JP2011170795A - Web authentication system, mobile terminal, web terminal, web server, web authentication method and program for them - Google Patents

Abstract

A web authentication system for performing login authentication from a mobile terminal to a web site on a network via a web terminal.
A mobile terminal sends a request for sending an authentication ticket necessary for logging in to a Web site via a network to the Web server, and the authentication terminal generates a random number from the Web server via the network. An authentication ticket in which URL information of the website is attached to a ticket consisting of a number, a signature is attached if necessary, and then converted into data for infrared communication, and authentication is performed via the Web terminal 12 by infrared communication. Successful ticket identification after ticket identification processing that transmits the contents of the ticket to the Web server 13 and confirms whether or not the authentication number in the contents of the authentication ticket and the ticket previously transmitted by the Web server 13 are the same. It is received via the network to indicate whether or not it has been done.
[Selection] Figure 1

Description

  The present invention relates to an authentication technique for login and access to a website on a network, and in particular, a web authentication system, a portable terminal, a web terminal, a web server, a web authentication method using the infrared communication function of a portable terminal, and these Regarding the program.

  Conventionally, a method of using a password is known as a method of authenticating to a Web site. In web authentication technology that uses passwords, it is necessary to periodically change passwords to ensure their safety, and it is necessary to consider character strings that cannot be easily guessed as passwords. If the user forgets, the system management of the service provider becomes complicated, such as taking time.

  In order to solve such a problem, an authentication method using a disposable one-time password that is generated according to a certain rule and can be used only once is known (for example, see Non-Patent Document 1). The one-time password authentication method provides a dedicated device for generating a password.

Yuichi Deguchi, “One Time Password”, April 19, 2006, Nikkei Business Publications, [online], [Search January 25, 2010], Internet http://itpro.nikkeibp.co.jp/article/ COLUMN / 20060414/235357 /

  As described above, conventionally, there is a method of using a password as a method of authenticating to a website. However, in order to ensure safety, it is necessary to change the password periodically or it can be easily guessed as a password. When there is a need to consider a character string that is not used, or when the user forgets the password, there is a drawback that the management becomes complicated, such as taking a long time to cope. In addition, a user who uses a one-time password needs to have a dedicated device for generating a password, which has an advantage of ensuring safety but is disadvantageous in that it is expensive.

  In addition, it may be difficult for a user who is unfamiliar with log authentication operations and password management by a personal computer to log in to a Web site connected to a network and jump to a necessary Web page.

  The object of the present invention has been made in view of the above-mentioned problems. When logging in to a Web site connected to a network, the user is securely authenticated and logged in, and easily required Web pages. It is to provide a web authentication system, a portable terminal, a web terminal, a web server, a web authentication method, and a program thereof using an infrared communication function of a portable terminal.

  In the Web authentication system of the present invention, a user has a mobile terminal (for example, a mobile phone) having a function of transmitting and receiving data through a network with a Web server that provides a Web site and a function of transmitting information on internal data by infrared communication. And a Web terminal that has a function of connecting to a network and a function of receiving internal data information transmitted from a mobile terminal by infrared communication of one-way communication, but not having a bidirectional communication function or a mail function (for example, Log in to the website using a digital television terminal or the like. On the other hand, a Web server that provides a Web site issues an authentication ticket for Web access that can be used only once when the Web site is accessed through a network from a mobile terminal, and is used by the user for this authentication ticket. URL information desired to be added is added, and an authentication ticket with URL information is transmitted to the mobile terminal via the network. Next, the user transfers the authentication ticket received using the infrared communication function of the portable terminal to the Web terminal, and causes the Web terminal to transmit the authentication ticket to the Web server. Next, the Web server uses the received authentication ticket to pre-issue itself and send it to the user's mobile terminal, and the authentication ticket sent by the user to the Web terminal using the mobile terminal By confirming the identity, the user is identified and login authentication is performed, and the login process is performed, and the Web page described in the URL information added to the authentication ticket is displayed on the Web terminal.

