in the key code storage unit 19, the second code is stored. No service information is provided to the application means 26.

As described above, according to this embodiment, the computer device 20 includes the first application means 21.
And the second application unit 26, the service of the server device 10 can be used by using the first application unit 21 or the second application unit 26, and the server device 10 sends the authentication information to the authentication information. The authentication information storage unit 14 stored in the storage unit 18, the authentication request unit 15 requesting the authentication information, and the authentication information transmitted from the first application unit 21 in response to the request for the authentication information are stored in the authentication information storage unit 18. The authentication means 16 that starts providing the service to the first application means 21 when the stored information matches, and the key code generation means 11 that generates the key code after the authentication by the authentication means 16.
A key code transmitting means 17 for transmitting the key code generated by the key code generating means 11 to the first application means 21; and a first storing the key code generated by the key code generating means 11 in the key code storage unit 19. If the key code transmitted with the service request from the second application 26 coincides with the key code stored in the first key code storage unit 19, the second
The key code collating means 13 for starting the provision of the service to the application means 26, and the first application means 21 is the key code transmitted from the server device 10 together with the service information after being authenticated by the authenticating means of the server device 10. And a second key code storage unit 23a for storing the received key code.
And the first application means 21 causes the server device 10 to
The second key code storage unit 2 when the second application means 26 is started in a state in which the service information of
By having the key code transfer means 25 for taking out the key code from 3a and transferring it to the second application means 26, the key code generated by the key code generation means 22 of the server device 10 is the first key code storage unit. 19 and the second key code storage unit 23a, transferred from the first application unit 21 to the second application unit 26 and stored in the third key code storage unit 28a, and stored in the server device 10 and the second key code storage unit 28a. What is the application means 26?
Since the key codes stored in the third and second key code storage means 12 and 28 can be used, only the first application means 21 of the first application means 21 and the second application means 26 can provide the authentication information. Is input, and the advantageous effect that the operability of the service user of the server device 10 is simplified is obtained. In addition, a key code is used to indicate the risk of use of the server device 10 by an unprivileged person who may be at risk due to omission of input of authentication information in the second application means 26 omitted to improve the operability of the service user of the server device 10. Can be avoided.

Further, the key code collating means 13 deletes the matched key code from the first key code storage section 19 so that the key code shared by the server device 10 with the first application means 21 is deleted. When the service is started to be provided to the second application means 26, it is deleted from the first key code storage unit 19, which makes it difficult to misuse the server device service that may occur due to the key code theft.

Furthermore, since the key code is a unique code randomly generated each time authentication is performed, it is difficult to steal the key code from a third party (unrighted person) who does not have the right to connect to the server device 10. To

[0058]

As described above, the communication system according to the first aspect of the present invention is a communication system having a server device and a computer device connected to the server device via a network. The device is
A first application means or a second application means having a first application means and a second application means.
It is possible to use the service of the server device by using the application means of
A key code generation unit that generates a key code after the server device that has received the authentication information transmitted to the server device authenticates the first application unit, and a key code transfer unit that transfers the key code to the second application unit. By having the key code generated by the first application means after it is determined that the user has the right to use the service,
By using this key code, it is possible to eliminate the need for authentication between the second application means and the server device, and therefore the first application means and the second application means which are configured to use various services of the server device. Of the application means, the first application means 1
It is possible to obtain the advantageous effect that the input of the authentication information is required only once, and the operation of the service user of the server device (operation of the computer device) can be simplified. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to the communication system of claim 2,
A communication system comprising a server device and a computer device connected to the server device via a network, wherein the computer device has a first application means and a second application means, and the first application means or The service of the server device can be used by using the second application unit, and the server device stores the authentication information in the authentication information storage unit, the authentication request storage unit that requests the authentication information, and the authentication unit. An authentication unit that starts providing a service to the first application unit when the authentication information transmitted from the first application unit in response to the information request matches the information stored in the authentication information storage unit; Storing the key code transmitted together with the authentication information from the application means of the first key code If the key code transmitted together with the service request from the second application means matches the key code stored in the first key code storage section, the second application A first code means for generating a key code when transmitting the authentication information for the authentication request from the server device, and a key code collating means for starting the provision of the service to the means. A second key code storage unit for storing the generated key code in the second key code storage unit, and a case where the first application unit activates the second application unit in a state in which the service information of the server device can be received. Key code transfer means for extracting the key code from the second key code storage section and transferring it to the second application means. Thus, the key code generated by the first application unit is stored in the first key code storage unit and the second key code storage unit, transferred from the first application unit to the second application unit, and stored in the third application unit. Since the key codes stored in the key code storage unit of the server device and the second application unit can use the key codes stored in the first and third key code storage units, the first application unit and the second application unit can be used. Of these application means, only the first application means is required to input the authentication information, and the advantageous effect that the operability of the service user of the server device is simplified is obtained. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to the communication system of claim 3,
A communication system comprising a server device and a computer device connected to the server device via a network, wherein the computer device has a first application means and a second application means, and the first application means or The service of the server device can be used by using the second application unit, and the server device stores an authentication information in the authentication information storage unit, an authentication request unit that requests the authentication information, and an authentication unit. An authentication unit that starts providing a service to the first application unit when the authentication information transmitted from the first application unit in response to the information request matches the information stored in the authentication information storage unit; Key code generation means for generating a key code after authentication by A key code transmitting means for transmitting the generated key code to the first application means; a first key code storing means for storing the key code generated by the key code generating means in the first key code storing section; And a key code collating means for starting service provision to the second application means when the key code transmitted together with the service request from the application matches the key code stored in the first key code storage section. The first application means stores a key code receiving means for receiving a key code transmitted together with the service information from the server device after being authenticated by the authenticating means of the server device, and the received key code in the second key code storage section. The second key code storage unit and the first application unit are set in a state where the service information of the server device can be received. Key code transfer means for taking out the key code from the second key code storage unit and transferring it to the second application means when activating the application means, the key generated by the key code generation means of the server device. The code is stored in the first key code storage unit and the second key code storage unit, and
From the application means to the second application means and stored in the third key code storage section, and the server device and the second application means store the key codes stored in the first and third key code storage sections. Since it can be used, only the first application means of the first application means and the second application means is required to input the authentication information, and the operability of the service user of the server device is simplified. That is an advantageous effect. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to the communication system of claim 4,
In the communication system according to claim 2 or 3, the key code collating means deletes the matched key code from the first key code storage section, so that the key shared by the server device and the first application means. The code is deleted from the first key code storage unit at the time of starting the service provision to the second application means, and it is possible to obtain an advantageous effect that it is difficult to misuse the server device service that may occur due to the key code theft.

According to the communication system of claim 5,
In the communication system according to any one of claims 1 to 4, since the key code is a unique code randomly generated each time authentication is performed, a third party who has no right to connect to the server device (unauthorized) It is possible to obtain an advantageous effect that it is difficult to steal the key code from a person).