  That is, the Web authentication system of the present invention transmits a Web server that provides a Web site on a network, a Web terminal that communicates with the Web server via a Web protocol through the network, and transmits internal data to the Web terminal using an infrared communication function. In addition, in a Web authentication system comprising a mobile terminal that communicates with the Web server via a network, a request for transmitting an authentication ticket required for login from the mobile terminal is received via the network, and a Web site on the network The web server refers to a model information database that stores model information of mobile terminals registered in advance in response to a request for transmitting an authentication ticket from the mobile terminal. The mobile terminal that made the request to send the authentication ticket A means for verifying whether or not is a registered one, and generating an authentication ticket in which the URL information of the Web site that is the target of the authentication ticket is attached to a ticket consisting of an authentication number generated by a random number Means, a means for transmitting the authentication ticket to the officially registered mobile terminal via the network, and the Web terminal receiving the contents of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, Means for performing a ticket identification process for confirming whether or not the authentication number in the contents of the authentication ticket and the ticket that has been transmitted in advance are the same, and when the ticket identification process is successful, The URL information is extracted from the information representing the contents of the authentication ticket, and the Web page of the corresponding URL is extracted as a predetermined content data. Elected from database, said a means for establishing a Web communication with the Web terminal in order to display on the display device of the Web terminal, and wherein the.

  In the Web authentication system of the present invention, when the signature information of each portable terminal is given, the authentication number in the content of the authentication ticket is the same as the ticket transmitted in advance. It is characterized by having means for verifying the signature information before performing the ticket identification process for confirming whether or not.

  In the Web authentication system of the present invention, as the ticket identification process, the Web server confirms whether or not the authentication number in the content of the authentication ticket is the same as the ticket transmitted in advance. And a means for confirming whether or not the URL information given to the ticket transmitted in advance and the URL information included in the contents of the authentication ticket are the same.

  Furthermore, the present invention also has a unique feature of a mobile terminal used in a Web authentication system. The mobile terminal of the present invention includes a Web server that provides a Web site on a network, and the Web server and the network via a Web protocol. A web authentication system comprising a web terminal that communicates and internal data is transmitted to the web terminal using an infrared communication function and communicates with the web server via a network. In order to perform login authentication to the Web site, a mobile terminal that performs infrared communication with the Web terminal, and sends a request for transmitting an authentication ticket necessary for logging in to the Web site provided by the Web server via the network. Means for executing on the Web server and transmission of the authentication ticket Means for receiving an authentication ticket in which URL information of the Web site is added to a ticket consisting of an authentication number generated by a random number from the Web server via the network after the request, and extracting the authentication ticket; A means for applying a signature to the authentication ticket, if necessary, converting the data into data for infrared communication, and transmitting the contents of the authentication ticket to the Web server via the Web terminal by infrared communication; and the Web server After the ticket identification process for confirming whether or not the ticket sent in advance is the same as the authentication number in the contents of the authentication ticket, the fact that the ticket identification is successful is received via the network And means.

  Furthermore, the present invention also has a unique feature in a Web terminal used in a Web authentication system. The Web terminal of the present invention includes a Web server that provides a Web site on a network, and the Web server and the network via a Web protocol. In a web authentication system comprising a web terminal for communication and internal data transmitted to the web terminal using an infrared communication function and a mobile terminal communicating with the web server via a network, the data is transmitted via infrared communication from the mobile terminal. A Web terminal that performs infrared communication with the mobile terminal in order to receive data and perform login authentication to a Web site on the network, and the contents of the authentication ticket received from the mobile terminal by infrared communication are in a predetermined format By means of generating the transfer information and the Web server After conducted the serial ticket identification process, characterized in that it comprises a means for displaying a Web page on a predetermined display device of the corresponding URL in response to a request from the user of the portable terminal.

  Furthermore, the present invention also has a unique feature of a web server used in a web authentication system. The web server of the present invention includes a web server that provides a web site on a network, and the web server and the network via a web protocol. Necessary for login from the mobile terminal in a web authentication system comprising a web terminal for communication and internal data transmitted to the web terminal using an infrared communication function and a mobile terminal communicating with the web server via the network A web server that receives an authentication ticket transmission request via a network and performs login authentication to a website on the network, and is registered in advance in response to the authentication ticket transmission request from the portable terminal Refer to the model information database that stores the model information of Means for verifying whether or not the portable terminal that issued the certificate ticket transmission request is properly registered, and the URL information of the Web site that is the target of the authentication ticket from the authentication number generated by a random number Means for generating an authentication ticket assigned to the ticket, means for transmitting the authentication ticket to the portable terminal via the network, and the authentication number in the contents of the authentication ticket is the same as the ticket previously transmitted And means for performing a ticket identification process for confirming whether the ticket identification process is successful, and when the ticket identification process is successful, the URL information is extracted from information representing the contents of the authentication ticket, and the extracted URL A Web page is selected from a predetermined content database and displayed on the display device of the Web terminal Characterized in that it comprises means for establishing a Web communications, a.