According to the communication method of the sixth aspect, the service of the server device is used by using the server device and the first application means or the second application means which is built in and is connected to the server device via the network. And a connection request step of transmitting connection request data from the first application means to the server device, and a first application means from the server device for connection request data transmission. First, an authentication request step for requesting an authentication request, connection request data for the authentication request again, authentication information, and a key code are provided.
Connection request step of transmitting from the application means to the server device, an authentication step of performing authentication based on the authentication information in the server device and storing the key code in the first key code storage unit after the authentication, and the second key code. A key code storing step for storing the key code in the key code storing section, a service information transmitting step for transmitting service information from the server apparatus to the first application means after authentication, and a server apparatus each time there is a service request from the first application means. Request service information transmitting step for transmitting service information from the second request means, service request step for transmitting service request data together with the key code from the second application means, the transmitted key code and the key code stored in the first key code storage section. And the key code matching step that matches By when de is matched with a service information transmitting step of transmitting service information to the second application means from the server device, the key code generated by the first application means, first
Stored in the key code storage unit and the second key code storage unit of
Transferred from the first application means to the second application means and stored in the third key code storage section,
Since the server device and the second application means can use the key codes stored in the first and third key code storage units, the first and second application means can be used. The advantageous effect that the input of the authentication information is required only by the application means and the operability of the service user of the server device is simplified is obtained. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to the communication method of the seventh aspect, the service of the server device is used by using the server device and the first application means or the second application means which is built in and is connected to the server device via the network. And a connection request step of transmitting connection request data from the first application means to the server device, and a first application means from the server device for connection request data transmission. Authentication request step for making an authentication request to the server, a connection request step for transmitting connection request data and authentication information for the authentication request again from the first application means to the server device, and authentication based on the authentication information in the server device. And the key code is generated after authentication and stored in the first key code storage unit. Certificate generation step, a service information key code transmission step of transmitting the service information and the generated key code after authentication from the server device to the first application means, and the key code generated together with the service information is received by the first application means. Receiving step, a key code storing step of storing the received key code in the second key code storing section, and a request service information transmitting step of transmitting service information from the server device every time there is a service request from the first application means. Step and second
A service request step of transmitting service request data together with the stored key code from the application means of
A key code collating step of collating the transmitted key code with the key code stored in the first key code storage unit, and if the key codes are matched in the collation, the server device transmits the service information to the second application means. By including the service information transmitting step, the key code generated by the key code generating means of the server device is stored in the first key code storage section and the second key code storage section, and the key code is stored in the first application means. The server device and the second application means may use the key codes transferred to the second application means and stored in the third key code storage section, and stored in the first and third key code storage sections. Therefore, only the first application means of the first application means and the second application means requires the input of the authentication information. Is, the service user's operation of the server device is obtained an advantageous effect that is simplified.
Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to the program of claim 8, the program is a program for causing a computer device to function as an authentication means for an authentication work with a server device providing a service, and the program is a first application program means. And a program for causing it to function as second application means. The program for causing the first application means to function causes the computer device to provide authentication information in response to an authentication request from the server device. Key code generating means for generating a key code when transmitting a key code, a first key code storing means for storing the generated key code in a first key code storage section, and a state in which service information of a server device can be received. To activate the second application means by using the key code storage A program for functioning as a key code transfer means for taking out a key code and transferring it to the second application means, and the program for functioning as the second application means activates the computer device to activate the second application means. A key code receiving means for receiving the key code from the key code transferring means of the first application means, a second key code storing means for storing the received key code in the second key code storing section, and a server. When the service request is transmitted to the device, the program is for extracting the key code from the second key code storage unit and causing the extracted key code to function as a key code transmitting unit for transmitting to the server device. A first application of the application means and the second application means ® only emission means is input request for the authentication information, an advantageous effect that the service user of the operation of the server apparatus is simplified is obtained.
Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to a ninth aspect of the present invention, there is provided a program for causing a computer device to function as an authentication means for performing an authentication work with a server device that provides a service, the program being a first application program means. And a program for causing it to function as second application means. The program for causing the first application means to function as the first application means causes the computer device to be transmitted from the server device after authentication with the server device. A key code receiving means for receiving the key code transmitted together with the service information,
First key code storage means for storing the key code received by the key code receiving means in the first key code storage portion;
When the second application means is activated in a state where the first application means can receive the service information of the server device, the key code is retrieved from the first key code storage section and transferred to the second application means. The program for functioning as the key code transfer means, and the program for functioning as the second application means causes the computer apparatus to activate the key code transfer means of the first application means when the second application means is activated. Key code receiving means for receiving the key code from the second key code storage means, the second key code storage means for storing the received key code in the second key code storage part, and the second key code storage means for transmitting the service request to the server device. A key code that retrieves the key code from the key code storage unit and sends the retrieved key code to the server device. Since it is a program for functioning as transmission means, only the first application means of the first application means and the second application means is required to input the authentication information, and the service user of the server device operates it. The advantage that the property is simplified is obtained. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to the program of claim 10,
In the program according to claim 8 or 9, since the key code is a unique code randomly generated each time authentication is performed, a key code from a third party (non-right holder) who has no right to connect to the server device The advantageous effect of making the theft of the key code difficult is obtained.