  Furthermore, the Web authentication method of the present invention includes a Web server that provides a Web site on a network, a Web terminal that communicates with the Web server via a Web protocol via the network, and transmits internal data to the Web terminal using an infrared communication function. In addition, in a Web authentication system comprising a mobile terminal that communicates with the Web server via a network, a request for transmitting an authentication ticket required for login from the mobile terminal is received via the network, and a Web site on the network A web authentication method for performing login authentication to a web server, wherein the processing procedure of the web server stores model information of a mobile terminal registered in advance in response to an authentication ticket transmission request from the mobile terminal The mobile phone that made the request to send the authentication ticket A step of verifying whether or not the end of the authentication ticket is registered, and generating an authentication ticket in which the URL information of the Web site targeted for the authentication ticket is added to a ticket consisting of an authentication number generated by a random number Transmitting the authentication ticket to the properly registered portable terminal via the network, and receiving the content of the authentication ticket received from the portable terminal by the infrared communication by the Web terminal from the Web terminal. A step of performing ticket identification processing for confirming whether or not the authentication number in the contents of the authentication ticket and the ticket that has been transmitted in advance are the same, and when ticket identification is successful in the ticket identification processing The URL information is extracted from the information representing the contents of the authentication ticket, and the Web page of the corresponding URL is extracted. Elected from the constant content database, it said and establishing a Web communication with the Web terminal in order to display on the display device of the Web terminal, and wherein the.

  Furthermore, the present invention has a feature as a program for realizing each function in a computer configured as a portable terminal, a computer configured as a Web terminal, and a computer configured as a Web server.

  According to the present invention, even if the user does not use a password, the Web server issues the authentication ticket that it issues in advance and sends it to the user's mobile terminal, and the user uses the mobile terminal to It is possible to identify a user by confirming the consistency of the transmitted authentication ticket, use an authentication ticket that can be used only once, and transmit the authentication ticket to a pre-registered mobile terminal Thus, it is possible to exclude logins from others who do not hold the mobile terminal. Furthermore, the user can immediately access a necessary Web page after logging in. It becomes possible to easily access a Web site requiring authentication using a Web terminal such as a TV phone terminal without adding a special instrument or device as in the case of a one-time password.

It is a figure which shows the typical example of the web authentication system of one Example by this invention. It is a functional block diagram of the portable terminal in the Web authentication system of one Example by this invention. It is a functional block diagram of the web terminal in the web authentication system of one Example by this invention. It is a functional block diagram of the Web server in the Web authentication system of one Example by this invention. It is a figure which shows the operation | movement flow of the web authentication system of one Example by this invention.

  Hereinafter, a web authentication system according to an embodiment of the present invention using an infrared communication function of a portable terminal will be described. The portable terminal, the Web terminal, the Web server, and the programs thereof according to the present invention, and the Web authentication method according to the present invention will become apparent from the description of the Web authentication system according to an embodiment of the present invention.

〔System configuration〕
FIG. 1 is a diagram showing a typical example of a Web authentication system according to an embodiment of the present invention. The web authentication system 1 according to the present embodiment realizes a method of securely authenticating to a website without using a special authentication tool. In the web authentication system 1 according to the present embodiment, the function of transmitting / receiving data through the network with the web server 13 that provides the website (that is, the function of accessing the website, a web communication unit to be described later) and the internal data via infrared communication A portable terminal 11 having a function of transmitting by a function (an infrared transmission unit described later), an information reception function (an infrared reception unit described later) by infrared communication, and a function of displaying a network Web service (a display control unit described later) The mobile terminal 11, the Web terminal 12, and the Web server 13 are connected via a WAN such as the Internet.

  Many mobile terminals 11 (for example, mobile phones) have a function of transmitting / receiving data through the network with the Web server 13 that provides the Web site (that is, a function of accessing the Web site) and a function of transmitting internal data by infrared rays. In addition, since the function of receiving infrared rays for a remote control is provided in many Web terminals 12 such as TV phone terminals, the present embodiment can be achieved by only changing the firmware without adding hardware. The Web authentication system 1 can be realized. Further, in the Web authentication system 1 according to the present embodiment, when the URL jump is not provided, the login authentication alone can be used.

  By the way, in the existing confidential mail service system, in order to ensure security, it is necessary to use a dedicated mail system that the user does not normally use. In order to inform the user that the confidential mail has arrived, A confidential incoming notification is sent to the user's mobile terminal e-mail, etc. If the Web authentication system 1 of this embodiment is used, the Web server 13 that provides the Web site can use the Web access ticket only once. URL information that the user wants to use is added to the URL, and a ticket with URL information is transmitted as an authentication ticket to the mobile terminal 11 via the network. Therefore, the user immediately authenticates from the authentication ticket information and applies to the confidential mail service. A Web page can be accessed, and convenience can be improved.

  Hereinafter, the configurations of the mobile terminal 11, the Web terminal 12, and the Web server 13 will be described more specifically.

  FIG. 2 is a functional block diagram of the mobile terminal 11 in the Web authentication system according to the embodiment of the present invention. The mobile terminal 11 includes a control unit 111, a Web communication unit 112 that configures an interface that performs Web communication with the Web server 13, an infrared transmission unit 113 that configures an interface that transmits internal data to the Web terminal 12, and a storage unit 114. The control unit 111 includes a Web protocol processing unit 1111, an infrared transmission control unit 1112, a ticket processing unit 1113, and an infrared transmission data generation unit 1114. In addition, although each function of the control part 111 which concerns on this invention is demonstrated, it should be noted that it is not intended to exclude other functions provided in the mobile terminal 11. The portable terminal 11 can be configured as a computer, and stores a program describing processing contents for realizing each function of the control unit 111 in the storage unit 114 of the computer, and the central processing unit ( This program can be realized by reading and executing this program by a CPU.

  The web protocol processing unit 1111 has a function of establishing web communication with the web server 13. In particular, the Web protocol processing unit 1111 has a function of requesting an authentication ticket (ticket request) from the Web server 13 through the network and waiting for a response.

  The infrared transmission control unit 1112 has a function of performing infrared communication with the Web terminal 12 in order to return the contents of the authentication ticket to the Web server 13 via the Web terminal 12.

  The ticket processing unit 1113 has a function of extracting an authentication ticket acquired as a ticket request response from the Web server 13.

  The infrared transmission data generation unit 1114 has a function of converting information that the user wants to transmit to the Web server 13 into data for infrared communication so as to be transmitted via the Web terminal 12. In addition, the infrared transmission data generation unit 1114 has a function of adding a signature as necessary when generating an authentication ticket by converting it into data for infrared communication.

  FIG. 3 is a functional block diagram of the Web terminal 12 in the Web authentication system according to the embodiment of the present invention. The Web terminal 12 includes a control unit 121, a Web communication unit 122 that configures an interface that performs Web communication with the Web server 13, and an infrared reception unit 123 that configures an interface that receives infrared communication data from the mobile terminal 11. And a display control unit 124 that constitutes an interface to the display device 12a, and a storage unit 125. The display device 12a may be incorporated in the Web terminal 12, or may be a device connected as an external device. The control unit 121 includes a web protocol processing unit 1211, an infrared reception control unit 1212, a ticket transfer processing unit 1213, and a web display control unit 1214. In addition, although each function of the control part 121 which concerns on this invention is demonstrated, it should be noted that it is not intended to exclude other functions provided in the Web terminal 12. The Web terminal 12 can be configured as a computer, and stores a program describing processing contents for realizing each function of the control unit 121 in the storage unit 125 of the computer, and the central processing unit ( This program can be realized by reading and executing this program by a CPU.

  The web protocol processing unit 1211 has a function of establishing web communication with the web server 13. In other words, the Web protocol processing unit 1211 operates as an access function to the Web server 13 and transfers the authentication ticket content received from the mobile terminal 11 via infrared communication in a predetermined format such as a URL argument information format. As a function of transmitting to the Web server 13.

  The infrared reception control unit 1212 has a function of receiving a ticket transmission request from the mobile terminal 11. In particular, the infrared reception control unit 1212 has a function of receiving the contents of the authentication ticket from the mobile terminal 11 via infrared communication.

  The ticket transfer processing unit 1213 has a function of converting the contents of the authentication ticket received from the portable terminal 11 by infrared communication into transfer information in a predetermined format such as a URL argument information format.

  The Web display control unit 1214 has a function of causing the display device 12a to display a Web page with the corresponding URL after the authentication ticket identification processing is performed by the Web server 13.

  FIG. 4 is a functional block diagram of the Web server 13 in the Web authentication system according to the embodiment of the present invention. The Web server 13 includes a control unit 131, a Web communication unit 132 that configures an interface for performing Web communication with the Web terminal 12, and model information that registers and holds information necessary for specifying each mobile terminal in advance. It includes a database 134, a content database 135 that holds information on Web pages for each URL, and a storage unit 136. The control unit 131 includes a Web protocol processing unit 1311, a model information verification unit 1312, a transmission ticket generation unit 1313, a URL addition processing unit 1314, a reception ticket processing unit 1315, and a Web page control unit 1316. In addition, although each function of the control part 131 which concerns on this invention is demonstrated, it should be noted that it is not intended to exclude other functions provided in the Web server 13. The Web server 13 can be configured as a computer and stores a program describing processing contents for realizing each function of the control unit 131 in the storage unit 136 of the computer, and the central processing unit ( This program can be realized by reading and executing this program by a CPU.