According to the server device of the eleventh aspect,
A server device that provides various service information to a first application device and a second application device that are connected via a network and that are included in one terminal device, the authentication information being stored in an authentication information storage unit. The authentication information storage means for accumulating, the authentication requesting means for requesting the authentication information, and the first request for the authentication information by the authentication requesting means
The key code storage means for storing the key code transmitted from the application means together with the authentication information in the key code storage portion and the authentication information transmitted from the first application means match the information stored in the authentication information storage portion. In this case, when the authentication means for starting the service provision to the first application means and the key code transmitted together with the service request from the second application means that has not performed the authentication procedure are transmitted, the key code storage section By determining whether or not the key code stored in 1 and the received key code match, and if they match, the key code collating means for starting the provision of the service to the second application means is provided. A first application means of the first application means and the second application means Only the input of the authentication information is required by,
The advantageous effect that the operability of the service user of the server device is simplified is obtained. Further, by using a key code, the risk of using the server device by an unrighteous person, which is feared due to omission of the input of the authentication information by the second application means omitted for improving the operability of the service user of the server device, is avoided. The advantageous effect of being able to do is obtained.

According to the server device of claim 12,
A server device that provides various service information to a first application device and a second application device that are connected via a network and that are included in one terminal device, the authentication information being stored in an authentication information storage unit. When the authentication information storage unit to store, the authentication request unit requesting the authentication information, and the authentication request, the authentication information transmitted from the first application unit matches the information stored in the authentication information storage unit, Authentication means for starting to provide a service to one application means, server key code generation means for generating a key code after authentication by the authentication means, and server-side key code storage for storing the key code generated by the key code generation means And a server-side key code that transmits the key code generated by the key code generation means to the first application means. When the key code transmitted together with the service request is transmitted from the terminal transmitting means and the second application means that has not performed the authentication procedure, the key code stored in the server side key code storage unit and the received key code Determine if they match, and if so, the second
By providing the key code collating means for starting the provision of the service to the application means, the input of the authentication information is required only by the first application means of the first application means and the second application means. Therefore, the advantageous effect that the operability of the service user of the server device is simplified can be obtained. Also,
Using a key code to avoid the risk of using a server device by an unrighted person who is concerned about omission of inputting authentication information in the second application means omitted to improve the operability of the service user of the server device. The advantageous effect that it is possible is obtained.

According to the server device of claim 13,
13. The server device according to claim 11 or 12, wherein the key code collating means deletes the key code matched by collation from the server side key code storage section so that the server device shares the same with the first application means. The key code is deleted from the first key code storage unit at the start of providing the service to the second application unit, which has an advantageous effect that it is difficult to misuse the server device service that may occur due to the key code being stolen.

According to the server device described in claim 14,
The server device according to any one of claims 11 to 13, wherein the key code is a unique code randomly generated each time authentication is performed, so that a third party who has no right to connect to the server device (no The beneficial effect of making it difficult for the right holder to steal the key code is obtained.

[Brief description of drawings]

FIG. 1 is a block diagram showing a communication system according to first and second embodiments of the present invention.

FIG. 2 is a sequence diagram showing an operation of the communication system according to the first embodiment of the present invention.

FIG. 3 is a sequence diagram showing an operation of the communication system according to the second embodiment of the present invention.

[Explanation of symbols]

10, 40 Server device 11, 22 Key code generating means 12 Key code storage means (first key code storage means) 13 Key code matching means 14 Authentication information storage means 15 Authentication request means 16 Authentication means 17, 29 Key code transmitting means 18 Authentication information storage unit 19 Key code storage unit (first key code storage unit) 20, 50 Computer equipment 21 First Application Means 23 Key Code Storage Means (Second Key Code Storage Means) 23a Key code storage unit (second key code storage unit) 24, 27 Key code receiving means 25 Key code transfer means 26 Second Application Means 28 Key Code Storage Means (Third Key Code Storage Means) 28a Key code storage unit (third key code storage unit) 30 network

Continued front page    F-term (reference) 5B085 AA08 AE01 AE02                 5J104 AA07 JA03 KA01 KA04 MA05                       PA07

Claims (14)