  The web protocol processing unit 1311 has a function of establishing web communication with the mobile terminal 11 or the web terminal 12. In particular, the Web protocol processing unit 1311 has a function of returning a ticket to the portable terminal 11 as a response to the ticket request.

  The model information verification unit 1312 refers to the model information database 134, and from the mobile terminal information registered in advance of the user's mobile terminal 11, for example, the mobile terminal information such as the model number and the user's phone number, It has a function of verifying whether or not the mobile terminal 11 that has sent the authentication ticket transmission request is a registered one.

  The transmission ticket generation unit 1313 is a functional unit that generates a unique number (for example, an alphanumeric character having an arbitrary number of digits) from a sufficiently long random number and uses the authentication number as a ticket. The transmission ticket generation unit 1313 can also be configured to generate a ticket (authentication number) in association with the signature information when the signature information of each portable terminal is given.

  The URL addition processing unit 1314 has a function of generating an authentication ticket by adding URL information desired to be displayed to the user to the ticket (authentication number).

  The received ticket processing unit 1315 separates and extracts information representing the contents of the authentication ticket received via the Web protocol, and authenticates the ticket (authentication number) transmitted in advance and the contents of the authentication ticket received from the mobile terminal 11. The ticket identification process for confirming whether or not the numbers are the same is executed to perform ticket identification confirmation. When the ticket identification confirmation is successful, the URL information to be displayed is displayed as the received authentication ticket. The function to extract from. If the signature information of each portable terminal is given, the reception ticket processing unit 1315 performs the ticket identification processing after performing this verification. The received ticket processing unit 1315 confirms whether or not the authentication number in the contents of the authentication ticket is the same as the ticket transmitted in advance, and the URL given to the ticket transmitted in advance. The ticket identification process can be configured to check whether the information and the URL information included in the contents of the authentication ticket are the same.

  When the consistency of the ticket identification process is confirmed, the Web page control unit 1316 considers that the user authentication is successful, performs the login process, and selects the extracted Web page of the corresponding URL from the content database 135. It has the function to do.

  The operation of the Web authentication system according to an embodiment of the present invention will be described below.

[System operation]
FIG. 5 is a diagram showing an operation flow of the Web authentication system according to an embodiment of the present invention. The user operates the mobile terminal 11 to make a request for transmitting an authentication ticket necessary for login authentication to the Web site provided by the Web server 13 via the network. Specifically, the mobile terminal 11 requests the Web server 13 to transmit an authentication ticket via the network by the Web protocol processing unit 1111 (Step S1). In response to a ticket request from the mobile terminal 11, the Web server 13 refers to the model information database 134 by the model information verification unit 1312, and stores mobile model information (for example, mobile phone information and model) registered in advance. It is verified whether or not the mobile terminal 11 that has requested the transmission of the authentication ticket from the number or the telephone number of the user is properly registered (step S2). The Web server 13 can notify the verification result to the portable terminal 11 via the network.

  When the Web server 13 accepts a ticket transmission request via the network by the Web protocol processing unit 1311 and verifies that the mobile terminal 11 is properly registered, the Web server 13 determines a unique number (for example, a sufficiently long random number). An arbitrary number of alphanumeric characters) is generated, and this authentication number is used as a ticket (step S3). Subsequently, the Web server 13 adds the URL information to be displayed to the user by the URL addition processing unit 1314 to the ticket (authentication number) to generate an authentication ticket (step S4). Subsequently, the Web server 13 returns an authentication ticket to the mobile terminal 11 as a response to the ticket transmission request by the Web protocol processing unit 1311 (step S5). Therefore, this authentication ticket is for Web access that can be used only once.

  The mobile terminal 11 receives an authentication ticket from the Web server 13 via the network by the Web protocol processing unit 1111 (Step S6), and the ticket processing unit 1113 automatically extracts the received authentication ticket. Here, the user can confirm whether or not the authentication ticket has been obtained and proceed to the next process. Subsequently, the mobile terminal 11 converts the authentication ticket into data for infrared communication by the infrared transmission data generation unit 1114 and generates the data, and transmits the authentication ticket to the Web terminal 12 by infrared communication by the infrared transmission control unit 1112. (Step S7). The portable terminal 11 can add a signature as necessary when the infrared transmission data generating unit 1114 converts and generates an authentication ticket into data for infrared communication.

  The Web terminal 12 receives the authentication ticket information transmitted from the portable terminal 11 by infrared communication using the infrared reception control unit 1212 (step S8), and the Web protocol processing unit 1211 converts the content of the received authentication ticket into the URL. It is transmitted to the Web server 13 in a format such as argument information (step S9).

  The Web server 13 receives information indicating the contents of the authentication ticket transmitted via the Web protocol by the Web protocol processing unit 1311 and also indicates the contents of the authentication ticket received via the Web protocol by the reception ticket processing unit 1315. Information is separated and extracted (step S10), and ticket identification is performed by confirming whether the ticket (authentication number) transmitted in advance and the authentication number in the contents of the received authentication ticket are the same. It performs (step S11). The Web protocol processing unit 1311 can be configured to notify the user's portable terminal 11 of the failure or success of the ticket identification process. If the ticket identification is successful, the Web server 13 uses the reception ticket processing unit 1315 to extract URL information to be displayed from information representing the contents of the authentication ticket received via the Web protocol (step S12). Subsequently, the Web server 13 considers that the user authentication is successful by the Web page control unit 1316, selects the Web page with the extracted URL from the content database 135 in the user session, and the Web terminal 12 Web communication with the Web terminal 12 is established by the Web protocol processing unit 1311 so as to be displayed on the display device 12a (step S13).

  As a result, the user can access the Web requiring login authentication without using a password, and can refer to the Web page of the corresponding URL through the display device 12a of the Web terminal 12 (step S14).

  In general, the Web authentication system 1 according to the present embodiment is a Web authentication system that performs login authentication from a mobile terminal 11 having an infrared communication function to a Web site on a network via the Web terminal 12. The Web server 13 that provides the above Web site, the Web terminal 12 that communicates with the Web server 13 via the Web protocol via the network, the internal data is transmitted to the Web terminal 12 by the infrared communication function, and the Web server 13 via the network And a portable terminal 11 communicating with each other.

  In the Web authentication system 1, the mobile terminal 11 includes, via the network, a means for requesting the Web server 13 to send an authentication ticket necessary for logging in to the Web site provided by the Web server 13, and the authentication ticket Means for receiving an authentication ticket in which URL information of the Web site is added to a ticket consisting of an authentication number generated by a random number from the Web server 13 via the network after the transmission request, and extracting the authentication ticket; A means for transmitting the contents of the authentication ticket to the Web server 13 via the Web terminal 12 by infrared communication after the signature is attached to the authentication ticket as necessary, and converting the data into data for infrared communication; The authentication number in the contents of the ticket sent in advance and the authentication ticket is the same The ticket identification process after confirming whether Luke configured to have a means for receiving the effect indicating whether successful ticket identification over the network.

  In this Web authentication system 1, the Web terminal 12 is subjected to ticket identification processing by means for generating the contents of the authentication ticket received from the portable terminal 11 by infrared communication as transfer information in a predetermined format and the Web server 13. And a means for displaying a Web page of the corresponding URL on a predetermined display device in response to a request from the user of the portable terminal 11.

  In the Web authentication system 1, the Web server 13 refers to the model information database 134 that stores model information of the mobile terminal registered in advance in response to the request for transmitting the authentication ticket from the mobile terminal 11, and performs the authentication. A means for verifying whether or not the portable terminal 11 that has issued the ticket transmission request is properly registered, and the URL information of the Web site that is the target of the authentication ticket by the user, for authentication. Means for generating an authentication ticket attached to a ticket consisting of a number, means for transmitting the authentication ticket to a properly registered portable terminal 11 via a network, and the Web terminal 13 received from the portable terminal 11 by infrared communication The contents of the authentication ticket are received from the Web terminal 13, and the contents of the ticket and the authentication ticket transmitted in advance are added. Means for performing a ticket identification process for confirming whether or not the authentication numbers are the same, and when the ticket identification process is successful, the URL information is extracted from the information representing the contents of the authentication ticket and extracted. It is configured to have means for selecting a Web page of the URL from a predetermined content database 135 and establishing Web communication with the Web terminal 12 so as to be displayed on the display device 12a of the Web terminal 12.