[Claims] 1. A communication system having a server device and a computer device connected to the server device via a network, wherein the computer device has first application means and second application means. , The service of the server device can be used by using the first application means or the second application means, and the first application means receives the authentication information transmitted to the server device. The device is the first
And a key code transfer means for transferring the key code to the second application means after authenticating the application means. 2. A communication system having a server device and a computer device connected to the server device via a network, wherein the computer device has first application means and second application means. The service of the server device can be used by using the first application unit or the second application unit, and the server device includes an authentication information storage unit that stores authentication information in an authentication information storage unit, The authentication requesting means for requesting the authentication information, and the authentication information transmitted from the first application means in response to the request for the authentication information matches the information stored in the authentication information storage section, the first Authentication means for starting service provision to the application means, and the first application means First key code storage means for storing the key code transmitted together with the authentication information from the first key code storage portion, the key code transmitted together with the service request from the second application means, and the first key. And a key code collating means for starting the provision of a service to the second application means when the key code stored in the code storage section matches, wherein the first application means is provided from the server device. Key code generation means for generating a key code when transmitting authentication information for an authentication request, second key code storage means for storing the generated key code in a second key code storage section, and the first key code storage means. When the application means activates the second application means while being able to receive the service information of the server device, the second key code Communication system, comprising a key code transfer means for taking out the key code from the de-storage unit transfers to said second application means. 3. A communication system having a server device and a computer device connected to the server device via a network, wherein the computer device has first application means and second application means. The service of the server device can be used by using the first application unit or the second application unit, and the server device includes an authentication information storage unit that stores authentication information in an authentication information storage unit, The authentication requesting means for requesting the authentication information, and the authentication information transmitted from the first application means in response to the request for the authentication information matches the information stored in the authentication information storage section, the first The authentication means for starting the provision of the service to the application means, and the key code after the authentication by the authentication means. A key code generating means for generating a code, a key code transmitting means for transmitting the key code generated by the key code generating means to the first application means, and a key code generated by the key code generating means for a first key. When the first key code storage means to be stored in the code storage unit matches the key code transmitted with the service request from the second application and the key code stored in the first key code storage unit, A key code collating means for starting to provide a service to the second application means, wherein the first application means is a key transmitted from the server device together with the service information after being authenticated by the authenticating means of the server device. A key code receiving means for receiving a code, and a first key code storing section for storing the received key code in a second key code storage section. And a key code storage unit for activating the second application unit in a state in which the first application unit can receive the service information of the server device, the key code is extracted from the second key code storage unit. A communication system comprising: a key code transfer means for transferring to the second application means. 4. The communication system according to claim 2, wherein the key code collating means deletes the matched key code from the first key code storage unit. 5. The key code is a unique code randomly generated each time authentication is performed.
5. The communication system according to any one of 1 to 4. 6. A server device and a computer device which is connected to the server device via a network and is capable of using the service of the server device by using a built-in first application means or second application means. A connection request step of transmitting connection request data from the first application means to the server device; and the server device in response to the connection request data transmission,
And an authentication request step of making an authentication request to the application means, and a connection request step of retransmitting connection request data, authentication information, and a key code for the authentication request from the first application means to the server device again. An authentication step of performing authentication based on the authentication information in the server device and storing the key code in the first key code storage unit after authentication, and a key code storing the key code in the second key code storage unit A storing step and, after the authentication, service information from the server device to the first
Service information transmitting step for transmitting the service information to the application means, request service information transmitting step for transmitting service information from the server device each time there is a service request from the first application means, and the second application means for transmitting the key. The service request step of transmitting the service request data together with the code, the key code verification step of verifying the transmitted key code with the key code stored in the first key code storage unit, and the key code matched in the verification. And a service information transmitting step of transmitting service information from the server device to the second application means. 7. A server device and a computer device connected to the server device via a network and capable of using the service of the server device by using a built-in first application means or second application means. A connection request step of transmitting connection request data from the first application means to the server device; and a step of transmitting the connection request data from the server device to the first connection request step.