  When the portable terminal 11, the web terminal 12, and the web server 13 according to the present invention are configured by a computer, a program describing processing contents for realizing each function is stored in an internal or external storage unit of the computer. It can be realized by reading and executing this program by the central processing unit (CPU) of the computer. In addition, such a program can be distributed by selling, transferring, or lending a portable recording medium such as a DVD or a CD-ROM, and such a program is stored in a storage unit of a server on a network, for example. And the program can be distributed by transferring the program from the server to another computer via the network. In addition, a computer that executes such a program can temporarily store, for example, a program recorded on a portable recording medium or a program transferred from a server in its own storage unit. As another embodiment of the program, the computer may directly read the program from a portable recording medium and execute processing according to the program, and each time the program is transferred from the server to the computer. In addition, the processing according to the received program may be executed sequentially. Therefore, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  According to the present invention, even when a user who is unfamiliar with log authentication operations and password management by a personal computer logs in to a website connected to a network, the user can securely log in and authenticate the user. It is possible to jump to a simple Web page, which is useful for a service method that requires login authentication.

DESCRIPTION OF SYMBOLS 1 Web authentication system 11 Portable terminal 12 Web terminal 12a Display apparatus 13 Web server 111 Control part 112 Web communication part 113 Infrared transmission part 114 Storage part 121 Control part 122 Web communication part 123 Infrared receiving part 124 Display control part 125 Storage part 131 Control Unit 132 Web communication unit 134 Model information database 135 Content database 136 Storage unit 1111 Web protocol processing unit 1112 Infrared transmission control unit 1113 Ticket processing unit 1114 Infrared transmission data generation unit 1211 Web protocol processing unit 1212 Infrared reception control unit 1213 Ticket transfer processing Unit 1214 Web display control unit 1311 Web protocol processing unit 1312 Model information verification unit 1313 Transmission ticket generation unit 1314 URL addition processing unit 1 15 reception ticket processing unit 1316 Web page control unit

Claims (10)