An authentication requesting step for making an authentication request to the application means, a connection requesting step for transmitting connection request data and authentication information again for the authentication request from the first application means to the server device, and the server. An authentication generation step of performing authentication based on the authentication information in the device and generating a key code after authentication and storing the key code in the first key code storage unit; and the service information and the generated key code after the authentication, in the server device. To the first application means from the service information key code, a receiving step of receiving the generated key code together with the service information in the first application means, a second key to the received key code A key code storing step of storing the code in the code storing section, and the first application Request service information transmitting step for transmitting service information from the server device each time there is a service request from the server means, and a service request step for transmitting service request data together with the stored key code from the second application means, A key code collating step of collating the transmitted key code with the key code stored in the first key code storage unit; and when the key codes coincide in the collation, from the server device to the second application unit. And a service information transmitting step of transmitting service information. 8. A program for causing a computer device to function as an authentication unit for performing authentication work with a server device that provides a service, the program comprising:
And a program for causing it to function as a second application means, the program for causing the first application means to cause the computer device to operate Key code generation means for generating a key code when transmitting authentication information for an authentication request, first key code storage means for storing the generated key code in a first key code storage section, and service of a server device When activating the second application means in a state in which information can be received, the key code is retrieved from the key code storage unit and the second code is extracted.
Is a program for functioning as key code transfer means for transferring to the application means, and a program for functioning as the second application means causes the computer device to operate as the second
The key code receiving means for receiving the key code from the key code transferring means of the first application means when the application means of
Second key code storage means to be stored in the key code storage unit, and a key code that is taken out from the second key code storage unit when a service request is transmitted to the server device, and the extracted key code is sent to the server device. A program characterized by being a program for functioning as a key code transmitting means for transmitting. 9. A program for causing a computer device to function as an authentication means for performing an authentication operation with a server device that provides a service, the program comprising:
And a program for causing it to function as second application means, and the program for causing the first application means to function as the computer device and the server device. Key code receiving means for receiving a key code transmitted together with service information from the server device after authentication, and first key code storing means for storing the key code received by the key code receiving means in the first key code storing portion. And when the second application means is activated in a state in which the first application means can receive the service information of the server device, the key code is taken out from the first key code storage section and the second code is stored. As a key code transfer means for transferring to other application means And a program for causing the computer device to function as the second application unit, when the second application unit is activated, a key from the key code transfer unit of the first application unit is used. Key code receiving means for receiving a code, second key code storing means for storing the received key code in a second key code storing portion, and the second key for transmitting a service request to a server device. A program for causing a key code to be extracted from a code storage unit and causing the extracted key code to function as a key code transmitting unit that transmits the key code to a server device. 10. The program according to claim 8, wherein the key code is a unique code randomly generated each time authentication is performed. 11. A server device which provides various service information to a first application means and a second application means which are connected via a network and which are included in one terminal device. An authentication information storage unit that stores the authentication information in the authentication information storage unit, an authentication request unit that requests the authentication information, and a key code that is transmitted from the first application unit together with the authentication information in response to the authentication information request by the authentication request unit. And a service for the first application unit when the authentication information transmitted from the first application unit matches the information stored in the authentication information storage unit. Authentication means for starting the provision of the certificate and the second application means for which the authentication procedure has not been performed. When the key code transmitted together with the screw request is transmitted, it is determined whether or not the key code stored in the key code storage unit and the received key code match. And a key code collating means for starting the provision of a service to the application means. 12. A server device for providing various service information to a first application device and a second application device, which are connected via a network and are included in one terminal device, and provide authentication information. The authentication information storage unit that stores the authentication information in the authentication information storage unit, the authentication request unit that requests the authentication information, and the authentication information transmitted from the first application unit in response to the authentication request are stored in the authentication information storage unit. An authentication unit that starts providing a service to the first application unit when the information matches, a server key code generation unit that generates a key code after the authentication by the authentication unit, and a key code generation unit. A server-side key code storage unit that stores a key code, and a key code generated by the key code generation means are stored in the first key code storage unit. When the key code transmitted with the service request is transmitted from the server side key code transmitting means for transmitting to the application means and the second application means which has not performed the authentication procedure, the server side key code storage section. Key code collating means for judging whether or not the key code stored in the above and the received key code match, and if they match, start providing the service to the second application means. A server device characterized by: 13. The server device according to claim 11, wherein the key code collating means deletes a key code that is matched by collation from the server side key code storage section. 14. The server device according to claim 11, wherein the key code is a unique code randomly generated each time authentication is performed.