A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network In a web authentication system comprising a mobile terminal for communication, a web authentication system for receiving a request for transmitting an authentication ticket required for login from the mobile terminal via a network and performing login authentication to a website on the network There,
The web server
In response to the authentication ticket transmission request from the portable terminal, the model information database storing the model information of the portable terminal registered in advance is referred to, and the portable terminal that has made the authentication ticket transmission request is properly registered. Means for verifying whether or not
Means for generating an authentication ticket in which URL information of a Web site that is a target of the authentication ticket is attached to a ticket consisting of an authentication number generated by a random number;
Means for transmitting the authentication ticket to the mobile terminal that is properly registered via the network;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Means for performing ticket identification processing to confirm
When ticket identification is successful in the ticket identification process, the URL information is extracted from information representing the contents of the authentication ticket, a Web page of the extracted URL is selected from a predetermined content database, and the display of the Web terminal Means for establishing web communication with the web terminal for display on a device;
A Web authentication system characterized by the above.   When the signature information of each portable terminal is given, the Web server confirms whether the ticket transmitted in advance and the authentication number in the contents of the authentication ticket are the same or not The Web authentication system according to claim 1, further comprising means for verifying the signature information before processing.   The Web server, as the ticket identification process, checks whether or not the authentication number in the content of the authentication ticket is the same as the ticket that has been transmitted in advance and has transmitted in advance The Web authentication system according to claim 1, further comprising means for confirming whether the URL information given to the ticket and the URL information included in the content of the authentication ticket are the same. A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network A mobile terminal that performs infrared communication with the Web terminal in order to perform login authentication to a Web site on the network via the Web terminal in a Web authentication system including a mobile terminal that communicates,
Means for making a request to send to the Web server an authentication ticket necessary for logging in to a Web site provided by the Web server via a network;
After the authentication ticket transmission request, the authentication ticket is extracted by receiving the authentication ticket in which the URL information of the Web site is added to the ticket including the authentication number generated by a random number from the Web server via the network. Means to
A means for giving the extracted authentication ticket a signature if necessary, converting the data into data for infrared communication, and transmitting the contents of the authentication ticket to the web server via the web terminal by infrared communication;
A message indicating whether or not the ticket identification is successful after the ticket identification process for confirming whether or not the authentication number in the content of the authentication ticket is the same as the ticket transmitted in advance by the Web server Means for receiving at,
A portable terminal comprising: A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network Web that performs infrared communication with the portable terminal in order to receive data via infrared communication from the portable terminal and perform login authentication to a website on the network in a web authentication system including the portable terminal that communicates A terminal,
Means for generating the contents of the authentication ticket received from the portable terminal by infrared communication as transfer information in a predetermined format;
Means for displaying a Web page of a corresponding URL on a predetermined display device in response to a request from a user of the portable terminal after the ticket identification processing is performed by the Web server;
A Web terminal comprising: A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network A Web server that receives a request for transmitting an authentication ticket necessary for login from the mobile terminal via a network and performs login authentication to a Web site on the network in a Web authentication system including a mobile terminal that communicates. And
In response to the authentication ticket transmission request from the portable terminal, the model information database storing the model information of the portable terminal registered in advance is referred to, and the portable terminal that has made the authentication ticket transmission request is properly registered. Means for verifying whether or not
Means for generating an authentication ticket in which URL information of a Web site that is a target of the authentication ticket is attached to a ticket consisting of an authentication number generated by a random number;
Means for transmitting the authentication ticket to the mobile terminal that is properly registered via the network;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Means for performing ticket identification processing to confirm
When ticket identification is successful in the ticket identification process, the URL information is extracted from information representing the contents of the authentication ticket, a Web page of the extracted URL is selected from a predetermined content database, and the display of the Web terminal Means for establishing web communication with the web terminal for display on a device;
A web server comprising: A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network In a Web authentication system including a mobile terminal for communication, a Web authentication method for receiving a request for transmitting an authentication ticket required for login from the mobile terminal via a network and performing login authentication to a Web site on the network There,
The processing procedure of the web server is as follows:
In response to the authentication ticket transmission request from the portable terminal, the model information database storing the model information of the portable terminal registered in advance is referred to, and the portable terminal that has made the authentication ticket transmission request is properly registered. Verifying whether it is a thing,
Generating an authentication ticket in which URL information of a Web site that is a target of the authentication ticket is attached to a ticket consisting of an authentication number generated by a random number;
Sending the authentication ticket to the officially registered mobile terminal via a network;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Performing a ticket identification process to confirm
When ticket identification is successful in the ticket identification process, the URL information is extracted from information representing the contents of the authentication ticket, a Web page of the extracted URL is selected from a predetermined content database, and the display of the Web terminal Establishing web communication with the web terminal for display on a device,
A Web authentication method characterized by the above. A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network A computer configured as a mobile terminal that performs infrared communication with the Web terminal in order to perform login authentication to a Web site on the network via the Web terminal in a Web authentication system including a mobile terminal that communicates,
Sending a request for sending an authentication ticket necessary for logging in to a website provided by the web server to the web server via a network;
After the authentication ticket transmission request, the authentication ticket is extracted by receiving the authentication ticket in which the URL information of the Web site is added to the ticket including the authentication number generated by a random number from the Web server via the network. And steps to
A step of giving the extracted authentication ticket a signature if necessary, converting the data into data for infrared communication, and transmitting the contents of the authentication ticket to the Web server via the Web terminal by infrared communication;
A message indicating whether or not the ticket identification is successful after the ticket identification process for confirming whether or not the authentication number in the content of the authentication ticket is the same as the ticket transmitted in advance by the Web server Receiving at
A program for running A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network Web that performs infrared communication with the portable terminal in order to receive data via infrared communication from the portable terminal and perform login authentication to a website on the network in a web authentication system including the portable terminal that communicates To the computer configured as a terminal,
Generating the contents of the authentication ticket received from the portable terminal by infrared communication as transfer information in a predetermined format;
After the ticket identification process is performed by the Web server, displaying a Web page with a corresponding URL on a predetermined display device in response to a request from a user of the mobile terminal;
A program for running A web server that provides a website on the network, a web terminal that communicates with the web server via the web protocol via the network, and transmits internal data to the web terminal using an infrared communication function, and also via the web server and the network A web authentication system including a mobile terminal for communication, configured as a web server that receives a request for transmitting an authentication ticket necessary for login from the mobile terminal via a network and performs login authentication to a website on the network To the computer
In response to the authentication ticket transmission request from the portable terminal, the model information database storing the model information of the portable terminal registered in advance is referred to, and the portable terminal that has made the authentication ticket transmission request is properly registered. Verifying whether it is a thing,
Generating an authentication ticket in which URL information of a Web site that is a target of the authentication ticket is attached to a ticket consisting of an authentication number generated by a random number;
Sending the authentication ticket to the officially registered mobile terminal via a network;
Whether the Web terminal receives the content of the authentication ticket received from the mobile terminal by infrared communication from the Web terminal, and whether the authentication number in the content of the authentication ticket is the same as the previously transmitted ticket Performing a ticket identification process to confirm
When ticket identification is successful in the ticket identification process, the URL information is extracted from information representing the contents of the authentication ticket, a Web page of the extracted URL is selected from a predetermined content database, and the display of the Web terminal Establishing web communication with the web terminal for display on a device,
A program for running

Images